@herbertgao/pi-extensions 2026.9.1 → 2026.9.3

package/node_modules/pi-lens/dist/clients/dispatch/runners/eslint.js

@@ -7,6 +7,7 @@
  * Gate: skips when no ESLint config is detected (project uses Biome/OxLint instead).
  */
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getAutofixCapability, hasEslintConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createCwdCachedProbe, resolveToolCommand, } from "./utils/runner-helpers.js";
@@ -79,7 +80,7 @@ const eslintRunner = {
     appliesTo: ["jsts"],
     priority: PRIORITY.LINT_SECONDARY,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "eslint");
         const userHasConfig = hasEslintConfig(cwd);
         // Only run if project has an ESLint config.
         if (!userHasConfig) {

package/node_modules/pi-lens/dist/clients/dispatch/runners/fish-indent.js

@@ -1,4 +1,5 @@
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 // fish_indent ships with fish — not separately installable, no managed fallback
@@ -9,7 +10,7 @@ const fishIndentRunner = {
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "fish-indent");
         const available = await fishIndent.isAvailableAsync(cwd);
         if (!available)
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/gleam-check.js

@@ -1,4 +1,5 @@
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 import { PRIORITY } from "../priorities.js";
 const gleam = createAvailabilityChecker("gleam", ".exe");
@@ -41,7 +42,7 @@ const gleamCheckRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "gleam-check");
         if (!(await gleam.isAvailableAsync(cwd))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }

package/node_modules/pi-lens/dist/clients/dispatch/runners/go-vet.js

@@ -6,6 +6,7 @@
 import { relative, resolve, sep, posix } from "node:path";
 import { goClient } from "../../go-client.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { stripAnsi } from "../../sanitize.js";
 import { skipUnlessToolRan } from "./utils/tool-failure.js";
 import { parseGoVetOutput } from "./utils/diagnostic-parsers.js";
@@ -29,7 +30,7 @@ const goVetRunner = {
         // `go.mod file not found` (#263). ctx.cwd is the go.mod module root
         // (resolveLanguageRootForFile, markers ["go.mod"]), so vet the file's
         // package from there.
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "go-vet");
         const fileRel = relative(cwd, ctx.filePath).split(sep).join(posix.sep);
         const pkgPath = fileRel.startsWith("../")
             ? // File isn't under ctx.cwd (unexpected — ctx.cwd is the go.mod root).

package/node_modules/pi-lens/dist/clients/dispatch/runners/golangci-lint.js

@@ -11,6 +11,7 @@
  */
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd, hasGolangciConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
@@ -80,7 +81,7 @@ const golangciRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     timeoutMs: 90_000,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "golangci-lint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("golangci-lint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/hadolint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -37,7 +38,7 @@ const hadolintRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "hadolint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("hadolint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/helm-lint.js

@@ -3,6 +3,7 @@ import { PathKeyedMap } from "../../path-keyed-map.js";
 import { normalizeMapKey } from "../../path-utils.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
 import { truncatedByOutputCap } from "../../spawn-output-cap.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { findNearestDirWithMarker } from "../../workspace-topology.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
@@ -147,6 +148,7 @@ const helmLintRunner = {
     skipTestFiles: false,
     timeoutMs: 35_000,
     async run(ctx) {
+        const cwd = resolveRunnerCwd(ctx, "helm");
         const workspaceRoot = path.resolve(ctx.projectRoot ?? ctx.cwd);
         const startDir = path.dirname(path.resolve(ctx.filePath));
         const discovered = findNearestDirWithMarker(startDir, "chartYamlPath");
@@ -158,7 +160,7 @@ const helmLintRunner = {
         const existing = inFlightByChartRoot.get(chartRoot);
         if (existing)
             return existing;
-        const promise = lintChart(chartRoot, ctx.cwd).finally(() => {
+        const promise = lintChart(chartRoot, cwd).finally(() => {
             if (inFlightByChartRoot.get(chartRoot) === promise)
                 inFlightByChartRoot.delete(chartRoot);
         });

package/node_modules/pi-lens/dist/clients/dispatch/runners/helm-render.js

@@ -78,6 +78,7 @@ import { normalizeMapKey } from "../../path-utils.js";
 import { loadPiLensProjectConfig } from "../../project-lens-config.js";
 import { getProjectTrustState, projectTrustDenialReason, } from "../../project-trust.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { killedForOutputCap, truncatedByOutputCap, } from "../../spawn-output-cap.js";
 import { isTrivyEnabled, resolveSeverityFloor } from "../../trivy-client.js";
 import { findNearestDirWithMarker } from "../../workspace-topology.js";
@@ -489,7 +490,7 @@ const OUR_RENDER_FLAGS = ["--output-dir"];
  *
  * Returns the matched flag (for the message) or null.
  */
-export function rejectedOurInvocation(output) {
+function rejectedOurInvocation(output) {
     if (!output)
         return null;
     const complaint = /unknown flag|unknown shorthand flag|flag provided but not defined|unknown command|unrecognized (?:flag|option)/i.test(output);
@@ -896,7 +897,7 @@ const helmRenderRunner = {
     skipTestFiles: false,
     timeoutMs: RENDER_TIMEOUT_MS + TRIVY_TIMEOUT_MS + 10_000,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "helm-render");
         const workspaceRoot = path.resolve(ctx.projectRoot ?? cwd);
         // Gate 1 — consent, read from the project whose chart would run. Keying
         // this on `cwd` let an opt-in in one directory authorize a DIFFERENT

package/node_modules/pi-lens/dist/clients/dispatch/runners/htmlhint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -49,7 +50,7 @@ const htmlhintRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "htmlhint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("htmlhint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/javac.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { hasJavaBuildDescriptor } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
@@ -41,7 +42,7 @@ const javacRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "javac");
         const absPath = path.resolve(cwd, ctx.filePath);
         // Inside a Maven/Gradle project a classpath-less single-file compile
         // cannot produce a valid verdict: every non-JDK import becomes a

package/node_modules/pi-lens/dist/clients/dispatch/runners/ktlint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getAutofixCapability, getLinterPolicyForCwd, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -58,7 +59,7 @@ const ktlintRunner = {
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "ktlint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("ktlint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/lsp.js

@@ -126,6 +126,7 @@ const lspRunner = {
         // so this is tracked separately: the only claim it invalidates is "0
         // diagnostics means clean".
         let unconfirmedServerIds = [];
+        let deferredServerIds = [];
         let usedWarmAttach = false;
         let failureReason = "";
         const content = readFileContent(ctx.filePath);
@@ -180,6 +181,7 @@ const lspRunner = {
                 lspDiags = touched.diags;
                 diagnosticsInconclusive = touched.inconclusive === true;
                 unconfirmedServerIds = touchCoverageGap(touched);
+                deferredServerIds = touched.deferredServerIds ?? [];
             }
         }
         catch (err) {
@@ -237,6 +239,15 @@ const lspRunner = {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
         if (lspDiags.length === 0) {
+            if (deferredServerIds.length > 0) {
+                return {
+                    status: "deferred",
+                    diagnostics: [],
+                    semantic: "none",
+                    unconfirmedServerIds: [...unconfirmedServerIds],
+                    deferredServerIds: [...deferredServerIds],
+                };
+            }
             if (unconfirmedServerIds.length > 0) {
                 // #1470/#1493: an auxiliary never reported — cut off by the aux grace
                 // timer, or silent with nothing published for this content — so this
@@ -345,7 +356,11 @@ const lspRunner = {
                 ? "warning"
                 : "none";
         return {
-            status: hasErrors ? "failed" : "succeeded",
+            status: hasErrors
+                ? "failed"
+                : deferredServerIds.length > 0
+                    ? "deferred"
+                    : "succeeded",
             // "failed" here means the file has blocking type errors — the check ran
             // fine. Tag it so the smell analyzer doesn't read it as a runner crash.
             failureKind: hasErrors ? "blocking_diagnostics" : undefined,
@@ -354,6 +369,9 @@ const lspRunner = {
             ...(unconfirmedServerIds.length > 0 && {
                 unconfirmedServerIds: [...unconfirmedServerIds],
             }),
+            ...(deferredServerIds.length > 0 && {
+                deferredServerIds: [...deferredServerIds],
+            }),
         };
     },
 };

package/node_modules/pi-lens/dist/clients/dispatch/runners/markdownlint.js

@@ -1,4 +1,5 @@
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { logRunnerAdvisoryOnce, resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd, markdownlintConfigArgs, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -96,7 +97,7 @@ const markdownlintRunner = {
     priority: PRIORITY.DOC_QUALITY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "markdownlint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("markdownlint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
@@ -114,7 +115,7 @@ const markdownlintRunner = {
         // its budget in another lane (availability verify, autofix --fix). Skip
         // without spawning — "not checked", never re-reported as clean.
         if (isInSpawnTimeoutCooldown(cmd)) {
-            ctx.log(`markdownlint: ${cmd} is cooling down after a spawn timeout — skipping (one bounded failure budget per edit)`);
+            logRunnerAdvisoryOnce(ctx, "markdownlint", cwd, `markdownlint: ${cmd} is cooling down after a spawn timeout — skipping (one bounded failure budget per edit)`);
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
         // Shared config-args seam (#1247): the autofix path consumes the same

package/node_modules/pi-lens/dist/clients/dispatch/runners/mypy.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { hasMypyConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -61,7 +62,7 @@ const mypyRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "mypy");
         // Only run if mypy config exists — avoids false positives in untyped projects
         if (!hasMypyConfig(cwd)) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/oxlint.js

@@ -8,6 +8,7 @@
  */
 import { findLocalBinUpwards } from "../../package-manager.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { truncatedByOutputCap } from "../../spawn-output-cap.js";
 import { getJstsLintPolicyForCwd, hasVitePlusConfig, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
@@ -58,7 +59,7 @@ const oxlintRunner = {
     priority: PRIORITY.LINT_SECONDARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "oxlint");
         const policy = getJstsLintPolicyForCwd(cwd);
         if (!policy.preferredRunners.includes("oxlint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
@@ -86,6 +87,7 @@ const oxlintRunner = {
         }
         // Run oxlint (or Vite+'s vp lint wrapper) on the file.
         const result = await safeSpawnAsync(cmd, args, {
+            cwd,
             timeout: 30000,
             maxOutputBytes: MAX_OXLINT_OUTPUT_BYTES,
         });

package/node_modules/pi-lens/dist/clients/dispatch/runners/php-lint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 const php = createAvailabilityChecker("php", ".exe");
@@ -31,7 +32,7 @@ const phpLintRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "php-lint");
         if (!(await php.isAvailableAsync(cwd))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }

package/node_modules/pi-lens/dist/clients/dispatch/runners/phpstan.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd, hasPhpstanConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveVendorToolCommand, } from "./utils/runner-helpers.js";
@@ -84,7 +85,7 @@ const phpstanRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "phpstan");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("phpstan")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/prisma-validate.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { resolveLocalFirstAsync } from "./utils/runner-helpers.js";
 function parsePrismaValidateOutput(raw, filePath) {
@@ -37,7 +38,7 @@ const prismaValidateRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "prisma-validate");
         const resolved = await resolveLocalFirstAsync("prisma", cwd);
         const absPath = path.resolve(cwd, ctx.filePath);
         const result = await safeSpawnAsync(resolved.cmd, [...resolved.args, "validate", "--schema", absPath], { timeout: 20000, cwd });

package/node_modules/pi-lens/dist/clients/dispatch/runners/psscriptanalyzer.js

@@ -3,6 +3,8 @@ import * as os from "node:os";
 import * as path from "node:path";
 import { incrementDegradationCount } from "../../degradation-ledger.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { probeToolAsync } from "../../tool-probe.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { classifyProbeFailure, createAvailabilityLatch, isLatchingOutcome, logAvailabilityDecision, startHostStallSampler, } from "./utils/availability-policy.js";
 // The PS script written to a temp file each run. `-File` with a temp script
@@ -25,9 +27,16 @@ const PS_TIMEOUT_MS = 30000;
  * available". `safeSpawnAsync` carries the standard taxonomy — `failure`,
  * `spawnFailure.kind` and the errno on `error` — which is what lets the
  * availability policy tell a stall from an absence.
+ *
+ * The two presence probes that used to share this wrapper now go through
+ * `probeToolAsync` (#2894), so the only spawn left here is the ANALYSIS pass
+ * — which always has a project to resolve `PSScriptAnalyzerSettings.psd1`
+ * against. `cwd` is required to keep it that way.
  */
-function spawnPs(cmd, args, timeoutMs = PS_TIMEOUT_MS) {
+function spawnPs(cmd, args, options) {
+    const { timeoutMs = PS_TIMEOUT_MS, cwd } = options;
     return safeSpawnAsync(cmd, args, {
+        cwd,
         timeout: timeoutMs,
         resourceLabel: "psscriptanalyzer",
     });
@@ -124,12 +133,7 @@ async function resolvePowerShellCmd() {
     for (const candidate of ["pwsh", "powershell"]) {
         const sampler = startHostStallSampler();
         const startedAt = Date.now();
-        const result = await spawnPs(candidate, [
-            "-NoProfile",
-            "-NonInteractive",
-            "-Command",
-            "exit 0",
-        ]);
+        const result = await probeToolAsync(candidate, ["-NoProfile", "-NonInteractive", "-Command", "exit 0"], { timeout: PS_TIMEOUT_MS, resourceLabel: "psscriptanalyzer" });
         const hostStallMs = sampler.stop();
         const elapsedMs = Date.now() - startedAt;
         elapsedTotalMs += elapsedMs;
@@ -175,12 +179,12 @@ async function checkModuleAvailable(cmd) {
         return memo;
     const sampler = startHostStallSampler();
     const startedAt = Date.now();
-    const result = await spawnPs(cmd, [
+    const result = await probeToolAsync(cmd, [
         "-NoProfile",
         "-NonInteractive",
         "-Command",
         "if (Get-Module -ListAvailable PSScriptAnalyzer) { exit 0 } else { exit 1 }",
-    ]);
+    ], { timeout: PS_TIMEOUT_MS, resourceLabel: "psscriptanalyzer" });
     const hostStallMs = sampler.stop();
     const elapsedMs = Date.now() - startedAt;
     if (!result.error && result.status === 0) {
@@ -288,7 +292,7 @@ const psScriptAnalyzerRunner = {
         if (execLatch.read() === false) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "psscriptanalyzer");
         const absPath = path.resolve(cwd, ctx.filePath);
         // Write script to temp file so we avoid cmd.exe quoting entirely
         const tmpScript = path.join(os.tmpdir(), `pi-lens-psa-${process.pid}.ps1`);
@@ -303,7 +307,7 @@ const psScriptAnalyzerRunner = {
                 tmpScript,
                 "-FilePath",
                 absPath,
-            ]);
+            ], { timeoutMs: PS_TIMEOUT_MS, cwd });
             const hostStallMs = sampler.stop();
             const elapsedMs = Date.now() - startedAt;
             // The two probes above use `-Command`, which PowerShell's execution

package/node_modules/pi-lens/dist/clients/dispatch/runners/pyright.js

@@ -10,6 +10,7 @@ import { logExtension } from "../../extension-log.js";
 import { getLSPService } from "../../lsp/index.js";
 import { augmentPythonEnvironment, detectPythonEnvironment, } from "../../python-environment.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
 import { finishParsedRun } from "./utils/tool-failure.js";
@@ -28,7 +29,7 @@ const pyrightRunner = {
             const lspService = getLSPService();
             await lspService.getClientForFile(ctx.filePath);
         }
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "pyright");
         // Get pyright command - try multiple strategies
         let cmd = null;
         // Strategy 1: Check cached availability (fast path)

package/node_modules/pi-lens/dist/clients/dispatch/runners/rubocop.js

@@ -8,6 +8,7 @@
  * Supports bundle exec (preferred in Bundler projects).
  */
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getAutofixCapability, getLinterPolicyForCwd, getRubocopCommand, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { resolveCommandArgsWithInstallFallback } from "./utils/runner-helpers.js";
@@ -55,7 +56,7 @@ const rubocopRunner = {
     appliesTo: ["ruby"],
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "rubocop");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("rubocop")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/ruff.js

@@ -11,7 +11,7 @@ import { stripAnsi } from "../../sanitize.js";
 import { getAutofixCapability, getLinterPolicyForCwd, ruffConfigArgs, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { parseRuffOutput } from "./utils/diagnostic-parsers.js";
-import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
+import { createAvailabilityChecker, resolveAvailableOrInstall, resolveRunnerCwd, } from "./utils/runner-helpers.js";
 const ruff = createAvailabilityChecker("ruff", ".exe");
 function parseRuffJson(raw, filePath) {
     try {
@@ -50,7 +50,7 @@ const ruffRunner = {
     appliesTo: ["python"],
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "ruff");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("ruff-lint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
@@ -63,7 +63,7 @@ const ruffRunner = {
         // builder, so the package-owned fallback config can never drift.
         const configArgs = ruffConfigArgs(cwd);
         // Step 1: Capture diagnostics (before fixing) — teaching signal for the agent
-        const checkResult = await safeSpawnAsync(cmd, ["check", "--output-format", "json", ...configArgs, ctx.filePath], { timeout: 30000 });
+        const checkResult = await safeSpawnAsync(cmd, ["check", "--output-format", "json", ...configArgs, ctx.filePath], { cwd, timeout: 30000 });
         const raw = stripAnsi(checkResult.stdout + checkResult.stderr);
         const diagnostics = parseRuffJson(checkResult.stdout || "", ctx.filePath);
         const parsedDiagnostics = diagnostics.length > 0 ? diagnostics : parseRuffOutput(raw, ctx.filePath);

package/node_modules/pi-lens/dist/clients/dispatch/runners/rust-clippy.js

@@ -3,14 +3,15 @@
  *
  * Runs `cargo clippy` for Rust files to catch common mistakes.
  */
-import { dirname, isAbsolute, join, resolve } from "node:path";
-import { findNearestContaining } from "../../path-utils.js";
+import { existsSync } from "node:fs";
+import { isAbsolute, join, resolve } from "node:path";
 import { rustClient } from "../../rust-client.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
 import { stripAnsi } from "../../sanitize.js";
 import { getLazyInstallAttempt, tryLazyInstall, } from "./utils/lazy-installer.js";
 import { describeInstallAttempt, logAvailabilityDecision, } from "./utils/availability-policy.js";
 import { PRIORITY } from "../priorities.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { createCwdCachedProbe } from "./utils/runner-helpers.js";
 // Cached per-cwd `cargo clippy --version` probe (#120). Before this, the
 // probe fired on every Rust file save in a project where clippy was already
@@ -89,15 +90,20 @@ const rustClippyRunner = {
                 return { status: "skipped", diagnostics: [], semantic: "none" };
             }
         }
-        // Find the package root (where Cargo.toml is)
-        const cargoToml = findCargoToml(ctx.filePath);
-        if (!cargoToml) {
+        // The package root (where Cargo.toml is), through the shared cwd seam
+        // (#2894): `RUNNER_MARKERS["rust-clippy"]` is `["Cargo.toml"]`, so this
+        // IS the walk this runner used to do with `findNearestContaining` — plus
+        // the seam's dispatch-root and `$HOME` ceilings, which the hand-rolled
+        // walk had neither of. The gate then asks about exactly the directory
+        // cargo will run in, rather than about a separately-derived one.
+        const cargoDir = resolveRunnerCwd(ctx, "rust-clippy");
+        if (!existsSync(join(cargoDir, "Cargo.toml"))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
         // Run cargo clippy on the package
         const result = await safeSpawnAsync(cargoExe, ["clippy", "--message-format=json", "-q"], {
             timeout: 60000,
-            cwd: cargoToml.replace("Cargo.toml", ""),
+            cwd: cargoDir,
         });
         const raw = stripAnsi(result.stdout + result.stderr);
         if (result.status === 0 && !raw.trim()) {
@@ -105,7 +111,6 @@ const rustClippyRunner = {
         }
         // Parse JSON output. span.file is relative to the package root, so pass
         // the cargo dir to resolve diagnostics to absolute paths for filtering.
-        const cargoDir = cargoToml.replace("Cargo.toml", "");
         const allDiagnostics = parseClippyOutput(raw, ctx.filePath, cargoDir);
         if (allDiagnostics.length === 0) {
             // Non-parseable output
@@ -134,10 +139,6 @@ const rustClippyRunner = {
         };
     },
 };
-function findCargoToml(filePath) {
-    const dir = findNearestContaining(dirname(filePath), ["Cargo.toml"]);
-    return dir ? join(dir, "Cargo.toml") : undefined;
-}
 /**
  * #1802 fix round: the original review claimed rustc/clippy's top-level
  * `compiler-message.level` is genuinely two-valued (error/warning). A live

package/node_modules/pi-lens/dist/clients/dispatch/runners/shellcheck.js

@@ -22,6 +22,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, lspPrimaryCoversFile, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
 import { finishParsedRun } from "./utils/tool-failure.js";
@@ -110,7 +111,7 @@ const shellcheckRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false, // Shell scripts in test directories should still be checked
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "shellcheck");
         // #233: bash-language-server runs shellcheck internally. When the `bash` LSP
         // covers this file AND shellcheck is on PATH (so the LSP actually emits its
         // findings), the warm server already produces these diagnostics — skip the
@@ -149,7 +150,7 @@ const shellcheckRunner = {
             args.push("--severity", "info");
         }
         args.push(ctx.filePath);
-        const result = await safeSpawnAsync(cmd, args, { timeout: 15000 });
+        const result = await safeSpawnAsync(cmd, args, { cwd, timeout: 15000 });
         // shellcheck exits with code 1 if issues found, 0 if clean
         if (result.status === 0 && !result.stdout?.trim()) {
             return { status: "succeeded", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/shfmt.js

@@ -1,6 +1,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
 const shfmt = createAvailabilityChecker("shfmt", ".exe");
@@ -31,7 +32,7 @@ const shfmtRunner = {
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "shfmt");
         let cmd = null;
         if (await shfmt.isAvailableAsync(cwd)) {
             cmd = shfmt.getCommand(cwd);