@herbertgao/pi-extensions 2026.9.2 → 2026.9.4

package/node_modules/pi-lens/dist/clients/dispatch/runners/elixir-check.js

@@ -2,6 +2,7 @@ import * as fs from "node:fs";
 import * as path from "node:path";
 import { getProjectDataDir } from "../../file-utils.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 // Per-cwd cached `--version` probes (#120). Before this, each dispatch
@@ -141,7 +142,7 @@ const elixirCheckRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "elixir-check");
         const absPath = path.resolve(cwd, ctx.filePath);
         let command;
         let args = [];

package/node_modules/pi-lens/dist/clients/dispatch/runners/eslint.js

@@ -7,6 +7,7 @@
  * Gate: skips when no ESLint config is detected (project uses Biome/OxLint instead).
  */
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getAutofixCapability, hasEslintConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createCwdCachedProbe, resolveToolCommand, } from "./utils/runner-helpers.js";
@@ -79,7 +80,7 @@ const eslintRunner = {
     appliesTo: ["jsts"],
     priority: PRIORITY.LINT_SECONDARY,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "eslint");
         const userHasConfig = hasEslintConfig(cwd);
         // Only run if project has an ESLint config.
         if (!userHasConfig) {

package/node_modules/pi-lens/dist/clients/dispatch/runners/fish-indent.js

@@ -1,4 +1,5 @@
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 // fish_indent ships with fish — not separately installable, no managed fallback
@@ -9,7 +10,7 @@ const fishIndentRunner = {
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "fish-indent");
         const available = await fishIndent.isAvailableAsync(cwd);
         if (!available)
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/gleam-check.js

@@ -1,4 +1,5 @@
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 import { PRIORITY } from "../priorities.js";
 const gleam = createAvailabilityChecker("gleam", ".exe");
@@ -41,7 +42,7 @@ const gleamCheckRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "gleam-check");
         if (!(await gleam.isAvailableAsync(cwd))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }

package/node_modules/pi-lens/dist/clients/dispatch/runners/go-vet.js

@@ -6,6 +6,7 @@
 import { relative, resolve, sep, posix } from "node:path";
 import { goClient } from "../../go-client.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { stripAnsi } from "../../sanitize.js";
 import { skipUnlessToolRan } from "./utils/tool-failure.js";
 import { parseGoVetOutput } from "./utils/diagnostic-parsers.js";
@@ -29,7 +30,7 @@ const goVetRunner = {
         // `go.mod file not found` (#263). ctx.cwd is the go.mod module root
         // (resolveLanguageRootForFile, markers ["go.mod"]), so vet the file's
         // package from there.
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "go-vet");
         const fileRel = relative(cwd, ctx.filePath).split(sep).join(posix.sep);
         const pkgPath = fileRel.startsWith("../")
             ? // File isn't under ctx.cwd (unexpected — ctx.cwd is the go.mod root).

package/node_modules/pi-lens/dist/clients/dispatch/runners/golangci-lint.js

@@ -11,6 +11,7 @@
  */
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd, hasGolangciConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
@@ -80,7 +81,7 @@ const golangciRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     timeoutMs: 90_000,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "golangci-lint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("golangci-lint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/hadolint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -37,7 +38,7 @@ const hadolintRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "hadolint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("hadolint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/helm-lint.js

@@ -3,6 +3,7 @@ import { PathKeyedMap } from "../../path-keyed-map.js";
 import { normalizeMapKey } from "../../path-utils.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
 import { truncatedByOutputCap } from "../../spawn-output-cap.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { findNearestDirWithMarker } from "../../workspace-topology.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
@@ -147,6 +148,7 @@ const helmLintRunner = {
     skipTestFiles: false,
     timeoutMs: 35_000,
     async run(ctx) {
+        const cwd = resolveRunnerCwd(ctx, "helm");
         const workspaceRoot = path.resolve(ctx.projectRoot ?? ctx.cwd);
         const startDir = path.dirname(path.resolve(ctx.filePath));
         const discovered = findNearestDirWithMarker(startDir, "chartYamlPath");
@@ -158,7 +160,7 @@ const helmLintRunner = {
         const existing = inFlightByChartRoot.get(chartRoot);
         if (existing)
             return existing;
-        const promise = lintChart(chartRoot, ctx.cwd).finally(() => {
+        const promise = lintChart(chartRoot, cwd).finally(() => {
             if (inFlightByChartRoot.get(chartRoot) === promise)
                 inFlightByChartRoot.delete(chartRoot);
         });

package/node_modules/pi-lens/dist/clients/dispatch/runners/helm-render.js

@@ -78,6 +78,7 @@ import { normalizeMapKey } from "../../path-utils.js";
 import { loadPiLensProjectConfig } from "../../project-lens-config.js";
 import { getProjectTrustState, projectTrustDenialReason, } from "../../project-trust.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { killedForOutputCap, truncatedByOutputCap, } from "../../spawn-output-cap.js";
 import { isTrivyEnabled, resolveSeverityFloor } from "../../trivy-client.js";
 import { findNearestDirWithMarker } from "../../workspace-topology.js";
@@ -896,7 +897,7 @@ const helmRenderRunner = {
     skipTestFiles: false,
     timeoutMs: RENDER_TIMEOUT_MS + TRIVY_TIMEOUT_MS + 10_000,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "helm-render");
         const workspaceRoot = path.resolve(ctx.projectRoot ?? cwd);
         // Gate 1 — consent, read from the project whose chart would run. Keying
         // this on `cwd` let an opt-in in one directory authorize a DIFFERENT

package/node_modules/pi-lens/dist/clients/dispatch/runners/htmlhint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -49,7 +50,7 @@ const htmlhintRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "htmlhint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("htmlhint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/javac.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { hasJavaBuildDescriptor } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
@@ -41,7 +42,7 @@ const javacRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "javac");
         const absPath = path.resolve(cwd, ctx.filePath);
         // Inside a Maven/Gradle project a classpath-less single-file compile
         // cannot produce a valid verdict: every non-JDK import becomes a

package/node_modules/pi-lens/dist/clients/dispatch/runners/ktlint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getAutofixCapability, getLinterPolicyForCwd, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -58,7 +59,7 @@ const ktlintRunner = {
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "ktlint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("ktlint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/lsp.js

@@ -126,6 +126,7 @@ const lspRunner = {
         // so this is tracked separately: the only claim it invalidates is "0
         // diagnostics means clean".
         let unconfirmedServerIds = [];
+        let deferredServerIds = [];
         let usedWarmAttach = false;
         let failureReason = "";
         const content = readFileContent(ctx.filePath);
@@ -180,6 +181,7 @@ const lspRunner = {
                 lspDiags = touched.diags;
                 diagnosticsInconclusive = touched.inconclusive === true;
                 unconfirmedServerIds = touchCoverageGap(touched);
+                deferredServerIds = touched.deferredServerIds ?? [];
             }
         }
         catch (err) {
@@ -237,6 +239,15 @@ const lspRunner = {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
         if (lspDiags.length === 0) {
+            if (deferredServerIds.length > 0) {
+                return {
+                    status: "deferred",
+                    diagnostics: [],
+                    semantic: "none",
+                    unconfirmedServerIds: [...unconfirmedServerIds],
+                    deferredServerIds: [...deferredServerIds],
+                };
+            }
             if (unconfirmedServerIds.length > 0) {
                 // #1470/#1493: an auxiliary never reported — cut off by the aux grace
                 // timer, or silent with nothing published for this content — so this
@@ -345,7 +356,11 @@ const lspRunner = {
                 ? "warning"
                 : "none";
         return {
-            status: hasErrors ? "failed" : "succeeded",
+            status: hasErrors
+                ? "failed"
+                : deferredServerIds.length > 0
+                    ? "deferred"
+                    : "succeeded",
             // "failed" here means the file has blocking type errors — the check ran
             // fine. Tag it so the smell analyzer doesn't read it as a runner crash.
             failureKind: hasErrors ? "blocking_diagnostics" : undefined,
@@ -354,6 +369,9 @@ const lspRunner = {
             ...(unconfirmedServerIds.length > 0 && {
                 unconfirmedServerIds: [...unconfirmedServerIds],
             }),
+            ...(deferredServerIds.length > 0 && {
+                deferredServerIds: [...deferredServerIds],
+            }),
         };
     },
 };

package/node_modules/pi-lens/dist/clients/dispatch/runners/markdownlint.js

@@ -1,4 +1,5 @@
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { logRunnerAdvisoryOnce, resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd, markdownlintConfigArgs, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -96,7 +97,7 @@ const markdownlintRunner = {
     priority: PRIORITY.DOC_QUALITY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "markdownlint");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("markdownlint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
@@ -114,7 +115,7 @@ const markdownlintRunner = {
         // its budget in another lane (availability verify, autofix --fix). Skip
         // without spawning — "not checked", never re-reported as clean.
         if (isInSpawnTimeoutCooldown(cmd)) {
-            ctx.log(`markdownlint: ${cmd} is cooling down after a spawn timeout — skipping (one bounded failure budget per edit)`);
+            logRunnerAdvisoryOnce(ctx, "markdownlint", cwd, `markdownlint: ${cmd} is cooling down after a spawn timeout — skipping (one bounded failure budget per edit)`);
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
         // Shared config-args seam (#1247): the autofix path consumes the same

package/node_modules/pi-lens/dist/clients/dispatch/runners/mypy.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { hasMypyConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveToolCommandWithInstallFallback, } from "./utils/runner-helpers.js";
@@ -61,7 +62,7 @@ const mypyRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "mypy");
         // Only run if mypy config exists — avoids false positives in untyped projects
         if (!hasMypyConfig(cwd)) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/oxlint.js

@@ -8,6 +8,7 @@
  */
 import { findLocalBinUpwards } from "../../package-manager.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { truncatedByOutputCap } from "../../spawn-output-cap.js";
 import { getJstsLintPolicyForCwd, hasVitePlusConfig, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
@@ -58,7 +59,7 @@ const oxlintRunner = {
     priority: PRIORITY.LINT_SECONDARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "oxlint");
         const policy = getJstsLintPolicyForCwd(cwd);
         if (!policy.preferredRunners.includes("oxlint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/php-lint.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker } from "./utils/runner-helpers.js";
 const php = createAvailabilityChecker("php", ".exe");
@@ -31,7 +32,7 @@ const phpLintRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "php-lint");
         if (!(await php.isAvailableAsync(cwd))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }

package/node_modules/pi-lens/dist/clients/dispatch/runners/phpstan.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getLinterPolicyForCwd, hasPhpstanConfig } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveVendorToolCommand, } from "./utils/runner-helpers.js";
@@ -84,7 +85,7 @@ const phpstanRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "phpstan");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("phpstan")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/prisma-validate.js

@@ -1,5 +1,6 @@
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { resolveLocalFirstAsync } from "./utils/runner-helpers.js";
 function parsePrismaValidateOutput(raw, filePath) {
@@ -37,7 +38,7 @@ const prismaValidateRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "prisma-validate");
         const resolved = await resolveLocalFirstAsync("prisma", cwd);
         const absPath = path.resolve(cwd, ctx.filePath);
         const result = await safeSpawnAsync(resolved.cmd, [...resolved.args, "validate", "--schema", absPath], { timeout: 20000, cwd });

package/node_modules/pi-lens/dist/clients/dispatch/runners/psscriptanalyzer.js

@@ -3,6 +3,8 @@ import * as os from "node:os";
 import * as path from "node:path";
 import { incrementDegradationCount } from "../../degradation-ledger.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { probeToolAsync } from "../../tool-probe.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { classifyProbeFailure, createAvailabilityLatch, isLatchingOutcome, logAvailabilityDecision, startHostStallSampler, } from "./utils/availability-policy.js";
 // The PS script written to a temp file each run. `-File` with a temp script
@@ -25,8 +27,13 @@ const PS_TIMEOUT_MS = 30000;
  * available". `safeSpawnAsync` carries the standard taxonomy — `failure`,
  * `spawnFailure.kind` and the errno on `error` — which is what lets the
  * availability policy tell a stall from an absence.
+ *
+ * The two presence probes that used to share this wrapper now go through
+ * `probeToolAsync` (#2894), so the only spawn left here is the ANALYSIS pass
+ * — which always has a project to resolve `PSScriptAnalyzerSettings.psd1`
+ * against. `cwd` is required to keep it that way.
  */
-function spawnPs(cmd, args, options = {}) {
+function spawnPs(cmd, args, options) {
     const { timeoutMs = PS_TIMEOUT_MS, cwd } = options;
     return safeSpawnAsync(cmd, args, {
         cwd,
@@ -126,13 +133,7 @@ async function resolvePowerShellCmd() {
     for (const candidate of ["pwsh", "powershell"]) {
         const sampler = startHostStallSampler();
         const startedAt = Date.now();
-        // cwd-exempt: global interpreter-presence probe ("is pwsh/powershell on PATH at all"), not tied to any project
-        const result = await spawnPs(candidate, [
-            "-NoProfile",
-            "-NonInteractive",
-            "-Command",
-            "exit 0",
-        ]);
+        const result = await probeToolAsync(candidate, ["-NoProfile", "-NonInteractive", "-Command", "exit 0"], { timeout: PS_TIMEOUT_MS, resourceLabel: "psscriptanalyzer" });
         const hostStallMs = sampler.stop();
         const elapsedMs = Date.now() - startedAt;
         elapsedTotalMs += elapsedMs;
@@ -178,13 +179,12 @@ async function checkModuleAvailable(cmd) {
         return memo;
     const sampler = startHostStallSampler();
     const startedAt = Date.now();
-    // cwd-exempt: global module-presence probe -- PSScriptAnalyzer resolves from PowerShell's module search path, not a per-project install
-    const result = await spawnPs(cmd, [
+    const result = await probeToolAsync(cmd, [
         "-NoProfile",
         "-NonInteractive",
         "-Command",
         "if (Get-Module -ListAvailable PSScriptAnalyzer) { exit 0 } else { exit 1 }",
-    ]);
+    ], { timeout: PS_TIMEOUT_MS, resourceLabel: "psscriptanalyzer" });
     const hostStallMs = sampler.stop();
     const elapsedMs = Date.now() - startedAt;
     if (!result.error && result.status === 0) {
@@ -292,7 +292,7 @@ const psScriptAnalyzerRunner = {
         if (execLatch.read() === false) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "psscriptanalyzer");
         const absPath = path.resolve(cwd, ctx.filePath);
         // Write script to temp file so we avoid cmd.exe quoting entirely
         const tmpScript = path.join(os.tmpdir(), `pi-lens-psa-${process.pid}.ps1`);

package/node_modules/pi-lens/dist/clients/dispatch/runners/pyright.js

@@ -10,6 +10,7 @@ import { logExtension } from "../../extension-log.js";
 import { getLSPService } from "../../lsp/index.js";
 import { augmentPythonEnvironment, detectPythonEnvironment, } from "../../python-environment.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
 import { finishParsedRun } from "./utils/tool-failure.js";
@@ -28,7 +29,7 @@ const pyrightRunner = {
             const lspService = getLSPService();
             await lspService.getClientForFile(ctx.filePath);
         }
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "pyright");
         // Get pyright command - try multiple strategies
         let cmd = null;
         // Strategy 1: Check cached availability (fast path)

package/node_modules/pi-lens/dist/clients/dispatch/runners/rubocop.js

@@ -8,6 +8,7 @@
  * Supports bundle exec (preferred in Bundler projects).
  */
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { getAutofixCapability, getLinterPolicyForCwd, getRubocopCommand, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { resolveCommandArgsWithInstallFallback } from "./utils/runner-helpers.js";
@@ -55,7 +56,7 @@ const rubocopRunner = {
     appliesTo: ["ruby"],
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "rubocop");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("rubocop")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/ruff.js

@@ -11,7 +11,7 @@ import { stripAnsi } from "../../sanitize.js";
 import { getAutofixCapability, getLinterPolicyForCwd, ruffConfigArgs, } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { parseRuffOutput } from "./utils/diagnostic-parsers.js";
-import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
+import { createAvailabilityChecker, resolveAvailableOrInstall, resolveRunnerCwd, } from "./utils/runner-helpers.js";
 const ruff = createAvailabilityChecker("ruff", ".exe");
 function parseRuffJson(raw, filePath) {
     try {
@@ -50,7 +50,7 @@ const ruffRunner = {
     appliesTo: ["python"],
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "ruff");
         const policy = getLinterPolicyForCwd(ctx.filePath, cwd);
         if (policy && !policy.preferredRunners.includes("ruff-lint")) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/rust-clippy.js

@@ -3,14 +3,15 @@
  *
  * Runs `cargo clippy` for Rust files to catch common mistakes.
  */
-import { dirname, isAbsolute, join, resolve } from "node:path";
-import { findNearestContaining } from "../../path-utils.js";
+import { existsSync } from "node:fs";
+import { isAbsolute, join, resolve } from "node:path";
 import { rustClient } from "../../rust-client.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
 import { stripAnsi } from "../../sanitize.js";
 import { getLazyInstallAttempt, tryLazyInstall, } from "./utils/lazy-installer.js";
 import { describeInstallAttempt, logAvailabilityDecision, } from "./utils/availability-policy.js";
 import { PRIORITY } from "../priorities.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { createCwdCachedProbe } from "./utils/runner-helpers.js";
 // Cached per-cwd `cargo clippy --version` probe (#120). Before this, the
 // probe fired on every Rust file save in a project where clippy was already
@@ -89,15 +90,20 @@ const rustClippyRunner = {
                 return { status: "skipped", diagnostics: [], semantic: "none" };
             }
         }
-        // Find the package root (where Cargo.toml is)
-        const cargoToml = findCargoToml(ctx.filePath);
-        if (!cargoToml) {
+        // The package root (where Cargo.toml is), through the shared cwd seam
+        // (#2894): `RUNNER_MARKERS["rust-clippy"]` is `["Cargo.toml"]`, so this
+        // IS the walk this runner used to do with `findNearestContaining` — plus
+        // the seam's dispatch-root and `$HOME` ceilings, which the hand-rolled
+        // walk had neither of. The gate then asks about exactly the directory
+        // cargo will run in, rather than about a separately-derived one.
+        const cargoDir = resolveRunnerCwd(ctx, "rust-clippy");
+        if (!existsSync(join(cargoDir, "Cargo.toml"))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };
         }
         // Run cargo clippy on the package
         const result = await safeSpawnAsync(cargoExe, ["clippy", "--message-format=json", "-q"], {
             timeout: 60000,
-            cwd: cargoToml.replace("Cargo.toml", ""),
+            cwd: cargoDir,
         });
         const raw = stripAnsi(result.stdout + result.stderr);
         if (result.status === 0 && !raw.trim()) {
@@ -105,7 +111,6 @@ const rustClippyRunner = {
         }
         // Parse JSON output. span.file is relative to the package root, so pass
         // the cargo dir to resolve diagnostics to absolute paths for filtering.
-        const cargoDir = cargoToml.replace("Cargo.toml", "");
         const allDiagnostics = parseClippyOutput(raw, ctx.filePath, cargoDir);
         if (allDiagnostics.length === 0) {
             // Non-parseable output
@@ -134,10 +139,6 @@ const rustClippyRunner = {
         };
     },
 };
-function findCargoToml(filePath) {
-    const dir = findNearestContaining(dirname(filePath), ["Cargo.toml"]);
-    return dir ? join(dir, "Cargo.toml") : undefined;
-}
 /**
  * #1802 fix round: the original review claimed rustc/clippy's top-level
  * `compiler-message.level` is genuinely two-valued (error/warning). A live

package/node_modules/pi-lens/dist/clients/dispatch/runners/shellcheck.js

@@ -22,6 +22,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, lspPrimaryCoversFile, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
 import { finishParsedRun } from "./utils/tool-failure.js";
@@ -110,7 +111,7 @@ const shellcheckRunner = {
     priority: PRIORITY.GENERAL_ANALYSIS,
     skipTestFiles: false, // Shell scripts in test directories should still be checked
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "shellcheck");
         // #233: bash-language-server runs shellcheck internally. When the `bash` LSP
         // covers this file AND shellcheck is on PATH (so the LSP actually emits its
         // findings), the warm server already produces these diagnostics — skip the

package/node_modules/pi-lens/dist/clients/dispatch/runners/shfmt.js

@@ -1,6 +1,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
 const shfmt = createAvailabilityChecker("shfmt", ".exe");
@@ -31,7 +32,7 @@ const shfmtRunner = {
     priority: PRIORITY.FORMAT_AND_LINT_PRIMARY,
     skipTestFiles: false,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "shfmt");
         let cmd = null;
         if (await shfmt.isAvailableAsync(cwd)) {
             cmd = shfmt.getCommand(cwd);

package/node_modules/pi-lens/dist/clients/dispatch/runners/spellcheck.js

@@ -20,7 +20,7 @@
  */
 import { safeSpawnAsync } from "../../safe-spawn.js";
 import { PRIORITY } from "../priorities.js";
-import { createAvailabilityChecker } from "./utils/runner-helpers.js";
+import { createAvailabilityChecker, resolveRunnerCwd, } from "./utils/runner-helpers.js";
 import { parseToolRun } from "./utils/tool-failure.js";
 const typos = createAvailabilityChecker("typos", ".exe");
 // typos-cli exit codes: 0 = no typos, 2 = typos found, 1 = an error that
@@ -82,7 +82,7 @@ const spellcheckRunner = {
     priority: PRIORITY.DOC_QUALITY,
     skipTestFiles: false, // Check docs in test files too
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "spellcheck/typos");
         // Skip if typos-cli is not installed
         if (!(await typos.isAvailableAsync(cwd))) {
             return { status: "skipped", diagnostics: [], semantic: "none" };

package/node_modules/pi-lens/dist/clients/dispatch/runners/spotbugs.js

@@ -3,6 +3,7 @@ import * as os from "node:os";
 import * as path from "node:path";
 import { BoundedLruCache } from "../../bounded-cache.js";
 import { safeSpawnAsync } from "../../safe-spawn.js";
+import { resolveRunnerCwd } from "../../tool-cwd.js";
 import { findCompiledClassesDir } from "../../tool-policy.js";
 import { PRIORITY } from "../priorities.js";
 import { createAvailabilityChecker, resolveAvailableOrInstall, } from "./utils/runner-helpers.js";
@@ -191,7 +192,7 @@ const spotbugsRunner = {
     appliesTo: ["java", "kotlin"],
     priority: PRIORITY.DEEP_LANGUAGE_ANALYSIS,
     async run(ctx) {
-        const cwd = ctx.cwd || process.cwd();
+        const cwd = resolveRunnerCwd(ctx, "spotbugs");
         const classesDir = findCompiledClassesDir(cwd);
         if (!classesDir) {
             ctx.log?.("spotbugs: Java project detected but no compiled .class files found — run `mvn compile` / `gradle build` first");