pi-lens 3.8.38 → 3.8.39

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to pi-lens will be documented in this file.
 
 ## [Unreleased]
 
+## [3.8.39] - 2026-05-02
+
+### Fixed
+
+- **Context injection now prepends guidance before the user prompt** — pi-lens previously appended session guidance after the user's message; provider bridges that treat the last message as the active user action would demote the real request. Guidance is now prepended so the user's prompt stays last. (PR #48 by @tifandotme)
+- **jscpd no longer runs on YAML/JSON/Markdown files** — `getFilesForJscpd` now filters to source code extensions only, preventing multi-second delays at `turn_end` when editing rule YAMLs or config files.
+- **ReDoS S5852 final (gleam/zig parsers)** — rewrote `gleamRe` and `zigRe` as line-by-line parsers, eliminating the multiline flag that SonarCloud continued to flag despite `[ \t]*` substitution.
+- **SonarCloud MAJOR code smells (batch 1 & 2)** — `readonly` members, `void` operator removals, nested ternaries, nested template literals, optional chains, duplicate branches, and redundant type alias across 15+ files.
+- **9 tree-sitter query bugs in new rule files** — predicate outside outermost parens (`cpp/no-auto-ptr`); false-positive `post_filter` gate added (`cpp/no-confused-move-forward`); leaf-node child match removed (`php/this-in-static-context`); invalid node name `class_hereditary` replaced (`java/no-field-shadowing`); field order corrected (`java/no-wait-notify-on-thread`); duplicate `modifiers` blocks merged (`java/spring-session-attributes-setcomplete`); invalid anonymous-node field label removed (`csharp/is-with-this`); inline alternation replaced with two patterns (`python/in-operator-unsupported`); adjacent sibling requirement removed, delegated to `post_filter` (`python/return-in-generator`).
+
 ## [3.8.38] - 2026-05-02
 
 ### Added

package/README.md

@@ -41,7 +41,7 @@ At `session_start`, pi-lens:
 - applies language-aware startup defaults for tool preinstall
 - warms caches and optional indexes (with overlap/session guardrails)
 - emits missing-tool install hints for detected languages when relevant
-- injects session guidance through internal context (non-user channel) to reduce acknowledgement-only first responses
+- prepends session guidance before the user's prompt so provider bridges keep the real prompt active
 - opens `warmFiles` (if configured in `.pi-lens/lsp.json`) to seed lazy-indexing language servers like clangd before the first symbol query
 
 For one-shot print sessions (for example `pi --print ...`), pi-lens auto-uses a quick startup path that skips heavy bootstrap work to reduce startup latency. Override with `PI_LENS_STARTUP_MODE=full|minimal|quick`.

package/clients/cache-manager.ts

@@ -307,10 +307,13 @@ export class CacheManager {
 
 	/**
 	 * Get files that need jscpd re-scan (any edit).
+	 * Only returns source code files jscpd can meaningfully analyse.
 	 */
 	getFilesForJscpd(cwd: string): string[] {
 		const state = this.readTurnState(cwd);
-		return Object.keys(state.files);
+		return Object.keys(state.files).filter((f) =>
+			/\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|rb|java|cs|php|cpp|c|h|hpp|swift|kt)$/.test(f),
+		);
 	}
 
 	/**

package/clients/dispatch/fact-scheduler.ts

@@ -61,7 +61,8 @@ export function scheduleProviders(providers: FactProvider[]): FactProvider[] {
         }
       }
     }
-    wave = nextWave.sort((a, b) => a.id.localeCompare(b.id));
+    nextWave.sort((a, b) => a.id.localeCompare(b.id));
+    wave = nextWave;
   }
 
   if (result.length < providers.length) {

package/clients/dispatch/fact-store.ts

@@ -1,7 +1,5 @@
 import { normalizeMapKey } from "../path-utils.js";
 
-type FactValue = unknown;
-
 export interface ReadonlyFactStore {
   getFileFact<T>(filePath: string, factId: string): T | undefined;
   hasFileFact(filePath: string, factId: string): boolean;
@@ -10,8 +8,8 @@ export interface ReadonlyFactStore {
 }
 
 export class FactStore implements ReadonlyFactStore {
-  private readonly fileFacts = new Map<string, Map<string, FactValue>>();
-  private readonly sessionFacts = new Map<string, FactValue>();
+  private readonly fileFacts = new Map<string, Map<string, unknown>>();
+  private readonly sessionFacts = new Map<string, unknown>();
 
   // All file-keyed methods normalize the path internally via normalizeMapKey().
   // Callers always pass raw/resolved paths — normalization is not their concern.
@@ -20,7 +18,7 @@ export class FactStore implements ReadonlyFactStore {
     return this.fileFacts.get(normalizeMapKey(filePath))?.get(factId) as T | undefined;
   }
 
-  setFileFact(filePath: string, factId: string, value: FactValue): void {
+  setFileFact(filePath: string, factId: string, value: unknown): void {
     const key = normalizeMapKey(filePath);
     let facts = this.fileFacts.get(key);
     if (!facts) {
@@ -51,7 +49,7 @@ export class FactStore implements ReadonlyFactStore {
     return this.sessionFacts.get(factId) as T | undefined;
   }
 
-  setSessionFact(factId: string, value: FactValue): void {
+  setSessionFact(factId: string, value: unknown): void {
     this.sessionFacts.set(factId, value);
   }
 

package/clients/dispatch/integration.ts

@@ -479,7 +479,7 @@ export async function computeCascadeForFile(
 		.filter((n) => !primaryFilesThisTurn.has(normalizeMapKey(n)))
 		.sort((a, b) => {
 			const rank = (p: string) =>
-				importerSet.has(p) ? 0 : callerSet.has(p) ? 1 : 2;
+				importerSet.has(p) ? 0 : (callerSet.has(p) ? 1 : 2);
 			return rank(a) - rank(b);
 		})
 		.slice(0, MAX_FILES);
@@ -584,10 +584,7 @@ export async function computeCascadeForFile(
 				// write sequence. A new write (higher writeSeq) invalidates the cache entry.
 				const cached =
 					writeSeq != null ? neighborTouchCache.get(cacheKey) : undefined;
-				if (
-					cached != null &&
-					cached.turnSeq === turnSeq
-				) {
+				if (cached?.turnSeq === turnSeq) {
 					producedLspData = true;
 					const durationMs = Date.now() - neighborStart;
 					logCascade({

package/clients/dispatch/rules/quality-rules.ts

@@ -149,21 +149,16 @@ export const noBooleanParamsRule: FactRule = {
 					ts.isIdentifier(param.name) ? param.name.text : "";
 				if (BOOLEAN_PREFIX_OK.test(name)) continue;
 
-				let isBoolean = false;
-				if (param.type.kind === ts.SyntaxKind.BooleanKeyword) {
-					isBoolean = true;
-				} else if (
-					ts.isUnionTypeNode(param.type) &&
-					param.type.types.every(
-						(t) =>
-							t.kind === ts.SyntaxKind.BooleanKeyword ||
-							(ts.isLiteralTypeNode(t) &&
-								(t.literal.kind === ts.SyntaxKind.TrueKeyword ||
-									t.literal.kind === ts.SyntaxKind.FalseKeyword)),
-					)
-				) {
-					isBoolean = true;
-				}
+				const isBoolean =
+					param.type.kind === ts.SyntaxKind.BooleanKeyword ||
+					(ts.isUnionTypeNode(param.type) &&
+						param.type.types.every(
+							(t) =>
+								t.kind === ts.SyntaxKind.BooleanKeyword ||
+								(ts.isLiteralTypeNode(t) &&
+									(t.literal.kind === ts.SyntaxKind.TrueKeyword ||
+										t.literal.kind === ts.SyntaxKind.FalseKeyword)),
+						));
 
 				if (!isBoolean) continue;
 				const { line, character } = sf.getLineAndCharacterOfPosition(param.getStart(sf));

package/clients/dispatch/runners/biome-check.ts

@@ -134,7 +134,7 @@ const biomeCheckJsonRunner: RunnerDefinition = {
 				diagnostics: [
 					{
 						id: "biome:parse-error:1",
-						message: `Biome JSON parse failed: ${parsed.parseError}${preview ? ` (output preview: ${preview})` : ""}`,
+						message: "Biome JSON parse failed: " + parsed.parseError + (preview ? " (output preview: " + preview + ")" : ""),
 						filePath: ctx.filePath,
 						line: 1,
 						column: 1,

package/clients/dispatch/runners/eslint.ts

@@ -125,7 +125,7 @@ const eslintRunner: RunnerDefinition = {
 				diagnostics: [
 					{
 						id: "eslint:parse-error:1",
-						message: `ESLint JSON parse failed: ${parsed.parseError}${preview ? ` (output preview: ${preview})` : ""}`,
+						message: "ESLint JSON parse failed: " + parsed.parseError + (preview ? " (output preview: " + preview + ")" : ""),
 						filePath: ctx.filePath,
 						line: 1,
 						column: 1,

package/clients/dispatch/runners/lsp.ts

@@ -212,11 +212,7 @@ const lspRunner: RunnerDefinition = {
 		);
 
 		const hasErrors = diagnostics.some((d) => d.semantic === "blocking");
-		const resultSemantic = hasErrors
-			? "blocking"
-			: diagnostics.length > 0
-				? "warning"
-				: "none";
+		const resultSemantic = hasErrors ? "blocking" : (diagnostics.length > 0 ? "warning" : "none");
 
 		return {
 			status: hasErrors ? "failed" : "succeeded",

package/clients/dispatch/runners/psscriptanalyzer.ts

@@ -86,7 +86,7 @@ function parsePSAnalyzerOutput(raw: string, filePath: string): Diagnostic[] {
 		.map((item) => {
 			const sev = (item.Severity ?? "Warning").toLowerCase();
 			const severity: "error" | "warning" | "info" =
-				sev === "error" || sev === "parseerror" ? "error" : sev === "information" ? "info" : "warning";
+				(sev === "error" || sev === "parseerror") ? "error" : (sev === "information" ? "info" : "warning");
 			const rule = item.RuleName ?? "PSScriptAnalyzer";
 			return {
 				id: `psscriptanalyzer-${rule}-${item.Line}`,

package/clients/dispatch/runners/similarity.ts

@@ -394,10 +394,7 @@ function getArrowSignature(
 		| import("typescript").ArrowFunction
 		| import("typescript").FunctionExpression,
 ): string {
-	const params = node.parameters
-		.map((p) => (tsModule.isIdentifier(p.name) ? p.name.text : "param"))
-		.join(", ");
-	return `(${params})`;
+	return getSignature(tsModule, node as unknown as import("typescript").FunctionDeclaration);
 }
 
 // ============================================================================

package/clients/dispatch/utils/lsp-diagnostics.ts

@@ -16,16 +16,10 @@ export function convertLspDiagnostics(
 	return diags
 		.filter((d) => d.range?.start?.line !== undefined)
 		.map((d, idx) => {
-			const severity =
-				d.severity === 1
-					? "error"
-					: d.severity === 2
-						? "warning"
-						: d.severity === 4
-							? "hint"
-							: "info";
+			const severityMap: Record<number, "error" | "warning" | "hint"> = { 1: "error", 2: "warning", 4: "hint" };
+			const severity: "error" | "warning" | "info" | "hint" = severityMap[d.severity] ?? "info";
 			const semantic =
-				d.severity === 1 ? "blocking" : d.severity === 2 ? "warning" : "none";
+				d.severity === 1 ? "blocking" : (d.severity === 2 ? "warning" : "none");
 			const code = String(d.code ?? "unknown");
 			const source = options.source ?? d.source ?? tool;
 			const hasSuggestion = options.fixSuggestionByIndex?.has(idx) ?? false;

package/clients/formatters.ts

@@ -54,7 +54,7 @@ async function tryLazyInstallFormatterTool(
 		const ok = !res.error && res.status === 0;
 		if (!ok) {
 			console.error(
-				`[format] lazy-install rubocop failed: ${res.error?.message ?? res.stderr ?? `exit ${res.status}`}`,
+				`[format] lazy-install rubocop failed: ${res.error?.message ?? res.stderr ?? "exit " + res.status}`,
 			);
 		}
 		return ok;
@@ -67,7 +67,7 @@ async function tryLazyInstallFormatterTool(
 	const ok = !res.error && res.status === 0;
 	if (!ok) {
 		console.error(
-			`[format] lazy-install rustfmt failed: ${res.error?.message ?? res.stderr ?? `exit ${res.status}`}`,
+			`[format] lazy-install rustfmt failed: ${res.error?.message ?? res.stderr ?? "exit " + res.status}`,
 		);
 	}
 	return ok;
@@ -919,11 +919,16 @@ export async function getFormattersForFile(
 
 	const enabled = selected ? [selected] : [];
 
-	const selectionReason = selected
-		? (formatterPolicy
-			? (candidateFormatters.some((f) => hasExplicitFormatterConfig(f.name, cwd)) ? "explicit-config" : "smart-default")
-			: "detect")
-		: "none";
+	let selectionReason: string;
+	if (!selected) {
+		selectionReason = "none";
+	} else if (!formatterPolicy) {
+		selectionReason = "detect";
+	} else {
+		selectionReason = candidateFormatters.some((f) => hasExplicitFormatterConfig(f.name, cwd))
+			? "explicit-config"
+			: "smart-default";
+	}
 	logLatency({
 		type: "phase",
 		phase: "formatter_selected",

package/clients/lsp/index.ts

@@ -135,13 +135,13 @@ export interface LSPTouchFileOptions {
 
 export class LSPService {
 	private state: LSPState;
-	private workspaceProbeLogged = new Set<string>();
-	private warmStartLogged = new Set<string>();
-	private optionalFailureLogged = new Set<string>();
-	private optionalDisabled = new Set<string>();
+	private readonly workspaceProbeLogged = new Set<string>();
+	private readonly warmStartLogged = new Set<string>();
+	private readonly optionalFailureLogged = new Set<string>();
+	private readonly optionalDisabled = new Set<string>();
 	/** Consecutive failure counts for exponential backoff circuit breaker */
-	private failureCounts = new Map<string, number>();
-	private recentTouches = new Map<
+	private readonly failureCounts = new Map<string, number>();
+	private readonly recentTouches = new Map<
 		string,
 		{ fingerprint: string; touchedAt: number; clientScope: "primary" | "all" }
 	>();
@@ -309,7 +309,7 @@ export class LSPService {
 			if (!root) continue;
 			const key = `${server.id}:${normalizeMapKey(root)}`;
 			const existing = this.state.clients.get(key);
-			if (existing && existing.isAlive()) {
+			if (existing?.isAlive()) {
 				return { client: existing, info: server };
 			}
 		}
@@ -392,9 +392,7 @@ export class LSPService {
 		}
 	}
 
-	private shouldAllowInstall(filePath: string, root: string): boolean {
-		void filePath;
-		void root;
+	private shouldAllowInstall(_filePath: string, _root: string): boolean {
 		return process.env.PI_LENS_DISABLE_LSP_INSTALL !== "1";
 	}
 

package/clients/lsp/launch.ts

@@ -402,7 +402,7 @@ function _attachErrorHandler(
 	proc.on("error", (err) => {
 		if (logContext) {
 			logSessionStart(
-				`lsp process ${context}: spawn-error command=${logContext.command} args=${JSON.stringify(logContext.args)} cwd=${logContext.cwd} pid=${logContext.pid ?? 0} error=${err.message}${stderrPreview ? ` stderr=${compactLogValue(stderrPreview)}` : ""}`,
+				"lsp process " + context + ": spawn-error command=" + logContext.command + " args=" + JSON.stringify(logContext.args) + " cwd=" + logContext.cwd + " pid=" + (logContext.pid ?? 0) + " error=" + err.message + (stderrPreview ? " stderr=" + compactLogValue(stderrPreview) : ""),
 			);
 		}
 
@@ -422,12 +422,12 @@ function _attachErrorHandler(
 		if (code !== 0 && code !== null) {
 			if (logContext) {
 				logSessionStart(
-					`lsp process ${context}: closed code=${code}${signal ? ` signal=${signal}` : ""} command=${logContext.command} args=${JSON.stringify(logContext.args)} cwd=${logContext.cwd} pid=${logContext.pid ?? 0}${stderrPreview ? ` stderr=${compactLogValue(stderrPreview)}` : ""}`,
+					"lsp process " + context + ": closed code=" + code + (signal ? " signal=" + signal : "") + " command=" + logContext.command + " args=" + JSON.stringify(logContext.args) + " cwd=" + logContext.cwd + " pid=" + (logContext.pid ?? 0) + (stderrPreview ? " stderr=" + compactLogValue(stderrPreview) : ""),
 				);
 			}
 		} else if (signal && logContext) {
 			logSessionStart(
-				`lsp process ${context}: closed signal=${signal} command=${logContext.command} args=${JSON.stringify(logContext.args)} cwd=${logContext.cwd} pid=${logContext.pid ?? 0}${stderrPreview ? ` stderr=${compactLogValue(stderrPreview)}` : ""}`,
+				"lsp process " + context + ": closed signal=" + signal + " command=" + logContext.command + " args=" + JSON.stringify(logContext.args) + " cwd=" + logContext.cwd + " pid=" + (logContext.pid ?? 0) + (stderrPreview ? " stderr=" + compactLogValue(stderrPreview) : ""),
 			);
 		}
 	});
@@ -467,11 +467,8 @@ export async function launchLSP(
 	// - If already absolute, use as-is
 	// - If it's a simple command (no path separators), let system find it via PATH
 	// - Otherwise, resolve relative to cwd
-	const explicitCommand = path.isAbsolute(command)
-		? command
-		: command.includes(path.sep) || command.includes("/")
-			? path.resolve(cwd, command)
-			: command;
+	const isRelativePath = !path.isAbsolute(command) && (command.includes(path.sep) || command.includes("/"));
+	const explicitCommand = isRelativePath ? path.resolve(cwd, command) : command;
 	const resolvedCommand =
 		!path.isAbsolute(command) &&
 		!command.includes(path.sep) &&

package/clients/lsp/server.ts

@@ -89,7 +89,7 @@ function logSessionStart(message: string): void {
 		return;
 	}
 	const line = `[${new Date().toISOString()}] ${message}\n`;
-	void mkdir(SESSIONSTART_LOG_DIR, { recursive: true })
+	mkdir(SESSIONSTART_LOG_DIR, { recursive: true })
 		.then(() => appendFile(SESSIONSTART_LOG, line))
 		.catch(() => {
 			// best-effort logging

package/clients/pipeline.ts

@@ -96,7 +96,7 @@ function diffProjectSnapshot(root: string, before: FileSnapshot): string[] {
 	const changed = new Set<string>();
 	for (const [filePath, next] of after) {
 		const prev = before.get(filePath);
-		if (!prev || prev.mtimeMs !== next.mtimeMs || prev.size !== next.size) {
+		if (prev?.mtimeMs !== next.mtimeMs || prev?.size !== next.size) {
 			changed.add(filePath);
 		}
 	}
@@ -725,7 +725,7 @@ export async function runFormatPhase(
 		if (result.anyChanged) {
 			formatChanged = true;
 			dbg(
-				`autoformat: ${result.formatters.map((f) => `${f.name}(${f.changed ? "changed" : "unchanged"})`).join(", ")}`,
+				"autoformat: " + result.formatters.map((f) => f.name + "(" + (f.changed ? "changed" : "unchanged") + ")").join(", "),
 			);
 		}
 		if (!result.allSucceeded) {
@@ -734,7 +734,7 @@ export async function runFormatPhase(
 				...failures.map((f) => `${f.name}: ${f.error ?? "unknown error"}`),
 			);
 			dbg(
-				`autoformat: ${failures.map((f) => `${f.name} failed: ${f.error ?? "unknown error"}`).join("; ")}`,
+				"autoformat: " + failures.map((f) => f.name + " failed: " + (f.error ?? "unknown error")).join("; "),
 			);
 		}
 	} catch (err) {
@@ -946,14 +946,9 @@ export async function runPipeline(
 		const changedList = [...piChangedFiles].map((changedFile) =>
 			toRunnerDisplayPath(cwd, changedFile),
 		);
-		const fileList = changedList.length
-			? `\nModified files:\n${changedList
-					.slice(0, 8)
-					.map((f) => `  - ${f}`)
-					.join(
-						"\n",
-					)}${changedList.length > 8 ? `\n  - ... and ${changedList.length - 8} more` : ""}`
-			: "";
+		const topFiles = changedList.slice(0, 8).map((f) => "  - " + f).join("\n");
+		const overflow = changedList.length > 8 ? "\n  - ... and " + (changedList.length - 8) + " more" : "";
+		const fileList = changedList.length ? "\nModified files:\n" + topFiles + overflow : "";
 		output += `\n\n⚠️ **File was modified by auto-format/fix. You MUST re-read modified file(s) before making any further edits — the content on disk has changed (whitespace, indentation, quotes, or code). Editing from memory will produce mismatches.**${fileList}`;
 	}
 	phase.end("dispatch_lint", {

package/clients/read-guard.ts

@@ -210,9 +210,12 @@ export class ReadGuard {
 		const lastRead = fileReads[fileReads.length - 1];
 		const [editStart, editEnd] = touchedLines;
 		const lastReadEnd = lastRead.effectiveOffset + lastRead.effectiveLimit - 1;
+		const symbolCtx = lastRead.enclosingSymbol
+			? ` (${lastRead.enclosingSymbol.kind} \`${lastRead.enclosingSymbol.name}\`)`
+			: "";
 		const verdict = this.blockOrWarn(
 			"out-of-range",
-			`🔴 BLOCKED — Edit outside read range\n\nYou read \`${filePath}\` lines ${lastRead.effectiveOffset}-${lastReadEnd}${lastRead.enclosingSymbol ? ` (${lastRead.enclosingSymbol.kind} \`${lastRead.enclosingSymbol.name}\`)` : ""}, but your edit touches lines ${editStart}-${editEnd}.\n\nThe edit target is outside the context you previously read.\nTo proceed:\n  1. Read the relevant section: \`read path="${filePath}" offset=${Math.max(1, editStart - 5)} limit=${Math.min(30, editEnd - editStart + 10)}\`\n  2. Or read the full file: \`read path="${filePath}"\``,
+			`🔴 BLOCKED — Edit outside read range\n\nYou read \`${filePath}\` lines ${lastRead.effectiveOffset}-${lastReadEnd}${symbolCtx}, but your edit touches lines ${editStart}-${editEnd}.\n\nThe edit target is outside the context you previously read.\nTo proceed:\n  1. Read the relevant section: \`read path="${filePath}" offset=${Math.max(1, editStart - 5)} limit=${Math.min(30, editEnd - editStart + 10)}\`\n  2. Or read the full file: \`read path="${filePath}"\``,
 			{
 				editRange: touchedLines,
 				readRanges: fileReads.map((r) => ({
@@ -470,11 +473,7 @@ export class ReadGuard {
 		const reads = this.reads.get(filePath) ?? [];
 		logReadGuardEvent({
 			event:
-				verdict.action === "allow"
-					? "edit_allowed"
-					: verdict.action === "warn"
-						? "edit_warned"
-						: "edit_blocked",
+				verdict.action === "allow" ? "edit_allowed" : (verdict.action === "warn" ? "edit_warned" : "edit_blocked"),
 			sessionId: this.sessionId,
 			filePath,
 			metadata: {

package/clients/runtime-coordinator.ts

@@ -44,7 +44,7 @@ export class RuntimeCoordinator {
 	};
 	private _complexityBaselines = new Map<string, FileComplexity>();
 	private _fixedThisTurn = new Set<string>();
-	private _reportedThisTurn = new Set<string>();
+	private readonly _reportedThisTurn = new Set<string>();
 	private _projectRulesScan: RuleScanResult = {
 		rules: [],
 		hasCustomRules: false,
@@ -56,7 +56,7 @@ export class RuntimeCoordinator {
 	private _gitGuardHasBlockers = false;
 	private _gitGuardSummary = "";
 	private _readGuard: ReadGuard | null = null;
-	private _pendingDeferredFormatFiles = new Map<string, DeferredFormatRecord>();
+	private readonly _pendingDeferredFormatFiles = new Map<string, DeferredFormatRecord>();
 	private readonly _lspReadWarmState = new Map<
 		string,
 		{ status: "warming" | "ready"; ts: number }

package/clients/runtime-tool-result.ts

@@ -108,9 +108,7 @@ export async function handleToolResult(deps: ToolResultDeps): Promise<{
 	const rawFilePath = (event.input as { path?: string }).path;
 	const workspaceRoot = runtime.projectRoot || process.cwd();
 	const filePath = rawFilePath
-		? path.isAbsolute(rawFilePath)
-			? rawFilePath
-			: path.resolve(workspaceRoot, rawFilePath)
+		? (path.isAbsolute(rawFilePath) ? rawFilePath : path.resolve(workspaceRoot, rawFilePath))
 		: rawFilePath;
 	const behaviorWarnings = agentBehaviorRecord(event.toolName, filePath);
 

package/clients/secrets-scanner.ts

@@ -126,7 +126,7 @@ const SECRET_PATTERNS: SecretPattern[] = [
 	},
 	{
 		pattern:
-			/\b(secret|api_?key|token|access_?key)\b\s*[:=]\s*["']([a-zA-Z0-9_\-/.]{8,})["']/gi,
+			/\b(secret|api_?key|token|access_?key)\b\s*[:=]\s*["']([a-zA-Z0-9_./-]{8,})["']/gi,
 		name: "hardcoded-secret",
 		message: "Possible hardcoded secret or API key",
 	},

package/clients/session-summary.ts

@@ -46,7 +46,7 @@ export function formatSlopScoreSummary(summary: SlopScoreSummary): string {
 	const topRules = summary.ruleCounts.slice(0, 3);
 	const detail =
 		topRules.length > 0
-			? `  (${topRules.map((entry) => `${entry.ruleId} ×${entry.count}`).join(", ")})`
+			? "  (" + topRules.map((entry) => entry.ruleId + " ×" + entry.count).join(", ") + ")"
 			: "";
 
 	return `Slop score: ${summary.scorePerKloc.toFixed(1)}/KLOC${detail}`;

package/clients/tree-sitter-query-loader.ts

@@ -243,8 +243,9 @@ export class TreeSitterQueryLoader {
 						const nestedMatch = nextLine.match(/^\s+(\w+):\s*(.+)$/);
 						if (nestedMatch) {
 							let nv = nestedMatch[2].trim();
-							if (nv.startsWith('"') && nv.endsWith('"')) nv = nv.slice(1, -1);
-							else if (nv.startsWith("'") && nv.endsWith("'")) nv = nv.slice(1, -1);
+							if ((nv.startsWith('"') && nv.endsWith('"')) || (nv.startsWith("'") && nv.endsWith("'"))) {
+								nv = nv.slice(1, -1);
+							}
 							nestedObj[nestedMatch[1]] = nv;
 						}
 					}

package/commands/booboo.ts

@@ -1149,9 +1149,7 @@ export async function handleBooboo(
 						inner.spans?.[0];
 					if (!span) continue;
 					const absFile = span.file_name
-						? path.isAbsolute(span.file_name)
-							? span.file_name
-							: path.join(targetPath, span.file_name)
+						? (path.isAbsolute(span.file_name) ? span.file_name : path.join(targetPath, span.file_name))
 						: targetPath;
 					issues.push({
 						file: path.relative(targetPath, absFile),
@@ -1183,9 +1181,7 @@ export async function handleBooboo(
 					for (const diag of json?.generalDiagnostics ?? []) {
 						if (!["error", "warning"].includes(diag.severity)) continue;
 						const absFile = diag.file
-							? path.isAbsolute(diag.file)
-								? diag.file
-								: path.join(targetPath, diag.file)
+							? (path.isAbsolute(diag.file) ? diag.file : path.join(targetPath, diag.file))
 							: targetPath;
 						if (shouldIncludeFile(absFile)) {
 							issues.push({
@@ -1331,7 +1327,7 @@ export async function handleBooboo(
 				);
 				const output = (result.stdout || "") + (result.stderr || "");
 				const csRe =
-					/^([^\s(]+\.cs)\((\d+),(\d+)\):\s+(error|warning)\s+([A-Z]+\d+):\s+([^\[]+)/gm;
+					/^([^\s(]+\.cs)\((\d+),(\d+)\):\s+(error|warning)\s+([A-Z]+\d+):\s+([^[]+)/gm;
 				for (const m of output.matchAll(csRe)) {
 					const [, file, line, col, sev, code, msg] = m;
 					const absFile = path.isAbsolute(file)
@@ -1394,10 +1390,13 @@ export async function handleBooboo(
 					timeout: 60_000,
 				});
 				const output = (result.stdout || "") + (result.stderr || "");
-				const gleamRe =
-					/^([^:\n]+):(\d+):(\d+)[ \t]*(?:error|warning)[^\n]*\n([^\n]+)/gm;
-				for (const m of output.matchAll(gleamRe)) {
-					const [, file, line, col, msg] = m;
+				const gleamLines = output.split("\n");
+				const gleamHeaderRe = /^([^:]+):(\d+):(\d+)[ \t]*(?:error|warning)/;
+				for (let i = 0; i < gleamLines.length; i++) {
+					const m = gleamHeaderRe.exec(gleamLines[i]);
+					if (!m) continue;
+					const [, file, line, col] = m;
+					const msg = gleamLines[i + 1]?.trim() ?? "";
 					const absFile = path.isAbsolute(file)
 						? file
 						: path.join(targetPath, file);
@@ -1408,7 +1407,7 @@ export async function handleBooboo(
 							col: parseInt(col, 10),
 							severity: "error",
 							code: "gleam",
-							message: msg.trim(),
+							message: msg,
 							compiler: "gleam check",
 						});
 					}
@@ -1426,8 +1425,10 @@ export async function handleBooboo(
 					timeout: 120_000,
 				});
 				const output = (result.stdout || "") + (result.stderr || "");
-				const zigRe = /^([^:\n]+):(\d+):(\d+):[ \t]*(error|warning|note):[ \t]*([^\n]+)/gm;
-				for (const m of output.matchAll(zigRe)) {
+				const zigLineRe = /^([^:]+):(\d+):(\d+):[ \t]*(error|warning|note):[ \t]*(.+)/;
+				for (const zigLine of output.split("\n")) {
+					const m = zigLineRe.exec(zigLine);
+					if (!m) continue;
 					const [, file, line, col, sev, msg] = m;
 					const absFile = path.isAbsolute(file)
 						? file

package/index.ts

@@ -1148,7 +1148,7 @@ export default function (pi: ExtensionAPI) {
 				if (dupeWarnings.length > 0) {
 					return {
 						block: true,
-						reason: `🔴 STOP - Redefining existing export(s). Import instead:\n${dupeWarnings.map((w) => `  • ${w}`).join("\n")}`,
+						reason: "🔴 STOP - Redefining existing export(s). Import instead:\n" + dupeWarnings.map((w) => "  • " + w).join("\n"),
 					};
 				}
 
@@ -1321,9 +1321,9 @@ export default function (pi: ExtensionAPI) {
 	// --- Inject turn-end findings into next agent turn ---
 	// jscpd, madge, and turn-end delta results are cached at turn_end and consumed here
 	// via the context event, which fires before each provider request.
-	// Important: context handlers must APPEND to the existing message list, not replace it.
-	// Replacing `event.messages` can drop the user's first prompt entirely, which causes
-	// OpenAI Responses requests to fail with: "One of input/previous_response_id/prompt/conversation_id must be provided."
+	// Important: keep the user's prompt as the trailing message. Some provider bridges
+	// treat the final message as the active user action, so pi-lens context must be
+	// prepended instead of appended.
 	// biome-ignore lint/suspicious/noExplicitAny: pi.on("context") overload has TS resolution bug
 	(pi as any).on(
 		"context",
@@ -1348,7 +1348,7 @@ export default function (pi: ExtensionAPI) {
 						?.messages ?? [];
 
 				return {
-					messages: [...existingMessages, ...injectedMessages],
+					messages: [...injectedMessages, ...existingMessages],
 				};
 			} catch (err) {
 				dbg(`context event error: ${err}`);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lens",
-	"version": "3.8.38",
+	"version": "3.8.39",
 	"type": "module",
 	"description": "Real-time code feedback for pi \u2014 LSP, linters, formatters, type-checking, structural analysis & booboo",
 	"repository": {