pi-lens 4.2.1 → 4.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (671) hide show
  1. package/CHANGELOG.md +1562 -0
  2. package/README.md +157 -24
  3. package/config/dependency-cruiser-eager-allowlist.json +6 -2
  4. package/dist/chunk-22AVIGXS.js +560 -0
  5. package/dist/chunk-27BBHSZC.js +106 -0
  6. package/dist/chunk-2BEMIWEW.js +51 -0
  7. package/dist/chunk-2EECBNC5.js +89 -0
  8. package/dist/chunk-34U7PLGE.js +23 -0
  9. package/dist/chunk-3I5QFT3N.js +181 -0
  10. package/dist/chunk-3MED75HT.js +37 -0
  11. package/dist/chunk-47D2BO4S.js +87 -0
  12. package/dist/chunk-4RERDEXR.js +348 -0
  13. package/dist/chunk-4W2PLC4J.js +27 -0
  14. package/dist/chunk-52H5B5TC.js +202 -0
  15. package/dist/chunk-54B42YRX.js +27 -0
  16. package/dist/chunk-5RXBNSW2.js +266 -0
  17. package/dist/chunk-5THXD6X5.js +201 -0
  18. package/dist/chunk-5W3R6LFT.js +24 -0
  19. package/dist/chunk-5ZEJHV35.js +341 -0
  20. package/dist/chunk-6P62QVEA.js +118 -0
  21. package/dist/chunk-6QIUX4EP.js +459 -0
  22. package/dist/chunk-6VCD4VKZ.js +78 -0
  23. package/dist/chunk-7F72PXY2.js +326 -0
  24. package/dist/chunk-7FBF7NPR.js +998 -0
  25. package/dist/chunk-7U2IDNXN.js +37 -0
  26. package/dist/chunk-ABBOA7UD.js +157 -0
  27. package/dist/chunk-AHDW3GPE.js +50 -0
  28. package/dist/chunk-AJ3QXTRQ.js +756 -0
  29. package/dist/chunk-AJVLWNFN.js +1610 -0
  30. package/dist/chunk-AJXODZY6.js +112 -0
  31. package/dist/chunk-ARFCXG7S.js +84 -0
  32. package/dist/chunk-AS44CFQ4.js +708 -0
  33. package/dist/chunk-AWE5TMPO.js +38 -0
  34. package/dist/chunk-B3I2UUT4.js +4692 -0
  35. package/dist/chunk-BRJKOBZP.js +331 -0
  36. package/dist/chunk-BW5KFIQC.js +59 -0
  37. package/dist/chunk-C2AUYXQH.js +149 -0
  38. package/dist/chunk-CGGAIP7J.js +29 -0
  39. package/dist/chunk-D6QS3U6M.js +30 -0
  40. package/dist/chunk-DFVMIKMQ.js +349 -0
  41. package/dist/chunk-DIULIWKU.js +169 -0
  42. package/dist/chunk-DQ2NZ7C4.js +2317 -0
  43. package/dist/chunk-E2WFBRHM.js +213 -0
  44. package/dist/chunk-E4MAEDPM.js +50 -0
  45. package/dist/chunk-EOKRQ3SA.js +30 -0
  46. package/dist/chunk-F3AU2TMM.js +2626 -0
  47. package/dist/chunk-F3P7VQ7H.js +170 -0
  48. package/dist/chunk-FC4RP4I2.js +12 -0
  49. package/dist/chunk-FJNKANOS.js +32 -0
  50. package/dist/chunk-GUOGVTCQ.js +146 -0
  51. package/dist/chunk-GVXA6CCE.js +18 -0
  52. package/dist/chunk-HHYAELLJ.js +2334 -0
  53. package/dist/chunk-HMFXILPV.js +83 -0
  54. package/dist/chunk-HVUZXSWK.js +421 -0
  55. package/dist/chunk-HWBZIGMJ.js +62 -0
  56. package/dist/chunk-I3R7GKDR.js +17 -0
  57. package/dist/chunk-I7SPGOWI.js +55 -0
  58. package/dist/chunk-IIXOAGHR.js +38 -0
  59. package/dist/chunk-IVP5KAB7.js +2250 -0
  60. package/dist/chunk-IXEBJSUE.js +22 -0
  61. package/dist/chunk-JOLITGCC.js +27 -0
  62. package/dist/chunk-K6VYLB2U.js +145 -0
  63. package/dist/chunk-LJDODBBZ.js +78 -0
  64. package/dist/chunk-LNAKEO63.js +78 -0
  65. package/dist/chunk-LSMJ6KBE.js +4139 -0
  66. package/dist/chunk-LW6XKDZQ.js +5565 -0
  67. package/dist/chunk-N3YQJI6O.js +899 -0
  68. package/dist/chunk-NABLC7W3.js +148 -0
  69. package/dist/chunk-NKOUFPQF.js +659 -0
  70. package/dist/chunk-NL5GLMFI.js +211 -0
  71. package/dist/chunk-NMABWBZN.js +327 -0
  72. package/dist/chunk-NTHH2J74.js +27 -0
  73. package/dist/chunk-NTUJEGDZ.js +59 -0
  74. package/dist/chunk-NXL4FFQQ.js +47 -0
  75. package/dist/chunk-NXPS2L6U.js +466 -0
  76. package/dist/chunk-O5WILGMI.js +42 -0
  77. package/dist/chunk-O6TQT6RI.js +48 -0
  78. package/dist/chunk-OAXNDZJ7.js +323 -0
  79. package/dist/chunk-ODEEOXPH.js +44 -0
  80. package/dist/chunk-OQGFCZJ4.js +4533 -0
  81. package/dist/chunk-ORTMY4Q4.js +282 -0
  82. package/dist/chunk-OS32RNR2.js +442 -0
  83. package/dist/chunk-PAK6IDME.js +189 -0
  84. package/dist/chunk-PWFHBTSF.js +406 -0
  85. package/dist/chunk-Q5U6FMDI.js +2352 -0
  86. package/dist/chunk-QOZXJ4NA.js +3364 -0
  87. package/dist/chunk-QYF5S6P6.js +45 -0
  88. package/dist/chunk-RIISMHKN.js +36 -0
  89. package/dist/chunk-RPD4ZSB7.js +25 -0
  90. package/dist/chunk-RPD5K5NC.js +79 -0
  91. package/dist/chunk-RUOG5D2C.js +262 -0
  92. package/dist/chunk-T4ERT73Y.js +599 -0
  93. package/dist/chunk-T6D4Q4AQ.js +54 -0
  94. package/dist/chunk-TGPXLY2J.js +391 -0
  95. package/dist/chunk-TLGFBM3F.js +12116 -0
  96. package/dist/chunk-TO6WL3GM.js +88 -0
  97. package/dist/chunk-TT22N74J.js +517 -0
  98. package/dist/chunk-TVN5N6GY.js +21216 -0
  99. package/dist/chunk-U3VGR4VU.js +308 -0
  100. package/dist/chunk-UK3CMEAL.js +1250 -0
  101. package/dist/chunk-UOPVJQ4N.js +103 -0
  102. package/dist/chunk-UXVNL3D7.js +23 -0
  103. package/dist/chunk-UY752QSN.js +45 -0
  104. package/dist/chunk-V5PXFSZK.js +188 -0
  105. package/dist/chunk-V7R425XG.js +398 -0
  106. package/dist/chunk-VCSRSYLF.js +81 -0
  107. package/dist/chunk-VD4JQCQC.js +162 -0
  108. package/dist/chunk-VDBPVIKD.js +62 -0
  109. package/dist/chunk-VHQLPIRJ.js +114 -0
  110. package/dist/chunk-VN2AXLEX.js +5414 -0
  111. package/dist/chunk-VNMT7C64.js +478 -0
  112. package/dist/chunk-WONERJTP.js +309 -0
  113. package/dist/chunk-XECLWQZN.js +85 -0
  114. package/dist/chunk-XIMYZ3JA.js +27 -0
  115. package/dist/chunk-XK4CIILI.js +144 -0
  116. package/dist/chunk-Y4T27COV.js +562 -0
  117. package/dist/chunk-YGVYKNSN.js +1860 -0
  118. package/dist/chunk-YLF3PPT5.js +308 -0
  119. package/dist/chunk-YSNFMJKN.js +14 -0
  120. package/dist/chunk-Z3CCVDUB.js +76 -0
  121. package/dist/chunk-Z54ZSOBZ.js +61 -0
  122. package/dist/chunk-ZAWW3AF6.js +97 -0
  123. package/dist/chunk-ZMOL6RQC.js +167 -0
  124. package/dist/index.js +19039 -8956
  125. package/dist/mcp/analyze-cli.js +186 -228
  126. package/dist/mcp/cli.js +137 -98
  127. package/dist/mcp/server.js +22592 -1564
  128. package/dist/mcp/worker.js +97 -38
  129. package/dist/probes/installer.js +135 -0
  130. package/dist/workers/project-snapshot-persist-worker.js +22 -0
  131. package/dist/workers/review-graph-persist-worker.js +15 -0
  132. package/docs/adr/0001-stale-advisory-live-arm.md +29 -0
  133. package/docs/adr/0002-workspace-hash-rendezvous.md +30 -0
  134. package/docs/adr/0003-git-guard-latch-writer.md +203 -0
  135. package/docs/adr/0004-disposition-policy-seam.md +38 -0
  136. package/docs/adr/0005-tool-availability-enforcement-seam.md +29 -0
  137. package/docs/adr/0006-derived-state-benchmark-first.md +31 -0
  138. package/docs/adr/0007-end-to-end-witness-per-seam-slice.md +38 -0
  139. package/docs/adr/0008-turn-end-lane-interface.md +165 -0
  140. package/docs/adr/0009-reported-path-attribution.md +114 -0
  141. package/docs/adr/README.md +26 -0
  142. package/docs/agent-guide.md +13 -4
  143. package/docs/agent-tools.md +60 -1
  144. package/docs/ast-grep_rules_catalog.md +6 -4
  145. package/docs/configuration.md +75 -2
  146. package/docs/engineering-principles.md +202 -0
  147. package/docs/environment-variables.md +113 -6
  148. package/docs/features.md +10 -6
  149. package/docs/globalconfig.md +7 -1
  150. package/docs/io-bridge-v2-migration.md +94 -0
  151. package/docs/language-coverage.md +17 -0
  152. package/docs/lsp-capability-matrix.md +131 -32
  153. package/docs/lsp-idle-eviction.md +124 -0
  154. package/docs/mcp.md +21 -5
  155. package/docs/merge-queue-rollout.md +77 -0
  156. package/docs/pi-lens-fixer.md +161 -39
  157. package/docs/pi-lens-investigator.md +77 -20
  158. package/docs/pi-lens-merge-policy.md +694 -0
  159. package/docs/pi-lens-monitor.md +73 -7
  160. package/docs/pi-lens-retro.md +6 -4
  161. package/docs/pi-lens-reviewer.md +190 -34
  162. package/docs/pi-lens-subagent.md +247 -37
  163. package/docs/pi-lens-warden.md +18 -7
  164. package/docs/public-api-stability.md +56 -0
  165. package/docs/release-qa-baseline.md +86 -17
  166. package/docs/rfcs/3654-unified-io-bridge-v2.md +316 -0
  167. package/docs/servercapabilities.md +66 -52
  168. package/docs/settings.md +13 -3
  169. package/docs/subagent-compat.md +1 -1
  170. package/docs/usage.md +5 -1
  171. package/grammars/tree-sitter-bash.wasm +0 -0
  172. package/grammars/tree-sitter-bash.wasm.json +3 -3
  173. package/package.json +23 -9
  174. package/rules/ast-grep-rules/rule-tests/advisory-registry-subset-test.yml +41 -0
  175. package/rules/ast-grep-rules/rule-tests/no-assert-tuple-test.yml +13 -0
  176. package/rules/ast-grep-rules/rule-tests/no-boolean-in-except-test.yml +26 -0
  177. package/rules/ast-grep-rules/rule-tests/no-http-headers-bracket-access-test.yml +10 -0
  178. package/rules/ast-grep-rules/rule-tests/unchecked-numeric-parse-python-test.yml +18 -0
  179. package/rules/ast-grep-rules/rule-tests/unchecked-throwing-call-python-test.yml +4 -3
  180. package/rules/ast-grep-rules/rules/advisory-registry-subset.yml +50 -0
  181. package/rules/ast-grep-rules/rules/go-no-fmt-println.yml +2 -2
  182. package/rules/ast-grep-rules/rules/no-assert-tuple.yml +23 -13
  183. package/rules/ast-grep-rules/rules/no-boolean-in-except.yml +7 -3
  184. package/rules/ast-grep-rules/rules/no-console-except-error-js.yml +2 -2
  185. package/rules/ast-grep-rules/rules/no-console-except-error.yml +2 -2
  186. package/rules/ast-grep-rules/rules/no-http-headers-bracket-access.yml +12 -7
  187. package/rules/ast-grep-rules/rules/unchecked-numeric-parse-python.yml +44 -0
  188. package/rules/ast-grep-rules/rules/unchecked-throwing-call-python.yml +5 -3
  189. package/rules/tree-sitter-queries/typescript/console-statement.yml +2 -2
  190. package/scripts/analyze-pi-lens-logs.mjs +1275 -62
  191. package/scripts/download-grammars.js +5 -0
  192. package/scripts/grammars.lock.json +6 -1
  193. package/scripts/install-selftest.mjs +38 -35
  194. package/scripts/lib/host-provided-deps.mjs +13 -4
  195. package/scripts/lib/web-tree-sitter-dir.mjs +141 -0
  196. package/dist/clients/actionable-warnings-logger.js +0 -35
  197. package/dist/clients/actionable-warnings.js +0 -1594
  198. package/dist/clients/advisory-provenance.js +0 -457
  199. package/dist/clients/agent-behavior-client.js +0 -147
  200. package/dist/clients/agent-nudge.js +0 -325
  201. package/dist/clients/analysed-root.js +0 -1
  202. package/dist/clients/ast-grep-client.js +0 -731
  203. package/dist/clients/ast-grep-rule-manager.js +0 -146
  204. package/dist/clients/ast-grep-tool-logger.js +0 -118
  205. package/dist/clients/ast-grep-types.js +0 -10
  206. package/dist/clients/ast-grep-yaml-synth.js +0 -154
  207. package/dist/clients/atomic-write-staging.js +0 -75
  208. package/dist/clients/atomic-write.js +0 -189
  209. package/dist/clients/availability-probe-flight.js +0 -12
  210. package/dist/clients/bash-file-access.js +0 -1056
  211. package/dist/clients/biome-client.js +0 -357
  212. package/dist/clients/blocker-freshness.js +0 -837
  213. package/dist/clients/blocker-past-eof.js +0 -129
  214. package/dist/clients/bootstrap.js +0 -569
  215. package/dist/clients/bounded-cache.js +0 -190
  216. package/dist/clients/bounded-pid-file-lock.js +0 -202
  217. package/dist/clients/bounded-telemetry.js +0 -295
  218. package/dist/clients/build-identity.js +0 -95
  219. package/dist/clients/bundled-resource-health.js +0 -113
  220. package/dist/clients/bus-events-logger.js +0 -105
  221. package/dist/clients/bus-publish.js +0 -171
  222. package/dist/clients/cache/rule-cache.js +0 -190
  223. package/dist/clients/cache-manager.js +0 -465
  224. package/dist/clients/cache-observability.js +0 -1313
  225. package/dist/clients/call-graph.js +0 -852
  226. package/dist/clients/cargo-manifest.js +0 -422
  227. package/dist/clients/cascade-budget.js +0 -196
  228. package/dist/clients/cascade-format.js +0 -315
  229. package/dist/clients/cascade-logger.js +0 -31
  230. package/dist/clients/cascade-types.js +0 -9
  231. package/dist/clients/child-unref.js +0 -115
  232. package/dist/clients/code-quality-warnings.js +0 -286
  233. package/dist/clients/codebase-model.js +0 -173
  234. package/dist/clients/collateral-test-role.js +0 -40
  235. package/dist/clients/complexity-client.js +0 -462
  236. package/dist/clients/config-core/deny.js +0 -221
  237. package/dist/clients/config-core/index.js +0 -50
  238. package/dist/clients/config-core/merge.js +0 -357
  239. package/dist/clients/config-core/normalize.js +0 -340
  240. package/dist/clients/config-core/process-spec.js +0 -248
  241. package/dist/clients/config-core/provenance.js +0 -164
  242. package/dist/clients/config-core/records.js +0 -218
  243. package/dist/clients/config-core/resolve.js +0 -125
  244. package/dist/clients/config-core/safe-object.js +0 -78
  245. package/dist/clients/config-core/schema.js +0 -165
  246. package/dist/clients/config-diagnostic-codes.js +0 -283
  247. package/dist/clients/config-locations.js +0 -160
  248. package/dist/clients/config-resolve.js +0 -792
  249. package/dist/clients/config-schema.js +0 -251
  250. package/dist/clients/config-warn.js +0 -407
  251. package/dist/clients/console-guard-install.js +0 -26
  252. package/dist/clients/cooperative-budget.js +0 -42
  253. package/dist/clients/dead-code-client.js +0 -510
  254. package/dist/clients/dead-code-logger.js +0 -30
  255. package/dist/clients/deadline-utils.js +0 -280
  256. package/dist/clients/debug-handles.js +0 -211
  257. package/dist/clients/debug-heap.js +0 -174
  258. package/dist/clients/deferred-lsp-work.js +0 -106
  259. package/dist/clients/degradation-ledger.js +0 -396
  260. package/dist/clients/demoted-finding-render.js +0 -169
  261. package/dist/clients/dependency-checker.js +0 -862
  262. package/dist/clients/deps/ast-grep-napi.js +0 -22
  263. package/dist/clients/deps/js-yaml.js +0 -9
  264. package/dist/clients/deps/minimatch.js +0 -4
  265. package/dist/clients/deps/pi-tui.js +0 -14
  266. package/dist/clients/deps/typebox.js +0 -14
  267. package/dist/clients/deps/vscode-jsonrpc.js +0 -1
  268. package/dist/clients/deps/web-tree-sitter.js +0 -24
  269. package/dist/clients/diagnostic-dispositions.js +0 -594
  270. package/dist/clients/diagnostic-line-freshness.js +0 -305
  271. package/dist/clients/diagnostic-logger.js +0 -73
  272. package/dist/clients/diagnostic-tracker.js +0 -105
  273. package/dist/clients/diagnostics-publish.js +0 -230
  274. package/dist/clients/dispatch/ast-grep-catalog.js +0 -65
  275. package/dist/clients/dispatch/auxiliary-lsp.js +0 -343
  276. package/dist/clients/dispatch/collect-later-tier.js +0 -35
  277. package/dist/clients/dispatch/diagnostic-taxonomy.js +0 -66
  278. package/dist/clients/dispatch/dispatcher.js +0 -1269
  279. package/dist/clients/dispatch/fact-provider-types.js +0 -1
  280. package/dist/clients/dispatch/fact-rule-runner.js +0 -17
  281. package/dist/clients/dispatch/fact-runner.js +0 -30
  282. package/dist/clients/dispatch/fact-scheduler.js +0 -68
  283. package/dist/clients/dispatch/fact-store.js +0 -377
  284. package/dist/clients/dispatch/facts/comment-facts.js +0 -22
  285. package/dist/clients/dispatch/facts/file-content.js +0 -19
  286. package/dist/clients/dispatch/facts/function-facts.js +0 -348
  287. package/dist/clients/dispatch/facts/import-facts.js +0 -204
  288. package/dist/clients/dispatch/facts/tree-sitter-facts.js +0 -34
  289. package/dist/clients/dispatch/facts/try-catch-facts.js +0 -119
  290. package/dist/clients/dispatch/finding-policy.js +0 -222
  291. package/dist/clients/dispatch/indent-detect.js +0 -411
  292. package/dist/clients/dispatch/inline-suppressions.js +0 -70
  293. package/dist/clients/dispatch/integration.js +0 -2377
  294. package/dist/clients/dispatch/lazy.js +0 -11
  295. package/dist/clients/dispatch/pending-runner-findings.js +0 -87
  296. package/dist/clients/dispatch/plan.js +0 -278
  297. package/dist/clients/dispatch/priorities.js +0 -20
  298. package/dist/clients/dispatch/rule-id-normalize.js +0 -50
  299. package/dist/clients/dispatch/rule-ignores.js +0 -62
  300. package/dist/clients/dispatch/rule-policy.js +0 -135
  301. package/dist/clients/dispatch/rules/async-noise.js +0 -40
  302. package/dist/clients/dispatch/rules/async-unnecessary-wrapper.js +0 -27
  303. package/dist/clients/dispatch/rules/cors-wildcard.js +0 -54
  304. package/dist/clients/dispatch/rules/error-obscuring.js +0 -32
  305. package/dist/clients/dispatch/rules/error-swallowing.js +0 -31
  306. package/dist/clients/dispatch/rules/framework-call-noise.js +0 -67
  307. package/dist/clients/dispatch/rules/high-complexity.js +0 -72
  308. package/dist/clients/dispatch/rules/high-fan-out.js +0 -74
  309. package/dist/clients/dispatch/rules/high-import-coupling.js +0 -37
  310. package/dist/clients/dispatch/rules/missing-error-propagation.js +0 -62
  311. package/dist/clients/dispatch/rules/no-commented-credentials.js +0 -52
  312. package/dist/clients/dispatch/rules/pass-through-wrappers.js +0 -42
  313. package/dist/clients/dispatch/rules/placeholder-comments.js +0 -40
  314. package/dist/clients/dispatch/rules/unsafe-boundary.js +0 -126
  315. package/dist/clients/dispatch/runner-context.js +0 -52
  316. package/dist/clients/dispatch/runners/actionlint.js +0 -113
  317. package/dist/clients/dispatch/runners/ast-grep-napi.js +0 -1196
  318. package/dist/clients/dispatch/runners/biome-check.js +0 -283
  319. package/dist/clients/dispatch/runners/cpp-check.js +0 -236
  320. package/dist/clients/dispatch/runners/credo.js +0 -80
  321. package/dist/clients/dispatch/runners/cue-vet.js +0 -398
  322. package/dist/clients/dispatch/runners/dart-analyze.js +0 -202
  323. package/dist/clients/dispatch/runners/detekt.js +0 -169
  324. package/dist/clients/dispatch/runners/dotnet-build.js +0 -159
  325. package/dist/clients/dispatch/runners/elixir-check.js +0 -210
  326. package/dist/clients/dispatch/runners/eslint.js +0 -154
  327. package/dist/clients/dispatch/runners/fact-rules.js +0 -29
  328. package/dist/clients/dispatch/runners/fish-indent.js +0 -69
  329. package/dist/clients/dispatch/runners/gleam-check.js +0 -87
  330. package/dist/clients/dispatch/runners/go-vet.js +0 -90
  331. package/dist/clients/dispatch/runners/golangci-lint.js +0 -120
  332. package/dist/clients/dispatch/runners/hadolint.js +0 -79
  333. package/dist/clients/dispatch/runners/helm-lint.js +0 -171
  334. package/dist/clients/dispatch/runners/helm-render.js +0 -940
  335. package/dist/clients/dispatch/runners/htmlhint.js +0 -108
  336. package/dist/clients/dispatch/runners/index.js +0 -108
  337. package/dist/clients/dispatch/runners/javac.js +0 -89
  338. package/dist/clients/dispatch/runners/ktlint.js +0 -136
  339. package/dist/clients/dispatch/runners/lsp.js +0 -378
  340. package/dist/clients/dispatch/runners/markdownlint.js +0 -160
  341. package/dist/clients/dispatch/runners/mypy.js +0 -101
  342. package/dist/clients/dispatch/runners/oxlint.js +0 -398
  343. package/dist/clients/dispatch/runners/php-lint.js +0 -62
  344. package/dist/clients/dispatch/runners/phpstan.js +0 -120
  345. package/dist/clients/dispatch/runners/prisma-validate.js +0 -62
  346. package/dist/clients/dispatch/runners/psscriptanalyzer.js +0 -445
  347. package/dist/clients/dispatch/runners/pyright.js +0 -169
  348. package/dist/clients/dispatch/runners/rubocop.js +0 -90
  349. package/dist/clients/dispatch/runners/ruff.js +0 -89
  350. package/dist/clients/dispatch/runners/rust-clippy.js +0 -251
  351. package/dist/clients/dispatch/runners/shellcheck.js +0 -169
  352. package/dist/clients/dispatch/runners/shfmt.js +0 -102
  353. package/dist/clients/dispatch/runners/spellcheck.js +0 -121
  354. package/dist/clients/dispatch/runners/spotbugs.js +0 -259
  355. package/dist/clients/dispatch/runners/sqlfluff.js +0 -174
  356. package/dist/clients/dispatch/runners/stylelint.js +0 -158
  357. package/dist/clients/dispatch/runners/swiftlint.js +0 -154
  358. package/dist/clients/dispatch/runners/taplo.js +0 -168
  359. package/dist/clients/dispatch/runners/terragrunt.js +0 -168
  360. package/dist/clients/dispatch/runners/tflint.js +0 -110
  361. package/dist/clients/dispatch/runners/tree-sitter.js +0 -620
  362. package/dist/clients/dispatch/runners/trivy-config.js +0 -247
  363. package/dist/clients/dispatch/runners/utils/availability-policy.js +0 -496
  364. package/dist/clients/dispatch/runners/utils/candidate-probe.js +0 -90
  365. package/dist/clients/dispatch/runners/utils/diagnostic-parsers.js +0 -85
  366. package/dist/clients/dispatch/runners/utils/lazy-installer.js +0 -274
  367. package/dist/clients/dispatch/runners/utils/runner-helpers.js +0 -1701
  368. package/dist/clients/dispatch/runners/utils/spawn-outcome.js +0 -101
  369. package/dist/clients/dispatch/runners/utils/tool-failure.js +0 -235
  370. package/dist/clients/dispatch/runners/utils/toolchain-availability.js +0 -169
  371. package/dist/clients/dispatch/runners/utils.js +0 -15
  372. package/dist/clients/dispatch/runners/vale.js +0 -116
  373. package/dist/clients/dispatch/runners/yaml-rule-parser.js +0 -242
  374. package/dist/clients/dispatch/runners/yamllint.js +0 -85
  375. package/dist/clients/dispatch/runners/zig-check.js +0 -91
  376. package/dist/clients/dispatch/suppress-writer.js +0 -69
  377. package/dist/clients/dispatch/tool-profile.js +0 -30
  378. package/dist/clients/dispatch/types.js +0 -21
  379. package/dist/clients/dispatch/utils/format-utils.js +0 -45
  380. package/dist/clients/dispatch/utils/lsp-diagnostics.js +0 -35
  381. package/dist/clients/disposition-logger.js +0 -32
  382. package/dist/clients/disposition-publish.js +0 -124
  383. package/dist/clients/durable-store.js +0 -97
  384. package/dist/clients/effective-config.js +0 -413
  385. package/dist/clients/env-utils.js +0 -83
  386. package/dist/clients/error-class.js +0 -23
  387. package/dist/clients/eval-timestamp.js +0 -17
  388. package/dist/clients/event-loop-hold.js +0 -274
  389. package/dist/clients/event-loop-monitor.js +0 -250
  390. package/dist/clients/extension-log.js +0 -504
  391. package/dist/clients/extension-mode.js +0 -73
  392. package/dist/clients/feature-hints.js +0 -103
  393. package/dist/clients/file-kinds.js +0 -412
  394. package/dist/clients/file-role.js +0 -134
  395. package/dist/clients/file-time.js +0 -160
  396. package/dist/clients/file-utils.js +0 -1032
  397. package/dist/clients/finding-delivery-gate.js +0 -463
  398. package/dist/clients/finding-identity.js +0 -88
  399. package/dist/clients/fix-worklog.js +0 -103
  400. package/dist/clients/format-events-publish.js +0 -343
  401. package/dist/clients/format-service.js +0 -222
  402. package/dist/clients/formatters-lazy.js +0 -9
  403. package/dist/clients/formatters.js +0 -1994
  404. package/dist/clients/freshness-cadence.js +0 -17
  405. package/dist/clients/freshness.js +0 -38
  406. package/dist/clients/generated-artifacts.js +0 -394
  407. package/dist/clients/generation-guard.js +0 -215
  408. package/dist/clients/git-guard.js +0 -923
  409. package/dist/clients/git-tracked-ignore.js +0 -243
  410. package/dist/clients/gitleaks-client.js +0 -509
  411. package/dist/clients/go-client.js +0 -104
  412. package/dist/clients/govulncheck-client.js +0 -605
  413. package/dist/clients/gradle-ktfmt-style.js +0 -252
  414. package/dist/clients/grammar-source.js +0 -465
  415. package/dist/clients/gzip-stage-write.js +0 -135
  416. package/dist/clients/hashline-anchor.js +0 -424
  417. package/dist/clients/hook-budgets.js +0 -76
  418. package/dist/clients/host-edit-normalize.js +0 -140
  419. package/dist/clients/host-ports.js +0 -39
  420. package/dist/clients/indent-retarget.js +0 -154
  421. package/dist/clients/install-diagnostics.js +0 -143
  422. package/dist/clients/installer/index.js +0 -5167
  423. package/dist/clients/installer/managed-tool-refresh-session.js +0 -58
  424. package/dist/clients/installer/managed-tool-refresh.js +0 -783
  425. package/dist/clients/instance-reaper-state.js +0 -7
  426. package/dist/clients/instance-reaper.js +0 -1137
  427. package/dist/clients/instance-registry-lock.js +0 -145
  428. package/dist/clients/instance-registry.js +0 -773
  429. package/dist/clients/jscpd-client.js +0 -370
  430. package/dist/clients/json-cache-read.js +0 -65
  431. package/dist/clients/knip-client.js +0 -788
  432. package/dist/clients/language-policy.js +0 -252
  433. package/dist/clients/language-profile.js +0 -361
  434. package/dist/clients/language-registry.js +0 -603
  435. package/dist/clients/latency-logger.js +0 -719
  436. package/dist/clients/lazy-import.js +0 -21
  437. package/dist/clients/ledger-bounds.js +0 -54
  438. package/dist/clients/lens-config.js +0 -346
  439. package/dist/clients/lens-engine.js +0 -358
  440. package/dist/clients/lens-events.js +0 -125
  441. package/dist/clients/lens-flag-registry.js +0 -467
  442. package/dist/clients/lens-map.js +0 -1156
  443. package/dist/clients/live-bus-emitter.js +0 -74
  444. package/dist/clients/log-cleanup.js +0 -222
  445. package/dist/clients/lsp/aggregation.js +0 -178
  446. package/dist/clients/lsp/cascade-tier.js +0 -421
  447. package/dist/clients/lsp/client.js +0 -4465
  448. package/dist/clients/lsp/config.js +0 -689
  449. package/dist/clients/lsp/diagnostic-binding.js +0 -225
  450. package/dist/clients/lsp/document-drift.js +0 -467
  451. package/dist/clients/lsp/edits.js +0 -1219
  452. package/dist/clients/lsp/index.js +0 -8305
  453. package/dist/clients/lsp/inferred-project.js +0 -216
  454. package/dist/clients/lsp/jvm-runtime.js +0 -298
  455. package/dist/clients/lsp/language.js +0 -63
  456. package/dist/clients/lsp/launch.js +0 -725
  457. package/dist/clients/lsp/lombok.js +0 -158
  458. package/dist/clients/lsp/path-utils.js +0 -5
  459. package/dist/clients/lsp/pending-aux-coverage.js +0 -251
  460. package/dist/clients/lsp/position-encoding.js +0 -61
  461. package/dist/clients/lsp/ruby-drive-dirs.js +0 -83
  462. package/dist/clients/lsp/server.js +0 -3209
  463. package/dist/clients/lsp/session-roots.js +0 -192
  464. package/dist/clients/lsp/spawn-history.js +0 -17
  465. package/dist/clients/lsp/sync-kind.js +0 -42
  466. package/dist/clients/lsp/tsserver-sync.js +0 -332
  467. package/dist/clients/lsp/wait-policy/capability-snapshot.js +0 -1
  468. package/dist/clients/lsp/wait-policy/classification.js +0 -85
  469. package/dist/clients/lsp/wait-policy/index.js +0 -10
  470. package/dist/clients/lsp/wait-policy/strategies.js +0 -303
  471. package/dist/clients/lsp/watch-queue.js +0 -61
  472. package/dist/clients/lsp/workspace-diagnostics-cache.js +0 -639
  473. package/dist/clients/lsp/workspace-diagnostics-session.js +0 -30
  474. package/dist/clients/lsp/workspace-sweep-hold.js +0 -184
  475. package/dist/clients/lsp-budget.js +0 -186
  476. package/dist/clients/lsp-document-symbols.js +0 -110
  477. package/dist/clients/lsp-lazy.js +0 -9
  478. package/dist/clients/lsp-mutation.js +0 -396
  479. package/dist/clients/lsp-status.js +0 -59
  480. package/dist/clients/map-with-concurrency.js +0 -40
  481. package/dist/clients/mcp/analyze.js +0 -420
  482. package/dist/clients/mcp/host-shim.js +0 -31
  483. package/dist/clients/mcp/ipc.js +0 -335
  484. package/dist/clients/mcp/review.js +0 -151
  485. package/dist/clients/mcp/session.js +0 -412
  486. package/dist/clients/memory-sampler.js +0 -208
  487. package/dist/clients/message-end-attribution.js +0 -30
  488. package/dist/clients/metrics-client.js +0 -107
  489. package/dist/clients/metrics-history.js +0 -327
  490. package/dist/clients/middle-man-analysis.js +0 -263
  491. package/dist/clients/model-provider.js +0 -53
  492. package/dist/clients/module-report-lsp.js +0 -189
  493. package/dist/clients/module-report.js +0 -2150
  494. package/dist/clients/mutating-tool.js +0 -651
  495. package/dist/clients/mutation-attribution.js +0 -368
  496. package/dist/clients/mutation-bridge.js +0 -240
  497. package/dist/clients/ndjson-logger.js +0 -734
  498. package/dist/clients/observed-mutation-sources.js +0 -101
  499. package/dist/clients/observed-mutation.js +0 -1253
  500. package/dist/clients/oldtext-autopatch.js +0 -128
  501. package/dist/clients/opaque-mutation-scan.js +0 -496
  502. package/dist/clients/opengrep-client.js +0 -328
  503. package/dist/clients/opengrep-config.js +0 -76
  504. package/dist/clients/package-manager.js +0 -607
  505. package/dist/clients/package-root.js +0 -38
  506. package/dist/clients/partial-edit-apply.js +0 -439
  507. package/dist/clients/path-attribution-telemetry.js +0 -43
  508. package/dist/clients/path-keyed-map.js +0 -108
  509. package/dist/clients/path-utils.js +0 -1244
  510. package/dist/clients/performance-report.js +0 -331
  511. package/dist/clients/persist-debounce.js +0 -70
  512. package/dist/clients/persistent-reverify.js +0 -271
  513. package/dist/clients/php-cs-fixer-config.js +0 -119
  514. package/dist/clients/pipeline.js +0 -1425
  515. package/dist/clients/post-autofix-notice.js +0 -37
  516. package/dist/clients/print-mode.js +0 -21
  517. package/dist/clients/probe-home-state.js +0 -228
  518. package/dist/clients/process-bridge.js +0 -66
  519. package/dist/clients/process-singletons.js +0 -210
  520. package/dist/clients/process-snapshot.js +0 -68
  521. package/dist/clients/project-changes.js +0 -181
  522. package/dist/clients/project-conventions.js +0 -171
  523. package/dist/clients/project-diagnostics/cache.js +0 -137
  524. package/dist/clients/project-diagnostics/extractors.js +0 -109
  525. package/dist/clients/project-diagnostics/fresh-fetch.js +0 -650
  526. package/dist/clients/project-diagnostics/runner-adapters/call-graph-impact.js +0 -118
  527. package/dist/clients/project-diagnostics/runner-adapters/dead-code.js +0 -47
  528. package/dist/clients/project-diagnostics/runner-adapters/gitleaks.js +0 -40
  529. package/dist/clients/project-diagnostics/runner-adapters/govulncheck.js +0 -34
  530. package/dist/clients/project-diagnostics/runner-adapters/jscpd.js +0 -38
  531. package/dist/clients/project-diagnostics/runner-adapters/knip.js +0 -47
  532. package/dist/clients/project-diagnostics/runner-adapters/madge.js +0 -48
  533. package/dist/clients/project-diagnostics/runner-adapters/opengrep.js +0 -40
  534. package/dist/clients/project-diagnostics/runner-adapters/runner-findings.js +0 -127
  535. package/dist/clients/project-diagnostics/runner-adapters/trivy.js +0 -81
  536. package/dist/clients/project-diagnostics/scanner.js +0 -520
  537. package/dist/clients/project-diagnostics/types.js +0 -1
  538. package/dist/clients/project-lens-config.js +0 -799
  539. package/dist/clients/project-report.js +0 -701
  540. package/dist/clients/project-scale.js +0 -237
  541. package/dist/clients/project-scan-policy.js +0 -11
  542. package/dist/clients/project-snapshot-fingerprint.js +0 -48
  543. package/dist/clients/project-snapshot-persist-worker.js +0 -20
  544. package/dist/clients/project-snapshot.js +0 -1653
  545. package/dist/clients/project-trust.js +0 -181
  546. package/dist/clients/python-environment.js +0 -217
  547. package/dist/clients/python-provenance.js +0 -639
  548. package/dist/clients/quiet-window-config.js +0 -47
  549. package/dist/clients/quiet-window.js +0 -236
  550. package/dist/clients/read-bridge.js +0 -139
  551. package/dist/clients/read-expansion.js +0 -266
  552. package/dist/clients/read-guard-logger.js +0 -251
  553. package/dist/clients/read-guard-tool-lines.js +0 -1306
  554. package/dist/clients/read-guard.js +0 -1561
  555. package/dist/clients/recent-touches.js +0 -240
  556. package/dist/clients/redact/secrets.js +0 -449
  557. package/dist/clients/resource-sampler.js +0 -628
  558. package/dist/clients/reverse-deps.js +0 -270
  559. package/dist/clients/review-graph/builder.js +0 -5118
  560. package/dist/clients/review-graph/format.js +0 -33
  561. package/dist/clients/review-graph/git-identity.js +0 -157
  562. package/dist/clients/review-graph/import-resolvers.js +0 -481
  563. package/dist/clients/review-graph/persist-worker.js +0 -10
  564. package/dist/clients/review-graph/query.js +0 -244
  565. package/dist/clients/review-graph/revision-drift.js +0 -21
  566. package/dist/clients/review-graph/service.js +0 -96
  567. package/dist/clients/review-graph/shared-extraction-ir.js +0 -82
  568. package/dist/clients/review-graph/symbol-id.js +0 -103
  569. package/dist/clients/review-graph/tsconfig-paths.js +0 -299
  570. package/dist/clients/review-graph/types.js +0 -1
  571. package/dist/clients/review-graph/workspace-modules.js +0 -449
  572. package/dist/clients/review-graph-logger.js +0 -81
  573. package/dist/clients/ruff-client.js +0 -152
  574. package/dist/clients/rules-scanner.js +0 -131
  575. package/dist/clients/run-duration.js +0 -55
  576. package/dist/clients/runtime-agent-end.js +0 -746
  577. package/dist/clients/runtime-config.js +0 -77
  578. package/dist/clients/runtime-context.js +0 -211
  579. package/dist/clients/runtime-coordinator.js +0 -1290
  580. package/dist/clients/runtime-session.js +0 -2485
  581. package/dist/clients/runtime-tool-call.js +0 -1284
  582. package/dist/clients/runtime-tool-result.js +0 -2034
  583. package/dist/clients/runtime-turn.js +0 -3600
  584. package/dist/clients/rust-client.js +0 -97
  585. package/dist/clients/safe-spawn.js +0 -2166
  586. package/dist/clients/sanitize.js +0 -286
  587. package/dist/clients/scan-utils.js +0 -25
  588. package/dist/clients/scratch-tree-policy.js +0 -165
  589. package/dist/clients/search-read-registration.js +0 -94
  590. package/dist/clients/secret-findings.js +0 -114
  591. package/dist/clients/security-scan-client.js +0 -352
  592. package/dist/clients/session-event-guard.js +0 -297
  593. package/dist/clients/session-lifecycle.js +0 -484
  594. package/dist/clients/session-start-observability.js +0 -94
  595. package/dist/clients/session-state-store.js +0 -101
  596. package/dist/clients/session-summary.js +0 -15
  597. package/dist/clients/sessionstart-logger.js +0 -27
  598. package/dist/clients/sg-runner.js +0 -876
  599. package/dist/clients/sgconfig.js +0 -347
  600. package/dist/clients/shared-checkout-guard.js +0 -338
  601. package/dist/clients/single-flight.js +0 -158
  602. package/dist/clients/situational-tool-telemetry.js +0 -108
  603. package/dist/clients/skills-resolver.js +0 -141
  604. package/dist/clients/slow-fs.js +0 -138
  605. package/dist/clients/smells-rollup.js +0 -231
  606. package/dist/clients/source-filter.js +0 -596
  607. package/dist/clients/source-walker.js +0 -211
  608. package/dist/clients/spawn-output-cap.js +0 -37
  609. package/dist/clients/spawn-timeout-cooldown.js +0 -110
  610. package/dist/clients/stale-marker.js +0 -17
  611. package/dist/clients/startup-scan.js +0 -400
  612. package/dist/clients/startup-timing.js +0 -130
  613. package/dist/clients/string-utils.js +0 -33
  614. package/dist/clients/subagent-mode.js +0 -111
  615. package/dist/clients/symbol-containment.js +0 -24
  616. package/dist/clients/symbol-types.js +0 -5
  617. package/dist/clients/test-runner-client.js +0 -2507
  618. package/dist/clients/test-runner-delivery.js +0 -287
  619. package/dist/clients/todo-scanner.js +0 -229
  620. package/dist/clients/tool-agreement.js +0 -423
  621. package/dist/clients/tool-config.js +0 -249
  622. package/dist/clients/tool-cwd.js +0 -270
  623. package/dist/clients/tool-definition.js +0 -47
  624. package/dist/clients/tool-event.js +0 -105
  625. package/dist/clients/tool-policy.js +0 -2755
  626. package/dist/clients/tool-probe.js +0 -53
  627. package/dist/clients/tool-render.js +0 -156
  628. package/dist/clients/tool-set-policy.js +0 -118
  629. package/dist/clients/tree-sitter-cache.js +0 -364
  630. package/dist/clients/tree-sitter-client.js +0 -4134
  631. package/dist/clients/tree-sitter-logger.js +0 -100
  632. package/dist/clients/tree-sitter-navigator.js +0 -269
  633. package/dist/clients/tree-sitter-query-loader.js +0 -569
  634. package/dist/clients/tree-sitter-shared.js +0 -158
  635. package/dist/clients/tree-sitter-symbol-extractor.js +0 -1265
  636. package/dist/clients/trivy-client.js +0 -467
  637. package/dist/clients/tui-fit.js +0 -50
  638. package/dist/clients/turn-context.js +0 -52
  639. package/dist/clients/turn-summary-render.js +0 -72
  640. package/dist/clients/turn-summary.js +0 -132
  641. package/dist/clients/typos-config.js +0 -29
  642. package/dist/clients/user-notify.js +0 -51
  643. package/dist/clients/vanished-instance-marker.js +0 -57
  644. package/dist/clients/warm-attach.js +0 -246
  645. package/dist/clients/widget-state.js +0 -1677
  646. package/dist/clients/word-index-logger.js +0 -49
  647. package/dist/clients/word-index-store.js +0 -459
  648. package/dist/clients/word-index.js +0 -2080
  649. package/dist/clients/workspace-topology.js +0 -389
  650. package/dist/clients/write-ordering-guard.js +0 -65
  651. package/dist/clients/zizmor-config.js +0 -327
  652. package/dist/i18n.js +0 -69
  653. package/dist/mcp/build-staleness.js +0 -124
  654. package/dist/scripts/lib/process-scan.mjs +0 -583
  655. package/dist/scripts/lib/skills-predicate.mjs +0 -129
  656. package/dist/tools/activate-tools.js +0 -87
  657. package/dist/tools/ast-grep-outline.js +0 -137
  658. package/dist/tools/ast-grep-replace.js +0 -244
  659. package/dist/tools/ast-grep-search.js +0 -762
  660. package/dist/tools/effective-config.js +0 -90
  661. package/dist/tools/lens-diagnostic-mark.js +0 -375
  662. package/dist/tools/lens-diagnostics.js +0 -2544
  663. package/dist/tools/lsp-diagnostics.js +0 -1634
  664. package/dist/tools/lsp-navigation.js +0 -1367
  665. package/dist/tools/lsp-structured-output.js +0 -294
  666. package/dist/tools/module-report.js +0 -382
  667. package/dist/tools/project-report.js +0 -86
  668. package/dist/tools/render-compact.js +0 -374
  669. package/dist/tools/scan-progress.js +0 -53
  670. package/dist/tools/shared.js +0 -29
  671. package/dist/tools/symbol-search.js +0 -155
@@ -1,26 +0,0 @@
1
- // Capture this before the guard's other module initialization so host boot is
2
- // not charged to extension evaluation (#1374). Lives in its own
3
- // side-effect-free module (#1434 S3d) — see eval-timestamp.ts's docstring for
4
- // why: `startup-timing.ts` needs this constant but must never trigger a
5
- // console-guard install merely by importing it.
6
- import { PI_LENS_EVAL_STARTED_MS } from "./eval-timestamp.js";
7
- // #1333: install the console guard as an import side-effect so it runs before
8
- // any other module's initialization code. Installing inside the extension
9
- // factory is too late — by the time the factory runs, every static/transitive
10
- // import has already evaluated, so a dependency writing to console during
11
- // module init would still hit the TUI raw (#1338 review finding). This module
12
- // MUST remain the first import of index.ts; the enforcement test pins that.
13
- // installConsoleGuard() itself is idempotent and no-ops under test mode and
14
- // PI_LENS_CONSOLE_GUARD=0.
15
- // #1434: the guard captures only while pi-lens owns execution, so the module
16
- // window must be open for the rest of the import graph. index.ts closes it on
17
- // its last line; an unref'd backstop closes it if that never runs.
18
- import { installConsoleGuard, openModuleLoadConsoleWindow, } from "./extension-log.js";
19
- installConsoleGuard();
20
- openModuleLoadConsoleWindow();
21
- // Not re-exported: nothing should import the timestamp from this module.
22
- // `clients/startup-timing.ts` imports it straight from `eval-timestamp.ts`,
23
- // which is what keeps that import side-effect-free (S3d). The `void` keeps
24
- // the import from looking unused to lint while documenting that this module
25
- // only needs the ordering (evaluate eval-timestamp.ts first), not the value.
26
- void PI_LENS_EVAL_STARTED_MS;
@@ -1,42 +0,0 @@
1
- /** Monotonic cooperative-work budgeting for event-loop-sensitive bulk work. */
2
- export function createDeadline(budgetMs) {
3
- const boundedBudget = Math.max(0, budgetMs);
4
- let startedAt = performance.now();
5
- return {
6
- expired: () => performance.now() - startedAt >= boundedBudget,
7
- reset: () => {
8
- startedAt = performance.now();
9
- },
10
- };
11
- }
12
- export async function yieldIfOverBudget(deadline) {
13
- if (!deadline.expired())
14
- return false;
15
- await new Promise((resolve) => setImmediate(resolve));
16
- deadline.reset();
17
- return true;
18
- }
19
- export async function forEachCooperatively(items, fn, options) {
20
- const deadline = createDeadline(options.budgetMs);
21
- const assertContinuing = () => {
22
- if (options.shouldContinue?.() === false) {
23
- throw new Error(options.abortMessage ?? "cooperative work superseded");
24
- }
25
- };
26
- let index = 0;
27
- for (const item of items) {
28
- // Check before each unit: this per-unit check is what bounds abort
29
- // latency (one work unit, not an iteration checkpoint). The post-yield
30
- // check below only matters after the final unit's yield, so superseded
31
- // work is reported aborted rather than completed.
32
- assertContinuing();
33
- const result = fn(item, index++);
34
- if (result !== undefined &&
35
- typeof result.then === "function") {
36
- await result;
37
- }
38
- if (deadline.expired() && (await yieldIfOverBudget(deadline))) {
39
- assertContinuing();
40
- }
41
- }
42
- }
@@ -1,510 +0,0 @@
1
- /**
2
- * Cross-file dead-code detection for non-JS/TS ecosystems (#127).
3
- *
4
- * Knip (clients/knip-client.ts) gives JS/TS projects project-wide unused
5
- * exports/files/deps at session_start. Per-file dispatch linters can't do that
6
- * for other languages — "this exported function is unused anywhere" needs a
7
- * whole-project scan. This module is the per-language harness that closes the
8
- * gap, paralleling KnipClient's lifecycle (detect → ensureAvailable → analyze,
9
- * cached at session_start, surfaced as a turn_end advisory).
10
- *
11
- * Phase 1 ships Python via `vulture`. Future phases add Go/Rust/etc. by
12
- * implementing DeadCodeClient and adding to getDeadCodeClients().
13
- */
14
- import { createSubsystemLogger } from "./extension-log.js";
15
- import { incrementDegradationCount } from "./degradation-ledger.js";
16
- import * as fs from "node:fs";
17
- import * as path from "node:path";
18
- import { findLocalBinsAt, VENV_BIN_DIRS } from "./package-manager.js";
19
- import { findNearestMarkerRoot } from "./path-utils.js";
20
- import { getScratchTreeFnmatchPatterns } from "./scratch-tree-policy.js";
21
- import { safeSpawnAsync } from "./safe-spawn.js";
22
- import { probeToolAsync } from "./tool-probe.js";
23
- import { classifyProbeFailure, createAvailabilityLatch, logAvailabilityDecision, startHostStallSampler, } from "./dispatch/runners/utils/availability-policy.js";
24
- import { firstOutputLine, spawnFailedWithNoOutput, } from "./dispatch/runners/utils/spawn-outcome.js";
25
- import { formatToolFailure } from "./dispatch/runners/utils/tool-failure.js";
26
- function emptyResult(language) {
27
- return {
28
- success: false,
29
- language,
30
- unusedExports: [],
31
- unusedFiles: [],
32
- unusedDeps: [],
33
- unlistedDeps: [],
34
- };
35
- }
36
- const ANALYSIS_TIMEOUT_MS = 30_000;
37
- // Directories never worth scanning for the user's own dead code.
38
- //
39
- // Single-sourced from `scratch-tree-policy.ts`'s `EXCLUDED_DIRS`-derived list
40
- // (#1562 sweep finding: this array had hand-drifted from `EXCLUDED_DIRS` —
41
- // missing `.pi`/`.claude`/`.next`/`.turbo`/etc, the same single-source-of-
42
- // truth defect #883 named for per-language lists). `site-packages`/`.eggs`
43
- // are Python-packaging-specific and have no `EXCLUDED_DIRS` counterpart (no
44
- // other scanner needs them), so they stay as a small local addition rather
45
- // than polluting the shared cross-tool list.
46
- const VULTURE_PYTHON_ONLY_EXCLUDES = ["*/site-packages/*", "*/.eggs/*"];
47
- const VULTURE_EXCLUDES = [
48
- ...getScratchTreeFnmatchPatterns(),
49
- ...VULTURE_PYTHON_ONLY_EXCLUDES,
50
- ];
51
- // Decorators whose target is called by a framework, never by name in the tree.
52
- // vulture cannot see those call sites, so every such symbol is a permanent
53
- // false positive that reappears in every scan — the fastest way to teach a
54
- // reader to stop reading the advisory. Glob-matched by vulture itself.
55
- const VULTURE_IGNORE_DECORATORS = [
56
- "@pytest.fixture",
57
- "@pytest.fixture(*",
58
- "@fixture",
59
- "@fixture(*",
60
- "@app.*",
61
- "@router.*",
62
- "@celery.task*",
63
- "@task",
64
- "@shared_task*",
65
- ];
66
- // vulture line: `path/to/file.py:12: unused function 'foo' (60% confidence)`
67
- const VULTURE_LINE = /^(.*?):(\d+): unused (\w[\w ]*?) '([^']+)' \((\d+)% confidence\)\s*$/;
68
- /**
69
- * Parse vulture's text output into normalized issues. Pure (no spawn/fs) so the
70
- * parser is unit-testable against captured output. Unrecognized lines (banner,
71
- * `unreachable code` without a quoted name) are ignored. `root` makes file
72
- * paths project-relative when possible.
73
- */
74
- export function parseVultureOutput(output, root) {
75
- const issues = [];
76
- for (const raw of output.split(/\r?\n/)) {
77
- const m = raw.match(VULTURE_LINE);
78
- if (!m)
79
- continue;
80
- const [, file, line, kind, name, confidence] = m;
81
- // All map to the "export" bucket (a defined symbol used nowhere); the
82
- // `kind` preserves function/class/import/etc. for display.
83
- let rel = file;
84
- try {
85
- rel = path.relative(root, file) || file;
86
- }
87
- catch {
88
- rel = file;
89
- }
90
- issues.push({
91
- category: "export",
92
- kind: kind.trim(),
93
- name,
94
- file: rel,
95
- line: Number.parseInt(line, 10),
96
- confidence: Number.parseInt(confidence, 10),
97
- });
98
- }
99
- return issues;
100
- }
101
- /**
102
- * Python dead-code via vulture (https://github.com/jendrikseipp/vulture).
103
- *
104
- * vulture finds unused functions, classes, methods, imports, variables and
105
- * attributes by static analysis of the whole tree. It has no JSON reporter, so
106
- * we parse its stable one-line-per-finding text output. A clean run exits 0;
107
- * found dead code exits 3 with findings on stdout. A non-zero exit with
108
- * parseable output is success, not failure (see runAnalyze for the table).
109
- */
110
- export class PythonDeadCodeClient {
111
- id = "python";
112
- language = "Python";
113
- /**
114
- * Transient-aware memo (#1467): only a durable "vulture is not installed"
115
- * verdict is remembered for the session. A probe that timed out expires and
116
- * is re-probed, so vulture cannot be disabled for the process by one stall.
117
- */
118
- availabilityLatch = createAvailabilityLatch();
119
- resolved = null;
120
- ensureInFlight = null;
121
- inFlight = new Map();
122
- log;
123
- constructor(verbose = false) {
124
- this.log = verbose ? createSubsystemLogger("dead-code:python") : () => { };
125
- }
126
- get minConfidence() {
127
- const raw = Number.parseInt(process.env.PI_LENS_VULTURE_MIN_CONFIDENCE ?? "60", 10);
128
- return Number.isFinite(raw) ? Math.min(100, Math.max(0, raw)) : 60;
129
- }
130
- detect(cwd) {
131
- return this.resolveProjectRoot(cwd) !== null;
132
- }
133
- owns(filePath) {
134
- const ext = path.extname(filePath).toLowerCase();
135
- return ext === ".py" || ext === ".pyi";
136
- }
137
- /**
138
- * Nearest dir with a Python project marker, never at/above $HOME and never
139
- * escaping a VCS boundary — same containment rules as KnipClient so a scan
140
- * launched from a bare cwd can't recurse the whole home tree (#250/#296).
141
- * Delegates to the shared path-utils helper (refs #625) rather than
142
- * hand-rolling the climb; only the marker list differs from KnipClient's.
143
- */
144
- resolveProjectRoot(startDir, homeDirOverride) {
145
- return findNearestMarkerRoot(startDir, [
146
- "pyproject.toml",
147
- "setup.py",
148
- "setup.cfg",
149
- "requirements.txt",
150
- "Pipfile",
151
- "tox.ini",
152
- ], { boundaries: [".git", ".hg", ".svn"], homeDir: homeDirOverride });
153
- }
154
- async ensureAvailable(root) {
155
- const memo = this.availabilityLatch.read();
156
- if (memo !== null)
157
- return memo;
158
- if (this.ensureInFlight)
159
- return this.ensureInFlight;
160
- this.ensureInFlight = this.doEnsureAvailable(root);
161
- try {
162
- return await this.ensureInFlight;
163
- }
164
- finally {
165
- this.ensureInFlight = null;
166
- }
167
- }
168
- /**
169
- * `<root>/.venv/bin/vulture` (and `venv`/Windows `Scripts` equivalents),
170
- * checked by existence only — no spawn. A project's own venv is the vulture
171
- * that project's own config and dependency set were written against; the
172
- * bare `vulture`/`python -m vulture` PATH probes below only ever see
173
- * whatever happens to be active in the CALLING shell, not the project's
174
- * (#1731, discipline B — the same venv-first shape sqlfluff's binary
175
- * resolution already uses, `runner-helpers.ts` `createVenvFinder`).
176
- *
177
- * The directory list is the shared `VENV_BIN_DIRS` — this was a third
178
- * private spelling of the same four venv directories, with a
179
- * `process.platform` branch that meant the ubuntu lane never saw the
180
- * `Scripts` half at all (defect shape 30).
181
- *
182
- * The search is a fixed lookup at `root` ONLY (`findLocalBinsAt`, no
183
- * ancestor walk) — #2544 review round 3 folded this onto the shared
184
- * ancestor walker, reasoning a monorepo package should find its
185
- * repo-root venv, but that was an unrequested behaviour change with no
186
- * #2514 defect behind it. Reverted in round 4 F2. `findLocalBinsAt`
187
- * returns EVERY match at `root` rather than the first, because
188
- * `doEnsureAvailable` probes candidates in order and must keep the
189
- * `venv/` fallback when a `.venv/` vulture exists but cannot run.
190
- */
191
- venvCandidates(root) {
192
- return findLocalBinsAt(["vulture"], root, {
193
- windowsExt: ".exe",
194
- binDirs: VENV_BIN_DIRS,
195
- }).map((full) => ({ cmd: full, prefix: [] }));
196
- }
197
- async doEnsureAvailable(root) {
198
- // Presence-gated, NOT auto-installed. vulture is a pure-Python package
199
- // with no standalone binary, so "auto-install" would mean `pip install`
200
- // into whatever Python environment happens to be active — wrong and
201
- // intrusive for uv / poetry / conda / pipx users. So we only use vulture
202
- // when the user already has it, probing the project's own venv first
203
- // (#1731), then the `vulture` console script and `python -m vulture` on
204
- // PATH (the script dir is frequently not on PATH even when the package
205
- // is installed). Mirrors govulncheck's no-install gating.
206
- const candidates = [
207
- ...(root ? this.venvCandidates(root) : []),
208
- { cmd: "vulture", prefix: [] },
209
- { cmd: "python", prefix: ["-m", "vulture"] },
210
- { cmd: "python3", prefix: ["-m", "vulture"] },
211
- ];
212
- // A timeout on ANY candidate means the machine, not the tool, answered —
213
- // the run gets a bounded retry instead of a permanent skip (#1467).
214
- let sawTransient = false;
215
- let transientCause = "probe-timeout";
216
- // Accumulated across ALL candidates, because the failure verdicts below
217
- // are about the whole sweep rather than any one probe. Reporting zero
218
- // here would erase the evidence that cracked #1467: four 5s probes and
219
- // a stalled host look identical to an absent tool without these two
220
- // numbers.
221
- const sweepStartedAt = Date.now();
222
- let sweepHostStallMs = 0;
223
- /** What the last classified candidate returned (#1500 review): this was
224
- * computed and thrown away, so every vulture row said "missing" with no
225
- * trace of which candidate reported what. */
226
- let sweepEvidence;
227
- for (const c of candidates) {
228
- const sampler = startHostStallSampler();
229
- const startedAt = Date.now();
230
- let probe;
231
- let hostStallMs;
232
- try {
233
- probe = await probeToolAsync(c.cmd, [...c.prefix, "--version"], {
234
- timeout: 5000,
235
- });
236
- }
237
- finally {
238
- hostStallMs = sampler.stop();
239
- sweepHostStallMs += hostStallMs;
240
- }
241
- if (!probe.error && probe.status === 0) {
242
- this.resolved = c;
243
- this.availabilityLatch.noteAvailable();
244
- this.log(`vulture found: ${[c.cmd, ...c.prefix].join(" ")}`);
245
- logAvailabilityDecision({
246
- tool: "vulture",
247
- verdict: "available",
248
- outcome: "success",
249
- cause: "ok",
250
- elapsedMs: Date.now() - startedAt,
251
- latched: true,
252
- hostStallMs,
253
- budgetMs: 5000,
254
- classifiedBy: "probe",
255
- });
256
- return true;
257
- }
258
- const classified = classifyProbeFailure(probe, {
259
- hostStallMs,
260
- command: c.cmd,
261
- });
262
- sweepEvidence = classified.evidence;
263
- if (classified.outcome === "transient") {
264
- sawTransient = true;
265
- transientCause = classified.cause;
266
- }
267
- }
268
- if (sawTransient) {
269
- const retryAfterMs = this.availabilityLatch.noteUnavailable("transient", transientCause);
270
- this.log("vulture probe timed out; will retry (not treated as missing)");
271
- logAvailabilityDecision({
272
- tool: "vulture",
273
- verdict: "unavailable",
274
- outcome: "transient",
275
- cause: transientCause,
276
- elapsedMs: Date.now() - sweepStartedAt,
277
- hostStallMs: sweepHostStallMs,
278
- latched: false,
279
- retryAfterMs,
280
- budgetMs: 5000,
281
- classifiedBy: "probe",
282
- ...(sweepEvidence !== undefined && { evidence: sweepEvidence }),
283
- });
284
- return false;
285
- }
286
- this.availabilityLatch.noteUnavailable("missing", "not-found");
287
- this.log("vulture not installed; skipping (no auto-install)");
288
- logAvailabilityDecision({
289
- tool: "vulture",
290
- verdict: "unavailable",
291
- outcome: "missing",
292
- cause: "not-found",
293
- elapsedMs: Date.now() - sweepStartedAt,
294
- hostStallMs: sweepHostStallMs,
295
- latched: true,
296
- budgetMs: 5000,
297
- // Every candidate probe was classified, and none was transient (#1500).
298
- classifiedBy: "probe",
299
- ...(sweepEvidence !== undefined && { evidence: sweepEvidence }),
300
- });
301
- return false;
302
- }
303
- async analyze(cwd) {
304
- const root = this.resolveProjectRoot(cwd || process.cwd());
305
- if (!root) {
306
- return {
307
- ...emptyResult(this.language),
308
- success: true,
309
- summary: "No Python project root found; vulture skipped",
310
- };
311
- }
312
- if (!(await this.ensureAvailable(root))) {
313
- return {
314
- ...emptyResult(this.language),
315
- success: true,
316
- summary: "vulture not installed; skipped. Install vulture (pip/uv/pipx) to enable Python dead-code detection.",
317
- };
318
- }
319
- const key = path.resolve(root);
320
- const existing = this.inFlight.get(key);
321
- if (existing)
322
- return existing;
323
- const promise = this.runAnalyze(key);
324
- const wrapped = promise.finally(() => {
325
- // Identity-guarded release (#1968, #1967's pattern): delete only if
326
- // THIS build is still the registered one. A bare delete-by-key lets
327
- // a late-settling build A evict a live build B that replaced the
328
- // entry mid-flight, and the next caller starts a duplicate.
329
- if (this.inFlight.get(key) === wrapped)
330
- this.inFlight.delete(key);
331
- });
332
- this.inFlight.set(key, wrapped);
333
- return wrapped;
334
- }
335
- /**
336
- * True when `<root>/pyproject.toml` carries a `[tool.vulture]` table.
337
- * vulture's own config discovery reads that table, but CLI flags override
338
- * it — passing `--min-confidence`/`--exclude` unconditionally silently
339
- * overrode a project's own thresholds and ignore list (#1731, discipline A).
340
- * Same shape as `hasSqlfluffConfig`/`hasMypyConfig` in `tool-policy.ts`: a
341
- * plain string search, no TOML parser, matching the section header only.
342
- */
343
- hasProjectVultureConfig(root) {
344
- try {
345
- const content = fs.readFileSync(path.join(root, "pyproject.toml"), "utf-8");
346
- return content.includes("[tool.vulture]");
347
- }
348
- catch {
349
- return false;
350
- }
351
- }
352
- async runAnalyze(root) {
353
- const startMs = Date.now();
354
- const invocation = this.resolved ?? { cmd: "vulture", prefix: [] };
355
- // Let the project's own [tool.vulture] config win (#1731, discipline A):
356
- // vulture discovers it unaided, but these two flags override it when
357
- // passed, so they are omitted whenever the project ships that table.
358
- const hasConfig = this.hasProjectVultureConfig(root);
359
- const args = [
360
- ...invocation.prefix,
361
- ".",
362
- ...(hasConfig ? [] : [`--min-confidence=${this.minConfidence}`]),
363
- ...(hasConfig ? [] : [`--exclude=${VULTURE_EXCLUDES.join(",")}`]),
364
- `--ignore-decorators=${VULTURE_IGNORE_DECORATORS.join(",")}`,
365
- ];
366
- const result = await safeSpawnAsync(invocation.cmd, args, {
367
- timeout: ANALYSIS_TIMEOUT_MS,
368
- cwd: root,
369
- });
370
- const durationMs = Date.now() - startMs;
371
- // Spawn-level failure (ENOENT, timeout) — not a "found issues" exit.
372
- if (result.error) {
373
- this.log(`scan error: ${result.error.message}`);
374
- return {
375
- ...emptyResult(this.language),
376
- summary: `Error: ${result.error.message}`,
377
- durationMs,
378
- };
379
- }
380
- // Verified exit-code table (vulture 2.16, probed live during the #1758
381
- // review): a clean run exits 0 with empty stdout; dead code found exits
382
- // 3 with findings on stdout; invalid input or a parse error exits 1
383
- // with empty stdout and the error on stderr. #1736 sweep: the ORIGINAL
384
- // guard here required non-empty stderr to call it an error, so a
385
- // nonzero exit with BOTH empty stdout and empty stderr (a silent crash)
386
- // still fell through to "No dead code found" -- the same
387
- // empty-distinguishes-clean-from-errored gap the knip fix closes. A
388
- // nonzero exit with no findings on stdout is never clean now,
389
- // regardless of whether stderr said anything.
390
- const output = result.stdout || "";
391
- if (!output.trim()) {
392
- const stderr = (result.stderr || "").trim();
393
- // Same discriminator every dispatch/runners linter uses
394
- // (`spawnFailedWithNoOutput`) rather than a parallel hand-rolled
395
- // check (result.error is already handled above, so this reduces to
396
- // the `status !== 0` half).
397
- if (spawnFailedWithNoOutput(result, output)) {
398
- // #1816: one shared wording, one truncation, signal named.
399
- const reason = formatToolFailure({
400
- tool: "vulture",
401
- status: result.status,
402
- signal: result.signal,
403
- stderr: result.stderr,
404
- });
405
- this.log(reason);
406
- incrementDegradationCount({
407
- kind: "runner-empty-result",
408
- subject: "vulture",
409
- reason,
410
- });
411
- return {
412
- ...emptyResult(this.language),
413
- summary: stderr
414
- ? `vulture error: ${firstOutputLine(stderr)}`
415
- : reason,
416
- durationMs,
417
- };
418
- }
419
- // vulture's verified exit-code table (above): exit 0 with empty
420
- // stdout IS the clean-run signal, so this ran over the root
421
- // (#2154) — unlike knip, whose clean run always prints JSON.
422
- return {
423
- ...emptyResult(this.language),
424
- success: true,
425
- analyzed: true,
426
- summary: "No dead code found",
427
- durationMs,
428
- };
429
- }
430
- return { ...this.parseOutput(output, root), durationMs };
431
- }
432
- parseOutput(output, root) {
433
- const unusedExports = parseVultureOutput(output, root);
434
- const total = unusedExports.length;
435
- return {
436
- ...emptyResult(this.language),
437
- success: true,
438
- // #2154: parsed vulture output for this root.
439
- analyzed: true,
440
- unusedExports,
441
- summary: total === 0
442
- ? "No dead code found"
443
- : `Found ${total} unused Python symbol(s)`,
444
- };
445
- }
446
- }
447
- /**
448
- * The dead-code clients to run at session_start. Each is offered every project;
449
- * the orchestrator calls detect() to decide which actually apply (polyglot
450
- * repos may run several). Phase 1: Python only.
451
- */
452
- export function getDeadCodeClients(verbose = false) {
453
- return [new PythonDeadCodeClient(verbose)];
454
- }
455
- /** Total issue count across all buckets — convenience for advisories/telemetry. */
456
- export function deadCodeIssueCount(result) {
457
- return (result.unusedExports.length +
458
- result.unusedFiles.length +
459
- result.unusedDeps.length +
460
- result.unlistedDeps.length);
461
- }
462
- /** Every bucket flattened — delta diffing and diagnostic mapping want one list. */
463
- export function deadCodeIssues(result) {
464
- return [
465
- ...result.unusedExports,
466
- ...result.unusedFiles,
467
- ...result.unusedDeps,
468
- ...result.unlistedDeps,
469
- ];
470
- }
471
- /**
472
- * Joins finding-identity parts into a stable key for diffing one scan
473
- * against the previous one. The string-only signature is load-bearing: a
474
- * line/column number cannot be passed without a compile error. An edit
475
- * shifts every line below it, and a scan delta is then filtered to exactly
476
- * the files the edit touched — so a line in the key turns each shifted
477
- * pre-existing finding into a "newly unused" report under a heading that
478
- * blames the agent's own edit for orphaning it. Inserting four lines above
479
- * one real finding produced four false ones (#1477, #1483). Shared by
480
- * knip's per-turn delta in runtime-turn.ts so the rule lives in one place.
481
- */
482
- export function stableFindingKey(...parts) {
483
- return parts.map((part) => part ?? "").join(":");
484
- }
485
- /** Stable identity for diffing one scan against the previous one. */
486
- export function deadCodeIssueKey(issue) {
487
- return stableFindingKey(issue.category, issue.file, issue.name);
488
- }
489
- /**
490
- * Format this turn's ATTRIBUTABLE delta — symbols that became unused in files
491
- * the agent just edited — or "" when there is nothing to report. Mirrors the
492
- * Knip advisory's contract deliberately: the project-wide list is not injected
493
- * per turn (hundreds of pre-existing findings would drown the blockers and burn
494
- * context every turn), it stays available on demand via lens_diagnostics.
495
- */
496
- export function formatDeadCodeDelta(issues, language, max = 5) {
497
- if (issues.length === 0)
498
- return "";
499
- let report = `💀 Newly unused ${language} symbols in files you edited — check if callers need updating (dead-code):\n`;
500
- for (const issue of issues.slice(0, max)) {
501
- const loc = issue.file
502
- ? `${issue.file}${issue.line ? `:${issue.line}` : ""}`
503
- : "(unknown)";
504
- report += ` ${loc} — unused ${issue.kind} ${issue.name}\n`;
505
- }
506
- if (issues.length > max) {
507
- report += ` … and ${issues.length - max} more\n`;
508
- }
509
- return report;
510
- }
@@ -1,30 +0,0 @@
1
- /**
2
- * NDJSON telemetry for cross-file dead-code scans (#127). One event per
3
- * session_start scan per language, so we can answer: which languages get
4
- * scanned, how many findings, and how long the whole-project scan takes (the
5
- * input to phasing decisions in the issue). Mirrors `ast-grep-tool-logger.ts`
6
- * for shape + size-based rotation.
7
- */
8
- import * as path from "node:path";
9
- import { isTestMode } from "./env-utils.js";
10
- import { getGlobalPiLensLogDir } from "./probe-home-state.js";
11
- import { createNdjsonLogger } from "./ndjson-logger.js";
12
- const LOG_DIR = getGlobalPiLensLogDir();
13
- const LOG_FILE = path.join(LOG_DIR, "dead-code.log");
14
- const LOG_BACKUP_FILE = path.join(LOG_DIR, "dead-code.log.1");
15
- const MAX_LOG_BYTES = Math.max(128 * 1024, Number.parseInt(process.env.PI_LENS_DEAD_CODE_LOG_MAX_BYTES ?? "1048576", 10) || 1048576);
16
- const writer = createNdjsonLogger({
17
- filePath: LOG_FILE,
18
- maxBytes: MAX_LOG_BYTES,
19
- backupPath: LOG_BACKUP_FILE,
20
- });
21
- /**
22
- * Append one scan event. Fire-and-forget: telemetry must never break a scan, so
23
- * every fs error is swallowed. Skipped under test mode to keep the suite from
24
- * writing to the user's real ~/.pi-lens.
25
- */
26
- export function logDeadCodeScan(event) {
27
- if (isTestMode())
28
- return;
29
- writer.log({ ts: new Date().toISOString(), ...event });
30
- }