pi-lens 4.3.0 → 4.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (650) hide show
  1. package/CHANGELOG.md +1064 -0
  2. package/README.md +115 -25
  3. package/config/dependency-cruiser-eager-allowlist.json +6 -2
  4. package/dist/chunk-22AVIGXS.js +560 -0
  5. package/dist/chunk-27BBHSZC.js +106 -0
  6. package/dist/chunk-2BEMIWEW.js +51 -0
  7. package/dist/chunk-2EECBNC5.js +89 -0
  8. package/dist/chunk-34U7PLGE.js +23 -0
  9. package/dist/chunk-3I5QFT3N.js +181 -0
  10. package/dist/chunk-3MED75HT.js +37 -0
  11. package/dist/chunk-47D2BO4S.js +87 -0
  12. package/dist/chunk-4RERDEXR.js +348 -0
  13. package/dist/chunk-4W2PLC4J.js +27 -0
  14. package/dist/chunk-52H5B5TC.js +202 -0
  15. package/dist/chunk-54B42YRX.js +27 -0
  16. package/dist/chunk-5RXBNSW2.js +266 -0
  17. package/dist/chunk-5THXD6X5.js +201 -0
  18. package/dist/chunk-5W3R6LFT.js +24 -0
  19. package/dist/chunk-5ZEJHV35.js +341 -0
  20. package/dist/chunk-6P62QVEA.js +118 -0
  21. package/dist/chunk-6QIUX4EP.js +459 -0
  22. package/dist/chunk-6VCD4VKZ.js +78 -0
  23. package/dist/chunk-7F72PXY2.js +326 -0
  24. package/dist/chunk-7FBF7NPR.js +998 -0
  25. package/dist/chunk-7U2IDNXN.js +37 -0
  26. package/dist/chunk-ABBOA7UD.js +157 -0
  27. package/dist/chunk-AHDW3GPE.js +50 -0
  28. package/dist/chunk-AJ3QXTRQ.js +756 -0
  29. package/dist/chunk-AJVLWNFN.js +1610 -0
  30. package/dist/chunk-AJXODZY6.js +112 -0
  31. package/dist/chunk-ARFCXG7S.js +84 -0
  32. package/dist/chunk-AS44CFQ4.js +708 -0
  33. package/dist/chunk-AWE5TMPO.js +38 -0
  34. package/dist/chunk-B3I2UUT4.js +4692 -0
  35. package/dist/chunk-BRJKOBZP.js +331 -0
  36. package/dist/chunk-BW5KFIQC.js +59 -0
  37. package/dist/chunk-C2AUYXQH.js +149 -0
  38. package/dist/chunk-CGGAIP7J.js +29 -0
  39. package/dist/chunk-D6QS3U6M.js +30 -0
  40. package/dist/chunk-DFVMIKMQ.js +349 -0
  41. package/dist/chunk-DIULIWKU.js +169 -0
  42. package/dist/chunk-DQ2NZ7C4.js +2317 -0
  43. package/dist/chunk-E2WFBRHM.js +213 -0
  44. package/dist/chunk-E4MAEDPM.js +50 -0
  45. package/dist/chunk-EOKRQ3SA.js +30 -0
  46. package/dist/chunk-F3AU2TMM.js +2626 -0
  47. package/dist/chunk-F3P7VQ7H.js +170 -0
  48. package/dist/chunk-FC4RP4I2.js +12 -0
  49. package/dist/chunk-FJNKANOS.js +32 -0
  50. package/dist/chunk-GUOGVTCQ.js +146 -0
  51. package/dist/chunk-GVXA6CCE.js +18 -0
  52. package/dist/chunk-HHYAELLJ.js +2334 -0
  53. package/dist/chunk-HMFXILPV.js +83 -0
  54. package/dist/chunk-HVUZXSWK.js +421 -0
  55. package/dist/chunk-HWBZIGMJ.js +62 -0
  56. package/dist/chunk-I3R7GKDR.js +17 -0
  57. package/dist/chunk-I7SPGOWI.js +55 -0
  58. package/dist/chunk-IIXOAGHR.js +38 -0
  59. package/dist/chunk-IVP5KAB7.js +2250 -0
  60. package/dist/chunk-IXEBJSUE.js +22 -0
  61. package/dist/chunk-JOLITGCC.js +27 -0
  62. package/dist/chunk-K6VYLB2U.js +145 -0
  63. package/dist/chunk-LJDODBBZ.js +78 -0
  64. package/dist/chunk-LNAKEO63.js +78 -0
  65. package/dist/chunk-LSMJ6KBE.js +4139 -0
  66. package/dist/chunk-LW6XKDZQ.js +5565 -0
  67. package/dist/chunk-N3YQJI6O.js +899 -0
  68. package/dist/chunk-NABLC7W3.js +148 -0
  69. package/dist/chunk-NKOUFPQF.js +659 -0
  70. package/dist/chunk-NL5GLMFI.js +211 -0
  71. package/dist/chunk-NMABWBZN.js +327 -0
  72. package/dist/chunk-NTHH2J74.js +27 -0
  73. package/dist/chunk-NTUJEGDZ.js +59 -0
  74. package/dist/chunk-NXL4FFQQ.js +47 -0
  75. package/dist/chunk-NXPS2L6U.js +466 -0
  76. package/dist/chunk-O5WILGMI.js +42 -0
  77. package/dist/chunk-O6TQT6RI.js +48 -0
  78. package/dist/chunk-OAXNDZJ7.js +323 -0
  79. package/dist/chunk-ODEEOXPH.js +44 -0
  80. package/dist/chunk-OQGFCZJ4.js +4533 -0
  81. package/dist/chunk-ORTMY4Q4.js +282 -0
  82. package/dist/chunk-OS32RNR2.js +442 -0
  83. package/dist/chunk-PAK6IDME.js +189 -0
  84. package/dist/chunk-PWFHBTSF.js +406 -0
  85. package/dist/chunk-Q5U6FMDI.js +2352 -0
  86. package/dist/chunk-QOZXJ4NA.js +3364 -0
  87. package/dist/chunk-QYF5S6P6.js +45 -0
  88. package/dist/chunk-RIISMHKN.js +36 -0
  89. package/dist/chunk-RPD4ZSB7.js +25 -0
  90. package/dist/chunk-RPD5K5NC.js +79 -0
  91. package/dist/chunk-RUOG5D2C.js +262 -0
  92. package/dist/chunk-T4ERT73Y.js +599 -0
  93. package/dist/chunk-T6D4Q4AQ.js +54 -0
  94. package/dist/chunk-TGPXLY2J.js +391 -0
  95. package/dist/chunk-TLGFBM3F.js +12116 -0
  96. package/dist/chunk-TO6WL3GM.js +88 -0
  97. package/dist/chunk-TT22N74J.js +517 -0
  98. package/dist/chunk-TVN5N6GY.js +21216 -0
  99. package/dist/chunk-U3VGR4VU.js +308 -0
  100. package/dist/chunk-UK3CMEAL.js +1250 -0
  101. package/dist/chunk-UOPVJQ4N.js +103 -0
  102. package/dist/chunk-UXVNL3D7.js +23 -0
  103. package/dist/chunk-UY752QSN.js +45 -0
  104. package/dist/chunk-V5PXFSZK.js +188 -0
  105. package/dist/chunk-V7R425XG.js +398 -0
  106. package/dist/chunk-VCSRSYLF.js +81 -0
  107. package/dist/chunk-VD4JQCQC.js +162 -0
  108. package/dist/chunk-VDBPVIKD.js +62 -0
  109. package/dist/chunk-VHQLPIRJ.js +114 -0
  110. package/dist/chunk-VN2AXLEX.js +5414 -0
  111. package/dist/chunk-VNMT7C64.js +478 -0
  112. package/dist/chunk-WONERJTP.js +309 -0
  113. package/dist/chunk-XECLWQZN.js +85 -0
  114. package/dist/chunk-XIMYZ3JA.js +27 -0
  115. package/dist/chunk-XK4CIILI.js +144 -0
  116. package/dist/chunk-Y4T27COV.js +562 -0
  117. package/dist/chunk-YGVYKNSN.js +1860 -0
  118. package/dist/chunk-YLF3PPT5.js +308 -0
  119. package/dist/chunk-YSNFMJKN.js +14 -0
  120. package/dist/chunk-Z3CCVDUB.js +76 -0
  121. package/dist/chunk-Z54ZSOBZ.js +61 -0
  122. package/dist/chunk-ZAWW3AF6.js +97 -0
  123. package/dist/chunk-ZMOL6RQC.js +167 -0
  124. package/dist/index.js +16456 -8335
  125. package/dist/mcp/analyze-cli.js +186 -232
  126. package/dist/mcp/cli.js +137 -98
  127. package/dist/mcp/server.js +22589 -1573
  128. package/dist/mcp/worker.js +97 -38
  129. package/dist/probes/installer.js +135 -0
  130. package/dist/workers/project-snapshot-persist-worker.js +22 -0
  131. package/dist/workers/review-graph-persist-worker.js +15 -0
  132. package/docs/agent-guide.md +13 -4
  133. package/docs/agent-tools.md +42 -0
  134. package/docs/ast-grep_rules_catalog.md +3 -2
  135. package/docs/configuration.md +20 -1
  136. package/docs/environment-variables.md +52 -2
  137. package/docs/features.md +8 -4
  138. package/docs/globalconfig.md +1 -0
  139. package/docs/io-bridge-v2-migration.md +94 -0
  140. package/docs/lsp-capability-matrix.md +36 -4
  141. package/docs/lsp-idle-eviction.md +124 -0
  142. package/docs/mcp.md +21 -5
  143. package/docs/merge-queue-rollout.md +77 -0
  144. package/docs/pi-lens-fixer.md +156 -88
  145. package/docs/pi-lens-investigator.md +74 -26
  146. package/docs/pi-lens-merge-policy.md +694 -0
  147. package/docs/pi-lens-monitor.md +73 -7
  148. package/docs/pi-lens-retro.md +6 -4
  149. package/docs/pi-lens-reviewer.md +188 -48
  150. package/docs/pi-lens-subagent.md +246 -45
  151. package/docs/pi-lens-warden.md +18 -7
  152. package/docs/public-api-stability.md +55 -0
  153. package/docs/release-qa-baseline.md +84 -17
  154. package/docs/rfcs/3654-unified-io-bridge-v2.md +316 -0
  155. package/docs/servercapabilities.md +53 -49
  156. package/docs/settings.md +1 -0
  157. package/docs/usage.md +5 -1
  158. package/grammars/tree-sitter-bash.wasm +0 -0
  159. package/grammars/tree-sitter-bash.wasm.json +3 -3
  160. package/package.json +19 -7
  161. package/rules/ast-grep-rules/rule-tests/advisory-registry-subset-test.yml +41 -0
  162. package/rules/ast-grep-rules/rules/advisory-registry-subset.yml +50 -0
  163. package/scripts/analyze-pi-lens-logs.mjs +1275 -62
  164. package/scripts/download-grammars.js +5 -0
  165. package/scripts/grammars.lock.json +6 -1
  166. package/scripts/install-selftest.mjs +33 -34
  167. package/scripts/lib/host-provided-deps.mjs +13 -4
  168. package/scripts/lib/web-tree-sitter-dir.mjs +18 -0
  169. package/dist/clients/actionable-warnings-logger.js +0 -35
  170. package/dist/clients/actionable-warnings.js +0 -1610
  171. package/dist/clients/advisory-provenance.js +0 -593
  172. package/dist/clients/agent-behavior-client.js +0 -147
  173. package/dist/clients/agent-nudge.js +0 -325
  174. package/dist/clients/analysed-root.js +0 -1
  175. package/dist/clients/ast-grep-client.js +0 -731
  176. package/dist/clients/ast-grep-rule-manager.js +0 -146
  177. package/dist/clients/ast-grep-tool-logger.js +0 -118
  178. package/dist/clients/ast-grep-types.js +0 -10
  179. package/dist/clients/ast-grep-yaml-synth.js +0 -154
  180. package/dist/clients/atomic-write-staging.js +0 -75
  181. package/dist/clients/atomic-write.js +0 -189
  182. package/dist/clients/availability-probe-flight.js +0 -12
  183. package/dist/clients/bash-file-access.js +0 -1056
  184. package/dist/clients/biome-client.js +0 -357
  185. package/dist/clients/blocker-freshness.js +0 -837
  186. package/dist/clients/blocker-past-eof.js +0 -129
  187. package/dist/clients/bootstrap.js +0 -569
  188. package/dist/clients/bounded-cache.js +0 -190
  189. package/dist/clients/bounded-pid-file-lock.js +0 -202
  190. package/dist/clients/bounded-telemetry.js +0 -295
  191. package/dist/clients/build-identity.js +0 -95
  192. package/dist/clients/bundled-resource-health.js +0 -113
  193. package/dist/clients/bus-events-logger.js +0 -105
  194. package/dist/clients/bus-publish.js +0 -171
  195. package/dist/clients/cache/rule-cache.js +0 -190
  196. package/dist/clients/cache-manager.js +0 -524
  197. package/dist/clients/cache-observability.js +0 -1313
  198. package/dist/clients/call-graph.js +0 -852
  199. package/dist/clients/cargo-manifest.js +0 -422
  200. package/dist/clients/cascade-budget.js +0 -196
  201. package/dist/clients/cascade-format.js +0 -315
  202. package/dist/clients/cascade-logger.js +0 -31
  203. package/dist/clients/cascade-types.js +0 -9
  204. package/dist/clients/child-unref.js +0 -124
  205. package/dist/clients/code-quality-warnings.js +0 -286
  206. package/dist/clients/codebase-model.js +0 -173
  207. package/dist/clients/collateral-test-role.js +0 -40
  208. package/dist/clients/complexity-client.js +0 -462
  209. package/dist/clients/config-core/deny.js +0 -221
  210. package/dist/clients/config-core/index.js +0 -50
  211. package/dist/clients/config-core/merge.js +0 -357
  212. package/dist/clients/config-core/normalize.js +0 -340
  213. package/dist/clients/config-core/process-spec.js +0 -248
  214. package/dist/clients/config-core/provenance.js +0 -164
  215. package/dist/clients/config-core/records.js +0 -218
  216. package/dist/clients/config-core/resolve.js +0 -125
  217. package/dist/clients/config-core/safe-object.js +0 -78
  218. package/dist/clients/config-core/schema.js +0 -165
  219. package/dist/clients/config-diagnostic-codes.js +0 -285
  220. package/dist/clients/config-locations.js +0 -388
  221. package/dist/clients/config-resolve.js +0 -798
  222. package/dist/clients/config-schema.js +0 -251
  223. package/dist/clients/config-warn.js +0 -407
  224. package/dist/clients/console-guard-install.js +0 -26
  225. package/dist/clients/cooperative-budget.js +0 -42
  226. package/dist/clients/dead-code-client.js +0 -510
  227. package/dist/clients/dead-code-logger.js +0 -30
  228. package/dist/clients/deadline-utils.js +0 -280
  229. package/dist/clients/debug-handles.js +0 -211
  230. package/dist/clients/debug-heap.js +0 -174
  231. package/dist/clients/deferred-lsp-work.js +0 -106
  232. package/dist/clients/degradation-ledger.js +0 -426
  233. package/dist/clients/demoted-finding-render.js +0 -169
  234. package/dist/clients/dependency-checker.js +0 -885
  235. package/dist/clients/deps/ast-grep-napi.js +0 -22
  236. package/dist/clients/deps/js-yaml.js +0 -9
  237. package/dist/clients/deps/minimatch.js +0 -4
  238. package/dist/clients/deps/pi-tui.js +0 -14
  239. package/dist/clients/deps/typebox.js +0 -14
  240. package/dist/clients/deps/vscode-jsonrpc.js +0 -1
  241. package/dist/clients/deps/web-tree-sitter.js +0 -24
  242. package/dist/clients/diagnostic-dispositions.js +0 -630
  243. package/dist/clients/diagnostic-line-freshness.js +0 -305
  244. package/dist/clients/diagnostic-logger.js +0 -73
  245. package/dist/clients/diagnostic-tracker.js +0 -105
  246. package/dist/clients/diagnostics-publish.js +0 -230
  247. package/dist/clients/dispatch/ast-grep-catalog.js +0 -65
  248. package/dist/clients/dispatch/auxiliary-lsp.js +0 -343
  249. package/dist/clients/dispatch/collect-later-tier.js +0 -35
  250. package/dist/clients/dispatch/diagnostic-taxonomy.js +0 -66
  251. package/dist/clients/dispatch/dispatcher.js +0 -1269
  252. package/dist/clients/dispatch/fact-provider-types.js +0 -1
  253. package/dist/clients/dispatch/fact-rule-runner.js +0 -17
  254. package/dist/clients/dispatch/fact-runner.js +0 -30
  255. package/dist/clients/dispatch/fact-scheduler.js +0 -68
  256. package/dist/clients/dispatch/fact-store.js +0 -377
  257. package/dist/clients/dispatch/facts/comment-facts.js +0 -22
  258. package/dist/clients/dispatch/facts/file-content.js +0 -19
  259. package/dist/clients/dispatch/facts/function-facts.js +0 -348
  260. package/dist/clients/dispatch/facts/import-facts.js +0 -204
  261. package/dist/clients/dispatch/facts/tree-sitter-facts.js +0 -34
  262. package/dist/clients/dispatch/facts/try-catch-facts.js +0 -119
  263. package/dist/clients/dispatch/finding-policy.js +0 -339
  264. package/dist/clients/dispatch/indent-detect.js +0 -417
  265. package/dist/clients/dispatch/inline-suppressions.js +0 -89
  266. package/dist/clients/dispatch/integration.js +0 -2377
  267. package/dist/clients/dispatch/lazy.js +0 -11
  268. package/dist/clients/dispatch/pending-runner-findings.js +0 -87
  269. package/dist/clients/dispatch/plan.js +0 -278
  270. package/dist/clients/dispatch/priorities.js +0 -20
  271. package/dist/clients/dispatch/rule-id-normalize.js +0 -50
  272. package/dist/clients/dispatch/rule-ignores.js +0 -69
  273. package/dist/clients/dispatch/rule-policy.js +0 -135
  274. package/dist/clients/dispatch/rules/async-noise.js +0 -40
  275. package/dist/clients/dispatch/rules/async-unnecessary-wrapper.js +0 -27
  276. package/dist/clients/dispatch/rules/cors-wildcard.js +0 -54
  277. package/dist/clients/dispatch/rules/error-obscuring.js +0 -32
  278. package/dist/clients/dispatch/rules/error-swallowing.js +0 -31
  279. package/dist/clients/dispatch/rules/framework-call-noise.js +0 -67
  280. package/dist/clients/dispatch/rules/high-complexity.js +0 -72
  281. package/dist/clients/dispatch/rules/high-fan-out.js +0 -74
  282. package/dist/clients/dispatch/rules/high-import-coupling.js +0 -37
  283. package/dist/clients/dispatch/rules/missing-error-propagation.js +0 -62
  284. package/dist/clients/dispatch/rules/no-commented-credentials.js +0 -52
  285. package/dist/clients/dispatch/rules/pass-through-wrappers.js +0 -42
  286. package/dist/clients/dispatch/rules/placeholder-comments.js +0 -40
  287. package/dist/clients/dispatch/rules/unsafe-boundary.js +0 -126
  288. package/dist/clients/dispatch/runner-context.js +0 -52
  289. package/dist/clients/dispatch/runners/actionlint.js +0 -111
  290. package/dist/clients/dispatch/runners/ast-grep-napi.js +0 -1196
  291. package/dist/clients/dispatch/runners/biome-check.js +0 -296
  292. package/dist/clients/dispatch/runners/cpp-check.js +0 -219
  293. package/dist/clients/dispatch/runners/credo.js +0 -82
  294. package/dist/clients/dispatch/runners/cue-vet.js +0 -416
  295. package/dist/clients/dispatch/runners/dart-analyze.js +0 -183
  296. package/dist/clients/dispatch/runners/detekt.js +0 -176
  297. package/dist/clients/dispatch/runners/dotnet-build.js +0 -164
  298. package/dist/clients/dispatch/runners/elixir-check.js +0 -195
  299. package/dist/clients/dispatch/runners/eslint.js +0 -137
  300. package/dist/clients/dispatch/runners/fact-rules.js +0 -29
  301. package/dist/clients/dispatch/runners/fish-indent.js +0 -69
  302. package/dist/clients/dispatch/runners/gleam-check.js +0 -167
  303. package/dist/clients/dispatch/runners/go-vet.js +0 -104
  304. package/dist/clients/dispatch/runners/golangci-lint.js +0 -135
  305. package/dist/clients/dispatch/runners/hadolint.js +0 -91
  306. package/dist/clients/dispatch/runners/helm-lint.js +0 -171
  307. package/dist/clients/dispatch/runners/helm-render.js +0 -940
  308. package/dist/clients/dispatch/runners/htmlhint.js +0 -117
  309. package/dist/clients/dispatch/runners/index.js +0 -108
  310. package/dist/clients/dispatch/runners/javac.js +0 -99
  311. package/dist/clients/dispatch/runners/ktlint.js +0 -110
  312. package/dist/clients/dispatch/runners/lsp.js +0 -379
  313. package/dist/clients/dispatch/runners/markdownlint.js +0 -167
  314. package/dist/clients/dispatch/runners/mypy.js +0 -102
  315. package/dist/clients/dispatch/runners/oxlint.js +0 -414
  316. package/dist/clients/dispatch/runners/php-lint.js +0 -85
  317. package/dist/clients/dispatch/runners/phpstan.js +0 -120
  318. package/dist/clients/dispatch/runners/prisma-validate.js +0 -62
  319. package/dist/clients/dispatch/runners/psscriptanalyzer.js +0 -445
  320. package/dist/clients/dispatch/runners/pyright.js +0 -169
  321. package/dist/clients/dispatch/runners/rubocop.js +0 -99
  322. package/dist/clients/dispatch/runners/ruff.js +0 -88
  323. package/dist/clients/dispatch/runners/rust-clippy.js +0 -256
  324. package/dist/clients/dispatch/runners/shellcheck.js +0 -173
  325. package/dist/clients/dispatch/runners/shfmt.js +0 -102
  326. package/dist/clients/dispatch/runners/spellcheck.js +0 -128
  327. package/dist/clients/dispatch/runners/spotbugs.js +0 -259
  328. package/dist/clients/dispatch/runners/sqlfluff.js +0 -183
  329. package/dist/clients/dispatch/runners/stylelint.js +0 -166
  330. package/dist/clients/dispatch/runners/swiftlint.js +0 -163
  331. package/dist/clients/dispatch/runners/taplo.js +0 -174
  332. package/dist/clients/dispatch/runners/terragrunt.js +0 -168
  333. package/dist/clients/dispatch/runners/tflint.js +0 -125
  334. package/dist/clients/dispatch/runners/tree-sitter.js +0 -643
  335. package/dist/clients/dispatch/runners/trivy-config.js +0 -253
  336. package/dist/clients/dispatch/runners/utils/availability-policy.js +0 -496
  337. package/dist/clients/dispatch/runners/utils/candidate-probe.js +0 -90
  338. package/dist/clients/dispatch/runners/utils/diagnostic-parsers.js +0 -95
  339. package/dist/clients/dispatch/runners/utils/lazy-installer.js +0 -274
  340. package/dist/clients/dispatch/runners/utils/runner-helpers.js +0 -1701
  341. package/dist/clients/dispatch/runners/utils/spawn-outcome.js +0 -101
  342. package/dist/clients/dispatch/runners/utils/tool-failure.js +0 -235
  343. package/dist/clients/dispatch/runners/utils/toolchain-availability.js +0 -169
  344. package/dist/clients/dispatch/runners/utils.js +0 -15
  345. package/dist/clients/dispatch/runners/vale.js +0 -128
  346. package/dist/clients/dispatch/runners/yaml-rule-parser.js +0 -242
  347. package/dist/clients/dispatch/runners/yamllint.js +0 -95
  348. package/dist/clients/dispatch/runners/zig-check.js +0 -79
  349. package/dist/clients/dispatch/suppress-writer.js +0 -79
  350. package/dist/clients/dispatch/tool-profile.js +0 -30
  351. package/dist/clients/dispatch/types.js +0 -21
  352. package/dist/clients/dispatch/utils/format-utils.js +0 -45
  353. package/dist/clients/dispatch/utils/lsp-diagnostics.js +0 -35
  354. package/dist/clients/disposition-logger.js +0 -32
  355. package/dist/clients/disposition-publish.js +0 -124
  356. package/dist/clients/durable-store.js +0 -97
  357. package/dist/clients/effective-config.js +0 -415
  358. package/dist/clients/env-utils.js +0 -83
  359. package/dist/clients/error-class.js +0 -23
  360. package/dist/clients/eval-timestamp.js +0 -17
  361. package/dist/clients/event-loop-hold.js +0 -274
  362. package/dist/clients/event-loop-monitor.js +0 -250
  363. package/dist/clients/extension-log.js +0 -504
  364. package/dist/clients/extension-mode.js +0 -73
  365. package/dist/clients/feature-hints.js +0 -103
  366. package/dist/clients/file-kinds.js +0 -412
  367. package/dist/clients/file-role.js +0 -134
  368. package/dist/clients/file-time.js +0 -160
  369. package/dist/clients/file-utils.js +0 -1032
  370. package/dist/clients/finding-delivery-gate.js +0 -494
  371. package/dist/clients/finding-identity.js +0 -88
  372. package/dist/clients/fix-worklog.js +0 -103
  373. package/dist/clients/format-events-publish.js +0 -343
  374. package/dist/clients/format-service.js +0 -222
  375. package/dist/clients/formatters-lazy.js +0 -9
  376. package/dist/clients/formatters.js +0 -2032
  377. package/dist/clients/freshness-cadence.js +0 -17
  378. package/dist/clients/freshness.js +0 -38
  379. package/dist/clients/generated-artifacts.js +0 -394
  380. package/dist/clients/generation-guard.js +0 -215
  381. package/dist/clients/git-guard.js +0 -1136
  382. package/dist/clients/git-tracked-ignore.js +0 -243
  383. package/dist/clients/gitleaks-client.js +0 -509
  384. package/dist/clients/go-client.js +0 -104
  385. package/dist/clients/govulncheck-client.js +0 -605
  386. package/dist/clients/gradle-ktfmt-style.js +0 -348
  387. package/dist/clients/grammar-source.js +0 -465
  388. package/dist/clients/gzip-stage-write.js +0 -135
  389. package/dist/clients/hashline-anchor.js +0 -424
  390. package/dist/clients/hook-budgets.js +0 -76
  391. package/dist/clients/host-edit-normalize.js +0 -140
  392. package/dist/clients/host-ports.js +0 -39
  393. package/dist/clients/indent-retarget.js +0 -154
  394. package/dist/clients/inline-blocker-dispositions.js +0 -186
  395. package/dist/clients/install-diagnostics.js +0 -156
  396. package/dist/clients/installer/index.js +0 -5416
  397. package/dist/clients/installer/managed-tool-refresh-session.js +0 -58
  398. package/dist/clients/installer/managed-tool-refresh.js +0 -783
  399. package/dist/clients/instance-reaper-state.js +0 -7
  400. package/dist/clients/instance-reaper.js +0 -1137
  401. package/dist/clients/instance-registry-lock.js +0 -145
  402. package/dist/clients/instance-registry.js +0 -773
  403. package/dist/clients/jscpd-client.js +0 -378
  404. package/dist/clients/json-cache-read.js +0 -65
  405. package/dist/clients/knip-client.js +0 -788
  406. package/dist/clients/language-policy.js +0 -252
  407. package/dist/clients/language-profile.js +0 -361
  408. package/dist/clients/language-registry.js +0 -603
  409. package/dist/clients/latency-logger.js +0 -727
  410. package/dist/clients/lazy-import.js +0 -21
  411. package/dist/clients/ledger-bounds.js +0 -54
  412. package/dist/clients/lens-config.js +0 -404
  413. package/dist/clients/lens-engine.js +0 -358
  414. package/dist/clients/lens-events.js +0 -125
  415. package/dist/clients/lens-flag-registry.js +0 -467
  416. package/dist/clients/lens-map.js +0 -1156
  417. package/dist/clients/live-bus-emitter.js +0 -74
  418. package/dist/clients/log-cleanup.js +0 -222
  419. package/dist/clients/lsp/aggregation.js +0 -178
  420. package/dist/clients/lsp/cascade-tier.js +0 -421
  421. package/dist/clients/lsp/client.js +0 -4593
  422. package/dist/clients/lsp/config.js +0 -691
  423. package/dist/clients/lsp/content-limits.js +0 -41
  424. package/dist/clients/lsp/diagnostic-binding.js +0 -225
  425. package/dist/clients/lsp/document-drift.js +0 -467
  426. package/dist/clients/lsp/edits.js +0 -1219
  427. package/dist/clients/lsp/index.js +0 -8305
  428. package/dist/clients/lsp/inferred-project.js +0 -216
  429. package/dist/clients/lsp/jvm-runtime.js +0 -298
  430. package/dist/clients/lsp/language.js +0 -63
  431. package/dist/clients/lsp/launch.js +0 -746
  432. package/dist/clients/lsp/lombok.js +0 -158
  433. package/dist/clients/lsp/path-utils.js +0 -5
  434. package/dist/clients/lsp/pending-aux-coverage.js +0 -251
  435. package/dist/clients/lsp/position-encoding.js +0 -61
  436. package/dist/clients/lsp/ruby-drive-dirs.js +0 -83
  437. package/dist/clients/lsp/server.js +0 -3290
  438. package/dist/clients/lsp/session-roots.js +0 -192
  439. package/dist/clients/lsp/spawn-history.js +0 -17
  440. package/dist/clients/lsp/sync-kind.js +0 -56
  441. package/dist/clients/lsp/tsserver-sync.js +0 -332
  442. package/dist/clients/lsp/wait-policy/capability-snapshot.js +0 -1
  443. package/dist/clients/lsp/wait-policy/classification.js +0 -85
  444. package/dist/clients/lsp/wait-policy/index.js +0 -10
  445. package/dist/clients/lsp/wait-policy/strategies.js +0 -392
  446. package/dist/clients/lsp/watch-queue.js +0 -61
  447. package/dist/clients/lsp/workspace-diagnostics-cache.js +0 -639
  448. package/dist/clients/lsp/workspace-diagnostics-session.js +0 -30
  449. package/dist/clients/lsp/workspace-sweep-hold.js +0 -184
  450. package/dist/clients/lsp-budget.js +0 -186
  451. package/dist/clients/lsp-document-symbols.js +0 -110
  452. package/dist/clients/lsp-lazy.js +0 -9
  453. package/dist/clients/lsp-mutation.js +0 -396
  454. package/dist/clients/lsp-status.js +0 -59
  455. package/dist/clients/map-with-concurrency.js +0 -40
  456. package/dist/clients/mcp/analyze.js +0 -420
  457. package/dist/clients/mcp/host-shim.js +0 -31
  458. package/dist/clients/mcp/ipc.js +0 -523
  459. package/dist/clients/mcp/review.js +0 -197
  460. package/dist/clients/mcp/session.js +0 -412
  461. package/dist/clients/memory-sampler.js +0 -208
  462. package/dist/clients/message-end-attribution.js +0 -30
  463. package/dist/clients/metrics-client.js +0 -107
  464. package/dist/clients/metrics-history.js +0 -327
  465. package/dist/clients/middle-man-analysis.js +0 -263
  466. package/dist/clients/model-provider.js +0 -53
  467. package/dist/clients/module-report-lsp.js +0 -189
  468. package/dist/clients/module-report.js +0 -2150
  469. package/dist/clients/mutating-tool.js +0 -651
  470. package/dist/clients/mutation-attribution.js +0 -368
  471. package/dist/clients/mutation-bridge.js +0 -240
  472. package/dist/clients/ndjson-logger.js +0 -734
  473. package/dist/clients/observed-mutation-sources.js +0 -101
  474. package/dist/clients/observed-mutation.js +0 -1253
  475. package/dist/clients/oldtext-autopatch.js +0 -128
  476. package/dist/clients/opaque-mutation-scan.js +0 -496
  477. package/dist/clients/opengrep-client.js +0 -333
  478. package/dist/clients/opengrep-config.js +0 -76
  479. package/dist/clients/package-manager.js +0 -607
  480. package/dist/clients/package-root.js +0 -38
  481. package/dist/clients/partial-edit-apply.js +0 -439
  482. package/dist/clients/path-attribution-telemetry.js +0 -43
  483. package/dist/clients/path-keyed-map.js +0 -108
  484. package/dist/clients/path-utils.js +0 -1244
  485. package/dist/clients/performance-report.js +0 -331
  486. package/dist/clients/persist-debounce.js +0 -70
  487. package/dist/clients/persistent-reverify.js +0 -271
  488. package/dist/clients/php-cs-fixer-config.js +0 -119
  489. package/dist/clients/pipeline.js +0 -1480
  490. package/dist/clients/post-autofix-notice.js +0 -37
  491. package/dist/clients/print-mode.js +0 -21
  492. package/dist/clients/probe-home-state.js +0 -228
  493. package/dist/clients/process-bridge.js +0 -66
  494. package/dist/clients/process-singletons.js +0 -210
  495. package/dist/clients/process-snapshot.js +0 -68
  496. package/dist/clients/project-changes.js +0 -181
  497. package/dist/clients/project-conventions.js +0 -171
  498. package/dist/clients/project-diagnostics/cache.js +0 -137
  499. package/dist/clients/project-diagnostics/extractors.js +0 -109
  500. package/dist/clients/project-diagnostics/fresh-fetch.js +0 -668
  501. package/dist/clients/project-diagnostics/runner-adapters/call-graph-impact.js +0 -118
  502. package/dist/clients/project-diagnostics/runner-adapters/dead-code.js +0 -47
  503. package/dist/clients/project-diagnostics/runner-adapters/gitleaks.js +0 -40
  504. package/dist/clients/project-diagnostics/runner-adapters/govulncheck.js +0 -34
  505. package/dist/clients/project-diagnostics/runner-adapters/jscpd.js +0 -38
  506. package/dist/clients/project-diagnostics/runner-adapters/knip.js +0 -47
  507. package/dist/clients/project-diagnostics/runner-adapters/madge.js +0 -48
  508. package/dist/clients/project-diagnostics/runner-adapters/opengrep.js +0 -40
  509. package/dist/clients/project-diagnostics/runner-adapters/runner-findings.js +0 -127
  510. package/dist/clients/project-diagnostics/runner-adapters/trivy.js +0 -81
  511. package/dist/clients/project-diagnostics/scanner.js +0 -520
  512. package/dist/clients/project-diagnostics/types.js +0 -1
  513. package/dist/clients/project-lens-config.js +0 -807
  514. package/dist/clients/project-report.js +0 -701
  515. package/dist/clients/project-scale.js +0 -237
  516. package/dist/clients/project-scan-policy.js +0 -11
  517. package/dist/clients/project-snapshot-fingerprint.js +0 -48
  518. package/dist/clients/project-snapshot-persist-worker.js +0 -20
  519. package/dist/clients/project-snapshot.js +0 -1653
  520. package/dist/clients/project-trust.js +0 -181
  521. package/dist/clients/python-environment.js +0 -217
  522. package/dist/clients/python-provenance.js +0 -639
  523. package/dist/clients/quiet-window-config.js +0 -47
  524. package/dist/clients/quiet-window.js +0 -236
  525. package/dist/clients/read-bridge.js +0 -139
  526. package/dist/clients/read-expansion.js +0 -266
  527. package/dist/clients/read-guard-logger.js +0 -251
  528. package/dist/clients/read-guard-tool-lines.js +0 -1306
  529. package/dist/clients/read-guard.js +0 -1561
  530. package/dist/clients/recent-touches.js +0 -240
  531. package/dist/clients/redact/secrets.js +0 -449
  532. package/dist/clients/resource-sampler.js +0 -628
  533. package/dist/clients/reverse-deps.js +0 -270
  534. package/dist/clients/review-graph/builder.js +0 -5126
  535. package/dist/clients/review-graph/format.js +0 -33
  536. package/dist/clients/review-graph/git-identity.js +0 -163
  537. package/dist/clients/review-graph/import-resolvers.js +0 -481
  538. package/dist/clients/review-graph/persist-worker.js +0 -10
  539. package/dist/clients/review-graph/query.js +0 -244
  540. package/dist/clients/review-graph/revision-drift.js +0 -21
  541. package/dist/clients/review-graph/service.js +0 -96
  542. package/dist/clients/review-graph/shared-extraction-ir.js +0 -82
  543. package/dist/clients/review-graph/symbol-id.js +0 -103
  544. package/dist/clients/review-graph/tsconfig-paths.js +0 -299
  545. package/dist/clients/review-graph/types.js +0 -1
  546. package/dist/clients/review-graph/workspace-modules.js +0 -449
  547. package/dist/clients/review-graph-logger.js +0 -81
  548. package/dist/clients/ruff-client.js +0 -179
  549. package/dist/clients/rules-scanner.js +0 -131
  550. package/dist/clients/run-duration.js +0 -55
  551. package/dist/clients/runtime-agent-end.js +0 -746
  552. package/dist/clients/runtime-config.js +0 -77
  553. package/dist/clients/runtime-context.js +0 -211
  554. package/dist/clients/runtime-coordinator.js +0 -1324
  555. package/dist/clients/runtime-session.js +0 -2485
  556. package/dist/clients/runtime-tool-call.js +0 -1295
  557. package/dist/clients/runtime-tool-result.js +0 -2049
  558. package/dist/clients/runtime-turn.js +0 -3767
  559. package/dist/clients/rust-client.js +0 -97
  560. package/dist/clients/safe-spawn.js +0 -2357
  561. package/dist/clients/sanitize.js +0 -286
  562. package/dist/clients/scan-utils.js +0 -25
  563. package/dist/clients/scratch-tree-policy.js +0 -165
  564. package/dist/clients/search-read-registration.js +0 -94
  565. package/dist/clients/secret-findings.js +0 -114
  566. package/dist/clients/security-scan-client.js +0 -352
  567. package/dist/clients/session-event-guard.js +0 -297
  568. package/dist/clients/session-lifecycle.js +0 -484
  569. package/dist/clients/session-start-observability.js +0 -94
  570. package/dist/clients/session-state-store.js +0 -101
  571. package/dist/clients/session-summary.js +0 -15
  572. package/dist/clients/sessionstart-logger.js +0 -27
  573. package/dist/clients/sg-runner.js +0 -876
  574. package/dist/clients/sgconfig.js +0 -347
  575. package/dist/clients/shared-checkout-guard.js +0 -338
  576. package/dist/clients/single-flight.js +0 -158
  577. package/dist/clients/situational-tool-telemetry.js +0 -108
  578. package/dist/clients/skills-resolver.js +0 -141
  579. package/dist/clients/slow-fs.js +0 -138
  580. package/dist/clients/smells-rollup.js +0 -231
  581. package/dist/clients/source-filter.js +0 -596
  582. package/dist/clients/source-walker.js +0 -211
  583. package/dist/clients/spawn-output-cap.js +0 -120
  584. package/dist/clients/spawn-timeout-cooldown.js +0 -110
  585. package/dist/clients/stale-marker.js +0 -17
  586. package/dist/clients/startup-scan.js +0 -400
  587. package/dist/clients/startup-timing.js +0 -130
  588. package/dist/clients/string-utils.js +0 -33
  589. package/dist/clients/subagent-mode.js +0 -111
  590. package/dist/clients/symbol-containment.js +0 -24
  591. package/dist/clients/symbol-types.js +0 -5
  592. package/dist/clients/test-runner-client.js +0 -2507
  593. package/dist/clients/test-runner-delivery.js +0 -287
  594. package/dist/clients/todo-scanner.js +0 -229
  595. package/dist/clients/tool-agreement.js +0 -423
  596. package/dist/clients/tool-config.js +0 -249
  597. package/dist/clients/tool-cwd.js +0 -270
  598. package/dist/clients/tool-definition.js +0 -47
  599. package/dist/clients/tool-event.js +0 -105
  600. package/dist/clients/tool-policy.js +0 -2755
  601. package/dist/clients/tool-probe.js +0 -53
  602. package/dist/clients/tool-render.js +0 -156
  603. package/dist/clients/tool-set-policy.js +0 -118
  604. package/dist/clients/tree-sitter-cache.js +0 -364
  605. package/dist/clients/tree-sitter-client.js +0 -4195
  606. package/dist/clients/tree-sitter-logger.js +0 -100
  607. package/dist/clients/tree-sitter-navigator.js +0 -269
  608. package/dist/clients/tree-sitter-query-loader.js +0 -569
  609. package/dist/clients/tree-sitter-shared.js +0 -158
  610. package/dist/clients/tree-sitter-symbol-extractor.js +0 -1265
  611. package/dist/clients/trivy-client.js +0 -467
  612. package/dist/clients/tui-fit.js +0 -50
  613. package/dist/clients/turn-context.js +0 -52
  614. package/dist/clients/turn-end/lane.js +0 -51
  615. package/dist/clients/turn-end/lanes/govulncheck.js +0 -112
  616. package/dist/clients/turn-end/lanes/secrets.js +0 -204
  617. package/dist/clients/turn-summary-render.js +0 -72
  618. package/dist/clients/turn-summary.js +0 -132
  619. package/dist/clients/typos-config.js +0 -29
  620. package/dist/clients/user-notify.js +0 -51
  621. package/dist/clients/vanished-instance-marker.js +0 -57
  622. package/dist/clients/warm-attach.js +0 -305
  623. package/dist/clients/widget-state.js +0 -1808
  624. package/dist/clients/word-index-logger.js +0 -49
  625. package/dist/clients/word-index-store.js +0 -459
  626. package/dist/clients/word-index.js +0 -2080
  627. package/dist/clients/workspace-topology.js +0 -443
  628. package/dist/clients/write-ordering-guard.js +0 -65
  629. package/dist/clients/zizmor-config.js +0 -340
  630. package/dist/i18n.js +0 -69
  631. package/dist/mcp/build-staleness.js +0 -124
  632. package/dist/scripts/lib/process-scan.mjs +0 -583
  633. package/dist/scripts/lib/skills-predicate.mjs +0 -129
  634. package/dist/scripts/lib/web-tree-sitter-dir.mjs +0 -123
  635. package/dist/tools/activate-tools.js +0 -87
  636. package/dist/tools/ast-grep-outline.js +0 -137
  637. package/dist/tools/ast-grep-replace.js +0 -244
  638. package/dist/tools/ast-grep-search.js +0 -762
  639. package/dist/tools/effective-config.js +0 -90
  640. package/dist/tools/lens-diagnostic-mark.js +0 -375
  641. package/dist/tools/lens-diagnostics.js +0 -2571
  642. package/dist/tools/lsp-diagnostics.js +0 -1745
  643. package/dist/tools/lsp-navigation.js +0 -1367
  644. package/dist/tools/lsp-structured-output.js +0 -294
  645. package/dist/tools/module-report.js +0 -382
  646. package/dist/tools/project-report.js +0 -86
  647. package/dist/tools/render-compact.js +0 -374
  648. package/dist/tools/scan-progress.js +0 -53
  649. package/dist/tools/shared.js +0 -29
  650. package/dist/tools/symbol-search.js +0 -155
@@ -1,26 +0,0 @@
1
- // Capture this before the guard's other module initialization so host boot is
2
- // not charged to extension evaluation (#1374). Lives in its own
3
- // side-effect-free module (#1434 S3d) — see eval-timestamp.ts's docstring for
4
- // why: `startup-timing.ts` needs this constant but must never trigger a
5
- // console-guard install merely by importing it.
6
- import { PI_LENS_EVAL_STARTED_MS } from "./eval-timestamp.js";
7
- // #1333: install the console guard as an import side-effect so it runs before
8
- // any other module's initialization code. Installing inside the extension
9
- // factory is too late — by the time the factory runs, every static/transitive
10
- // import has already evaluated, so a dependency writing to console during
11
- // module init would still hit the TUI raw (#1338 review finding). This module
12
- // MUST remain the first import of index.ts; the enforcement test pins that.
13
- // installConsoleGuard() itself is idempotent and no-ops under test mode and
14
- // PI_LENS_CONSOLE_GUARD=0.
15
- // #1434: the guard captures only while pi-lens owns execution, so the module
16
- // window must be open for the rest of the import graph. index.ts closes it on
17
- // its last line; an unref'd backstop closes it if that never runs.
18
- import { installConsoleGuard, openModuleLoadConsoleWindow, } from "./extension-log.js";
19
- installConsoleGuard();
20
- openModuleLoadConsoleWindow();
21
- // Not re-exported: nothing should import the timestamp from this module.
22
- // `clients/startup-timing.ts` imports it straight from `eval-timestamp.ts`,
23
- // which is what keeps that import side-effect-free (S3d). The `void` keeps
24
- // the import from looking unused to lint while documenting that this module
25
- // only needs the ordering (evaluate eval-timestamp.ts first), not the value.
26
- void PI_LENS_EVAL_STARTED_MS;
@@ -1,42 +0,0 @@
1
- /** Monotonic cooperative-work budgeting for event-loop-sensitive bulk work. */
2
- export function createDeadline(budgetMs) {
3
- const boundedBudget = Math.max(0, budgetMs);
4
- let startedAt = performance.now();
5
- return {
6
- expired: () => performance.now() - startedAt >= boundedBudget,
7
- reset: () => {
8
- startedAt = performance.now();
9
- },
10
- };
11
- }
12
- export async function yieldIfOverBudget(deadline) {
13
- if (!deadline.expired())
14
- return false;
15
- await new Promise((resolve) => setImmediate(resolve));
16
- deadline.reset();
17
- return true;
18
- }
19
- export async function forEachCooperatively(items, fn, options) {
20
- const deadline = createDeadline(options.budgetMs);
21
- const assertContinuing = () => {
22
- if (options.shouldContinue?.() === false) {
23
- throw new Error(options.abortMessage ?? "cooperative work superseded");
24
- }
25
- };
26
- let index = 0;
27
- for (const item of items) {
28
- // Check before each unit: this per-unit check is what bounds abort
29
- // latency (one work unit, not an iteration checkpoint). The post-yield
30
- // check below only matters after the final unit's yield, so superseded
31
- // work is reported aborted rather than completed.
32
- assertContinuing();
33
- const result = fn(item, index++);
34
- if (result !== undefined &&
35
- typeof result.then === "function") {
36
- await result;
37
- }
38
- if (deadline.expired() && (await yieldIfOverBudget(deadline))) {
39
- assertContinuing();
40
- }
41
- }
42
- }
@@ -1,510 +0,0 @@
1
- /**
2
- * Cross-file dead-code detection for non-JS/TS ecosystems (#127).
3
- *
4
- * Knip (clients/knip-client.ts) gives JS/TS projects project-wide unused
5
- * exports/files/deps at session_start. Per-file dispatch linters can't do that
6
- * for other languages — "this exported function is unused anywhere" needs a
7
- * whole-project scan. This module is the per-language harness that closes the
8
- * gap, paralleling KnipClient's lifecycle (detect → ensureAvailable → analyze,
9
- * cached at session_start, surfaced as a turn_end advisory).
10
- *
11
- * Phase 1 ships Python via `vulture`. Future phases add Go/Rust/etc. by
12
- * implementing DeadCodeClient and adding to getDeadCodeClients().
13
- */
14
- import { createSubsystemLogger } from "./extension-log.js";
15
- import { incrementDegradationCount } from "./degradation-ledger.js";
16
- import * as fs from "node:fs";
17
- import * as path from "node:path";
18
- import { findLocalBinsAt, VENV_BIN_DIRS } from "./package-manager.js";
19
- import { findNearestMarkerRoot } from "./path-utils.js";
20
- import { getScratchTreeFnmatchPatterns } from "./scratch-tree-policy.js";
21
- import { safeSpawnAsync } from "./safe-spawn.js";
22
- import { probeToolAsync } from "./tool-probe.js";
23
- import { classifyProbeFailure, createAvailabilityLatch, logAvailabilityDecision, startHostStallSampler, } from "./dispatch/runners/utils/availability-policy.js";
24
- import { firstOutputLine, spawnFailedWithNoOutput, } from "./dispatch/runners/utils/spawn-outcome.js";
25
- import { formatToolFailure } from "./dispatch/runners/utils/tool-failure.js";
26
- function emptyResult(language) {
27
- return {
28
- success: false,
29
- language,
30
- unusedExports: [],
31
- unusedFiles: [],
32
- unusedDeps: [],
33
- unlistedDeps: [],
34
- };
35
- }
36
- const ANALYSIS_TIMEOUT_MS = 30_000;
37
- // Directories never worth scanning for the user's own dead code.
38
- //
39
- // Single-sourced from `scratch-tree-policy.ts`'s `EXCLUDED_DIRS`-derived list
40
- // (#1562 sweep finding: this array had hand-drifted from `EXCLUDED_DIRS` —
41
- // missing `.pi`/`.claude`/`.next`/`.turbo`/etc, the same single-source-of-
42
- // truth defect #883 named for per-language lists). `site-packages`/`.eggs`
43
- // are Python-packaging-specific and have no `EXCLUDED_DIRS` counterpart (no
44
- // other scanner needs them), so they stay as a small local addition rather
45
- // than polluting the shared cross-tool list.
46
- const VULTURE_PYTHON_ONLY_EXCLUDES = ["*/site-packages/*", "*/.eggs/*"];
47
- const VULTURE_EXCLUDES = [
48
- ...getScratchTreeFnmatchPatterns(),
49
- ...VULTURE_PYTHON_ONLY_EXCLUDES,
50
- ];
51
- // Decorators whose target is called by a framework, never by name in the tree.
52
- // vulture cannot see those call sites, so every such symbol is a permanent
53
- // false positive that reappears in every scan — the fastest way to teach a
54
- // reader to stop reading the advisory. Glob-matched by vulture itself.
55
- const VULTURE_IGNORE_DECORATORS = [
56
- "@pytest.fixture",
57
- "@pytest.fixture(*",
58
- "@fixture",
59
- "@fixture(*",
60
- "@app.*",
61
- "@router.*",
62
- "@celery.task*",
63
- "@task",
64
- "@shared_task*",
65
- ];
66
- // vulture line: `path/to/file.py:12: unused function 'foo' (60% confidence)`
67
- const VULTURE_LINE = /^(.*?):(\d+): unused (\w[\w ]*?) '([^']+)' \((\d+)% confidence\)\s*$/;
68
- /**
69
- * Parse vulture's text output into normalized issues. Pure (no spawn/fs) so the
70
- * parser is unit-testable against captured output. Unrecognized lines (banner,
71
- * `unreachable code` without a quoted name) are ignored. `root` makes file
72
- * paths project-relative when possible.
73
- */
74
- export function parseVultureOutput(output, root) {
75
- const issues = [];
76
- for (const raw of output.split(/\r?\n/)) {
77
- const m = raw.match(VULTURE_LINE);
78
- if (!m)
79
- continue;
80
- const [, file, line, kind, name, confidence] = m;
81
- // All map to the "export" bucket (a defined symbol used nowhere); the
82
- // `kind` preserves function/class/import/etc. for display.
83
- let rel = file;
84
- try {
85
- rel = path.relative(root, file) || file;
86
- }
87
- catch {
88
- rel = file;
89
- }
90
- issues.push({
91
- category: "export",
92
- kind: kind.trim(),
93
- name,
94
- file: rel,
95
- line: Number.parseInt(line, 10),
96
- confidence: Number.parseInt(confidence, 10),
97
- });
98
- }
99
- return issues;
100
- }
101
- /**
102
- * Python dead-code via vulture (https://github.com/jendrikseipp/vulture).
103
- *
104
- * vulture finds unused functions, classes, methods, imports, variables and
105
- * attributes by static analysis of the whole tree. It has no JSON reporter, so
106
- * we parse its stable one-line-per-finding text output. A clean run exits 0;
107
- * found dead code exits 3 with findings on stdout. A non-zero exit with
108
- * parseable output is success, not failure (see runAnalyze for the table).
109
- */
110
- export class PythonDeadCodeClient {
111
- id = "python";
112
- language = "Python";
113
- /**
114
- * Transient-aware memo (#1467): only a durable "vulture is not installed"
115
- * verdict is remembered for the session. A probe that timed out expires and
116
- * is re-probed, so vulture cannot be disabled for the process by one stall.
117
- */
118
- availabilityLatch = createAvailabilityLatch();
119
- resolved = null;
120
- ensureInFlight = null;
121
- inFlight = new Map();
122
- log;
123
- constructor(verbose = false) {
124
- this.log = verbose ? createSubsystemLogger("dead-code:python") : () => { };
125
- }
126
- get minConfidence() {
127
- const raw = Number.parseInt(process.env.PI_LENS_VULTURE_MIN_CONFIDENCE ?? "60", 10);
128
- return Number.isFinite(raw) ? Math.min(100, Math.max(0, raw)) : 60;
129
- }
130
- detect(cwd) {
131
- return this.resolveProjectRoot(cwd) !== null;
132
- }
133
- owns(filePath) {
134
- const ext = path.extname(filePath).toLowerCase();
135
- return ext === ".py" || ext === ".pyi";
136
- }
137
- /**
138
- * Nearest dir with a Python project marker, never at/above $HOME and never
139
- * escaping a VCS boundary — same containment rules as KnipClient so a scan
140
- * launched from a bare cwd can't recurse the whole home tree (#250/#296).
141
- * Delegates to the shared path-utils helper (refs #625) rather than
142
- * hand-rolling the climb; only the marker list differs from KnipClient's.
143
- */
144
- resolveProjectRoot(startDir, homeDirOverride) {
145
- return findNearestMarkerRoot(startDir, [
146
- "pyproject.toml",
147
- "setup.py",
148
- "setup.cfg",
149
- "requirements.txt",
150
- "Pipfile",
151
- "tox.ini",
152
- ], { boundaries: [".git", ".hg", ".svn"], homeDir: homeDirOverride });
153
- }
154
- async ensureAvailable(root) {
155
- const memo = this.availabilityLatch.read();
156
- if (memo !== null)
157
- return memo;
158
- if (this.ensureInFlight)
159
- return this.ensureInFlight;
160
- this.ensureInFlight = this.doEnsureAvailable(root);
161
- try {
162
- return await this.ensureInFlight;
163
- }
164
- finally {
165
- this.ensureInFlight = null;
166
- }
167
- }
168
- /**
169
- * `<root>/.venv/bin/vulture` (and `venv`/Windows `Scripts` equivalents),
170
- * checked by existence only — no spawn. A project's own venv is the vulture
171
- * that project's own config and dependency set were written against; the
172
- * bare `vulture`/`python -m vulture` PATH probes below only ever see
173
- * whatever happens to be active in the CALLING shell, not the project's
174
- * (#1731, discipline B — the same venv-first shape sqlfluff's binary
175
- * resolution already uses, `runner-helpers.ts` `createVenvFinder`).
176
- *
177
- * The directory list is the shared `VENV_BIN_DIRS` — this was a third
178
- * private spelling of the same four venv directories, with a
179
- * `process.platform` branch that meant the ubuntu lane never saw the
180
- * `Scripts` half at all (defect shape 30).
181
- *
182
- * The search is a fixed lookup at `root` ONLY (`findLocalBinsAt`, no
183
- * ancestor walk) — #2544 review round 3 folded this onto the shared
184
- * ancestor walker, reasoning a monorepo package should find its
185
- * repo-root venv, but that was an unrequested behaviour change with no
186
- * #2514 defect behind it. Reverted in round 4 F2. `findLocalBinsAt`
187
- * returns EVERY match at `root` rather than the first, because
188
- * `doEnsureAvailable` probes candidates in order and must keep the
189
- * `venv/` fallback when a `.venv/` vulture exists but cannot run.
190
- */
191
- venvCandidates(root) {
192
- return findLocalBinsAt(["vulture"], root, {
193
- windowsExt: ".exe",
194
- binDirs: VENV_BIN_DIRS,
195
- }).map((full) => ({ cmd: full, prefix: [] }));
196
- }
197
- async doEnsureAvailable(root) {
198
- // Presence-gated, NOT auto-installed. vulture is a pure-Python package
199
- // with no standalone binary, so "auto-install" would mean `pip install`
200
- // into whatever Python environment happens to be active — wrong and
201
- // intrusive for uv / poetry / conda / pipx users. So we only use vulture
202
- // when the user already has it, probing the project's own venv first
203
- // (#1731), then the `vulture` console script and `python -m vulture` on
204
- // PATH (the script dir is frequently not on PATH even when the package
205
- // is installed). Mirrors govulncheck's no-install gating.
206
- const candidates = [
207
- ...(root ? this.venvCandidates(root) : []),
208
- { cmd: "vulture", prefix: [] },
209
- { cmd: "python", prefix: ["-m", "vulture"] },
210
- { cmd: "python3", prefix: ["-m", "vulture"] },
211
- ];
212
- // A timeout on ANY candidate means the machine, not the tool, answered —
213
- // the run gets a bounded retry instead of a permanent skip (#1467).
214
- let sawTransient = false;
215
- let transientCause = "probe-timeout";
216
- // Accumulated across ALL candidates, because the failure verdicts below
217
- // are about the whole sweep rather than any one probe. Reporting zero
218
- // here would erase the evidence that cracked #1467: four 5s probes and
219
- // a stalled host look identical to an absent tool without these two
220
- // numbers.
221
- const sweepStartedAt = Date.now();
222
- let sweepHostStallMs = 0;
223
- /** What the last classified candidate returned (#1500 review): this was
224
- * computed and thrown away, so every vulture row said "missing" with no
225
- * trace of which candidate reported what. */
226
- let sweepEvidence;
227
- for (const c of candidates) {
228
- const sampler = startHostStallSampler();
229
- const startedAt = Date.now();
230
- let probe;
231
- let hostStallMs;
232
- try {
233
- probe = await probeToolAsync(c.cmd, [...c.prefix, "--version"], {
234
- timeout: 5000,
235
- });
236
- }
237
- finally {
238
- hostStallMs = sampler.stop();
239
- sweepHostStallMs += hostStallMs;
240
- }
241
- if (!probe.error && probe.status === 0) {
242
- this.resolved = c;
243
- this.availabilityLatch.noteAvailable();
244
- this.log(`vulture found: ${[c.cmd, ...c.prefix].join(" ")}`);
245
- logAvailabilityDecision({
246
- tool: "vulture",
247
- verdict: "available",
248
- outcome: "success",
249
- cause: "ok",
250
- elapsedMs: Date.now() - startedAt,
251
- latched: true,
252
- hostStallMs,
253
- budgetMs: 5000,
254
- classifiedBy: "probe",
255
- });
256
- return true;
257
- }
258
- const classified = classifyProbeFailure(probe, {
259
- hostStallMs,
260
- command: c.cmd,
261
- });
262
- sweepEvidence = classified.evidence;
263
- if (classified.outcome === "transient") {
264
- sawTransient = true;
265
- transientCause = classified.cause;
266
- }
267
- }
268
- if (sawTransient) {
269
- const retryAfterMs = this.availabilityLatch.noteUnavailable("transient", transientCause);
270
- this.log("vulture probe timed out; will retry (not treated as missing)");
271
- logAvailabilityDecision({
272
- tool: "vulture",
273
- verdict: "unavailable",
274
- outcome: "transient",
275
- cause: transientCause,
276
- elapsedMs: Date.now() - sweepStartedAt,
277
- hostStallMs: sweepHostStallMs,
278
- latched: false,
279
- retryAfterMs,
280
- budgetMs: 5000,
281
- classifiedBy: "probe",
282
- ...(sweepEvidence !== undefined && { evidence: sweepEvidence }),
283
- });
284
- return false;
285
- }
286
- this.availabilityLatch.noteUnavailable("missing", "not-found");
287
- this.log("vulture not installed; skipping (no auto-install)");
288
- logAvailabilityDecision({
289
- tool: "vulture",
290
- verdict: "unavailable",
291
- outcome: "missing",
292
- cause: "not-found",
293
- elapsedMs: Date.now() - sweepStartedAt,
294
- hostStallMs: sweepHostStallMs,
295
- latched: true,
296
- budgetMs: 5000,
297
- // Every candidate probe was classified, and none was transient (#1500).
298
- classifiedBy: "probe",
299
- ...(sweepEvidence !== undefined && { evidence: sweepEvidence }),
300
- });
301
- return false;
302
- }
303
- async analyze(cwd) {
304
- const root = this.resolveProjectRoot(cwd || process.cwd());
305
- if (!root) {
306
- return {
307
- ...emptyResult(this.language),
308
- success: true,
309
- summary: "No Python project root found; vulture skipped",
310
- };
311
- }
312
- if (!(await this.ensureAvailable(root))) {
313
- return {
314
- ...emptyResult(this.language),
315
- success: true,
316
- summary: "vulture not installed; skipped. Install vulture (pip/uv/pipx) to enable Python dead-code detection.",
317
- };
318
- }
319
- const key = path.resolve(root);
320
- const existing = this.inFlight.get(key);
321
- if (existing)
322
- return existing;
323
- const promise = this.runAnalyze(key);
324
- const wrapped = promise.finally(() => {
325
- // Identity-guarded release (#1968, #1967's pattern): delete only if
326
- // THIS build is still the registered one. A bare delete-by-key lets
327
- // a late-settling build A evict a live build B that replaced the
328
- // entry mid-flight, and the next caller starts a duplicate.
329
- if (this.inFlight.get(key) === wrapped)
330
- this.inFlight.delete(key);
331
- });
332
- this.inFlight.set(key, wrapped);
333
- return wrapped;
334
- }
335
- /**
336
- * True when `<root>/pyproject.toml` carries a `[tool.vulture]` table.
337
- * vulture's own config discovery reads that table, but CLI flags override
338
- * it — passing `--min-confidence`/`--exclude` unconditionally silently
339
- * overrode a project's own thresholds and ignore list (#1731, discipline A).
340
- * Same shape as `hasSqlfluffConfig`/`hasMypyConfig` in `tool-policy.ts`: a
341
- * plain string search, no TOML parser, matching the section header only.
342
- */
343
- hasProjectVultureConfig(root) {
344
- try {
345
- const content = fs.readFileSync(path.join(root, "pyproject.toml"), "utf-8");
346
- return content.includes("[tool.vulture]");
347
- }
348
- catch {
349
- return false;
350
- }
351
- }
352
- async runAnalyze(root) {
353
- const startMs = Date.now();
354
- const invocation = this.resolved ?? { cmd: "vulture", prefix: [] };
355
- // Let the project's own [tool.vulture] config win (#1731, discipline A):
356
- // vulture discovers it unaided, but these two flags override it when
357
- // passed, so they are omitted whenever the project ships that table.
358
- const hasConfig = this.hasProjectVultureConfig(root);
359
- const args = [
360
- ...invocation.prefix,
361
- ".",
362
- ...(hasConfig ? [] : [`--min-confidence=${this.minConfidence}`]),
363
- ...(hasConfig ? [] : [`--exclude=${VULTURE_EXCLUDES.join(",")}`]),
364
- `--ignore-decorators=${VULTURE_IGNORE_DECORATORS.join(",")}`,
365
- ];
366
- const result = await safeSpawnAsync(invocation.cmd, args, {
367
- timeout: ANALYSIS_TIMEOUT_MS,
368
- cwd: root,
369
- });
370
- const durationMs = Date.now() - startMs;
371
- // Spawn-level failure (ENOENT, timeout) — not a "found issues" exit.
372
- if (result.error) {
373
- this.log(`scan error: ${result.error.message}`);
374
- return {
375
- ...emptyResult(this.language),
376
- summary: `Error: ${result.error.message}`,
377
- durationMs,
378
- };
379
- }
380
- // Verified exit-code table (vulture 2.16, probed live during the #1758
381
- // review): a clean run exits 0 with empty stdout; dead code found exits
382
- // 3 with findings on stdout; invalid input or a parse error exits 1
383
- // with empty stdout and the error on stderr. #1736 sweep: the ORIGINAL
384
- // guard here required non-empty stderr to call it an error, so a
385
- // nonzero exit with BOTH empty stdout and empty stderr (a silent crash)
386
- // still fell through to "No dead code found" -- the same
387
- // empty-distinguishes-clean-from-errored gap the knip fix closes. A
388
- // nonzero exit with no findings on stdout is never clean now,
389
- // regardless of whether stderr said anything.
390
- const output = result.stdout || "";
391
- if (!output.trim()) {
392
- const stderr = (result.stderr || "").trim();
393
- // Same discriminator every dispatch/runners linter uses
394
- // (`spawnFailedWithNoOutput`) rather than a parallel hand-rolled
395
- // check (result.error is already handled above, so this reduces to
396
- // the `status !== 0` half).
397
- if (spawnFailedWithNoOutput(result, output)) {
398
- // #1816: one shared wording, one truncation, signal named.
399
- const reason = formatToolFailure({
400
- tool: "vulture",
401
- status: result.status,
402
- signal: result.signal,
403
- stderr: result.stderr,
404
- });
405
- this.log(reason);
406
- incrementDegradationCount({
407
- kind: "runner-empty-result",
408
- subject: "vulture",
409
- reason,
410
- });
411
- return {
412
- ...emptyResult(this.language),
413
- summary: stderr
414
- ? `vulture error: ${firstOutputLine(stderr)}`
415
- : reason,
416
- durationMs,
417
- };
418
- }
419
- // vulture's verified exit-code table (above): exit 0 with empty
420
- // stdout IS the clean-run signal, so this ran over the root
421
- // (#2154) — unlike knip, whose clean run always prints JSON.
422
- return {
423
- ...emptyResult(this.language),
424
- success: true,
425
- analyzed: true,
426
- summary: "No dead code found",
427
- durationMs,
428
- };
429
- }
430
- return { ...this.parseOutput(output, root), durationMs };
431
- }
432
- parseOutput(output, root) {
433
- const unusedExports = parseVultureOutput(output, root);
434
- const total = unusedExports.length;
435
- return {
436
- ...emptyResult(this.language),
437
- success: true,
438
- // #2154: parsed vulture output for this root.
439
- analyzed: true,
440
- unusedExports,
441
- summary: total === 0
442
- ? "No dead code found"
443
- : `Found ${total} unused Python symbol(s)`,
444
- };
445
- }
446
- }
447
- /**
448
- * The dead-code clients to run at session_start. Each is offered every project;
449
- * the orchestrator calls detect() to decide which actually apply (polyglot
450
- * repos may run several). Phase 1: Python only.
451
- */
452
- export function getDeadCodeClients(verbose = false) {
453
- return [new PythonDeadCodeClient(verbose)];
454
- }
455
- /** Total issue count across all buckets — convenience for advisories/telemetry. */
456
- export function deadCodeIssueCount(result) {
457
- return (result.unusedExports.length +
458
- result.unusedFiles.length +
459
- result.unusedDeps.length +
460
- result.unlistedDeps.length);
461
- }
462
- /** Every bucket flattened — delta diffing and diagnostic mapping want one list. */
463
- export function deadCodeIssues(result) {
464
- return [
465
- ...result.unusedExports,
466
- ...result.unusedFiles,
467
- ...result.unusedDeps,
468
- ...result.unlistedDeps,
469
- ];
470
- }
471
- /**
472
- * Joins finding-identity parts into a stable key for diffing one scan
473
- * against the previous one. The string-only signature is load-bearing: a
474
- * line/column number cannot be passed without a compile error. An edit
475
- * shifts every line below it, and a scan delta is then filtered to exactly
476
- * the files the edit touched — so a line in the key turns each shifted
477
- * pre-existing finding into a "newly unused" report under a heading that
478
- * blames the agent's own edit for orphaning it. Inserting four lines above
479
- * one real finding produced four false ones (#1477, #1483). Shared by
480
- * knip's per-turn delta in runtime-turn.ts so the rule lives in one place.
481
- */
482
- export function stableFindingKey(...parts) {
483
- return parts.map((part) => part ?? "").join(":");
484
- }
485
- /** Stable identity for diffing one scan against the previous one. */
486
- export function deadCodeIssueKey(issue) {
487
- return stableFindingKey(issue.category, issue.file, issue.name);
488
- }
489
- /**
490
- * Format this turn's ATTRIBUTABLE delta — symbols that became unused in files
491
- * the agent just edited — or "" when there is nothing to report. Mirrors the
492
- * Knip advisory's contract deliberately: the project-wide list is not injected
493
- * per turn (hundreds of pre-existing findings would drown the blockers and burn
494
- * context every turn), it stays available on demand via lens_diagnostics.
495
- */
496
- export function formatDeadCodeDelta(issues, language, max = 5) {
497
- if (issues.length === 0)
498
- return "";
499
- let report = `💀 Newly unused ${language} symbols in files you edited — check if callers need updating (dead-code):\n`;
500
- for (const issue of issues.slice(0, max)) {
501
- const loc = issue.file
502
- ? `${issue.file}${issue.line ? `:${issue.line}` : ""}`
503
- : "(unknown)";
504
- report += ` ${loc} — unused ${issue.kind} ${issue.name}\n`;
505
- }
506
- if (issues.length > max) {
507
- report += ` … and ${issues.length - max} more\n`;
508
- }
509
- return report;
510
- }
@@ -1,30 +0,0 @@
1
- /**
2
- * NDJSON telemetry for cross-file dead-code scans (#127). One event per
3
- * session_start scan per language, so we can answer: which languages get
4
- * scanned, how many findings, and how long the whole-project scan takes (the
5
- * input to phasing decisions in the issue). Mirrors `ast-grep-tool-logger.ts`
6
- * for shape + size-based rotation.
7
- */
8
- import * as path from "node:path";
9
- import { isTestMode } from "./env-utils.js";
10
- import { getGlobalPiLensLogDir } from "./probe-home-state.js";
11
- import { createNdjsonLogger } from "./ndjson-logger.js";
12
- const LOG_DIR = getGlobalPiLensLogDir();
13
- const LOG_FILE = path.join(LOG_DIR, "dead-code.log");
14
- const LOG_BACKUP_FILE = path.join(LOG_DIR, "dead-code.log.1");
15
- const MAX_LOG_BYTES = Math.max(128 * 1024, Number.parseInt(process.env.PI_LENS_DEAD_CODE_LOG_MAX_BYTES ?? "1048576", 10) || 1048576);
16
- const writer = createNdjsonLogger({
17
- filePath: LOG_FILE,
18
- maxBytes: MAX_LOG_BYTES,
19
- backupPath: LOG_BACKUP_FILE,
20
- });
21
- /**
22
- * Append one scan event. Fire-and-forget: telemetry must never break a scan, so
23
- * every fs error is swallowed. Skipped under test mode to keep the suite from
24
- * writing to the user's real ~/.pi-lens.
25
- */
26
- export function logDeadCodeScan(event) {
27
- if (isTestMode())
28
- return;
29
- writer.log({ ts: new Date().toISOString(), ...event });
30
- }