pi-lens 4.3.0 → 4.4.0

package/dist/clients/pipeline.js

@@ -1,1480 +0,0 @@
-/**
- * Post-write pipeline for pi-lens
- *
- * Extracted from index.ts tool_result handler.
- * Runs sequentially on every file write/edit:
- *   1. Secrets scan (blocking — early exit)
- *   2. Auto-format (Biome, Prettier, Ruff, gofmt, etc.)
- *   3. Auto-fix (Biome --write, Ruff --fix, ESLint --fix)
- *   4. LSP file sync (open/update in LSP servers)
- *   5. Dispatch lint (type errors, security rules)
- *   6. Test runner (run corresponding test file)
- *   7. Cascade diagnostics (other files with errors, LSP only)
- */
-import { createHash } from "node:crypto";
-import * as nodeFs from "node:fs";
-import * as nodeCrypto from "node:crypto";
-import * as path from "node:path";
-import { findNearestContaining, normalizeEphemeralMapKey, } from "./path-utils.js";
-import { recordFromDispatchDiagnostic, } from "./actionable-warnings.js";
-import { recordFromCodeQualityDiagnostic, } from "./code-quality-warnings.js";
-import { admitWidgetDiagnosticsWrite, recordDiagnostics, } from "./widget-state.js";
-import { getDiagnosticLogger } from "./diagnostic-logger.js";
-import { getDiagnosticTracker } from "./diagnostic-tracker.js";
-import { loadDispatchIntegration } from "./dispatch/lazy.js";
-import { toRunnerDisplayPath } from "./dispatch/runner-context.js";
-import { classifyProbeFailure, createAvailabilityChecker, createAvailabilityLatch, describeProbeEvidence, logAvailabilityDecision, startHostStallSampler, resolveAvailableOrInstall, resolveCommandArgsWithInstallFallback, resolveToolCommand, resolveToolCommandWithInstallFallback, } from "./dispatch/runners/utils/runner-helpers.js";
-import { findDetektConfig } from "./dispatch/runners/detekt.js";
-import { formatDiagnostics } from "./dispatch/utils/format-utils.js";
-import { detectFileKind, getFileKindLabel } from "./file-kinds.js";
-import { detectFileChangedAfterCommand, getProjectIgnoreMatcher, isExcludedDirName, } from "./file-utils.js";
-import { logLatency } from "./latency-logger.js";
-import { emitLensAnalysisComplete } from "./lens-events.js";
-import { publishFilesTouched } from "./bus-publish.js";
-import { publishDiagnostics, wasPreviouslyReportedDirty, } from "./diagnostics-publish.js";
-import { loadLspService } from "./lsp-lazy.js";
-import { clearGraphCache } from "./review-graph/builder.js";
-import { BoundedLruCache } from "./bounded-cache.js";
-import { RUNTIME_CONFIG } from "./runtime-config.js";
-import { getAmbientAbortSignal, safeSpawnAsync } from "./safe-spawn.js";
-import { probeToolAsync } from "./tool-probe.js";
-import { bounded } from "./deadline-utils.js";
-import { HOOK_WALL_BUDGET_MS } from "./hook-budgets.js";
-import { enabledAuxiliaryLspServerIds } from "./dispatch/auxiliary-lsp.js";
-import { incrementDegradationCount, recordDegradationOnce, } from "./degradation-ledger.js";
-import { establishToolAgreement } from "./tool-agreement.js";
-import { dropFindingsForMissingPaths } from "./advisory-provenance.js";
-import { getAutofixPolicyForFile, getPreferredAutofixTools, getRubocopCommand, hasBiomeConfig, hasDetektConfig, hasEslintConfig, hasGolangciConfig, hasKtfmtConfig, hasKtlintConfig, hasOxlintConfig, hasRubocopConfig, hasSqlfluffConfig, hasStylelintConfig, markdownlintConfigArgs, } from "./tool-policy.js";
-import { exceedsLspSyncLimits } from "./lsp/content-limits.js";
-const LSP_SPAWN_BUDGET_MS = RUNTIME_CONFIG.pipeline.lspSpawnBudgetMs;
-const AUTOFIX_CHANGED_FILE_SCAN_LIMIT = 5000;
-/**
- * Hard ceiling for the pre-dispatch LSP sync (`resyncLspFile`). The sync sends a
- * didChange/didOpen; that write can backpressure indefinitely when the language
- * server's stdin isn't being drained (a wedged/CPU-bound server), which would
- * hang the whole edit with no per-call bound — client acquisition is capped, but
- * the notify write is not. So the sync is abandoned after this budget (the edit
- * proceeds; the dispatch LSP runner, which has its own 30s cap, still tries).
- */
-function lspSyncBudgetMs() {
-    const raw = Number(process.env.PI_LENS_LSP_SYNC_BUDGET_MS);
-    return Number.isFinite(raw) && raw > 0 ? raw : 3000;
-}
-// Files stat'd between event-loop yields. The walk stays on the tool_result
-// hot path; yielding every N keeps its longest synchronous stretch well under
-// the <50ms hook-burst budget even at the AUTOFIX_CHANGED_FILE_SCAN_LIMIT cap.
-const SNAPSHOT_YIELD_EVERY = 500;
-// Scan one directory's entries into `snapshot`, pushing walkable subdirs onto
-// `stack`. Yields to the event loop every SNAPSHOT_YIELD_EVERY files (shared
-// `counter`) so a single huge directory can't hold the loop. Excluded/ignored
-// dirs are not descended; ignored/vanished files are skipped.
-async function snapshotDirInto(dir, ignoreMatcher, stack, snapshot, counter) {
-    let entries;
-    try {
-        // Async (#1137): a synchronous per-directory read blocks the loop for the
-        // whole stall on a slow cloud-backed (OneDrive) directory; fs.promises
-        // keeps this tool_result-path walk off the event loop.
-        entries = await nodeFs.promises.readdir(dir, { withFileTypes: true });
-    }
-    catch {
-        return;
-    }
-    for (const entry of entries) {
-        const fullPath = path.join(dir, entry.name);
-        if (entry.isDirectory()) {
-            if (!isExcludedDirName(entry.name) &&
-                !ignoreMatcher.isIgnored(fullPath, true)) {
-                stack.push(fullPath);
-            }
-            continue;
-        }
-        if (!entry.isFile())
-            continue;
-        if (ignoreMatcher.isIgnored(fullPath, false))
-            continue;
-        try {
-            const stat = await nodeFs.promises.stat(fullPath);
-            snapshot.set(path.resolve(fullPath), {
-                mtimeMs: stat.mtimeMs,
-                size: stat.size,
-            });
-        }
-        catch {
-            // ignore vanished files
-        }
-        if (++counter.n % SNAPSHOT_YIELD_EVERY === 0) {
-            await new Promise((resolve) => setImmediate(resolve));
-        }
-    }
-}
-// Exported for the event-loop occupancy guard (#361/#368): an O(files) walk on
-// the tool_result autofix path, bounded by AUTOFIX_CHANGED_FILE_SCAN_LIMIT and
-// chunk-yielding every SNAPSHOT_YIELD_EVERY files so it never blocks the TUI.
-export async function snapshotProjectFiles(root) {
-    const snapshot = new Map();
-    const projectRoot = path.resolve(root);
-    const ignoreMatcher = getProjectIgnoreMatcher(projectRoot);
-    // #703: prime the tracked-files set once before the walk so a tracked file
-    // matching a `.gitignore`/global pattern still shows up in the autofix
-    // snapshot. Fail-open on no-git/spawn failure.
-    await ignoreMatcher.ensureTrackedIndex();
-    const stack = [projectRoot];
-    const counter = { n: 0 };
-    while (stack.length > 0 && snapshot.size < AUTOFIX_CHANGED_FILE_SCAN_LIMIT) {
-        await snapshotDirInto(stack.pop(), ignoreMatcher, stack, snapshot, counter);
-    }
-    return snapshot;
-}
-async function diffProjectSnapshot(root, before) {
-    const after = await snapshotProjectFiles(root);
-    const changed = new Set();
-    for (const [filePath, next] of after) {
-        const prev = before.get(filePath);
-        if (prev?.mtimeMs !== next.mtimeMs || prev?.size !== next.size) {
-            changed.add(filePath);
-        }
-    }
-    for (const filePath of before.keys()) {
-        if (!after.has(filePath))
-            changed.add(filePath);
-    }
-    return [...changed].sort((a, b) => a.localeCompare(b));
-}
-function createPhaseTracker(toolName, filePath) {
-    const phases = [];
-    return {
-        start(name) {
-            phases.push({ name, startTime: Date.now(), ended: false });
-        },
-        end(name, metadata) {
-            const p = phases.find((x) => x.name === name && !x.ended);
-            if (p) {
-                p.ended = true;
-                logLatency({
-                    type: "phase",
-                    toolName,
-                    filePath,
-                    phase: name,
-                    durationMs: Date.now() - p.startTime,
-                    metadata,
-                });
-            }
-        },
-    };
-}
-// --- ESLint autofix helpers ---
-export { hasEslintConfig, hasSqlfluffConfig, hasStylelintConfig };
-/**
- * eslint autofix availability, per cwd + PATH. The verdict is owned by the
- * shared availability latch (#1494): a `missing` / `non-installable` outcome
- * sticks for the session, a timeout expires on a cooldown and is re-probed, so
- * one stalled probe cannot silently stop autofixing a project's JS/TS.
- */
-const ESLINT_FIX_PROBE_BUDGET_MS = 5000;
-const _eslintCache = new BoundedLruCache(32);
-/**
- * Run eslint --fix on a file. Runs a single spawn and diffs the file before/after,
- * same idiom as the other autofix helpers below. Exit code 1 (unfixable problems
- * remain) is allowed because fixes may still have been applied; only exit code 2
- * (config/fatal error) is treated as failure.
- * Returns 1 if the file changed, 0 if ESLint is not configured / not available /
- * made no changes.
- */
-async function tryEslintFix(filePath, cwd) {
-    const userHasConfig = hasEslintConfig(cwd);
-    if (!userHasConfig)
-        return 0;
-    // PATH is part of command resolution; include it so an install or PATH
-    // refresh cannot leave a negative eslint result live for the session.
-    const cacheKey = `${path.resolve(cwd)}|${process.env.PATH ?? ""}`;
-    let cached = _eslintCache.get(cacheKey);
-    if (!cached) {
-        cached = { latch: createAvailabilityLatch(), bin: null };
-        _eslintCache.set(cacheKey, cached);
-    }
-    if (cached.latch.read() === null) {
-        const candidate = resolveToolCommand(cwd, "eslint") ?? "eslint";
-        // The budget is enforced by a HOST-side timer, so a stalled event loop
-        // expires it while eslint is still healthy. Measure the overlapping stall
-        // and hand it to the classifier, exactly like the runner path: without it a
-        // host-stall timeout is re-caused as `probe-timeout` and gets the escalating
-        // 30s→300s cooldown instead of the 5s host-stall one (#1467).
-        const stallSampler = startHostStallSampler();
-        const startedAt = Date.now();
-        let check;
-        let hostStallMs;
-        try {
-            check = await safeSpawnAsync(candidate, ["--version"], {
-                timeout: ESLINT_FIX_PROBE_BUDGET_MS,
-                cwd,
-            });
-        }
-        finally {
-            hostStallMs = stallSampler.stop();
-        }
-        const elapsedMs = Date.now() - startedAt;
-        const decisionCwd = path.resolve(cwd);
-        if (!check.error && check.status === 0) {
-            cached.bin = candidate;
-            cached.latch.noteAvailable();
-            logAvailabilityDecision({
-                tool: "eslint",
-                verdict: "available",
-                outcome: "success",
-                cause: "ok",
-                elapsedMs,
-                latched: true,
-                hostStallMs,
-                budgetMs: ESLINT_FIX_PROBE_BUDGET_MS,
-                classifiedBy: "probe",
-                evidence: describeProbeEvidence(check, "eslint"),
-            }, decisionCwd);
-        }
-        else {
-            cached.bin = null;
-            const { outcome, cause, evidence } = classifyProbeFailure(check, {
-                hostStallMs,
-                command: "eslint",
-            });
-            const retryAfterMs = cached.latch.noteUnavailable(outcome, cause);
-            logAvailabilityDecision({
-                tool: "eslint",
-                verdict: "unavailable",
-                outcome,
-                cause,
-                elapsedMs,
-                latched: retryAfterMs === 0,
-                hostStallMs,
-                ...(retryAfterMs > 0 && { retryAfterMs }),
-                budgetMs: ESLINT_FIX_PROBE_BUDGET_MS,
-                classifiedBy: "probe",
-                evidence,
-            }, decisionCwd);
-        }
-    }
-    if (cached.latch.read() !== true || !cached.bin)
-        return 0;
-    const cmd = cached.bin;
-    return detectFileChangedAfterCommand(filePath, cmd, ["--fix", "--no-error-on-unmatched-pattern", filePath], cwd, [1]);
-}
-async function tryStylelintFix(filePath, cwd) {
-    const cmd = await resolveToolCommandWithInstallFallback(cwd, "stylelint");
-    if (!cmd)
-        return 0;
-    return detectFileChangedAfterCommand(filePath, cmd, ["--fix", "--allow-empty-input", filePath], cwd, [2]);
-}
-async function trySqlfluffFix(filePath, cwd) {
-    const cmd = await resolveToolCommandWithInstallFallback(cwd, "sqlfluff");
-    if (!cmd)
-        return 0;
-    const args = ["fix", "--force", filePath];
-    if (!hasSqlfluffConfig(cwd)) {
-        args.splice(2, 0, "--dialect", "ansi");
-    }
-    return detectFileChangedAfterCommand(filePath, cmd, args, cwd);
-}
-async function tryRubocopFix(filePath, cwd) {
-    const resolved = await resolveCommandArgsWithInstallFallback(getRubocopCommand(cwd), "rubocop", cwd, ["--version"], 10000);
-    if (!resolved)
-        return 0;
-    return detectFileChangedAfterCommand(filePath, resolved.cmd, [...resolved.args, "-a", "--no-color", filePath], cwd, [1]);
-}
-async function tryKtlintFix(filePath, cwd) {
-    const cmd = await resolveToolCommandWithInstallFallback(cwd, "ktlint");
-    if (!cmd)
-        return 0;
-    return detectFileChangedAfterCommand(filePath, cmd, ["-F", filePath], cwd, [1]);
-}
-// golangci-lint/detekt/ktfmt have no TOOL_COMMAND_SPEC; resolve via availability
-// checkers like their runners do.
-const golangciAutofixChecker = createAvailabilityChecker("golangci-lint", ".exe");
-const detektAutofixChecker = createAvailabilityChecker("detekt", ".bat");
-const ktfmtAutofixChecker = createAvailabilityChecker("ktfmt", ".bat");
-async function tryKtfmtFix(filePath, cwd) {
-    // Config-first: the autofix policy only reaches here when the project opted
-    // into ktfmt, so resolveAvailableOrInstall honors that gate. ktfmt writes the
-    // formatted file in place and exits 0; treat any byte change as the fix.
-    const cmd = await resolveAvailableOrInstall(ktfmtAutofixChecker, "ktfmt", cwd);
-    if (!cmd)
-        return 0;
-    const absPath = path.resolve(cwd, filePath);
-    return detectFileChangedAfterCommand(filePath, cmd, [absPath], cwd, [0]);
-}
-async function tryGolangciLintFix(filePath, cwd) {
-    // Config-first: the autofix policy only reaches here when a .golangci.* config
-    // exists. resolveAvailableOrInstall honors that gate (won't auto-install a
-    // config-first tool). golangci-lint exits non-zero when issues remain after
-    // --fix, so allow its issue-found codes.
-    const cmd = await resolveAvailableOrInstall(golangciAutofixChecker, "golangci-lint", cwd);
-    if (!cmd)
-        return 0;
-    return detectFileChangedAfterCommand(filePath, cmd, ["run", "--fix", filePath], cwd, [1, 7]);
-}
-async function tryDetektFix(filePath, cwd) {
-    const configPath = findDetektConfig(cwd);
-    if (!configPath)
-        return 0;
-    if (!(await detektAutofixChecker.isAvailableAsync(cwd)))
-        return 0;
-    const cmd = detektAutofixChecker.getCommand(cwd);
-    if (!cmd)
-        return 0;
-    const absPath = path.resolve(cwd, filePath);
-    return detectFileChangedAfterCommand(filePath, cmd, ["--auto-correct", "--input", absPath, "--config", configPath], cwd, [1, 2]);
-}
-async function tryMarkdownlintFix(filePath, cwd) {
-    const cmd = await resolveToolCommandWithInstallFallback(cwd, "markdownlint");
-    if (!cmd)
-        return 0;
-    // Shared config-args seam (#1247): the lint runner consumes the same
-    // builder, so the bare --fix here can never fall back to markdownlint's
-    // default all-rules-on config again (the whole-file CHANGELOG/AGENTS
-    // reformat + `#946` → `# 946` corruption).
-    // markdownlint-cli2 --fix exits non-zero when unfixable violations remain.
-    return detectFileChangedAfterCommand(filePath, cmd, [...markdownlintConfigArgs(cwd), "--fix", filePath], cwd, [1]);
-}
-async function tryOxlintFix(filePath, cwd) {
-    const cmd = await resolveToolCommandWithInstallFallback(cwd, "oxlint");
-    if (!cmd)
-        return 0;
-    return detectFileChangedAfterCommand(filePath, cmd, ["--fix", filePath], cwd, [1]);
-}
-async function tryRustClippyFix(filePath) {
-    const check = await probeToolAsync("cargo", ["--version"], { timeout: 5000 });
-    if (check.error || check.status !== 0)
-        return [];
-    const cargoDir = findNearestContaining(path.dirname(path.resolve(filePath)), [
-        "Cargo.toml",
-    ]);
-    if (!cargoDir)
-        return [];
-    const before = await snapshotProjectFiles(cargoDir);
-    const result = await safeSpawnAsync("cargo", ["clippy", "--fix", "--allow-dirty", "--allow-staged", "-q"], { timeout: 30000, cwd: cargoDir });
-    if (result.error || result.status !== 0)
-        return [];
-    return diffProjectSnapshot(cargoDir, before);
-}
-async function tryDartFix(filePath) {
-    const check = await probeToolAsync("dart", ["--version"], { timeout: 5000 });
-    if (check.error || check.status !== 0)
-        return [];
-    const pubspecDir = findNearestContaining(path.dirname(path.resolve(filePath)), ["pubspec.yaml"]);
-    if (!pubspecDir)
-        return [];
-    const before = await snapshotProjectFiles(pubspecDir);
-    const result = await safeSpawnAsync("dart", ["fix", "--apply"], {
-        timeout: 30000,
-        cwd: pubspecDir,
-    });
-    if (result.error || result.status !== 0)
-        return [];
-    return diffProjectSnapshot(pubspecDir, before);
-}
-// --- Pipeline phase helpers ---
-export async function runAutofix(filePath, cwd, getFlag, dbg, deps, getFlagSource) {
-    const { biomeClient, ruffClient, fixedThisTurn } = deps;
-    const noAutofix = getFlag("no-autofix", filePath);
-    let fixedCount = 0;
-    const autofixTools = [];
-    const attemptedTools = [];
-    const changedFiles = new Set();
-    const markTargetChanged = () => changedFiles.add(path.resolve(filePath));
-    let needsContentRefresh = false;
-    if (fixedThisTurn.has(filePath)) {
-        dbg(`autofix: skipped for ${filePath} (already fixed this turn)`);
-        return {
-            fixedCount,
-            autofixTools,
-            attemptedTools,
-            changedFiles: [],
-            needsContentRefresh,
-            skipReason: "already_fixed_this_turn",
-        };
-    }
-    if (noAutofix) {
-        const source = getFlagSource?.("no-autofix", filePath);
-        dbg(`autofix: skipped for ${filePath} (--no-autofix${source ? `, source=${source}` : ""})`);
-        return {
-            fixedCount,
-            autofixTools,
-            attemptedTools,
-            changedFiles: [],
-            needsContentRefresh,
-            skipReason: "disabled_by_flag",
-        };
-    }
-    const autofixContext = {
-        hasEslintConfig: hasEslintConfig(cwd),
-        hasStylelintConfig: hasStylelintConfig(cwd),
-        hasSqlfluffConfig: hasSqlfluffConfig(cwd),
-        hasRubocopConfig: hasRubocopConfig(cwd),
-        hasBiomeConfig: hasBiomeConfig(cwd),
-        hasGolangciConfig: hasGolangciConfig(cwd),
-        hasDetektConfig: hasDetektConfig(cwd),
-        hasKtfmtConfig: hasKtfmtConfig(cwd),
-        hasKtlintConfig: hasKtlintConfig(cwd),
-        hasOxlintConfig: hasOxlintConfig(cwd),
-    };
-    const autofixPolicy = getAutofixPolicyForFile(filePath, autofixContext);
-    const preferredAutofixTools = autofixPolicy?.safe
-        ? getPreferredAutofixTools(filePath, autofixContext)
-        : [];
-    dbg(`autofix: policy for ${filePath} -> ${autofixPolicy?.defaultTool ?? "none"} ` +
-        `(preferred: ${preferredAutofixTools.join(",") || "none"}, gate: ${autofixPolicy?.gate ?? "none"}, safe: ${autofixPolicy?.safe ? "yes" : "no"})`);
-    if (!autofixPolicy) {
-        dbg(`autofix: no policy for ${filePath}`);
-        return {
-            fixedCount,
-            autofixTools,
-            attemptedTools,
-            changedFiles: [],
-            needsContentRefresh,
-            skipReason: "no_policy",
-        };
-    }
-    if (!autofixPolicy.safe || preferredAutofixTools.length === 0) {
-        dbg(`autofix: no safe preferred tools for ${filePath}`);
-        return {
-            fixedCount,
-            autofixTools,
-            attemptedTools,
-            changedFiles: [],
-            needsContentRefresh,
-            skipReason: "no_safe_tools",
-        };
-    }
-    for (const toolName of preferredAutofixTools) {
-        attemptedTools.push(toolName);
-        const agreement = establishToolAgreement(toolName, cwd);
-        if (agreement.decision === "decline") {
-            const reason = agreement.reason;
-            dbg(`autofix: ${toolName} declined (${reason})`);
-            recordDegradationOnce({
-                kind: "autofix-agreement-unavailable",
-                subject: agreement.subject,
-                reason,
-            });
-            continue;
-        }
-        if (toolName === "ruff") {
-            const ruffReady = ruffClient.isPythonFile(filePath)
-                ? await ruffClient.ensureAvailable()
-                : false;
-            if (!ruffReady) {
-                dbg(`autofix: ruff unavailable for ${filePath}`);
-                continue;
-            }
-            const result = await ruffClient.fixFileAsync(filePath, cwd);
-            if (result.success && result.fixed > 0) {
-                fixedCount += result.fixed;
-                autofixTools.push(`ruff:${result.fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: ruff fixed ${result.fixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "biome") {
-            const biomeReady = biomeClient.isSupportedFile(filePath)
-                ? await biomeClient.ensureAvailable()
-                : false;
-            if (!biomeReady) {
-                dbg(`autofix: biome unavailable or unsupported for ${filePath}`);
-                continue;
-            }
-            const result = await biomeClient.fixFileAsync(filePath, cwd);
-            if (result.success && result.fixed > 0) {
-                fixedCount += result.fixed;
-                autofixTools.push(`biome:${result.fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: biome fixed ${result.fixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "eslint") {
-            const eslintFixed = await tryEslintFix(filePath, cwd);
-            if (eslintFixed > 0) {
-                fixedCount += eslintFixed;
-                autofixTools.push(`eslint:${eslintFixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: eslint fixed ${eslintFixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "stylelint") {
-            const stylelintFixed = await tryStylelintFix(filePath, cwd);
-            if (stylelintFixed > 0) {
-                fixedCount += stylelintFixed;
-                autofixTools.push(`stylelint:${stylelintFixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: stylelint fixed ${stylelintFixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "sqlfluff") {
-            const sqlfluffFixed = await trySqlfluffFix(filePath, cwd);
-            if (sqlfluffFixed > 0) {
-                fixedCount += sqlfluffFixed;
-                autofixTools.push(`sqlfluff:${sqlfluffFixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: sqlfluff fixed ${sqlfluffFixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "rubocop") {
-            const rubocopFixed = await tryRubocopFix(filePath, cwd);
-            if (rubocopFixed > 0) {
-                fixedCount += rubocopFixed;
-                autofixTools.push(`rubocop:${rubocopFixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: rubocop fixed ${rubocopFixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "ktlint") {
-            const ktlintFixed = await tryKtlintFix(filePath, cwd);
-            if (ktlintFixed > 0) {
-                fixedCount += ktlintFixed;
-                autofixTools.push(`ktlint:${ktlintFixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: ktlint fixed ${ktlintFixed} issue(s) in ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "rust-clippy") {
-            const clippyChangedFiles = await tryRustClippyFix(filePath);
-            if (clippyChangedFiles.length > 0) {
-                fixedCount += clippyChangedFiles.length;
-                autofixTools.push(`rust-clippy:${clippyChangedFiles.length}`);
-                fixedThisTurn.add(filePath);
-                for (const changedFile of clippyChangedFiles)
-                    changedFiles.add(changedFile);
-                dbg(`autofix: rust-clippy changed ${clippyChangedFiles.length} file(s) from ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "dart-analyze") {
-            const dartChangedFiles = await tryDartFix(filePath);
-            if (dartChangedFiles.length > 0) {
-                fixedCount += dartChangedFiles.length;
-                autofixTools.push(`dart-analyze:${dartChangedFiles.length}`);
-                fixedThisTurn.add(filePath);
-                for (const changedFile of dartChangedFiles)
-                    changedFiles.add(changedFile);
-                dbg(`autofix: dart fix changed ${dartChangedFiles.length} file(s) from ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "golangci-lint") {
-            const fixed = await tryGolangciLintFix(filePath, cwd);
-            if (fixed > 0) {
-                fixedCount += fixed;
-                autofixTools.push(`golangci-lint:${fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: golangci-lint fixed ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "detekt") {
-            const fixed = await tryDetektFix(filePath, cwd);
-            if (fixed > 0) {
-                fixedCount += fixed;
-                autofixTools.push(`detekt:${fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: detekt --auto-correct fixed ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "ktfmt") {
-            const fixed = await tryKtfmtFix(filePath, cwd);
-            if (fixed > 0) {
-                fixedCount += fixed;
-                autofixTools.push(`ktfmt:${fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: ktfmt formatted ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "markdownlint") {
-            const fixed = await tryMarkdownlintFix(filePath, cwd);
-            if (fixed > 0) {
-                fixedCount += fixed;
-                autofixTools.push(`markdownlint:${fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: markdownlint --fix fixed ${filePath}`);
-                needsContentRefresh = true;
-            }
-            continue;
-        }
-        if (toolName === "oxlint") {
-            const fixed = await tryOxlintFix(filePath, cwd);
-            if (fixed > 0) {
-                fixedCount += fixed;
-                autofixTools.push(`oxlint:${fixed}`);
-                fixedThisTurn.add(filePath);
-                markTargetChanged();
-                dbg(`autofix: oxlint --fix fixed ${filePath}`);
-                needsContentRefresh = true;
-            }
-        }
-    }
-    if (attemptedTools.length > 0 && autofixTools.length === 0) {
-        dbg(`autofix: attempted ${attemptedTools.join(",")} for ${filePath}, but no fixes were applied`);
-    }
-    return {
-        fixedCount,
-        autofixTools,
-        attemptedTools,
-        changedFiles: [...changedFiles],
-        needsContentRefresh,
-    };
-}
-export async function resyncLspFile(filePath, fileContent, needsContentRefresh, lspSyncCompleted, getFlag, dbg) {
-    if (getFlag("no-lsp"))
-        return;
-    if (!needsContentRefresh && lspSyncCompleted)
-        return;
-    // #3405 r2: the bound is `clients/lsp/content-limits.ts` now, shared with the
-    // dispatch runner and the didSave payload. THIS call stays: a file past the
-    // bound is not synced to the server AT ALL, which is a stricter policy than
-    // the save seam's (drop the redundant text, still send the save) and the one
-    // a post-write sync owes — removing it would start writing whole-file
-    // didOpen frames for files this pipeline has always refused.
-    const limitCheck = exceedsLspSyncLimits(fileContent);
-    if (limitCheck.tooLarge)
-        return;
-    try {
-        const lspService = (await loadLspService()).getLSPService();
-        if (lspService.supportsLSP(filePath)) {
-            // Push the final post-format/post-fix content through touchFile (not the
-            // bare openFile) so it registers in the touch-debounce map via
-            // markTouched. The dispatch-lsp-runner's touchFile fires ~80ms later with
-            // identical content; registering this push makes its shouldSkipNotify
-            // return true, so it reuses the diagnostics THIS push triggers instead of
-            // re-clearing the cache and forcing the server to recompute from scratch —
-            // the dominant per-edit LSP latency (#203). diagnostics:"none" keeps this
-            // call non-blocking; the dispatch runner owns the diagnostics wait. We let
-            // the cache clear (no preserveDiagnostics) so the wait resolves on fresh,
-            // correctly-positioned diagnostics rather than stale pre-edit ones — the
-            // didChange triggers a server recompute regardless of cache preservation.
-            //
-            // The touch is client-wait-capped, but its didChange/didOpen *write* can
-            // backpressure forever on a wedged server (stdin not drained), which would
-            // hang the whole edit with no bound and — until this — no log. Race it
-            // against a hard budget + the turn's abort signal (Escape): whichever wins,
-            // the edit proceeds. A wedged server no longer parks the pipeline.
-            const budgetMs = lspSyncBudgetMs();
-            const abort = getAmbientAbortSignal();
-            if (abort?.aborted)
-                return;
-            const startedAt = Date.now();
-            const touch = lspService
-                .touchFile(filePath, fileContent, {
-                diagnostics: "none",
-                source: "lsp_sync",
-                clientScope: "primary",
-                maxClientWaitMs: LSP_SPAWN_BUDGET_MS,
-                // #3405: pi-lens just wrote these bytes to disk, so this is the one
-                // touch that is a save. A save-triggered server (Expert recompiles
-                // the project on didSave and on nothing else) publishes for the edit
-                // only because of this flag.
-                saved: true,
-            })
-                .then(() => "done")
-                .catch((err) => {
-                dbg(`LSP resync after autofix error: ${err}`);
-                return "done";
-            });
-            // #2540: Kick off auxiliary server acquisition concurrently and unawaited
-            // with the ambient turn signal so auxiliary warmup overlaps with the primary
-            // server during resync. Leaves the single-occupancy deferred slot (#2509)
-            // free for actionable-warnings while Escape mid-turn abandons the wait.
-            //
-            // #2582 F3 — the #1766 F3 invariant re-opened for a different method.
-            // #2540 placed this kick-off BEFORE the primary touch, inside
-            // resyncLspFile's swallow-all catch, so anything that threw out of
-            // auxiliary acquisition abandoned the PRIMARY sync before it started:
-            // no touchFile, and no lsp_sync_abandoned record for the stall.
-            // Auxiliary warmup is a best-effort OVERLAP, never a precondition:
-            // the primary touch is already in flight above, and the async IIFE
-            // turns a synchronous throw out of the call into a rejection so
-            // `.catch` covers both failure directions. Order and containment are
-            // the invariant; do not hoist this back above the touch.
-            const auxServerIds = enabledAuxiliaryLspServerIds(getFlag);
-            if (auxServerIds.length > 0) {
-                void (async () => lspService.getAuxiliaryClientsForFile(filePath, new Set(auxServerIds), undefined, LSP_SPAWN_BUDGET_MS, abort, "tool_result_edit"))().catch(() => { });
-            }
-            // #2523 slice 2: this was `combineAbortSignals(abort,
-            // AbortSignal.timeout(budgetMs))` fed into a hand-rolled
-            // `Promise.race` — a private fifth copy of "deadline AND signal".
-            // `bounded()` is the same thing with the abandonment recorded, and
-            // without the composite signal that #2530 review F4 measured
-            // accumulating on the SOURCE.
-            //
-            // `touch` never rejects (it catches above) and never resolves
-            // `undefined`, so `undefined` here means exactly "a bound fired".
-            const outcome = await bounded(touch, {
-                ms: budgetMs,
-                // The ambient turn signal: set for the whole tool_result path and
-                // absent only in a bare unit harness, where the wall budget is
-                // still live (`bounded()` reads a missing signal as one that
-                // never aborts).
-                signal: abort,
-                hook: "tool_result_edit",
-                label: "resyncLspFile",
-            });
-            if (outcome === undefined) {
-                // Abandon the still-pending write; the edit continues. Log it so this
-                // stall — previously an invisible hang — is queryable in latency.log.
-                //
-                // #1766: a resync deadline can expire while the target server's FIRST
-                // spawn is still in flight (cold spawn > budget). That is not the same
-                // state as a running server that stalled on a write — the server the
-                // old wording blamed as "slow/wedged" did not exist yet. Distinguish
-                // the two via a fresh, synchronous inFlight lookup so the record keeps
-                // the discriminating identity (which server, which lifecycle state).
-                // #2592: the `typeof lspService.isSpawnInFlight === "function"`
-                // hedge that used to wrap this call is GONE. It existed for one
-                // reason — 19 hand-rolled `getLSPService` doubles that lacked the
-                // method, whose TypeError would have landed in the catch below and
-                // suppressed this record entirely (#1766 F3) — and that population
-                // is now zero: every double is seeded from
-                // `makeLspServiceDouble`, `tests/support/lsp-double-baseline.json`
-                // is `{}`, and `tests/config/lsp-service-double-sweep.test.ts` reds
-                // on a fresh hand-rolled one. The real `LSPService` has always had
-                // the method (clients/lsp/index.ts), so the fallback was a test
-                // shape leaking into production — AGENTS.md shape 7.
-                const spawnInFlight = !abort?.aborted && lspService.isSpawnInFlight(filePath);
-                const reason = abort?.aborted
-                    ? "aborted"
-                    : spawnInFlight
-                        ? "spawn-in-flight"
-                        : "timeout";
-                logLatency({
-                    type: "phase",
-                    phase: "lsp_sync_abandoned",
-                    filePath,
-                    durationMs: Date.now() - startedAt,
-                    metadata: {
-                        source: "lsp_sync",
-                        reason,
-                        budgetMs,
-                    },
-                });
-                const cause = abort?.aborted
-                    ? "aborted (Escape)"
-                    : spawnInFlight
-                        ? `timed out after ${budgetMs}ms; reason: spawn-in-flight (server still cold-spawning)`
-                        : `timed out after ${budgetMs}ms; server slow/wedged`;
-                dbg(`LSP resync ${cause} for ${filePath}`);
-            }
-        }
-    }
-    catch (err) {
-        dbg(`LSP resync after autofix error: ${err}`);
-    }
-}
-/** Maps a dispatch `Diagnostic` (clients/dispatch/types.ts) to the #502 bus payload shape. */
-function toPilensDiagnosticEntry(d) {
-    const entry = {
-        severity: d.severity,
-        message: d.message,
-        tool: d.tool,
-    };
-    if (d.rule !== undefined)
-        entry.ruleId = d.rule;
-    if (d.line !== undefined)
-        entry.line = d.line;
-    if (d.column !== undefined)
-        entry.col = d.column;
-    if (d.fixable !== undefined)
-        entry.fixable = d.fixable;
-    return entry;
-}
-function buildAllClearOutput(_dispatchResult, elapsed, filePath) {
-    const kind = detectFileKind(filePath);
-    const langLabel = kind ? getFileKindLabel(kind) : path.extname(filePath);
-    const parts = [];
-    if (kind) {
-        parts.push(`${langLabel} clean`);
-    }
-    parts.push(`${elapsed}ms`);
-    return `checkmark ${parts.join(" · ")}`.replace("checkmark", "\u2713");
-}
-export async function runFormatPhase(filePath, getFormatService, dbg, signal, budgetMs = HOOK_WALL_BUDGET_MS.tool_result_edit, hook = "tool_result_edit") {
-    let formatChanged = false;
-    let formattersUsed = [];
-    const formatFailures = [];
-    const formatUnavailable = [];
-    let fileContent;
-    const formatService = getFormatService();
-    try {
-        formatService.recordRead(filePath);
-        const result = await formatService.formatFile(filePath, {
-            signal,
-            budgetMs,
-            hook,
-        });
-        // An unavailable tool is NOT a formatter that ran (#2413): keep it out of
-        // `formattersUsed` (which drives change bookkeeping / turn summaries) and
-        // out of `formatFailures` (which requeues). Record it once, distinctly.
-        for (const f of result.formatters) {
-            if (f.outcome !== "unavailable")
-                continue;
-            if (f.error?.includes("project tool agreement could not be established"))
-                continue;
-            const reason = f.error ?? "formatter executable not found";
-            formatUnavailable.push({ formatter: f.name, reason });
-            recordDegradationOnce({
-                kind: "formatter-unavailable",
-                subject: `${f.name}:${path.basename(filePath)}`,
-                reason,
-            });
-        }
-        formattersUsed = result.formatters
-            .filter((f) => f.outcome !== "unavailable")
-            .map((f) => f.name);
-        if (result.anyChanged) {
-            formatChanged = true;
-            dbg("autoformat: " +
-                result.formatters
-                    .map((f) => f.name + "(" + (f.changed ? "changed" : "unchanged") + ")")
-                    .join(", "));
-        }
-        if (!result.allSucceeded) {
-            const failures = result.formatters.filter((f) => !f.success);
-            for (const failure of failures) {
-                recordDegradationOnce({
-                    kind: "formatter-failure",
-                    subject: `${failure.name}:${path.basename(filePath)}`,
-                    reason: failure.error ?? "unknown error",
-                });
-            }
-            formatFailures.push(...failures.map((f) => `${f.name}: ${f.error ?? "unknown error"}`));
-            dbg("autoformat: " +
-                failures
-                    .map((f) => f.name + " failed: " + (f.error ?? "unknown error"))
-                    .join("; "));
-        }
-    }
-    catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
-        recordDegradationOnce({
-            kind: "formatter-failure",
-            subject: `format-service:${path.basename(filePath)}`,
-            reason: message,
-        });
-        formatFailures.push(message);
-        dbg(`autoformat error: ${err}`);
-    }
-    try {
-        fileContent = nodeFs.readFileSync(filePath, "utf-8");
-    }
-    catch {
-        fileContent = undefined;
-    }
-    return {
-        formatChanged,
-        formattersUsed,
-        formatFailures,
-        formatUnavailable,
-        fileContent,
-    };
-}
-/**
- * Build the 🔴 STOP blocker output with an inline code snippet for each
- * diagnostic so the agent can see the exact line it wrote without re-reading
- * the file.
- *
- * Example:
- *   L4: 'randomInt' is declared but its value is never read.
- *       → const randomInt = Math.floor(result);
- */
-function buildEnrichedBlockerOutput(blockers, fileContent = "") {
-    // #3188: no blockers, no banner. The delivery gate above can retract every
-    // blocker (all cited files deleted), and the header interpolates the count,
-    // so without this the agent reads "🔴 STOP — 0 issue(s) must be fixed:" with
-    // nothing under it. Same guard, same reason, as `formatDiagnostics` in
-    // dispatch/utils/format-utils.ts — it belongs to the renderer, not to each
-    // call site, because the #2028 branch below cannot gate on the count without
-    // falling through to the UNGATED raw output.
-    if (blockers.length === 0)
-        return "";
-    // Empty fileContent (readback failed, e.g. deleted-file race) still
-    // renders the gated blocker list - just without per-line snippets.
-    const fileLines = fileContent ? fileContent.split("\n") : [];
-    const MAX_SNIPPET = 120; // chars — keep it tight in context
-    let out = `\n\n🔴 STOP — ${blockers.length} issue(s) must be fixed:\n`;
-    const shown = blockers.slice(0, 10);
-    for (const d of shown) {
-        const lineNo = d.line ?? 1;
-        const nodeCtx = d.astNodeType ? ` (${d.astNodeType})` : "";
-        out += `  L${lineNo}: ${d.message}${nodeCtx}\n`;
-        // Prefer the exact matched node text (tree-sitter); fall back to the
-        // full source line (LSP / other runners).
-        const snippet = d.matchedText
-            ? d.matchedText.trim().split("\n")[0]?.slice(0, MAX_SNIPPET)
-            : fileLines[lineNo - 1]?.trim().slice(0, MAX_SNIPPET);
-        if (snippet)
-            out += `      → ${snippet}\n`;
-        if (d.fixSuggestion)
-            out += `      💡 ${d.fixSuggestion}\n`;
-    }
-    if (blockers.length > 10) {
-        out += `  ... and ${blockers.length - 10} more\n`;
-    }
-    return out;
-}
-// --- Main Pipeline ---
-export async function runPipeline(ctx, deps) {
-    const { filePath, cwd, toolName, getFlag, getFlagSource, dbg } = ctx;
-    const { getFormatService } = deps;
-    const allowAutonomousWriters = ctx.allowAutonomousWriters !== false;
-    if (!allowAutonomousWriters) {
-        incrementDegradationCount({
-            kind: "opaque-mutation-ownership-boundary",
-            subject: "pipeline",
-            reason: `observed mutation is not evidence of agent authorship (${filePath})`,
-        });
-    }
-    admitWidgetDiagnosticsWrite(filePath, ctx.telemetry?.writeIndex);
-    const phase = createPhaseTracker(toolName, filePath);
-    const pipelineStart = Date.now();
-    clearGraphCache();
-    phase.start("total");
-    // --- 1. Read file content ---
-    phase.start("read_file");
-    let fileContent;
-    try {
-        fileContent = nodeFs.readFileSync(filePath, "utf-8");
-    }
-    catch {
-        // File may not exist (e.g., deleted)
-    }
-    phase.end("read_file");
-    // --- 2. Auto-format ---
-    phase.start("format");
-    let formatChanged = false;
-    let formattersUsed = [];
-    let formatFailures = [];
-    const piChangedFiles = new Set();
-    const autoformatDisabled = !!getFlag("no-autoformat", filePath);
-    const immediateFormat = !!getFlag("immediate-format");
-    const formatDeferred = allowAutonomousWriters &&
-        !autoformatDisabled &&
-        !immediateFormat &&
-        !!fileContent;
-    if (allowAutonomousWriters &&
-        !autoformatDisabled &&
-        immediateFormat &&
-        fileContent) {
-        const formatResult = await runFormatPhase(filePath, getFormatService, dbg, ctx.signal);
-        formatChanged = formatResult.formatChanged;
-        formattersUsed = formatResult.formattersUsed;
-        formatFailures = formatResult.formatFailures;
-        fileContent = formatResult.fileContent;
-        if (formatChanged) {
-            const absPath = path.resolve(filePath);
-            piChangedFiles.add(absPath);
-            publishFilesTouched({
-                reason: "format",
-                paths: [absPath],
-                cwd,
-                dbg,
-                fixes: formattersUsed.map((tool) => ({
-                    path: absPath,
-                    tool,
-                    kind: "format",
-                })),
-            });
-        }
-    }
-    else if (formatDeferred) {
-        dbg(`autoformat: deferred until agent_end for ${filePath}`);
-    }
-    else if (!allowAutonomousWriters) {
-        dbg(`autoformat: skipped for ${filePath} (mutation ownership is unproven)`);
-    }
-    else if (autoformatDisabled) {
-        const source = getFlagSource?.("no-autoformat", filePath);
-        dbg(`autoformat: skipped for ${filePath} (--no-autoformat${source ? `, source=${source}` : ""})`);
-    }
-    phase.end("format", {
-        formattersUsed,
-        formatChanged,
-        deferred: formatDeferred,
-    });
-    // --- 3. Auto-fix ---
-    phase.start("autofix");
-    let fixedCount = 0;
-    let autofixTools = [];
-    let attemptedTools = [];
-    let autofixChangedFiles = [];
-    let fixRefresh = false;
-    let autofixSkipReason;
-    if (!allowAutonomousWriters) {
-        autofixSkipReason = "mutation_ownership_unproven";
-        dbg(`autofix: skipped for ${filePath} (mutation ownership is unproven)`);
-    }
-    else if (ctx.autofixMode === "deferred") {
-        autofixSkipReason = "deferred_to_agent_end";
-        dbg(`autofix: deferred until agent_end for ${filePath}`);
-    }
-    else
-        ({
-            fixedCount,
-            autofixTools,
-            attemptedTools,
-            changedFiles: autofixChangedFiles,
-            needsContentRefresh: fixRefresh,
-            skipReason: autofixSkipReason,
-        } = await runAutofix(filePath, cwd, getFlag, dbg, deps, getFlagSource));
-    for (const changedFile of autofixChangedFiles) {
-        piChangedFiles.add(path.resolve(changedFile));
-    }
-    if (autofixChangedFiles.length > 0) {
-        // autofixTools entries are "tool:count" (e.g. "ruff:3"); runAutofix runs
-        // against ONE target filePath per call, so every tool that fired in this
-        // batch applies to every file the batch changed — best-effort attribution
-        // (not per-file precision) since the underlying tool runners don't report
-        // per-changed-file breakdown. Good enough for the "was this hunk
-        // mechanical" use case the fix-provenance field exists for.
-        const absChangedFiles = autofixChangedFiles.map((f) => path.resolve(f));
-        const toolNames = autofixTools.map((t) => t.split(":")[0]);
-        publishFilesTouched({
-            reason: "autofix",
-            paths: absChangedFiles,
-            cwd,
-            dbg,
-            fixes: absChangedFiles.flatMap((p) => toolNames.map((tool) => ({ path: p, tool, kind: "autofix" }))),
-        });
-    }
-    if (fixRefresh) {
-        try {
-            fileContent = nodeFs.readFileSync(filePath, "utf-8");
-        }
-        catch {
-            fileContent = undefined;
-        }
-    }
-    phase.end("autofix", {
-        fixedCount,
-        tools: autofixTools,
-        attemptedTools,
-        skipReason: autofixSkipReason,
-    });
-    // Capture the target's bytes immediately after pi-lens writes and before any
-    // awaitable LSP or dispatch work. `fileModified` also covers side-effect
-    // files, so target membership is the discriminator for pipeline ownership
-    // (#2499).
-    const fileModified = formatChanged || fixedCount > 0;
-    const targetFileModified = piChangedFiles.has(path.resolve(filePath));
-    const postWriteStateHash = fileModified && targetFileModified
-        ? (() => {
-            try {
-                return nodeCrypto
-                    .createHash("sha256")
-                    .update(nodeFs.readFileSync(filePath))
-                    .digest("hex");
-            }
-            catch (error) {
-                recordDegradationOnce({
-                    kind: "pipeline-post-write-hash-unavailable",
-                    subject: filePath,
-                    reason: error instanceof Error ? error.message : String(error),
-                });
-                return undefined;
-            }
-        })()
-        : undefined;
-    // --- 4. LSP file sync ---
-    // Sync once with final post-format/post-fix content so dispatch and cascade
-    // diagnostics do not observe stale pre-format text.
-    phase.start("lsp_sync");
-    let lspSyncCompleted = false;
-    if (fileContent) {
-        await resyncLspFile(filePath, fileContent, true, false, getFlag, dbg);
-        lspSyncCompleted = true;
-    }
-    phase.end("lsp_sync", { completed: lspSyncCompleted, finalContent: true });
-    // --- 5. Dispatch lint ---
-    phase.start("dispatch_lint");
-    dbg(`dispatch: running lint tools for ${filePath}`);
-    const piApi = {
-        getFlag: getFlag,
-    };
-    const { dispatchLintWithResult, computeCascadeForFile } = await loadDispatchIntegration();
-    // Capture the bytes the pipeline presents to analysis before the dispatch
-    // promise can yield to another writer. The blocker evidence below belongs to
-    // this analysis input, not to whatever happens to be on disk when the whole
-    // pipeline returns.
-    const inlineBlockerFileContent = fileContent
-        ? (() => {
-            const content = Buffer.from(fileContent, "utf8");
-            return content.byteLength <= 2 * 1024 * 1024
-                ? {
-                    size: content.byteLength,
-                    sha256: createHash("sha256").update(content).digest("hex"),
-                }
-                : undefined;
-        })()
-        : undefined;
-    const dispatchResult = await dispatchLintWithResult(filePath, cwd, piApi, ctx.modifiedRanges, {
-        model: ctx.telemetry?.model ?? "unknown",
-        sessionId: ctx.telemetry?.sessionId ?? "unknown",
-        turnIndex: ctx.telemetry?.turnIndex ?? 0,
-        writeIndex: ctx.telemetry?.writeIndex ?? 0,
-    }, {
-        projectRoot: ctx.projectRoot,
-        writeIndex: ctx.telemetry?.writeIndex,
-        telemetryModel: ctx.telemetry?.modelId,
-        telemetryProvider: ctx.telemetry?.provider,
-    });
-    recordDiagnostics(filePath, dispatchResult.diagnostics, ctx.telemetry?.writeIndex);
-    // #502: emit the write batch's FINAL diagnostic state immediately after
-    // recordDiagnostics commits it — this call site runs after format,
-    // autofix, and dispatch have all completed for this batch (see the phase
-    // order above), so dispatchResult.diagnostics IS the latest post-batch
-    // picture, not an intermediate runner result. Full-replace semantics: we
-    // always pass the complete current set for this file, including an
-    // explicit `[]` on the transition from a previously-reported-dirty state
-    // to clean (see clients/diagnostics-publish.ts for the contract).
-    {
-        const absPath = path.resolve(filePath);
-        const wasDirty = wasPreviouslyReportedDirty(absPath);
-        if (dispatchResult.diagnostics.length > 0 || wasDirty) {
-            publishDiagnostics({
-                cwd,
-                files: [
-                    {
-                        path: absPath,
-                        diagnostics: dispatchResult.diagnostics.map(toPilensDiagnosticEntry),
-                    },
-                ],
-                dbg,
-            });
-        }
-    }
-    // Opaque recovery is a valid analysis input, but its bytes are not an agent
-    // authored surface. Keep diagnostics and advisory output visible while
-    // withholding the edit-directed channels that would tell the agent to mutate
-    // the observed artifact (#3226).
-    const hasBlockers = allowAutonomousWriters && dispatchResult.hasBlockers;
-    const actionableWarnings = allowAutonomousWriters
-        ? dispatchResult.warnings
-            .map((diagnostic) => recordFromDispatchDiagnostic(diagnostic, cwd))
-            .filter((warning) => Boolean(warning))
-        : [];
-    const codeQualityWarnings = dispatchResult.warnings
-        .map((diagnostic) => recordFromCodeQualityDiagnostic(diagnostic, cwd))
-        .filter((warning) => Boolean(warning));
-    if (dispatchResult.diagnostics.length > 0) {
-        const tracker = getDiagnosticTracker();
-        tracker.trackShown(dispatchResult.diagnostics);
-    }
-    if (fixedCount > 0)
-        getDiagnosticTracker().trackAutoFixed(fixedCount);
-    if (dispatchResult.resolvedCount > 0)
-        getDiagnosticTracker().trackAgentFixed(dispatchResult.resolvedCount);
-    let output = "";
-    // #2028: the 🔴 STOP block is an agent-facing delivery surface
-    // (finding-delivery-gate.ts's `tool-call:stop-blocker`), so it routes through
-    // the shared deleted-path gate before rendering: a blocker whose cited file
-    // no longer exists has no remediation the agent can perform (the finding IS
-    // the deleted file's content), so it is dropped here rather than re-asserted.
-    // One bounded stat per unique cited path, only when blockers exist — zero
-    // cost on the clean/fast paths.
-    const deliverableBlockers = hasBlockers
-        ? dropFindingsForMissingPaths({
-            store: "stop-blocker",
-            findings: dispatchResult.blockers,
-            cwd,
-            citedPath: (b) => b.filePath || undefined,
-        })
-        : [];
-    // #3190: ONE gate, applied once here, for EVERY surface. The durable record
-    // this function hands `runtime.recordInlineBlockers` (and through it the
-    // turn-end `Unresolved from this turn` re-serve) used to be built from the
-    // UNGATED `dispatchResult.blockerOutput`/`blockers`, so a blocker retracted
-    // from the tool result above was re-delivered at turn end — and the ungated
-    // verdict still latched the commit gate through `updateGitGuardStatus`. It is
-    // exactly `hasBlockers && nothing-survived-the-gate` inverted: the gate
-    // returns `[]` whenever `hasBlockers` is false, so this one expression is the
-    // whole condition.
-    const hasDeliverableBlockers = deliverableBlockers.length > 0;
-    if (dispatchResult.diagnostics.length > 0) {
-        const logger = getDiagnosticLogger();
-        const toKey = (d) => [
-            d.tool || "",
-            d.id || "",
-            d.rule || "",
-            d.filePath || "",
-            d.line || 0,
-            d.column || 0,
-        ].join("|");
-        const inlineKeys = new Set([...deliverableBlockers, ...dispatchResult.fixed].map(toKey));
-        for (const d of dispatchResult.diagnostics) {
-            logger.logCaught(d, {
-                model: ctx.telemetry?.model ?? "unknown",
-                sessionId: ctx.telemetry?.sessionId ?? "unknown",
-                turnIndex: ctx.telemetry?.turnIndex ?? 0,
-                writeIndex: ctx.telemetry?.writeIndex ?? 0,
-            }, inlineKeys.has(toKey(d)));
-        }
-    }
-    const deliveredOutput = !allowAutonomousWriters && dispatchResult.hasBlockers
-        ? dispatchResult.output.slice(dispatchResult.blockerOutput.length)
-        : dispatchResult.output;
-    if (hasBlockers && fileContent) {
-        // Enrich blocker output with a code snippet so the agent can see the
-        // exact line it wrote that caused each violation — no re-read needed.
-        if (deliverableBlockers.length > 0) {
-            output += buildEnrichedBlockerOutput(deliverableBlockers, fileContent);
-        }
-        // Append fixed/coverage parts from the original output (slice off the
-        // blocker section we're replacing).
-        const rest = dispatchResult.output.slice(dispatchResult.blockerOutput.length);
-        if (rest)
-            output += rest;
-    }
-    else if (deliveredOutput) {
-        // #2028 review P3: this path fires when readback FAILED - raw output
-        // still cites possibly-deleted files. Re-render from the gated set
-        // (no snippets without fileContent) and keep the post-blocker slice.
-        if (hasBlockers &&
-            deliverableBlockers.length !== dispatchResult.blockers.length) {
-            let gatedOut = buildEnrichedBlockerOutput(deliverableBlockers);
-            const rest = dispatchResult.output.slice(dispatchResult.blockerOutput.length);
-            if (rest)
-                gatedOut += rest;
-            // #3188: every blocker retracted and nothing after the blocker
-            // section leaves nothing to say — appending the separator alone would
-            // still deliver a (whitespace-only) tool-result block, because
-            // `handleToolResult` decides delivery on `output` truthiness.
-            if (gatedOut)
-                output += `\n\n${gatedOut}`;
-        }
-        else {
-            output += `\n\n${deliveredOutput}`;
-        }
-    }
-    if (fixedCount > 0) {
-        const detail = autofixTools.length > 0 ? ` (${autofixTools.join(", ")})` : "";
-        output += `\n\n✅ Auto-fixed ${fixedCount} issue(s)${detail}`;
-    }
-    if (formatFailures.length > 0) {
-        const details = formatFailures.slice(0, 3).join("; ");
-        const suffix = formatFailures.length > 3
-            ? `; ... and ${formatFailures.length - 3} more`
-            : "";
-        output += `\n\n⚠️ Auto-format failed: ${details}${suffix}`;
-    }
-    // #1590: the notice sentence itself is NOT rendered here. This layer cannot
-    // see the attachment cap or the aggregate budget, so it hands the display
-    // paths to `handleToolResult`, which owns the decision and renders the one
-    // sentence with `renderPostAutofixNotice`.
-    const postAutofixNotice = formatChanged || fixedCount > 0
-        ? {
-            targetPath: toRunnerDisplayPath(cwd, filePath),
-            changedFiles: [...piChangedFiles].map((changedFile) => toRunnerDisplayPath(cwd, changedFile)),
-        }
-        : undefined;
-    phase.end("dispatch_lint", {
-        hasOutput: !!dispatchResult.output,
-        diagnosticCount: dispatchResult.diagnostics.length,
-    });
-    // --- 6. Cascade diagnostics (LSP only) ---
-    // Kicked off UNAWAITED so the graph rebuild + neighbor LSP pulls run
-    // concurrently after the edit returns rather than blocking it (#450). The
-    // result is never shown inline — settled (bounded) and surfaced at turn_end.
-    // The stored promise must never reject: an unhandled rejection is fatal, so a
-    // failing compute resolves to an "error" skip-run instead.
-    const cascadeOrigin = {
-        turnSeq: ctx.telemetry?.turnIndex,
-        writeSeq: ctx.telemetry?.writeIndex,
-        projectSeq: ctx.seqState?.projectSeq(),
-    };
-    const cascadePromise = getFlag("no-lsp")
-        ? undefined
-        : computeCascadeForFile(filePath, cwd, {
-            hasBlockers,
-            dbg,
-            turnSeq: ctx.telemetry?.turnIndex,
-            writeSeq: ctx.telemetry?.writeIndex,
-            // #3157: `cwd` here is the LANGUAGE root. The cascade's display
-            // filter reads the disposition store and the `.pi-lens.json` rule
-            // policy, both written under the PROJECT root (#1030) — the same
-            // pair the dispatcher is handed above.
-            projectRoot: ctx.projectRoot,
-            seqState: ctx.seqState,
-            turnEndCascadeSettleStart: ctx.turnEndCascadeSettleStart,
-            fileContent,
-            wordIndex: ctx.wordIndex,
-            onWordIndexUpdated: ctx.onWordIndexUpdated,
-        })
-            .then((run) => ({ ...run, origin: cascadeOrigin }))
-            .catch((err) => {
-            dbg(`cascade compute failed for ${filePath}: ${err}`);
-            return {
-                filePath,
-                origin: cascadeOrigin,
-                result: undefined,
-                neighborCount: 0,
-                diagnosticCount: 0,
-                skipReason: "error",
-                // #1023: a thrown compute is ALSO "couldn't compute downstream
-                // impact" — carry an indeterminate marker so turn_end surfaces an
-                // honest advisory instead of the error skip being logs-only.
-                indeterminate: {
-                    reason: "error",
-                    detail: "cascade computation failed",
-                },
-            };
-        });
-    // --- Final timing + all-clear ---
-    const elapsed = Date.now() - pipelineStart;
-    // #1590: `postAutofixNotice` is output this run produces, just rendered a
-    // layer up. Treat it as output here, or a format-only change would newly
-    // gain an "all clear" line it never had while the sentence lived inline.
-    if (!output && !postAutofixNotice) {
-        output = buildAllClearOutput(dispatchResult, elapsed, filePath);
-    }
-    phase.end("total", { hasOutput: !!output });
-    const changedFiles = [...piChangedFiles];
-    emitLensAnalysisComplete({
-        cwd,
-        filePath,
-        toolName,
-        model: ctx.telemetry?.model ?? "unknown",
-        sessionId: ctx.telemetry?.sessionId ?? "unknown",
-        turnIndex: ctx.telemetry?.turnIndex ?? 0,
-        writeIndex: ctx.telemetry?.writeIndex ?? 0,
-        diagnostics: dispatchResult.diagnostics,
-        blockers: hasBlockers ? dispatchResult.blockers : [],
-        warnings: dispatchResult.warnings,
-        fixed: dispatchResult.fixed,
-        resolvedCount: dispatchResult.resolvedCount,
-        hasBlockers,
-        fileModified,
-        changedFiles,
-        durationMs: elapsed,
-    });
-    return {
-        output,
-        // #3190: the verdict every consumer reads — `updateGitGuardStatus`'s commit
-        // latch above all — is what was DELIVERED, not what the dispatch found. The
-        // two disagreed whenever the deleted-path gate retracted every blocker: the
-        // tool result said `✓ clean` while the commit gate stayed latched, its
-        // summary falling back to that very all-clear line. `emitLensAnalysisComplete`
-        // above deliberately keeps the raw dispatch counts — it records what was
-        // observed, not what was served.
-        hasBlockers: hasDeliverableBlockers,
-        cascadePromise,
-        isError: false,
-        fileModified,
-        postWriteStateHash,
-        changedFiles,
-        // #3190: re-rendered from the GATED set with `formatDiagnostics(...,
-        // "blocking")` — the very expression `dispatcher.ts:1409` builds
-        // `blockerOutput` with, over a subset of the very array it rendered. When
-        // the gate drops nothing the two are byte-identical (same renderer, same
-        // array, same display cap), so an unretracted record is unchanged; when it
-        // drops something the stored text can no longer disagree with the tool
-        // result, and `inline-blocker-dispositions.ts`' re-render at turn end still
-        // matches this string exactly.
-        inlineBlockerSummary: hasDeliverableBlockers
-            ? formatDiagnostics(deliverableBlockers, "blocking").trim() || undefined
-            : undefined,
-        // #1561 F1: taken from the very diagnostics `blockerOutput` was rendered
-        // from, so the provenance can never disagree with the text it guards. An
-        // untagged diagnostic contributes the literal "unknown", which no verdict
-        // claims coverage for — it pins the entry rather than silently widening
-        // what an LSP check is allowed to clear.
-        inlineBlockerSources: hasDeliverableBlockers
-            ? [
-                ...new Set(deliverableBlockers.map((d) => d.tool?.trim() || "unknown")),
-            ]
-            : undefined,
-        inlineBlockerLines: hasDeliverableBlockers
-            ? deliverableBlockers
-                // #1641 review F2: the blocker array (#3190: the deliverable subset
-                // of `dispatchResult.blockers`) is NOT guaranteed to be
-                // scoped to THIS file — a chart-wide runner (helm-lint, helm-render)
-                // reports blocking diagnostics against other files in the chart
-                // (e.g. `values.yaml`) alongside `ctx.filePath`. The precedent every
-                // per-file runner already follows (dotnet-build.ts, javac.ts) is to
-                // drop cross-file rows before they reach a per-file record; this is
-                // that same filter applied at the aggregation point instead, since
-                // `blockers` is pooled across every runner dispatched for this file.
-                // Without it, a cross-file line count gets attributed to THIS
-                // file's past-EOF check and can demote an in-bounds, fully valid
-                // blocker for content the diagnostic never described.
-                //
-                // #1641 review round 2 (LOW): `path.resolve` equality doesn't fold
-                // case, and an LSP-sourced diagnostic's `filePath` is stamped with
-                // realpath canonical casing (dispatch/runners/lsp.ts ->
-                // normalizeMapKey) while `ctx.filePath` can arrive lowercase-drive
-                // on Windows — the drive-letter class from #1139/#1150. A bare
-                // `path.resolve` equality then drops EVERY LSP blocker line and
-                // this record silently skips the past-EOF gate (fail-open, but
-                // exactly the pre-fix behavior on the surface #1641 targets).
-                // `normalizeEphemeralMapKey` slash-folds and (on win32)
-                // lowercase-folds both sides with no filesystem I/O — cheap enough
-                // for this per-blocker hot-path filter. `pathsEqual` was
-                // deliberately NOT used here: it calls `realpathSync` per
-                // comparison, which this filter cannot afford per blocker.
-                .filter((d) => normalizeEphemeralMapKey(d.filePath) ===
-                normalizeEphemeralMapKey(filePath))
-                .map((d) => d.line)
-                .filter((line) => typeof line === "number")
-            : undefined,
-        actionableWarnings,
-        codeQualityWarnings,
-        diagnostics: dispatchResult.diagnostics,
-        formattersUsed,
-        fixedCount,
-        autofixTools,
-        postAutofixNotice,
-        postMutation: ctx.autofixMode !== "deferred" &&
-            autofixChangedFiles.some((f) => path.resolve(f) === path.resolve(filePath)) &&
-            fileContent !== undefined
-            ? {
-                filePath: path.resolve(filePath),
-                content: fileContent,
-                source: "autofix",
-            }
-            : undefined,
-        inlineBlockerFileContent: hasBlockers
-            ? inlineBlockerFileContent
-            : undefined,
-        // #3246: the very array `blockerOutput` above was rendered from, so the
-        // turn-end policy filter and its re-render can never disagree with the
-        // text they guard — the same provenance argument `inlineBlockerSources`
-        // makes one field up.
-        inlineBlockerDiagnostics: hasDeliverableBlockers
-            ? deliverableBlockers
-            : undefined,
-    };
-}