pi-lens 4.3.0 → 4.4.1

package/dist/mcp/analyze-cli.js

@@ -1,268 +1,222 @@
 #!/usr/bin/env node
-/**
- * pi-lens-analyze — the *push* half of the mirror, in two modes.
- *
- * Per-edit (default): a Claude Code PostToolUse hook (matched to Edit|Write)
- * that fires pi-lens automatically after every edit, the way pi's per-edit
- * pipeline does. Also usable as a plain CLI for testing/debugging. Reuses the
- * Tier 1 `analyzeFile` facade and defaults to `no-lsp` so inline feedback is
- * FAST (cold LSP would cost ~5s per edit and under-report anyway — pull
- * `pilens_analyze` against the warm MCP server for the type-check). The fast
- * runners (tree-sitter structural, ast-grep security, biome/ruff/oxlint lint,
- * complexity) are complete even in a cold process.
- *
- * Per-turn (`--turn-end`, or a Claude Code `Stop` payload on stdin): the
- * analogue of pi's agent_end — incremental knip/madge, cascade-to-dependents,
- * tests, actionable-warnings aggregation. WARM-ONLY: it drives the real
- * `handleTurnEnd` inside the running MCP server over the workspace IPC socket
- * and never falls back to a cold pass, because only the warm process owns the
- * session state and pending turn work. A skip reports WHY, on stdout as well as
- * stderr (#1272 — Claude Code never surfaces stderr from a hook that exits 0,
- * so a stderr-only skip was indistinguishable from a clean turn), and records
- * the outcome for `pilens_health`.
- *
- * Input: `--file=<path>` (+ optional `--cwd=`), or a Claude Code hook JSON
- * payload on stdin (`tool_input.path`/`file_path`, `cwd`, `hook_event_name`).
- * argv wins: when `--file` or `--turn-end` is present stdin is never read at
- * all, so an open-but-idle pipe cannot hang the hook (#1271).
- * Output: a concise report on stdout; with `--hook`, a PostToolUse JSON
- * envelope that injects the report as context. Exit 0 always (advisory — never
- * blocks the edit, never blocks the stop).
- */
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  AUTOMATION_FRAMING
+} from "../chunk-J6DFZDFA.js";
+import {
+  recordTurnEndOutcome,
+  requestWarmAnalyze,
+  requestWarmTurnEnd
+} from "../chunk-XGUL4SLQ.js";
+import "../chunk-2EECBNC5.js";
+import "../chunk-7ELY2CSM.js";
+import {
+  flushExtensionLog,
+  logExtension
+} from "../chunk-34OCDWOS.js";
+import "../chunk-3PNFWVHT.js";
+import {
+  redactSecrets
+} from "../chunk-VSMJK3ZJ.js";
+import "../chunk-LJDODBBZ.js";
+import "../chunk-G3RLJYA2.js";
+import "../chunk-NXL4FFQQ.js";
+
+// dist/mcp/analyze-cli.js
 import * as path from "node:path";
-import { recordTurnEndOutcome, requestWarmAnalyze, requestWarmTurnEnd, } from "../clients/mcp/ipc.js";
-// Type-only deps at runtime — safe for the bin's light no-edit path.
-import { AUTOMATION_FRAMING } from "../clients/runtime-context.js";
 console.log = (...args) => console.error(...args);
 function argVal(name) {
-    const prefix = `--${name}=`;
-    const found = process.argv.find((value) => value.startsWith(prefix));
-    return found ? found.slice(prefix.length) : undefined;
+  const prefix = `--${name}=`;
+  const found = process.argv.find((value) => value.startsWith(prefix));
+  return found ? found.slice(prefix.length) : void 0;
 }
 async function readStdin() {
-    const chunks = [];
-    for await (const chunk of process.stdin)
-        chunks.push(chunk);
-    return Buffer.concat(chunks).toString("utf8");
+  const chunks = [];
+  for await (const chunk of process.stdin)
+    chunks.push(chunk);
+  return Buffer.concat(chunks).toString("utf8");
 }
 function formatReport(result, cwd) {
-    const rel = path.relative(cwd, result.filePath) || result.filePath;
-    const lines = [
-        // #2420: advisories (hint/info-tier style opinions) reported under their
-        // own label — no longer folded into the warning count on this surface.
-        `🔎 pi-lens: ${rel} — ${result.counts.blockers} blocking, ${result.counts.warnings} warning(s), ${result.counts.advisories} advisory(ies)`,
-    ];
-    for (const d of result.diagnostics.slice(0, 30)) {
-        const marker = d.semantic === "blocking" ? "🔴" : "⚠";
-        const label = d.rule ?? d.tool;
-        lines.push(`  ${marker} L${d.line ?? "?"} ${label}: ${d.message}`);
-    }
-    if (result.diagnostics.length > 30) {
-        lines.push(`  … ${result.diagnostics.length - 30} more`);
-    }
-    if (result.lsp &&
-        (result.lsp.status === "skipped" || result.lsp.status === "deferred")) {
-        lines.push("  (LSP diagnostics were skipped or deferred — run pilens_analyze on the warm MCP server for type errors)");
-    }
-    return lines.join("\n");
+  const rel = path.relative(cwd, result.filePath) || result.filePath;
+  const lines = [
+    // #2420: advisories (hint/info-tier style opinions) reported under their
+    // own label — no longer folded into the warning count on this surface.
+    `\u{1F50E} pi-lens: ${rel} \u2014 ${result.counts.blockers} blocking, ${result.counts.warnings} warning(s), ${result.counts.advisories} advisory(ies)`
+  ];
+  for (const d of result.diagnostics.slice(0, 30)) {
+    const marker = d.semantic === "blocking" ? "\u{1F534}" : "\u26A0";
+    const label = d.rule ?? d.tool;
+    lines.push(`  ${marker} L${d.line ?? "?"} ${label}: ${d.message}`);
+  }
+  if (result.diagnostics.length > 30) {
+    lines.push(`  \u2026 ${result.diagnostics.length - 30} more`);
+  }
+  if (result.lsp && (result.lsp.status === "skipped" || result.lsp.status === "deferred")) {
+    lines.push("  (LSP diagnostics were skipped or deferred \u2014 run pilens_analyze on the warm MCP server for type errors)");
+  }
+  return lines.join("\n");
 }
-/**
- * #1271: a piped-but-never-closed stdin used to hang this bin forever — the
- * `isTTY` guard only covers an interactive terminal, and any spawner using
- * `stdio: 'pipe'` (CI wrappers, `sh -c`, pre-commit runners) leaves the pipe
- * open. As a Stop hook that meant sitting at Claude Code's full 60 s timeout
- * every turn; a hung hook is strictly worse than a failed one. Bounded read →
- * degrade to "no payload", which is exactly how a plain CLI invocation is
- * already treated. `unref` so a still-open pipe cannot hold the event loop
- * after we have stopped caring about it.
- */
-const STDIN_READ_TIMEOUT_MS = 2_000;
+var STDIN_READ_TIMEOUT_MS = 2e3;
 async function readHookPayload() {
-    if (process.stdin.isTTY)
-        return undefined;
-    const raw = await Promise.race([
-        readStdin(),
-        new Promise((resolve) => {
-            const timer = setTimeout(() => resolve(undefined), STDIN_READ_TIMEOUT_MS);
-            timer.unref();
-        }),
-    ]);
-    if (raw === undefined) {
-        process.stdin.pause();
-        process.stdin.unref?.();
-        return undefined;
-    }
-    try {
-        return JSON.parse(raw) ?? undefined;
-    }
-    catch {
-        // not a JSON payload — plain CLI invocation
-        return undefined;
-    }
+  if (process.stdin.isTTY)
+    return void 0;
+  const raw = await Promise.race([
+    readStdin(),
+    new Promise((resolve) => {
+      const timer = setTimeout(() => resolve(void 0), STDIN_READ_TIMEOUT_MS);
+      timer.unref();
+    })
+  ]);
+  if (raw === void 0) {
+    process.stdin.pause();
+    process.stdin.unref?.();
+    return void 0;
+  }
+  try {
+    return JSON.parse(raw) ?? void 0;
+  } catch {
+    return void 0;
+  }
 }
-// The framing token is for pi's user-role injection; the rest of the first
-// line reads fine in a transcript, so only the token goes.
-const TURN_END_MAX_LINES = 40;
-const TURN_END_MAX_CHARS = 2000;
-/**
- * #1275: the `tests` section is the RAW vitest failure dump, which carries SGR
- * colour codes and other control bytes straight into the Claude Code
- * transcript — and the character cap below can slice an escape sequence in
- * half, leaking the tail as literal garbage. Strip CSI/two-byte escapes and C0
- * controls (keeping \n and \t, which the render depends on) plus DEL, BEFORE
- * capping so the caps measure text the reader will actually see.
- */
-// biome-ignore lint/suspicious/noControlCharactersInRegex: stripping control characters is the point
-const ANSI_AND_CONTROL = new RegExp([
-    "\\u001B\\][\\s\\S]*?(?:\\u0007|\\u001B\\\\)", // OSC … BEL/ST
-    "\\u001B\\[[0-?]*[ -/]*[@-~]", // CSI — SGR colours et al
-    "\\u001B[@-Z\\\\-_]", // two-byte escapes
-    "[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F\\u007F]", // C0 minus newline/tab, plus DEL
+var TURN_END_MAX_LINES = 40;
+var TURN_END_MAX_CHARS = 2e3;
+var ANSI_AND_CONTROL = new RegExp([
+  "\\u001B\\][\\s\\S]*?(?:\\u0007|\\u001B\\\\)",
+  // OSC … BEL/ST
+  "\\u001B\\[[0-?]*[ -/]*[@-~]",
+  // CSI — SGR colours et al
+  "\\u001B[@-Z\\\\-_]",
+  // two-byte escapes
+  "[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F\\u007F]"
+  // C0 minus newline/tab, plus DEL
 ].join("|"), "g");
 function stripControlSequences(text) {
-    return text.replace(ANSI_AND_CONTROL, "");
+  return text.replace(ANSI_AND_CONTROL, "");
 }
-/**
- * #1275: `slice` counts UTF-16 code units, so a cut that lands between the high
- * and low halves of a surrogate pair renders as U+FFFD — and findings are dense
- * with emoji. Back the cut off by one when it would orphan a high surrogate.
- */
 function capCodeUnits(text, cap) {
-    if (text.length <= cap)
-        return text;
-    const last = text.charCodeAt(cap - 1);
-    const splitsPair = last >= 0xd800 && last <= 0xdbff;
-    return text.slice(0, splitsPair ? cap - 1 : cap);
+  if (text.length <= cap)
+    return text;
+  const last = text.charCodeAt(cap - 1);
+  const splitsPair = last >= 55296 && last <= 56319;
+  return text.slice(0, splitsPair ? cap - 1 : cap);
 }
 function formatTurnEnd(response) {
-    const sections = [response.turnEnd, response.tests]
-        .filter((section) => Boolean(section))
-        // #1275: the producer emits the framing token as a PREFIX, but a section
-        // assembled by joining several messages can carry it again mid-text, where
-        // a positional strip would leave it in the transcript. Replace every
-        // occurrence — the token is never meaningful content.
-        .map((section) => stripControlSequences(section.split(AUTOMATION_FRAMING).join("")));
-    if (sections.length === 0)
-        return undefined;
-    // `turnEnd` is server-capped, `tests` is not (a vitest failure dump can run long).
-    let out = `🔎 pi-lens turn-end\n${sections.join("\n\n")}`;
-    const lines = out.split("\n");
-    if (lines.length > TURN_END_MAX_LINES) {
-        out = `${lines.slice(0, TURN_END_MAX_LINES).join("\n")}\n  … (truncated)`;
-    }
-    if (out.length > TURN_END_MAX_CHARS) {
-        out = `${capCodeUnits(out, TURN_END_MAX_CHARS)}\n  … (truncated)`;
-    }
-    return out;
+  const sections = [response.turnEnd, response.tests].filter((section) => Boolean(section)).map((section) => stripControlSequences(section.split(AUTOMATION_FRAMING).join("")));
+  if (sections.length === 0)
+    return void 0;
+  let out = `\u{1F50E} pi-lens turn-end
+${sections.join("\n\n")}`;
+  const lines = out.split("\n");
+  if (lines.length > TURN_END_MAX_LINES) {
+    out = `${lines.slice(0, TURN_END_MAX_LINES).join("\n")}
+  \u2026 (truncated)`;
+  }
+  if (out.length > TURN_END_MAX_CHARS) {
+    out = `${capCodeUnits(out, TURN_END_MAX_CHARS)}
+  \u2026 (truncated)`;
+  }
+  return out;
 }
-/**
- * #1272: every skip used to read "no warm pi-lens MCP server", including the
- * cases where the server WAS warm and answering. Those are different remedies —
- * start the server, wait for a slow pass, or rebuild a stale one — so the
- * message names which happened. `ipc-error` is also what a stale-build reply
- * looks like on the wire (the server answers `{error: "warm build stale"}`),
- * hence the rebuild hint on that arm.
- */
-const TURN_END_SKIP_REASONS = {
-    "ipc-error": "no warm pi-lens MCP server answered for this workspace, or its build is stale — start the MCP server, or run `npm run build` if you have edited pi-lens sources",
-    // #3255: split out of `ipc-error` because its remedy is different and no
-    // rebuild reaches it. A server that was already running when pi-lens was
-    // upgraded still owns the endpoint name the previous build derived.
-    "no-listener": "nothing is listening on this workspace's warm endpoint — start the MCP server; if pi-lens was upgraded while a server was running, that server still owns the endpoint name of the previous build, so restart it",
-    timeout: "the warm pi-lens MCP server did not finish the pass within the hook budget — the turn-end findings are kept and will be delivered on a later Stop",
-    "schema-mismatch": "the warm pi-lens MCP server speaks a different turn-end schema than this hook binary — rebuild and restart the server so both halves match",
-    "stale-answer": "the warm pi-lens MCP server replied about a superseded state — the findings are kept for a later Stop",
+var TURN_END_SKIP_REASONS = {
+  "ipc-error": "no warm pi-lens MCP server answered for this workspace, or its build is stale \u2014 start the MCP server, or run `npm run build` if you have edited pi-lens sources",
+  // #3255: split out of `ipc-error` because its remedy is different and no
+  // rebuild reaches it. A server that was already running when pi-lens was
+  // upgraded still owns the endpoint name the previous build derived.
+  "no-listener": "nothing is listening on this workspace's warm endpoint \u2014 start the MCP server; if pi-lens was upgraded while a server was running, that server still owns the endpoint name of the previous build, so restart it",
+  timeout: "the warm pi-lens MCP server did not finish the pass within the hook budget \u2014 the turn-end findings are kept and will be delivered on a later Stop",
+  "schema-mismatch": "the warm pi-lens MCP server speaks a different turn-end schema than this hook binary \u2014 rebuild and restart the server so both halves match",
+  "stale-answer": "the warm pi-lens MCP server replied about a superseded state \u2014 the findings are kept for a later Stop"
 };
 async function runTurnEndMode(cwd, payload) {
-    // Subagent edits already fire PostToolUse into the shared workspace turn
-    // state, and the consume bridges are one-shot — a subagent pass would eat the
-    // main agent's findings into a transcript nobody reads, and multiply the
-    // heavy pass by the fan-out. Only the main agent's Stop runs it.
-    if (payload?.hook_event_name === "SubagentStop") {
-        process.stderr.write("pi-lens turn-end skipped: SubagentStop (the main agent's Stop runs the pass)\n");
-        process.exitCode = 0;
-        return;
-    }
-    // Warm-only by design: only the server process owns the session state and
-    // pending turn work, so a cold pass would report a false clean (#533/#1023).
-    const outcome = await requestWarmTurnEnd(cwd);
-    if (!outcome.available) {
-        const detail = TURN_END_SKIP_REASONS[outcome.reason];
-        const message = `🔎 pi-lens turn-end skipped (${outcome.reason}): ${detail}`;
-        // #1272: stderr AND stdout. Claude Code does not surface stderr from a
-        // hook that exits 0, so a stderr-only skip made a permanently dead
-        // integration byte-for-byte identical to a clean turn. stdout is the
-        // hook's only transcript-visible channel, so the skip goes there too —
-        // one line, so a genuinely absent server is a footnote, not noise.
-        process.stderr.write(`${message} (cwd: ${cwd})\n`);
-        await writeStdout(message);
-        recordTurnEndOutcome(cwd, { ran: false, reason: outcome.reason });
-        process.exitCode = 0;
-        return;
-    }
-    recordTurnEndOutcome(cwd, { ran: true });
-    const report = formatTurnEnd(outcome.response);
-    if (report)
-        await writeStdout(report);
+  if (payload?.hook_event_name === "SubagentStop") {
+    process.stderr.write("pi-lens turn-end skipped: SubagentStop (the main agent's Stop runs the pass)\n");
+    process.exitCode = 0;
+    return;
+  }
+  const outcome = await requestWarmTurnEnd(cwd);
+  if (!outcome.available) {
+    const detail = TURN_END_SKIP_REASONS[outcome.reason];
+    const message = `\u{1F50E} pi-lens turn-end skipped (${outcome.reason}): ${detail}`;
+    process.stderr.write(`${message} (cwd: ${cwd})
+`);
+    await writeStdout(message);
+    recordTurnEndOutcome(cwd, { ran: false, reason: outcome.reason });
     process.exitCode = 0;
+    return;
+  }
+  recordTurnEndOutcome(cwd, { ran: true });
+  const report = formatTurnEnd(outcome.response);
+  if (report)
+    await writeStdout(report);
+  process.exitCode = 0;
 }
 function writeStdout(text) {
-    return new Promise((done) => {
-        process.stdout.write(`${text}\n`, () => done());
-    });
+  return new Promise((done) => {
+    process.stdout.write(`${text}
+`, () => done());
+  });
+}
+function writeReport(report, hookMode) {
+  return writeStdout(hookMode ? JSON.stringify({
+    hookSpecificOutput: {
+      hookEventName: "PostToolUse",
+      additionalContext: report
+    }
+  }) : report);
 }
 async function main() {
-    const hookMode = process.argv.includes("--hook");
-    const withLsp = process.argv.includes("--lsp");
-    const fileArg = argVal("file");
-    const turnEndFlag = process.argv.includes("--turn-end");
-    // #1271: the stdin payload is the fallback way to learn WHAT to do. When
-    // argv already says so, reading stdin buys nothing and costs everything —
-    // an open pipe (`stdio: 'pipe'` with no `end()`) used to hang here forever,
-    // which as a Stop hook means Claude Code waits out its full 60 s timeout on
-    // every single turn. Only dial stdin when argv left the question open.
-    const payload = fileArg === undefined && !turnEndFlag ? await readHookPayload() : undefined;
-    const cwd = argVal("cwd") ?? payload?.cwd ?? process.cwd();
+  const hookMode = process.argv.includes("--hook");
+  const withLsp = process.argv.includes("--lsp");
+  const fileArg = argVal("file");
+  const turnEndFlag = process.argv.includes("--turn-end");
+  let cwd = argVal("cwd") ?? process.cwd();
+  let hookInvocation = hookMode;
+  let operation = "analyze";
+  try {
+    const payload = fileArg === void 0 && !turnEndFlag ? await readHookPayload() : void 0;
+    cwd = argVal("cwd") ?? payload?.cwd ?? cwd;
     const event = payload?.hook_event_name;
+    const payloadFile = payload?.tool_input?.file_path ?? payload?.tool_input?.path;
+    hookInvocation ||= Boolean(payloadFile);
     if (turnEndFlag || event === "Stop" || event === "SubagentStop") {
-        return runTurnEndMode(cwd, payload);
+      hookInvocation = true;
+      operation = "turn-end";
+      await runTurnEndMode(cwd, payload);
+      return;
     }
-    const file = fileArg ?? payload?.tool_input?.file_path ?? payload?.tool_input?.path;
+    const file = fileArg ?? payloadFile;
     if (!file)
-        process.exit(0); // nothing to analyze — stay silent
-    // Warm path first: if the MCP server is up for this workspace, it analyzes in
-    // its warm process (LSP-COMPLETE) and we never load the dispatch graph here.
-    // Falls back to a cold, no-LSP local run when no server is reachable.
+      process.exit(0);
     let result = await requestWarmAnalyze(cwd, file);
     if (!result) {
-        const { analyzeFile } = await import("../clients/mcp/analyze.js");
-        result = await analyzeFile(file, cwd, {
-            flags: withLsp ? {} : { "no-lsp": true },
-            record: false,
-            // Edit-detection path (PostToolUse) — mark the file for pilens_turn_end.
-            registerTurnState: true,
-        });
+      const { analyzeFile } = await import("../chunk-2FQ62SPM.js");
+      result = await analyzeFile(file, cwd, {
+        flags: withLsp ? {} : { "no-lsp": true },
+        record: false,
+        registerTurnState: true
+      });
     }
-    // One-shot consumers cannot rely on the installer's unref'd debounce.
-    const { flushProbeCache } = await import("../clients/installer/index.js");
+    const { flushProbeCache } = await import("../probes/installer.js");
     await flushProbeCache();
     if (result.counts.diagnostics === 0)
-        process.exit(0); // clean → no noise
-    const report = formatReport(result, cwd);
-    if (hookMode) {
-        process.stdout.write(JSON.stringify({
-            hookSpecificOutput: {
-                hookEventName: "PostToolUse",
-                additionalContext: report,
-            },
-        }));
-    }
-    else {
-        process.stdout.write(`${report}\n`);
-    }
+      process.exit(0);
+    await writeReport(formatReport(result, cwd), hookMode);
     process.exit(0);
+  } catch (err) {
+    const detail = redactSecrets(stripControlSequences(err instanceof Error ? err.message : String(err))).replace(/\s+/g, " ");
+    const reason = detail.length > 1e3 ? `${capCodeUnits(detail, 1e3)}\u2026 (truncated)` : detail;
+    const message = `pi-lens-analyze failed: ${reason}`;
+    recordTurnEndOutcome(cwd, { failed: true, operation, reason });
+    logExtension({
+      subsystem: "analyze-cli",
+      message: "analyze-cli-failed",
+      metadata: { cwd, operation, reason }
+    });
+    process.stderr.write(`${message}
+`);
+    await writeReport(message, hookMode && operation === "analyze");
+    await flushExtensionLog();
+    process.exit(hookInvocation ? 0 : 2);
+  }
 }
-main().catch((err) => {
-    process.stderr.write(`pi-lens-analyze failed: ${err.message}\n`);
-    process.exit(0); // advisory — never break the edit flow
-});
+void main();