pi-lens 4.4.0 → 4.4.1

package/CHANGELOG.md

@@ -16,6 +16,101 @@ All notable changes to pi-lens will be documented in this file.
 
 ### Security
 
+## [4.4.1] - 2026-10-09
+
+### Added
+
+- **Public LSP config schema and compatibility normalization** (closes #2416): canonical argv-shaped server entries and legacy string-command files now share a validated, provenance-aware model without changing runtime launch behavior.
+
+- **Shared custom rules are now loaded from a user-level directory.** Thanks to @Antrakos; project rules take precedence over user rules, which take precedence over bundled rules.
+
+- **The official Docker Language Server is now verified in nightly LSP smoke tests.** Its pinned v0.20.1 binary is measured through the real pi-lens client, with the preferred legacy server retained as the fallback. Thanks @qiyangfan for reporting #3939.
+
+- **Deferred formatting now announces settled completion with ownership identity** (refs #673; thanks @marioSoftmedic), including an empty path list when no bytes changed; late formatter writes delay completion until resync.
+
+### Changed
+
+- Idle eviction is now enabled for `docker`, `json`, and `python-jedi` after consecutive safe measurements (refs #3989).
+
+### Fixed
+
+- **Report fixer restore loss.** Agent edits that a whole-package fixer erased are now reported when their calls overlap the restore, or when a later edit landed on the fixer's bytes; newer bytes are retained when the restore can prove they are newer. One case stays unreported and is named as a residual: a fixer write that lands between an edit's tool call and the host applying that edit (#3830).
+
+- **Batched scans keep their compiled query across a heal.** A rule healed during an in-flight compile no longer stays missing from later batched scans, scans sharing that compile no longer report zero findings when a heal races its publication, and a compile that is refused publication frees its native query instead of leaking it. (#3834)
+
+- **A grammar that traps on two distinct files is retired, not retried until the heap aborts.** The runner reports the language unavailable instead of clean and other languages keep the remaining trap budget; a file that traps once and then parses cleanly does not count (refs #4010, #3996).
+
+- **The word index no longer holds its serialized copy while idle.** It is released when the agent run settles (once per run), kept while a run edits so per-edit saves stay incremental, and released after 10 minutes without a save for a stalled run (`PI_LENS_WORD_INDEX_MEMO_BACKSTOP_MS`).
+
+- **Startup warm caches now cover up to 2,500 measured source files safely.** Larger projects still see the once-per-session reason and the bound to raise.
+
+- **The read guard keeps authorship through pi-lens-owned rewrites.** A file the agent wrote stays editable without a re-read when `ast_grep_replace`, `lens_diagnostic_mark`, or an LSP operation rewrites the file that call named and no foreign writer intervened. A file the tool wrote without naming it (a rename's importers, a folder-wide or project-wide apply), a server-initiated `workspace/applyEdit`, or a foreign byte change ends authorship instead, so the next edit asks for one read, and third-party bridge records remain fail-closed (#4131). Authorship survives `/tree`, `/fork` and resume when the branch still shows the write (#3603). Process-bridge writes, observed tool writes and partial bridge reads no longer mark the whole file as freshly read (#3865).
+
+- **`throw Error(x)` style findings are now warnings, not blockers.** The `throw-new-error` rules still encourage explicit construction while recognizing that `Error(x)` is spec-equivalent to `new Error(x)`.
+
+- **Shared secondary worktree roots now remain visible until every session holding them leaves.** Each session's registry record lists only the roots it registered, so a session ending after a primary reload or a cap eviction can no longer drop a root another live session still serves (#3849).
+
+- **Lint fallback no longer hides missing type coverage.** Type-bearing files keep the existing incomplete-coverage notice when their primary analysis was skipped, unavailable, or failed; type-capable fallbacks such as mypy can still complete coverage.
+
+- **Keep source-build tools aligned with the lockfile (#4066).** Both esbuild bundles and the TypeScript fallback use the exact locked versions while retaining isolated npm exec resolution and exact lifecycle-script approval.
+
+- **Scanners now avoid linked worktree duplicates.** Gitleaks, trivy and opengrep discover linked checkouts nested under the project root instead of relying only on known directory names; paths that a scanner cannot represent safely are reported as bounded scan degradations (fixes #4132).
+
+- Prevented pi-lens's read-only registry-tool operations from being mistaken for learned edits after another operation mutates a file.
+
+- **Ast-grep rule validation no longer stalls on blank-heavy YAML (#4148)** — A rule with tens of thousands of blank lines no longer blocks the host while its language is detected.
+
+- **Pytest and go.mod parsing no longer stall on blank-heavy input (#4148)** — Reading a pytest failure traceback and the `module` line of a `go.mod` now takes linear time, so a run with tens of thousands of blank lines or one very long `_` rule no longer blocks the host for seconds (13 s and 4 s at 100K lines before).
+
+- **Refresh TypeScript clients across package roots (closes #4156)** — Changed files are announced to live sibling-root language-server clients, preventing stale importer diagnostics. Credit: Don-Yin.
+
+- **A project's data directory stays stable for the whole process** (#4199): it is settled when the process first resolves the root, so an ephemeral checkout no longer moves its data when a `.pi-lens` directory appears mid-process, and a `.pi-lens` created by hand in a real project takes effect at the next process start.
+
+- **Read-guard authorship now stays within bytes each writer actually changed.**
+
+- **Outside-root edits now explain skipped analysis** (#4218) — pi-lens tells you to start pi in the file's directory or add it to the workspace.
+
+- **Answered LSP findings are preserved when another server times out** — typos diagnostics now remain visible when Marksman is inconclusive for the same edit. (closes [#4219](https://github.com/apmantza/pi-lens/issues/4219))
+
+- **Identity checks against `True`/`False` are no longer flagged** — the rule now preserves correct Python singleton checks while continuing to catch non-singleton literal comparisons. Thanks @rastarr for the report. (closes [#4225](https://github.com/apmantza/pi-lens/issues/4225))
+
+- **Release summaries keep wrapped changelog entries intact** — release notes now join an entry's wrapped lines before shortening it, so plain entries no longer end mid-sentence and bold gist text keeps continuation-line issue references.
+
+- **Read evidence now survives relative paths, nested codemode calls and conversation moves**: relative-path reads, nested reads and pi-lens rewrites (including the structural `ast_grep_replace` apply) keep their read-guard and mutation bookkeeping across `/clone`, `/fork`, `/tree` and `/reload`; a read that errored (even if another extension rewrites its result to success), or that another extension blocked, no longer licenses an edit later in the same run, and a read never blocks a whole-package fixer's restore of an agent edit.
+
+### Internal
+
+<details>
+<summary>13 internal changes: tests, CI, tooling, and refactors</summary>
+
+- The TLA+ hook-anchor scan escapes every regex metacharacter in a handler name, not only `$`.
+
+- Changelog fragment validation now constrains new user-facing leads.
+
+- **Idle-eviction measurements cover temporary checkouts (refs #3989)** — The nightly probe now arms the short idle window used by ephemeral LSP roots as well as the generic window, so eligible servers are measured instead of reported as not evicted.
+
+- **release-qa reads the pi version from `pi --version` only (closes #4176)** — The codemode row no longer takes an x.y.z from the pi binary's install path, so a version-shaped directory cannot make it run or skip on the wrong pi.
+
+- Keep config-declared LSP roles reserved and inert in the loader; the catalog remains the owner of auxiliary selection.
+
+- Make the workflow Git-push detector regex linear for quoted options.
+
+- One LSP server-role vocabulary and a declared trait table (refs #1488, refs #1756): `LSPServerInfo.role` is now non-optional, 44 inlined `role === "auxiliary"` / `role !== "auxiliary"` predicates fold onto `isAuxiliary()`, `PromiseDescriptor.role` retires its duplicate `"primary"` spelling, the auxiliary wait policy moves to `clients/lsp/auxiliary-lifecycle.ts`, and the `notifyInflightLimit` / `replyOrdering` traits are declared on the server definition. No behaviour change.
+
+- **Merge-policy mistake table: 2026-10-07 and 2026-10-08 retrospective** — new internal rows on delivery wording, shared records, worker handoffs, CI and advisory classification, release producers, probe witnesses, test doubles, and round routing.
+
+- Failed handler-verdict tests when `handleToolCall` threw and production swallowed it: `runHandlerExpectingNoThrow` (`tests/support/handler-verdict.ts`) wraps every direct call and the pi mock's `tool_call` hooks, and a governance sweep rejects an unchecked call (#3518, recurrence #4182).
+
+- **TLA+ session models cover marker expiry, the per-evaluation LSP generation, the widget token and the late coordinator stores (refs #3803)**: #3668's successor-pending marker expires (`MarkerExpire`, no clock), #3755's per-evaluation generation is caught by an owner-live invariant the generation clause could not see, the widget's `>=` tie and fork carry are pinned in both directions (`SessionLifecycleF1`), the receipt, `fixedThisTurn`, analysed-state latch and runner writers are fenced by their captured scope (#3824), and `session-straddle` retires the generation at shutdown (#3611), each with a violating pre-fix or mutant config and a passing merged one.
+
+- **TLA+ session-lifecycle models the S3 writers and the subagent turn_end (refs #3803)**: the deferral queue's two-hop credit (#3705), the turn-state, turn-summary and git-guard late writers with the debounce re-entry (#3759), the mutation bridge's producer with and without a lineage (#3763), the park map of cut advisories (#4112), and a turn_end composer on a shared coordinator, each with a violating pre-fix or mutant config and a passing merged one; the coverage map names the bridge producers and the turn summary.
+
+- Map the unmapped lifecycle files in `formal/coverage-map.json` and gate `index.ts` per lifecycle hook handler instead of per file (refs #3803).
+
+- Vitest no longer collects test files from a stray worktree inside `.probe-home/` on a path-filtered run.
+
+</details>
+
 ## [4.4.0] - 2026-10-08
 
 ### Added

package/README.md

@@ -482,6 +482,7 @@ Thanks goes to these wonderful people:
     <tr>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/pandas9"><img src="https://avatars.githubusercontent.com/u/81386636?v=4" width="100px;" alt=""/><br /><sub><b>pandas9</b></sub></a><br /><a href="#bug-pandas9" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/renzooliveira"><img src="https://avatars.githubusercontent.com/u/10881850?v=4" width="100px;" alt=""/><br /><sub><b>Renzo Oliveira</b></sub></a><br /><a href="#ideas-renzooliveira" title="Ideas & Planning">🤔</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/rastarr"><img src="https://avatars.githubusercontent.com/u/2160922?v=4" width="100px;" alt=""/><br /><sub><b>Martin</b></sub></a><br /><a href="#bug-rastarr" title="Bug reports">🐛</a> <a href="#ideas-rastarr" title="Ideas & Planning">🤔</a></td>
     </tr>
   </tbody>
 </table>

package/dist/chunk-2FQ62SPM.js

@@ -0,0 +1,83 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  _getWarmWordIndexCacheStateForTests,
+  _resetWarmWordIndexCacheForTests,
+  acquireWarmWordIndex,
+  analyzeFile,
+  summarizeWarningTiers
+} from "./chunk-ZZUFZUQZ.js";
+import "./chunk-ZOEYVXSV.js";
+import "./chunk-KJN4IOEJ.js";
+import "./chunk-FC4RP4I2.js";
+import "./chunk-YLN4K6WD.js";
+import "./chunk-J3FZR3YY.js";
+import "./chunk-5JHXUETW.js";
+import "./chunk-3MRXIJ6I.js";
+import "./chunk-TA5L5KWQ.js";
+import "./chunk-FGALODG3.js";
+import "./chunk-OC7LYAU5.js";
+import "./chunk-NFXP47RV.js";
+import "./chunk-MGIWSROG.js";
+import "./chunk-WSEWKCXU.js";
+import "./chunk-MQA2YBAH.js";
+import "./chunk-TQFBZVCG.js";
+import "./chunk-WATC3IQR.js";
+import "./chunk-OYOB3ZFG.js";
+import "./chunk-XHSCVSOL.js";
+import "./chunk-V5MEBST3.js";
+import "./chunk-3MED75HT.js";
+import "./chunk-IMSQR4WO.js";
+import "./chunk-MTDRLSI7.js";
+import "./chunk-OZJINN4O.js";
+import "./chunk-3JSEWUWI.js";
+import "./chunk-XIMYZ3JA.js";
+import "./chunk-IQZXOZ7S.js";
+import "./chunk-LNOMA3MP.js";
+import "./chunk-U52SAGRM.js";
+import "./chunk-5W3R6LFT.js";
+import "./chunk-UEAHAMEI.js";
+import "./chunk-Z54ZSOBZ.js";
+import "./chunk-KJCWXUUS.js";
+import "./chunk-QOZXJ4NA.js";
+import "./chunk-6XX5HCLK.js";
+import "./chunk-S6AMWKPC.js";
+import "./chunk-F5VLZHUW.js";
+import "./chunk-AXKPQ6ZI.js";
+import "./chunk-7BX5DWSA.js";
+import "./chunk-IUKPRZER.js";
+import "./chunk-Z3CCVDUB.js";
+import "./chunk-XGUL4SLQ.js";
+import "./chunk-2BEMIWEW.js";
+import "./chunk-LD7WFTRX.js";
+import "./chunk-IUR76K6A.js";
+import "./chunk-T4QZ6FEH.js";
+import "./chunk-D6YF5HKX.js";
+import "./chunk-CMU4RMJB.js";
+import "./chunk-O7HZX7CA.js";
+import "./chunk-VYKKMYVT.js";
+import "./chunk-BNKLYOOO.js";
+import "./chunk-USHG4DLH.js";
+import "./chunk-H5EV3VMF.js";
+import "./chunk-T54VJRAD.js";
+import "./chunk-BW5KFIQC.js";
+import "./chunk-QYF5S6P6.js";
+import "./chunk-64LU2OVH.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
+import "./chunk-2EECBNC5.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
+import "./chunk-LJDODBBZ.js";
+import "./chunk-UGSMCQ4D.js";
+import "./chunk-ABBOA7UD.js";
+import "./chunk-G3RLJYA2.js";
+import "./chunk-NXL4FFQQ.js";
+export {
+  _getWarmWordIndexCacheStateForTests,
+  _resetWarmWordIndexCacheForTests,
+  acquireWarmWordIndex,
+  analyzeFile,
+  summarizeWarningTiers
+};

package/dist/{chunk-6P62QVEA.js → chunk-2UMYMRI3.js}

@@ -1,10 +1,10 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   isMutatingToolName
-} from "./chunk-OAXNDZJ7.js";
+} from "./chunk-3JSEWUWI.js";
 import {
   normalizeMapKey
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/agent-behavior-client.js
 var READ_OPS = /* @__PURE__ */ new Set(["read", "bash", "grep", "glob", "find", "rg"]);

package/dist/{chunk-O6TQT6RI.js → chunk-34OCDWOS.js}

@@ -5,7 +5,7 @@ import {
   getMaxLogSizeMB,
   getTurnId,
   isTestMode
-} from "./chunk-UK3CMEAL.js";
+} from "./chunk-VSMJK3ZJ.js";
 
 // dist/clients/extension-log.js
 import * as path from "node:path";

package/dist/{chunk-XK4CIILI.js → chunk-3FERWMCH.js}

@@ -52,41 +52,41 @@ import {
   tryLazyInstallFormatterTool,
   typstyleFormatter,
   zigFormatter
-} from "./chunk-F3AU2TMM.js";
-import "./chunk-C2AUYXQH.js";
+} from "./chunk-ZETYB3XG.js";
+import "./chunk-ZOEYVXSV.js";
 import "./chunk-FC4RP4I2.js";
-import "./chunk-HHYAELLJ.js";
+import "./chunk-MGIWSROG.js";
 import "./chunk-QOZXJ4NA.js";
-import "./chunk-PAK6IDME.js";
-import "./chunk-AJVLWNFN.js";
-import "./chunk-YGVYKNSN.js";
-import "./chunk-LNAKEO63.js";
+import "./chunk-S6AMWKPC.js";
+import "./chunk-AXKPQ6ZI.js";
+import "./chunk-7BX5DWSA.js";
+import "./chunk-IUKPRZER.js";
 import "./chunk-Z3CCVDUB.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-OQGFCZJ4.js";
-import "./chunk-RUOG5D2C.js";
-import "./chunk-U3VGR4VU.js";
-import "./chunk-NTUJEGDZ.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
-import "./chunk-22AVIGXS.js";
-import "./chunk-GVXA6CCE.js";
-import "./chunk-6QIUX4EP.js";
-import "./chunk-VHQLPIRJ.js";
-import "./chunk-VN2AXLEX.js";
+import "./chunk-LD7WFTRX.js";
+import "./chunk-IUR76K6A.js";
+import "./chunk-T4QZ6FEH.js";
+import "./chunk-D6YF5HKX.js";
+import "./chunk-CMU4RMJB.js";
+import "./chunk-O7HZX7CA.js";
+import "./chunk-VYKKMYVT.js";
+import "./chunk-BNKLYOOO.js";
+import "./chunk-USHG4DLH.js";
+import "./chunk-H5EV3VMF.js";
+import "./chunk-T54VJRAD.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-64LU2OVH.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   ALL_FORMATTERS,

package/dist/{chunk-ZAWW3AF6.js → chunk-3JL6IFD7.js}

@@ -1,19 +1,19 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getProjectDataDir
-} from "./chunk-VN2AXLEX.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+} from "./chunk-T54VJRAD.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
 import {
   redactSecrets
-} from "./chunk-UK3CMEAL.js";
+} from "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/fix-worklog.js

package/dist/{chunk-OAXNDZJ7.js → chunk-3JSEWUWI.js}

@@ -1,21 +1,21 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getProjectDataDir
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
 import {
   createNdjsonLogger,
   getGlobalPiLensLogDir,
   getProcessSingleton,
   getTurnId,
   isTestMode
-} from "./chunk-UK3CMEAL.js";
+} from "./chunk-VSMJK3ZJ.js";
 import {
   BoundedFifoMap
 } from "./chunk-ABBOA7UD.js";
 import {
   normalizeFilePath,
   normalizeMapKey
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/hashline-anchor.js
 var HASHLINE_ANCHOR_LENGTH = 3;
@@ -235,7 +235,10 @@ function shouldLogEvent(event) {
   // Same rarity argument as #1913 for the reasons that DO fire: each is
   // rising-edge gated once per file per session, so always-on
   // visibility costs nothing.
-  event === "read_file_evicted" || event === "edits_cap_trimmed";
+  event === "read_file_evicted" || event === "edits_cap_trimmed" || // #4131: a file's authorship ended because another writer changed its
+  // bytes. Once per authorship episode: the retired file needs a read or
+  // a known-content write before a writer can author it again.
+  event === "authorship_retired";
 }
 var MAX_TELEMETRY_STRING = 512;
 var MAX_TELEMETRY_KEYS = 64;
@@ -314,6 +317,7 @@ export {
   normalizeMessage,
   hashText,
   stableFindingId,
+  sanitizeCorrelationId,
   getReadGuardCorrelationId,
   createReadGuardEditBatchSummary,
   logReadGuardEvent,

package/dist/{chunk-RPD5K5NC.js → chunk-3MRXIJ6I.js}

@@ -1,10 +1,10 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   createToolchainAvailability
-} from "./chunk-F3P7VQ7H.js";
+} from "./chunk-XHSCVSOL.js";
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
+} from "./chunk-34OCDWOS.js";
 
 // dist/clients/rust-client.js
 import * as path from "node:path";

package/dist/{chunk-IVP5KAB7.js → chunk-3P4PF2BX.js}

@@ -4,46 +4,46 @@ import {
 } from "./chunk-FC4RP4I2.js";
 import {
   resolveGitCheckout
-} from "./chunk-3I5QFT3N.js";
+} from "./chunk-IMSQR4WO.js";
 import {
   emitBounded
-} from "./chunk-ARFCXG7S.js";
+} from "./chunk-OZJINN4O.js";
 import {
   augmentPythonEnvironment,
   detectPythonEnvironment
-} from "./chunk-DIULIWKU.js";
+} from "./chunk-LNOMA3MP.js";
 import {
   PathKeyedMap
 } from "./chunk-Z3CCVDUB.js";
 import {
   resolveToolCwd
-} from "./chunk-RUOG5D2C.js";
+} from "./chunk-IUR76K6A.js";
 import {
   findGlobalBinary
-} from "./chunk-U3VGR4VU.js";
+} from "./chunk-T4QZ6FEH.js";
 import {
   resolveLanguageRootForFile
-} from "./chunk-22AVIGXS.js";
+} from "./chunk-VYKKMYVT.js";
 import {
   safeSpawn,
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-T54VJRAD.js";
 import {
   detectFileKind
-} from "./chunk-5ZEJHV35.js";
+} from "./chunk-64LU2OVH.js";
 import {
   detectFileRole
-} from "./chunk-DQ2NZ7C4.js";
+} from "./chunk-N2IRDBZI.js";
 import {
   findNearestDirWithAnyBasename
-} from "./chunk-VNMT7C64.js";
+} from "./chunk-Z6BB4JLQ.js";
 import {
   LEDGER_FIELD_MAX,
   recordDegradationOnce
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-7ELY2CSM.js";
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
+} from "./chunk-34OCDWOS.js";
 import {
   BoundedFifoMap
 } from "./chunk-ABBOA7UD.js";
@@ -56,7 +56,7 @@ import {
   normalizeMapKey,
   pathsEqual,
   toPosix
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/test-runner-client.js
 import { createHash } from "node:crypto";
@@ -1516,7 +1516,7 @@ ${stderr}`;
         ...location === void 0 ? {} : { location }
       });
     }
-    const tracebackRegex = /_{10,}\s*\n\s*(\w+Error:\s*.+?)(?:\n|$)/gs;
+    const tracebackRegex = /(?<!_)_{10,}[^\S\n]*\n\s*(\w+Error:\s*.+?)(?:\n|$)/gs;
     while ((match = tracebackRegex.exec(output)) !== null) {
       if (failures.length > 0 && !failures[failures.length - 1].stack) {
         failures[failures.length - 1].stack = match[1].trim().slice(0, 1e3);

package/dist/{chunk-5THXD6X5.js → chunk-3PNFWVHT.js}

@@ -5,10 +5,10 @@ import {
   getMaxLogSizeMB,
   getTurnId,
   isTestMode
-} from "./chunk-UK3CMEAL.js";
+} from "./chunk-VSMJK3ZJ.js";
 import {
   normalizeLoggedPath
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/latency-logger.js
 import * as path from "node:path";

package/dist/{chunk-VD4JQCQC.js → chunk-3TTPKMEF.js}

@@ -54,55 +54,55 @@ import {
   reviewGraphCachePath,
   terminateReviewGraphPersistWorkerForTests,
   waitForReviewGraphPersistsForTests
-} from "./chunk-LSMJ6KBE.js";
+} from "./chunk-V5MEBST3.js";
 import "./chunk-3MED75HT.js";
-import "./chunk-3I5QFT3N.js";
-import "./chunk-TVN5N6GY.js";
-import "./chunk-ARFCXG7S.js";
-import "./chunk-OAXNDZJ7.js";
+import "./chunk-IMSQR4WO.js";
+import "./chunk-MTDRLSI7.js";
+import "./chunk-OZJINN4O.js";
+import "./chunk-3JSEWUWI.js";
 import "./chunk-XIMYZ3JA.js";
-import "./chunk-B3I2UUT4.js";
-import "./chunk-DIULIWKU.js";
-import "./chunk-VDBPVIKD.js";
+import "./chunk-IQZXOZ7S.js";
+import "./chunk-LNOMA3MP.js";
+import "./chunk-U52SAGRM.js";
 import "./chunk-5W3R6LFT.js";
-import "./chunk-LW6XKDZQ.js";
+import "./chunk-UEAHAMEI.js";
 import "./chunk-Z54ZSOBZ.js";
-import "./chunk-TGPXLY2J.js";
+import "./chunk-KJCWXUUS.js";
 import "./chunk-QOZXJ4NA.js";
-import "./chunk-V7R425XG.js";
-import "./chunk-PAK6IDME.js";
-import "./chunk-GUOGVTCQ.js";
-import "./chunk-AJVLWNFN.js";
-import "./chunk-YGVYKNSN.js";
-import "./chunk-LNAKEO63.js";
+import "./chunk-6XX5HCLK.js";
+import "./chunk-S6AMWKPC.js";
+import "./chunk-F5VLZHUW.js";
+import "./chunk-AXKPQ6ZI.js";
+import "./chunk-7BX5DWSA.js";
+import "./chunk-IUKPRZER.js";
 import "./chunk-Z3CCVDUB.js";
-import "./chunk-PWFHBTSF.js";
+import "./chunk-XGUL4SLQ.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-OQGFCZJ4.js";
-import "./chunk-RUOG5D2C.js";
-import "./chunk-U3VGR4VU.js";
-import "./chunk-NTUJEGDZ.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
-import "./chunk-22AVIGXS.js";
-import "./chunk-GVXA6CCE.js";
-import "./chunk-6QIUX4EP.js";
-import "./chunk-VHQLPIRJ.js";
-import "./chunk-VN2AXLEX.js";
+import "./chunk-LD7WFTRX.js";
+import "./chunk-IUR76K6A.js";
+import "./chunk-T4QZ6FEH.js";
+import "./chunk-D6YF5HKX.js";
+import "./chunk-CMU4RMJB.js";
+import "./chunk-O7HZX7CA.js";
+import "./chunk-VYKKMYVT.js";
+import "./chunk-BNKLYOOO.js";
+import "./chunk-USHG4DLH.js";
+import "./chunk-H5EV3VMF.js";
+import "./chunk-T54VJRAD.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-64LU2OVH.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
-import "./chunk-NMABWBZN.js";
+import "./chunk-UGSMCQ4D.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   GRAPH_PERSIST_MAX_ELEMENTS_DEFAULT,

package/dist/{chunk-7F72PXY2.js → chunk-5JHXUETW.js}

@@ -2,7 +2,7 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   createAvailabilityProbeFlight,
   probeToolAsync
-} from "./chunk-EOKRQ3SA.js";
+} from "./chunk-CMU4RMJB.js";
 import {
   classifyProbeFailure,
   createAvailabilityLatch,
@@ -10,13 +10,13 @@ import {
   describeProbeEvidence,
   logAvailabilityDecision,
   startHostStallSampler
-} from "./chunk-WONERJTP.js";
+} from "./chunk-O7HZX7CA.js";
 import {
   createSingleFlight
 } from "./chunk-BW5KFIQC.js";
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
+} from "./chunk-34OCDWOS.js";
 
 // dist/clients/security-scan-client.js
 import * as path from "node:path";

package/dist/{chunk-5ZEJHV35.js → chunk-64LU2OVH.js}

@@ -1,10 +1,10 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   findNearestDirWithMarker
-} from "./chunk-VNMT7C64.js";
+} from "./chunk-Z6BB4JLQ.js";
 import {
   isWindowsPath
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-G3RLJYA2.js";
 
 // dist/clients/file-kinds.js
 import { basename, extname, win32 } from "node:path";

package/dist/{chunk-ODEEOXPH.js → chunk-6B5I6ICN.js}

@@ -12,21 +12,21 @@ import {
   isStartupScanVerdictFresh,
   resolveStartupScanContext,
   resolveStartupScanContextAsync
-} from "./chunk-5RXBNSW2.js";
-import "./chunk-LNAKEO63.js";
-import "./chunk-VHQLPIRJ.js";
-import "./chunk-VN2AXLEX.js";
+} from "./chunk-6P54TMWL.js";
+import "./chunk-IUKPRZER.js";
+import "./chunk-H5EV3VMF.js";
+import "./chunk-T54VJRAD.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-N2IRDBZI.js";
+import "./chunk-Z6BB4JLQ.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-7ELY2CSM.js";
+import "./chunk-34OCDWOS.js";
+import "./chunk-3PNFWVHT.js";
+import "./chunk-VSMJK3ZJ.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-G3RLJYA2.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   MAX_STARTUP_SCAN_ENTRIES,