pi-lens 4.4.0 → 4.4.2

package/CHANGELOG.md

@@ -16,6 +16,164 @@ All notable changes to pi-lens will be documented in this file.
 
 ### Security
 
+## [4.4.2] - 2026-10-10
+
+### Added
+
+- **pi-lens now fails closed on unknown project trust** — Under pi, when pi cannot confirm the project is trusted, pi-lens refuses to run project code and emits one notice per session. It withholds project-local tool binaries while keeping global and managed fallbacks available (#4268). It refuses built-in language servers that execute project code before discovery or installation (#4269). Project-sourced LSP commands, environment, initialization options, and local binaries require trust as well (#2372). The TypeScript server skips the project's own `tsserver.js` and native TypeScript 7 `tsc`, falling back to pi-lens-managed TypeScript instead (#4296). MCP and other non-pi hosts do not consult pi trust; their calling client owns workspace trust, so project tools stay available there (#4300).
+
+- **Built-in Lean 4 language support (refs #4119)** — `.lean` files are recognized and sent to the Lean language server using the `lean` LSP language id. In Lake projects, pi-lens launches `lake serve` from the detected project root, so Lake and elan honor the project's toolchain and environment. pi-lens does not install or manage Lean; install Lean and Lake separately and ensure `lake` is on `PATH`.
+
+- **Path-scoped rule policy** — Add `rules.<id>.ignorePaths` to skip a rule on matching project-relative paths and reclaim scan work (#4226).
+
+- **Analyse marked out-of-root edits as adopted projects.** An edit in a separate project gets LSP diagnostics from global servers, while project-local tools, linters and session bookkeeping stay isolated (refs #4242).
+
+- **`/lens-health` now reports the effective pi-lens tool surface**, including disabled tools and the host-managed bundled-skill boundary.
+
+### Changed
+
+- **Stale test-runner verdicts state their edit gap and re-queue a run.** When an async verdict is delivered for a file the agent has edited since the run started, the message names the file and how many edits behind it is and queues a re-run for the current version instead of presenting the old verdict as current.
+
+### Fixed
+
+- **The session-start orientation names only the tools pi-lens registered** (refs #2967). A tool disabled with `tools.<name>.enabled: false` is no longer advertised, and the `pi_lens_activate_tools` example is drawn from the enabled situational set. The orientation's pre-existing-error demand is configurable with `contextInjection.requirePreExistingFixes` (default unchanged).
+
+- **Expired session hand-offs now preserve activated tools** instead of dropping them when a successor is interrupted before startup (closes #4236). Test-only successor pending-window overrides are restricted to Vitest child processes.
+
+- **Duplicate pi session starts are ignored safely.** pi-lens now drops repeated `session_start` events at entry while preserving distinct reload, new, resume, and fork starts, and drains NDJSON logs before graceful shutdown (refs #2891).
+
+- **TypeScript no longer reports clean from its empty pre-index publish.**
+
+- **Require a BuildKit rule from the official Docker smoke server** (closes #3939) — The nightly smoke now uses the upstream rule-bearing fixture and discloses runners without `docker buildx` instead of accepting an empty diagnostic baseline. Credit: qiyangfan.
+
+- **Bridge reads survive a `/reload` on the TypeScript-source extension load.** A third-party read recorded after `/reload` (`pi -e index.ts`) now licenses the next edit instead of being falsely blocked with "Edit without read", without allowing a concurrent or stale activation to retarget the bridge (refs #4169, #4258).
+
+- **Ast-grep fallbacks use the official CLI package from an isolated cwd (#4193)** — Structural rule replacements, path searches, and CLI probes name `@ast-grep/cli` when direct binary resolution fails and run from a pi-lens-owned tools directory, so a project's `.npmrc` never reaches `npx`; relative `paths` resolve against the project before dispatch.
+
+- **Windows LSP auto-install now repairs missing shell commands.** Exit-code-1 startup failures are classified as missing tools only when the command or shim target is absent.
+
+- **Unicode-normalized edits now keep their raw target span** (closes #4265) — Full-width punctuation, smart quotes, dashes, and special spaces no longer produce a false “edit target not found” block.
+
+- **Subagent turn-end isolation** — a concurrent subagent no longer consumes the primary session's pending project analysis worklist or deferred findings. (refs #3613)
+
+### Internal
+
+<details>
+<summary>8 internal changes: tests, CI, tooling, and refactors</summary>
+
+- Pin the test home used by the skills package-filter coverage so host-installed skills cannot affect its results.
+
+- Require every PR `## Class sweep` to name the defect shape, quote the search that defines its population, and give a verdict, or say `none: <reason>` (#4273).
+
+- The nightly tool-smoke LSP capability census builds the in-place compiled twins immediately before it runs, so vitest no longer aborts on the stale-build guard (refs #4302).
+
+- Pre-push and lane-check now rebuild a missing or stale bundled `dist/` dependency before governance suites (#4239).
+
+- Restore the nightly LSP smoke harness's trusted-project host boundary so project-local server fixtures exercise their intended launch paths.
+
+- Added the grouped experimental `LspCapabilities` facade over `LSPService` and migrated production LSP callers behind it without changing behavior.
+
+- Centralize analysis-root classification and thread adopted-root no-op gates through root-keyed tool-result writers (refs #4242).
+
+- Pinned workflow download redirects to HTTPS and made late formatter resync ownership explicit for the Sonar quality gate.
+
+</details>
+
+## [4.4.1] - 2026-10-09
+
+### Added
+
+- **Public LSP config schema and compatibility normalization** (closes #2416): canonical argv-shaped server entries and legacy string-command files now share a validated, provenance-aware model without changing runtime launch behavior.
+
+- **Shared custom rules are now loaded from a user-level directory.** Thanks to @Antrakos; project rules take precedence over user rules, which take precedence over bundled rules.
+
+- **The official Docker Language Server is now verified in nightly LSP smoke tests.** Its pinned v0.20.1 binary is measured through the real pi-lens client, with the preferred legacy server retained as the fallback. Thanks @qiyangfan for reporting #3939.
+
+- **Deferred formatting now announces settled completion with ownership identity** (refs #673; thanks @marioSoftmedic), including an empty path list when no bytes changed; late formatter writes delay completion until resync.
+
+### Changed
+
+- Idle eviction is now enabled for `docker`, `json`, and `python-jedi` after consecutive safe measurements (refs #3989).
+
+### Fixed
+
+- **Report fixer restore loss.** Agent edits that a whole-package fixer erased are now reported when their calls overlap the restore, or when a later edit landed on the fixer's bytes; newer bytes are retained when the restore can prove they are newer. One case stays unreported and is named as a residual: a fixer write that lands between an edit's tool call and the host applying that edit (#3830).
+
+- **Batched scans keep their compiled query across a heal.** A rule healed during an in-flight compile no longer stays missing from later batched scans, scans sharing that compile no longer report zero findings when a heal races its publication, and a compile that is refused publication frees its native query instead of leaking it. (#3834)
+
+- **A grammar that traps on two distinct files is retired, not retried until the heap aborts.** The runner reports the language unavailable instead of clean and other languages keep the remaining trap budget; a file that traps once and then parses cleanly does not count (refs #4010, #3996).
+
+- **The word index no longer holds its serialized copy while idle.** It is released when the agent run settles (once per run), kept while a run edits so per-edit saves stay incremental, and released after 10 minutes without a save for a stalled run (`PI_LENS_WORD_INDEX_MEMO_BACKSTOP_MS`).
+
+- **Startup warm caches now cover up to 2,500 measured source files safely.** Larger projects still see the once-per-session reason and the bound to raise.
+
+- **The read guard keeps authorship through pi-lens-owned rewrites.** A file the agent wrote stays editable without a re-read when `ast_grep_replace`, `lens_diagnostic_mark`, or an LSP operation rewrites the file that call named and no foreign writer intervened. A file the tool wrote without naming it (a rename's importers, a folder-wide or project-wide apply), a server-initiated `workspace/applyEdit`, or a foreign byte change ends authorship instead, so the next edit asks for one read, and third-party bridge records remain fail-closed (#4131). Authorship survives `/tree`, `/fork` and resume when the branch still shows the write (#3603). Process-bridge writes, observed tool writes and partial bridge reads no longer mark the whole file as freshly read (#3865).
+
+- **`throw Error(x)` style findings are now warnings, not blockers.** The `throw-new-error` rules still encourage explicit construction while recognizing that `Error(x)` is spec-equivalent to `new Error(x)`.
+
+- **Shared secondary worktree roots now remain visible until every session holding them leaves.** Each session's registry record lists only the roots it registered, so a session ending after a primary reload or a cap eviction can no longer drop a root another live session still serves (#3849).
+
+- **Lint fallback no longer hides missing type coverage.** Type-bearing files keep the existing incomplete-coverage notice when their primary analysis was skipped, unavailable, or failed; type-capable fallbacks such as mypy can still complete coverage.
+
+- **Keep source-build tools aligned with the lockfile (#4066).** Both esbuild bundles and the TypeScript fallback use the exact locked versions while retaining isolated npm exec resolution and exact lifecycle-script approval.
+
+- **Scanners now avoid linked worktree duplicates.** Gitleaks, trivy and opengrep discover linked checkouts nested under the project root instead of relying only on known directory names; paths that a scanner cannot represent safely are reported as bounded scan degradations (fixes #4132).
+
+- Prevented pi-lens's read-only registry-tool operations from being mistaken for learned edits after another operation mutates a file.
+
+- **Ast-grep rule validation no longer stalls on blank-heavy YAML (#4148)** — A rule with tens of thousands of blank lines no longer blocks the host while its language is detected.
+
+- **Pytest and go.mod parsing no longer stall on blank-heavy input (#4148)** — Reading a pytest failure traceback and the `module` line of a `go.mod` now takes linear time, so a run with tens of thousands of blank lines or one very long `_` rule no longer blocks the host for seconds (13 s and 4 s at 100K lines before).
+
+- **Refresh TypeScript clients across package roots (closes #4156)** — Changed files are announced to live sibling-root language-server clients, preventing stale importer diagnostics. Credit: Don-Yin.
+
+- **A project's data directory stays stable for the whole process** (#4199): it is settled when the process first resolves the root, so an ephemeral checkout no longer moves its data when a `.pi-lens` directory appears mid-process, and a `.pi-lens` created by hand in a real project takes effect at the next process start.
+
+- **Read-guard authorship now stays within bytes each writer actually changed.**
+
+- **Outside-root edits now explain skipped analysis** (#4218) — pi-lens tells you to start pi in the file's directory or add it to the workspace.
+
+- **Answered LSP findings are preserved when another server times out** — typos diagnostics now remain visible when Marksman is inconclusive for the same edit. (closes [#4219](https://github.com/apmantza/pi-lens/issues/4219))
+
+- **Identity checks against `True`/`False` are no longer flagged** — the rule now preserves correct Python singleton checks while continuing to catch non-singleton literal comparisons. Thanks @rastarr for the report. (closes [#4225](https://github.com/apmantza/pi-lens/issues/4225))
+
+- **Release summaries keep wrapped changelog entries intact** — release notes now join an entry's wrapped lines before shortening it, so plain entries no longer end mid-sentence and bold gist text keeps continuation-line issue references.
+
+- **Read evidence now survives relative paths, nested codemode calls and conversation moves**: relative-path reads, nested reads and pi-lens rewrites (including the structural `ast_grep_replace` apply) keep their read-guard and mutation bookkeeping across `/clone`, `/fork`, `/tree` and `/reload`; a read that errored (even if another extension rewrites its result to success), or that another extension blocked, no longer licenses an edit later in the same run, and a read never blocks a whole-package fixer's restore of an agent edit.
+
+### Internal
+
+<details>
+<summary>13 internal changes: tests, CI, tooling, and refactors</summary>
+
+- The TLA+ hook-anchor scan escapes every regex metacharacter in a handler name, not only `$`.
+
+- Changelog fragment validation now constrains new user-facing leads.
+
+- **Idle-eviction measurements cover temporary checkouts (refs #3989)** — The nightly probe now arms the short idle window used by ephemeral LSP roots as well as the generic window, so eligible servers are measured instead of reported as not evicted.
+
+- **release-qa reads the pi version from `pi --version` only (closes #4176)** — The codemode row no longer takes an x.y.z from the pi binary's install path, so a version-shaped directory cannot make it run or skip on the wrong pi.
+
+- Keep config-declared LSP roles reserved and inert in the loader; the catalog remains the owner of auxiliary selection.
+
+- Make the workflow Git-push detector regex linear for quoted options.
+
+- One LSP server-role vocabulary and a declared trait table (refs #1488, refs #1756): `LSPServerInfo.role` is now non-optional, 44 inlined `role === "auxiliary"` / `role !== "auxiliary"` predicates fold onto `isAuxiliary()`, `PromiseDescriptor.role` retires its duplicate `"primary"` spelling, the auxiliary wait policy moves to `clients/lsp/auxiliary-lifecycle.ts`, and the `notifyInflightLimit` / `replyOrdering` traits are declared on the server definition. No behaviour change.
+
+- **Merge-policy mistake table: 2026-10-07 and 2026-10-08 retrospective** — new internal rows on delivery wording, shared records, worker handoffs, CI and advisory classification, release producers, probe witnesses, test doubles, and round routing.
+
+- Failed handler-verdict tests when `handleToolCall` threw and production swallowed it: `runHandlerExpectingNoThrow` (`tests/support/handler-verdict.ts`) wraps every direct call and the pi mock's `tool_call` hooks, and a governance sweep rejects an unchecked call (#3518, recurrence #4182).
+
+- **TLA+ session models cover marker expiry, the per-evaluation LSP generation, the widget token and the late coordinator stores (refs #3803)**: #3668's successor-pending marker expires (`MarkerExpire`, no clock), #3755's per-evaluation generation is caught by an owner-live invariant the generation clause could not see, the widget's `>=` tie and fork carry are pinned in both directions (`SessionLifecycleF1`), the receipt, `fixedThisTurn`, analysed-state latch and runner writers are fenced by their captured scope (#3824), and `session-straddle` retires the generation at shutdown (#3611), each with a violating pre-fix or mutant config and a passing merged one.
+
+- **TLA+ session-lifecycle models the S3 writers and the subagent turn_end (refs #3803)**: the deferral queue's two-hop credit (#3705), the turn-state, turn-summary and git-guard late writers with the debounce re-entry (#3759), the mutation bridge's producer with and without a lineage (#3763), the park map of cut advisories (#4112), and a turn_end composer on a shared coordinator, each with a violating pre-fix or mutant config and a passing merged one; the coverage map names the bridge producers and the turn summary.
+
+- Map the unmapped lifecycle files in `formal/coverage-map.json` and gate `index.ts` per lifecycle hook handler instead of per file (refs #3803).
+
+- Vitest no longer collects test files from a stray worktree inside `.probe-home/` on a path-filtered run.
+
+</details>
+
 ## [4.4.0] - 2026-10-08
 
 ### Added

package/README.md

@@ -482,6 +482,7 @@ Thanks goes to these wonderful people:
     <tr>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/pandas9"><img src="https://avatars.githubusercontent.com/u/81386636?v=4" width="100px;" alt=""/><br /><sub><b>pandas9</b></sub></a><br /><a href="#bug-pandas9" title="Bug reports">🐛</a></td>
       <td align="center" valign="top" width="14.28%"><a href="https://github.com/renzooliveira"><img src="https://avatars.githubusercontent.com/u/10881850?v=4" width="100px;" alt=""/><br /><sub><b>Renzo Oliveira</b></sub></a><br /><a href="#ideas-renzooliveira" title="Ideas & Planning">🤔</a></td>
+      <td align="center" valign="top" width="14.28%"><a href="https://github.com/rastarr"><img src="https://avatars.githubusercontent.com/u/2160922?v=4" width="100px;" alt=""/><br /><sub><b>Martin</b></sub></a><br /><a href="#bug-rastarr" title="Bug reports">🐛</a> <a href="#ideas-rastarr" title="Ideas & Planning">🤔</a></td>
     </tr>
   </tbody>
 </table>

package/config/dependency-cruiser-eager-allowlist.json

@@ -44,14 +44,15 @@
   "./clients/lsp-budget.js",
   "./clients/lsp-lazy.js",
   "./clients/lsp-status.js",
+  "./clients/lsp/capabilities.js",
   "./clients/lsp/cascade-tier.js",
   "./clients/lsp/config.js",
-  "./clients/lsp/index.js",
   "./clients/lsp/session-roots.js",
   "./clients/memory-sampler.js",
   "./clients/message-end-attribution.js",
   "./clients/mutating-tool.js",
   "./clients/mutation-bridge.js",
+  "./clients/ndjson-logger.js",
   // #2430: the agent_settled sweep and its post-drain re-baseline. Eager
   // because they run inside the settle handler, on the same path as the
   // deferred drain they bracket.
@@ -59,6 +60,7 @@
   "./clients/observed-mutation.js",
   "./clients/path-attribution-telemetry.js",
   "./clients/path-utils.js",
+  "./clients/process-bridge.js",
   "./clients/project-lens-config.js",
   "./clients/project-trust.js",
   "./clients/quiet-window.js",

package/dist/{chunk-IXEBJSUE.js → chunk-23WOO7TX.js}

@@ -2,19 +2,20 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   AgentBehaviorClient,
   agentBehaviorClient
-} from "./chunk-6P62QVEA.js";
-import "./chunk-OAXNDZJ7.js";
-import "./chunk-VN2AXLEX.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+} from "./chunk-ZGDGW2V3.js";
+import "./chunk-IBGIOBEE.js";
+import "./chunk-C34ZXZ7O.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   AgentBehaviorClient,

package/dist/{chunk-E2WFBRHM.js → chunk-2B73ZPOK.js}

@@ -3,13 +3,13 @@ import {
   findModuleForPath,
   getDownstreamModules,
   getModuleSourceFiles
-} from "./chunk-V7R425XG.js";
+} from "./chunk-GBPP5P7X.js";
 import {
   detectFileRole
-} from "./chunk-DQ2NZ7C4.js";
+} from "./chunk-2BBLFX75.js";
 import {
   normalizeMapKey
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/review-graph/query.js
 function dedupe(items) {

package/dist/{chunk-DQ2NZ7C4.js → chunk-2BBLFX75.js}

@@ -14,7 +14,7 @@ import {
   findPiLensConfigMarkerInDir,
   getPiLensGlobalConfigPath,
   isResolvedGlobalConfigPath
-} from "./chunk-VNMT7C64.js";
+} from "./chunk-XVF2VVXP.js";
 import {
   DEGRADATION_ENTRIES_PER_KIND,
   GLOBAL_NON_FLAG_CONFIG_SECTIONS,
@@ -31,21 +31,21 @@ import {
   readFlagConfigValue,
   readToolConfig,
   recordDegradationOnce
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-JAU72XNY.js";
 import {
   logExtension
-} from "./chunk-O6TQT6RI.js";
+} from "./chunk-XTMJ7XDT.js";
 import {
   CONFIG_SCHEMA_ANCHOR_KEY,
   CONFIG_SCHEMA_ID,
   DEPRECATED_CONFIG_SURFACES,
   STABILITY_TIER_KEY,
   withConfigDiagnosticCode
-} from "./chunk-5THXD6X5.js";
+} from "./chunk-JMYYOTQG.js";
 import {
   redactSecrets,
   toPositiveFinite
-} from "./chunk-UK3CMEAL.js";
+} from "./chunk-AOHZU2BM.js";
 import {
   BoundedLruCache
 } from "./chunk-ABBOA7UD.js";
@@ -54,7 +54,7 @@ import {
   isAtOrAboveHomeDir,
   isWindowsPath,
   walkUpDirs
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/generated-artifacts.js
 import * as fs from "node:fs";
@@ -486,6 +486,9 @@ var TIER_CLASS = {
 function tierPrecedence(tier) {
   return SOURCE_TIERS.indexOf(tier);
 }
+function isRepoTier(tier) {
+  return TIER_CLASS[tier] === "repo";
+}
 function isOperatorTier(tier) {
   return TIER_CLASS[tier] === "operator";
 }
@@ -845,6 +848,9 @@ function propertySchema(node, name) {
         return child;
     }
   }
+  const additional = node.additionalProperties;
+  if (isSchemaNode(additional))
+    return additional;
   return void 0;
 }
 function additionalPropertyPolicy(node) {
@@ -1282,6 +1288,15 @@ function walkScalar(value, schema, context, declared) {
     });
     return DROPPED;
   }
+  const minLength = schema?.minLength;
+  if (declared === "string" && typeof minLength === "number" && typeof value === "string" && value.length < minLength) {
+    record2(context, {
+      code: "PILENS_CFG_0005",
+      key: pointerOf(context.path),
+      reason: `string must contain at least ${minLength} character${minLength === 1 ? "" : "s"}; ignored`
+    });
+    return DROPPED;
+  }
   return checkEnum(value, schema, context) ? value : DROPPED;
 }
 function checkEnum(value, schema, context) {
@@ -1375,6 +1390,67 @@ function lspServerEntryNode() {
         items: { type: "string", [STABILITY_TIER_KEY]: "experimental" },
         [MERGE_STRATEGY_KEY]: "replace",
         [STABILITY_TIER_KEY]: "experimental"
+      },
+      name: { type: "string", [STABILITY_TIER_KEY]: "experimental" },
+      enabled: { type: "boolean", [STABILITY_TIER_KEY]: "experimental" },
+      role: {
+        type: "string",
+        enum: ["language", "auxiliary"],
+        [STABILITY_TIER_KEY]: "experimental"
+      },
+      // `command` accepts string here solely for the compatibility window;
+      // ResolvedLspConfig makes argv the only canonical output.
+      command: { [STABILITY_TIER_KEY]: "experimental" },
+      args: {
+        type: "array",
+        items: { type: "string", [STABILITY_TIER_KEY]: "experimental" },
+        [STABILITY_TIER_KEY]: "experimental"
+      },
+      extensions: {
+        type: "array",
+        items: { type: "string", [STABILITY_TIER_KEY]: "experimental" },
+        [STABILITY_TIER_KEY]: "experimental"
+      },
+      rootMarkers: {
+        type: "array",
+        items: { type: "string", [STABILITY_TIER_KEY]: "experimental" },
+        [STABILITY_TIER_KEY]: "experimental"
+      },
+      env: {
+        type: "object",
+        additionalProperties: {
+          type: "string",
+          [STABILITY_TIER_KEY]: "experimental"
+        },
+        [STABILITY_TIER_KEY]: "experimental"
+      },
+      initializationOptions: {
+        type: "object",
+        additionalProperties: true,
+        [STABILITY_TIER_KEY]: "experimental"
+      }
+    }
+  };
+}
+function lspServerOverrideNode() {
+  return {
+    type: "object",
+    additionalProperties: true,
+    [STABILITY_TIER_KEY]: "experimental",
+    properties: {
+      command: { [STABILITY_TIER_KEY]: "experimental" },
+      env: {
+        type: "object",
+        additionalProperties: {
+          type: "string",
+          [STABILITY_TIER_KEY]: "experimental"
+        },
+        [STABILITY_TIER_KEY]: "experimental"
+      },
+      initializationOptions: {
+        type: "object",
+        additionalProperties: true,
+        [STABILITY_TIER_KEY]: "experimental"
       }
     }
   };
@@ -1399,7 +1475,7 @@ function lspNamespace() {
         // #3968: server entries are TYPED — each carries the covers
         // claim node — while staying open on every other field.
         { additionalProperties: lspServerEntryNode() }
-      ) : { additionalProperties: true } : {},
+      ) : key === "serverOverrides" ? { additionalProperties: lspServerOverrideNode() } : { additionalProperties: true } : {},
       ...denyAnnotation(key)
     };
   }
@@ -1410,6 +1486,31 @@ function lspNamespace() {
     properties
   };
 }
+function rulePolicyEntryNode() {
+  return {
+    type: "object",
+    additionalProperties: true,
+    properties: {
+      threshold: { type: "number", [STABILITY_TIER_KEY]: "experimental" },
+      // These two legacy fields remain opaque so the project compatibility
+      // parser can preserve its established field-specific diagnostics.
+      disable: opaque("experimental"),
+      select: opaque("experimental"),
+      ignorePaths: {
+        type: "array",
+        items: {
+          type: "string",
+          minLength: 1,
+          [STABILITY_TIER_KEY]: "experimental"
+        },
+        [MERGE_STRATEGY_KEY]: "append",
+        [DENY_KEY]: "array-union",
+        [STABILITY_TIER_KEY]: "experimental"
+      }
+    },
+    [STABILITY_TIER_KEY]: "experimental"
+  };
+}
 function buildConfigSchema() {
   const properties = {};
   for (const key of [
@@ -1435,6 +1536,11 @@ function buildConfigSchema() {
     ])),
     [STABILITY_TIER_KEY]: "stable"
   };
+  properties.rules = {
+    type: "object",
+    additionalProperties: rulePolicyEntryNode(),
+    [STABILITY_TIER_KEY]: "experimental"
+  };
   for (const key of PROJECT_FOREIGN_CONFIG_NAMESPACES) {
     properties[key] ??= opaque("experimental");
   }
@@ -2097,6 +2203,18 @@ function parseRulePolicyList(note, ruleId, key, value) {
   }
   return { list, invalid: false };
 }
+function parseRulePathList(note, ruleId, value) {
+  if (!Array.isArray(value)) {
+    note(`rules.${ruleId}.ignorePaths must be an array of strings`);
+    return void 0;
+  }
+  const paths = value.filter((entry) => typeof entry === "string" && entry.trim().length > 0).map((entry) => entry.trim());
+  if (value.length > 0 && paths.length === 0) {
+    note(`rules.${ruleId}.ignorePaths must contain a non-empty string`);
+    return void 0;
+  }
+  return paths;
+}
 var NO_RECORDS = [];
 function parseConfigFile(configPath) {
   const { note, records: ignoredRecords } = ignoredRecordCollector(configPath, "project");
@@ -2131,7 +2249,11 @@ function parseConfigFile(configPath) {
     value: outcome.value
   });
   const raw = resolved.value;
-  const obj = resolved.value;
+  const rawProject = outcome.value;
+  const obj = {
+    ...resolved.value,
+    ...rawProject.rules !== void 0 ? { rules: rawProject.rules } : {}
+  };
   const ignore = Array.isArray(obj.ignore) ? obj.ignore.filter((p) => typeof p === "string") : [];
   const mutations = {};
   for (const spec of PROJECT_SCOPED_LENS_FLAGS) {
@@ -2163,9 +2285,14 @@ function parseConfigFile(configPath) {
         if (!parsed.invalid && parsed.list.length > 0)
           entry.select = parsed.list;
       }
-      if (entry.threshold !== void 0 || entry.disable || entry.select) {
+      if ("ignorePaths" in r) {
+        const paths = parseRulePathList(note, ruleId, r.ignorePaths);
+        if (paths && paths.length > 0)
+          entry.ignorePaths = paths;
+      }
+      if (entry.threshold !== void 0 || entry.disable || entry.select || entry.ignorePaths) {
         rules[ruleId] = entry;
-      } else if (!("threshold" in r) && !("disable" in r) && !("select" in r)) {
+      } else if (!("threshold" in r) && !("disable" in r) && !("select" in r) && !("ignorePaths" in r)) {
         note(`rules.${ruleId} has no recognized setting (threshold, disable, select); ignored`);
       }
     }
@@ -2284,7 +2411,7 @@ function parseConfigFile(configPath) {
       raw,
       configPath
     },
-    records: resolved.records,
+    records: resolved.records.filter((record4) => !record4.key.startsWith("/rules/")),
     ignored: ignoredRecords()
   };
 }
@@ -2297,6 +2424,7 @@ export {
   detectFileRole,
   notifyUserDegradation,
   warnIgnoredConfigOnce,
+  isRepoTier,
   provenanceView,
   provenanceFor,
   compareKeys,

package/dist/{chunk-ZMOL6RQC.js → chunk-2CD5RS6M.js}

@@ -2,11 +2,11 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   classifyRunOutcome,
   firstOutputLine
-} from "./chunk-I7SPGOWI.js";
+} from "./chunk-UZ3TUTRV.js";
 import {
   incrementDegradationCount,
   truncateForLedger
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-JAU72XNY.js";
 
 // dist/clients/dispatch/types.js
 var RUNNER_SKIP_REASONS = [

package/dist/{chunk-VD4JQCQC.js → chunk-2ZGIZPDG.js}

@@ -54,55 +54,56 @@ import {
   reviewGraphCachePath,
   terminateReviewGraphPersistWorkerForTests,
   waitForReviewGraphPersistsForTests
-} from "./chunk-LSMJ6KBE.js";
+} from "./chunk-PV6LR5P5.js";
 import "./chunk-3MED75HT.js";
-import "./chunk-3I5QFT3N.js";
-import "./chunk-TVN5N6GY.js";
-import "./chunk-ARFCXG7S.js";
-import "./chunk-OAXNDZJ7.js";
+import "./chunk-CO2G5PHH.js";
+import "./chunk-IBGIOBEE.js";
+import "./chunk-PNQDPDRC.js";
 import "./chunk-XIMYZ3JA.js";
-import "./chunk-B3I2UUT4.js";
-import "./chunk-DIULIWKU.js";
-import "./chunk-VDBPVIKD.js";
+import "./chunk-ESBQHFMJ.js";
+import "./chunk-34WSVGEM.js";
+import "./chunk-VWCXW2E7.js";
+import "./chunk-ZXYDQ3TZ.js";
 import "./chunk-5W3R6LFT.js";
-import "./chunk-LW6XKDZQ.js";
+import "./chunk-QHJ6DQ2R.js";
 import "./chunk-Z54ZSOBZ.js";
-import "./chunk-TGPXLY2J.js";
+import "./chunk-724UL2TJ.js";
 import "./chunk-QOZXJ4NA.js";
-import "./chunk-V7R425XG.js";
-import "./chunk-PAK6IDME.js";
-import "./chunk-GUOGVTCQ.js";
-import "./chunk-AJVLWNFN.js";
-import "./chunk-YGVYKNSN.js";
-import "./chunk-LNAKEO63.js";
+import "./chunk-GBPP5P7X.js";
+import "./chunk-P7266HLM.js";
+import "./chunk-MQLUAEOC.js";
+import "./chunk-52FUZI6K.js";
+import "./chunk-SAEFPSB6.js";
+import "./chunk-GAEGEPOC.js";
 import "./chunk-Z3CCVDUB.js";
-import "./chunk-PWFHBTSF.js";
+import "./chunk-L3BLXZG7.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-OQGFCZJ4.js";
-import "./chunk-RUOG5D2C.js";
-import "./chunk-U3VGR4VU.js";
-import "./chunk-NTUJEGDZ.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
-import "./chunk-22AVIGXS.js";
-import "./chunk-GVXA6CCE.js";
-import "./chunk-6QIUX4EP.js";
-import "./chunk-VHQLPIRJ.js";
-import "./chunk-VN2AXLEX.js";
+import "./chunk-66VMUL7Q.js";
+import "./chunk-Q7DUK4LX.js";
+import "./chunk-AW7R2GWG.js";
+import "./chunk-RWWYJ623.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-QOBUHWHX.js";
+import "./chunk-QILIYSJF.js";
+import "./chunk-6C7JWPCP.js";
+import "./chunk-5NGR67U5.js";
+import "./chunk-C34ZXZ7O.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-ZANLILYD.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
-import "./chunk-NMABWBZN.js";
+import "./chunk-CHOW74WE.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   GRAPH_PERSIST_MAX_ELEMENTS_DEFAULT,