pi-lens 4.4.0 → 4.4.2

package/dist/{chunk-DIULIWKU.js → chunk-34WSVGEM.js}

@@ -3,10 +3,16 @@ import {
   extractTomlTableSection,
   hasTomlTable,
   parseTomlStringArray
-} from "./chunk-PAK6IDME.js";
+} from "./chunk-P7266HLM.js";
+import {
+  getProjectTrustState
+} from "./chunk-ZANLILYD.js";
 import {
   recordDegradationOnce
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-JAU72XNY.js";
+import {
+  logExtension
+} from "./chunk-XTMJ7XDT.js";
 import {
   UV_WORKSPACE_EXCLUDE_DIALECT,
   UV_WORKSPACE_MEMBERS_DIALECT,
@@ -14,7 +20,7 @@ import {
   matchesWorkspaceMemberPattern,
   toPosix,
   walkUpDirs
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/python-environment.js
 import { access, readFile } from "node:fs/promises";
@@ -68,6 +74,11 @@ function isUvWorkspaceMember(workspace, projectRoot) {
   }));
   return !workspace.exclude.some(matches(UV_WORKSPACE_EXCLUDE_DIALECT)) && workspace.members.some(matches(UV_WORKSPACE_MEMBERS_DIALECT));
 }
+var PROJECT_SOURCED_PYTHON_SOURCES = /* @__PURE__ */ new Set([
+  "project-dot-venv",
+  "project-venv",
+  "uv-workspace"
+]);
 var AMBIENT_ENVIRONMENT_VARIABLES = {
   "uv-project-environment": "UV_PROJECT_ENVIRONMENT",
   "virtual-env": "VIRTUAL_ENV",
@@ -115,6 +126,21 @@ async function detectPythonEnvironment(projectRoot, homeDir = os.homedir(), opti
       continue;
     if (!allowAmbient && candidate.source in AMBIENT_ENVIRONMENT_VARIABLES && !isWithinProjectRoot(candidate.root))
       continue;
+    if (PROJECT_SOURCED_PYTHON_SOURCES.has(candidate.source) && getProjectTrustState() !== "trusted") {
+      if (recordDegradationOnce({
+        kind: "trust-refusal",
+        subject: `python-environment:${candidate.root}`,
+        reason: `project Python environment refused: pi project trust is ${getProjectTrustState()}`
+      })) {
+        logExtension({
+          subsystem: "project-trust",
+          level: "warn",
+          message: "project Python environment refused: mark the project trusted in pi or upgrade pi",
+          metadata: { source: candidate.source }
+        });
+      }
+      continue;
+    }
     const binDir = path.join(candidate.root, process.platform === "win32" ? "Scripts" : "bin");
     const pythonPath = path.join(binDir, process.platform === "win32" ? "python.exe" : "python");
     try {

package/dist/chunk-3JNKMP3B.js

@@ -0,0 +1,17 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  configureLspServiceLifecycle,
+  getOwnedLspService,
+  peekOwnedLspService,
+  resetOwnedLspService
+} from "./chunk-MQLUAEOC.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
+import "./chunk-N2H3ZPZY.js";
+import "./chunk-NXL4FFQQ.js";
+export {
+  configureLspServiceLifecycle,
+  getOwnedLspService,
+  peekOwnedLspService,
+  resetOwnedLspService
+};

package/dist/{chunk-HVUZXSWK.js → chunk-3UUPUE3O.js}

@@ -1,74 +1,77 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  nestedWorktreeOffsets
+} from "./chunk-VCHXCQFG.js";
 import {
   formatToolFailure
-} from "./chunk-ZMOL6RQC.js";
-import "./chunk-I7SPGOWI.js";
+} from "./chunk-2CD5RS6M.js";
+import "./chunk-UZ3TUTRV.js";
 import {
   createAvailabilityChecker,
   findManagedNodeToolBinary,
   resolveAvailableOrInstall
-} from "./chunk-7FBF7NPR.js";
-import "./chunk-HHYAELLJ.js";
-import {
-  canonicalDirectory,
-  listNestedLinkedWorktreeRoots
-} from "./chunk-3I5QFT3N.js";
-import "./chunk-B3I2UUT4.js";
-import "./chunk-DIULIWKU.js";
-import "./chunk-VDBPVIKD.js";
-import "./chunk-TGPXLY2J.js";
+} from "./chunk-GOYRYZ2R.js";
+import "./chunk-RPLINGVB.js";
+import "./chunk-PNQDPDRC.js";
+import "./chunk-ESBQHFMJ.js";
+import "./chunk-34WSVGEM.js";
+import "./chunk-VWCXW2E7.js";
+import "./chunk-ZXYDQ3TZ.js";
+import "./chunk-724UL2TJ.js";
 import "./chunk-QOZXJ4NA.js";
-import "./chunk-PAK6IDME.js";
-import "./chunk-GUOGVTCQ.js";
-import "./chunk-AJVLWNFN.js";
-import "./chunk-YGVYKNSN.js";
+import "./chunk-P7266HLM.js";
+import "./chunk-52FUZI6K.js";
+import "./chunk-SAEFPSB6.js";
 import {
   getJscpdMaxEntriesDerived
-} from "./chunk-LNAKEO63.js";
+} from "./chunk-GAEGEPOC.js";
 import "./chunk-Z3CCVDUB.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-OQGFCZJ4.js";
-import "./chunk-RUOG5D2C.js";
+import "./chunk-66VMUL7Q.js";
+import "./chunk-Q7DUK4LX.js";
 import {
   findNodeToolBinary
-} from "./chunk-U3VGR4VU.js";
-import "./chunk-NTUJEGDZ.js";
-import "./chunk-EOKRQ3SA.js";
-import "./chunk-WONERJTP.js";
-import "./chunk-22AVIGXS.js";
-import "./chunk-GVXA6CCE.js";
-import "./chunk-6QIUX4EP.js";
+} from "./chunk-AW7R2GWG.js";
+import {
+  getIsolatedNpxSpawnOptions
+} from "./chunk-RWWYJ623.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-QOBUHWHX.js";
+import "./chunk-QILIYSJF.js";
+import "./chunk-6C7JWPCP.js";
 import {
   shouldRecurseIntoDir,
   walkTreeStackSync
-} from "./chunk-VHQLPIRJ.js";
+} from "./chunk-5NGR67U5.js";
 import {
   getExcludedDirGlobs,
   getProjectIgnoreGlobs,
   getProjectIgnoreMatcher,
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-C34ZXZ7O.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-ZANLILYD.js";
 import "./chunk-2EECBNC5.js";
 import {
   incrementDegradationCount
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-JAU72XNY.js";
 import {
   createSubsystemLogger
-} from "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+} from "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
 import {
   isAtOrAboveHomeDir,
   isFullyQualified,
   toPosix
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/jscpd-client.js
@@ -76,7 +79,6 @@ import * as fs from "node:fs";
 import { mkdtempSync } from "node:fs";
 import * as os from "node:os";
 import * as path from "node:path";
-import { relative } from "node:path";
 var EMPTY_RESULT = {
   success: false,
   clones: [],
@@ -113,10 +115,9 @@ function readProjectJscpdConfig(cwd) {
   return null;
 }
 function worktreeIgnoreGlobs(cwd) {
-  const base = canonicalDirectory(cwd);
   const globs = [];
-  for (const worktree of listNestedLinkedWorktreeRoots(cwd)) {
-    const inside = toPosix(relative(base, worktree));
+  for (const offset of nestedWorktreeOffsets(cwd)) {
+    const inside = toPosix(offset);
     const unsafe = inside.includes(",") ? "comma-in-path" : /[*?[\]{}()!\\]/.test(inside) ? "glob-char-in-path" : null;
     if (unsafe) {
       incrementDegradationCount({
@@ -322,7 +323,10 @@ var JscpdClient = class {
         ...patterns === void 0 ? [] : ["--ignore", patterns.join(",")]
       ], {
         timeout: SCAN_TIMEOUT_MS,
-        cwd
+        // A cache-only npx fallback must not read the project's `.npmrc`
+        // (#4268 acceptance 3); local/managed jscpd keeps the project cwd.
+        cwd,
+        ...cmd === "npx" ? getIsolatedNpxSpawnOptions() : {}
       });
       if (result.error) {
         this.log(`Scan error: ${result.error.message}`);

package/dist/{chunk-5RXBNSW2.js → chunk-3VPVG5SU.js}

@@ -1,29 +1,29 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getStartupScanMaxSourceFilesDerived
-} from "./chunk-LNAKEO63.js";
+} from "./chunk-GAEGEPOC.js";
 import {
   shouldRecurseIntoDir,
   walkTreeStackAsync,
   walkTreeStackSync
-} from "./chunk-VHQLPIRJ.js";
+} from "./chunk-5NGR67U5.js";
 import {
   getProjectIgnoreMatcher
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-C34ZXZ7O.js";
 import {
   getDirectoryMarkers,
   registerWorkspaceTopologyReset
-} from "./chunk-VNMT7C64.js";
+} from "./chunk-XVF2VVXP.js";
 import {
   lazyEnvNumber
-} from "./chunk-UK3CMEAL.js";
+} from "./chunk-AOHZU2BM.js";
 import {
   BoundedLruCache
 } from "./chunk-ABBOA7UD.js";
 import {
   isAtOrAboveHomeDir,
   normalizeMapKey
-} from "./chunk-Q5U6FMDI.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/startup-scan.js
 import * as os from "node:os";
@@ -50,6 +50,10 @@ function isStartupScanVerdictFresh(verdict, now = Date.now()) {
     return true;
   if (typeof verdict.computedAt !== "number")
     return false;
+  if (verdict.maxProjectFiles !== getStartupScanMaxSourceFilesDerived(verdict.cwd))
+    return false;
+  if (verdict.maxScanEntries !== getStartupScanMaxEntries())
+    return false;
   return now - verdict.computedAt < getStartupScanVerdictTtlMs();
 }
 function findNearestProjectRoot(startDir) {
@@ -160,7 +164,9 @@ function computeStartupScanContext(cwd, options = {}) {
       projectRoot,
       canWarmCaches: false,
       reason: entryBudgetExceeded ? "too-many-entries" : "too-many-source-files",
-      sourceFileCount
+      sourceFileCount,
+      maxProjectFiles: maxSourceFiles,
+      maxScanEntries
     };
   }
   return {
@@ -233,7 +239,9 @@ async function resolveStartupScanContextAsync(cwd, options = {}) {
         projectRoot,
         canWarmCaches: false,
         reason: entryBudgetExceeded ? "too-many-entries" : "too-many-source-files",
-        sourceFileCount
+        sourceFileCount,
+        maxProjectFiles: maxSourceFiles,
+        maxScanEntries
       };
     } else {
       result = {

package/dist/chunk-3WA4HP4I.js

@@ -0,0 +1,55 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  DependencyChecker,
+  buildMadgeArgs,
+  resetMadgeManagedPathMemo
+} from "./chunk-EETY4LF7.js";
+import "./chunk-GOYRYZ2R.js";
+import "./chunk-RPLINGVB.js";
+import {
+  mapWithConcurrency
+} from "./chunk-XIMYZ3JA.js";
+import "./chunk-ESBQHFMJ.js";
+import "./chunk-34WSVGEM.js";
+import "./chunk-VWCXW2E7.js";
+import "./chunk-ZXYDQ3TZ.js";
+import "./chunk-724UL2TJ.js";
+import "./chunk-QOZXJ4NA.js";
+import "./chunk-P7266HLM.js";
+import "./chunk-52FUZI6K.js";
+import "./chunk-SAEFPSB6.js";
+import "./chunk-GAEGEPOC.js";
+import "./chunk-Z3CCVDUB.js";
+import "./chunk-2BEMIWEW.js";
+import "./chunk-66VMUL7Q.js";
+import "./chunk-Q7DUK4LX.js";
+import "./chunk-AW7R2GWG.js";
+import "./chunk-RWWYJ623.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-QOBUHWHX.js";
+import "./chunk-QILIYSJF.js";
+import "./chunk-6C7JWPCP.js";
+import "./chunk-5NGR67U5.js";
+import "./chunk-C34ZXZ7O.js";
+import "./chunk-BW5KFIQC.js";
+import "./chunk-QYF5S6P6.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-ZANLILYD.js";
+import "./chunk-2EECBNC5.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
+import "./chunk-LJDODBBZ.js";
+import "./chunk-ABBOA7UD.js";
+import "./chunk-N2H3ZPZY.js";
+import "./chunk-NXL4FFQQ.js";
+export {
+  DependencyChecker,
+  buildMadgeArgs,
+  mapWithConcurrency,
+  resetMadgeManagedPathMemo
+};

package/dist/chunk-466Z26MG.js

@@ -0,0 +1,30 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  importFactProvider,
+  importFactsApplyTo
+} from "./chunk-XCJN5IJU.js";
+import "./chunk-GXW6K4YJ.js";
+import "./chunk-QHJ6DQ2R.js";
+import "./chunk-Z54ZSOBZ.js";
+import "./chunk-724UL2TJ.js";
+import "./chunk-QOZXJ4NA.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-C34ZXZ7O.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-ZANLILYD.js";
+import "./chunk-2EECBNC5.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
+import "./chunk-LJDODBBZ.js";
+import "./chunk-ABBOA7UD.js";
+import "./chunk-N2H3ZPZY.js";
+import "./chunk-NXL4FFQQ.js";
+export {
+  importFactProvider,
+  importFactsApplyTo
+};

package/dist/{chunk-34U7PLGE.js → chunk-4UNXBNE2.js}

@@ -2,20 +2,21 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   computeImpactCascade,
   computeTransitiveImpact
-} from "./chunk-E2WFBRHM.js";
-import "./chunk-V7R425XG.js";
-import "./chunk-PAK6IDME.js";
-import "./chunk-VN2AXLEX.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+} from "./chunk-2B73ZPOK.js";
+import "./chunk-GBPP5P7X.js";
+import "./chunk-P7266HLM.js";
+import "./chunk-C34ZXZ7O.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   computeImpactCascade,

package/dist/{chunk-E4MAEDPM.js → chunk-4W4VLAPJ.js}

@@ -15,21 +15,22 @@ import {
   getFilterStats,
   isBuildArtifact,
   sourceTwinCandidates
-} from "./chunk-6QIUX4EP.js";
-import "./chunk-VHQLPIRJ.js";
-import "./chunk-VN2AXLEX.js";
+} from "./chunk-6C7JWPCP.js";
+import "./chunk-5NGR67U5.js";
+import "./chunk-C34ZXZ7O.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-5ZEJHV35.js";
-import "./chunk-DQ2NZ7C4.js";
-import "./chunk-VNMT7C64.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-N3YQJI6O.js";
-import "./chunk-O6TQT6RI.js";
-import "./chunk-5THXD6X5.js";
-import "./chunk-UK3CMEAL.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-Q5U6FMDI.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   ALL_SCANNABLE_EXTENSIONS,

package/dist/{chunk-GUOGVTCQ.js → chunk-52FUZI6K.js}

@@ -1,7 +1,7 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   recordDegradationOnce
-} from "./chunk-N3YQJI6O.js";
+} from "./chunk-JAU72XNY.js";
 
 // dist/clients/deadline-utils.js
 function combineAbortSignals(...signals) {
@@ -128,8 +128,10 @@ var HOOK_WALL_BUDGET_MS = Object.freeze({
   tool_result_read_only: 500,
   /** The ONLY path the contract lets block the host, and only this long. */
   tool_result_edit: 1e4,
-  /** Teardown: spawning or awaiting here aborts libuv (#234). */
+  /** Replacement teardown is synchronous so its successor ordering is preserved (#3881). */
   session_shutdown: 0,
+  /** The maintainer amendment permits quit-only sink draining before process exit (#2523). */
+  session_shutdown_quit: 500,
   /** Synchronous message contribution; the host is blocked on the answer. */
   context: 0,
   /** Fork bookkeeping; the session is being replaced under it. */

package/dist/chunk-5JM2524W.js

@@ -0,0 +1,84 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  _getWarmWordIndexCacheStateForTests,
+  _resetWarmWordIndexCacheForTests,
+  acquireWarmWordIndex,
+  analyzeFile,
+  summarizeWarningTiers
+} from "./chunk-ODBNXWT4.js";
+import "./chunk-OXXKQCSV.js";
+import "./chunk-EJIUXPBX.js";
+import "./chunk-FC4RP4I2.js";
+import "./chunk-66SXUJCA.js";
+import "./chunk-VCHXCQFG.js";
+import "./chunk-IXXDFY73.js";
+import "./chunk-MRXKYPCS.js";
+import "./chunk-2CD5RS6M.js";
+import "./chunk-UZ3TUTRV.js";
+import "./chunk-EETY4LF7.js";
+import "./chunk-GOYRYZ2R.js";
+import "./chunk-RPLINGVB.js";
+import "./chunk-XCJN5IJU.js";
+import "./chunk-76MWC2K6.js";
+import "./chunk-GXW6K4YJ.js";
+import "./chunk-2B73ZPOK.js";
+import "./chunk-XMSXXAHW.js";
+import "./chunk-7DYBLXYA.js";
+import "./chunk-PV6LR5P5.js";
+import "./chunk-3MED75HT.js";
+import "./chunk-CO2G5PHH.js";
+import "./chunk-IBGIOBEE.js";
+import "./chunk-PNQDPDRC.js";
+import "./chunk-XIMYZ3JA.js";
+import "./chunk-ESBQHFMJ.js";
+import "./chunk-34WSVGEM.js";
+import "./chunk-VWCXW2E7.js";
+import "./chunk-ZXYDQ3TZ.js";
+import "./chunk-5W3R6LFT.js";
+import "./chunk-QHJ6DQ2R.js";
+import "./chunk-Z54ZSOBZ.js";
+import "./chunk-724UL2TJ.js";
+import "./chunk-QOZXJ4NA.js";
+import "./chunk-GBPP5P7X.js";
+import "./chunk-P7266HLM.js";
+import "./chunk-MQLUAEOC.js";
+import "./chunk-52FUZI6K.js";
+import "./chunk-SAEFPSB6.js";
+import "./chunk-GAEGEPOC.js";
+import "./chunk-Z3CCVDUB.js";
+import "./chunk-L3BLXZG7.js";
+import "./chunk-2BEMIWEW.js";
+import "./chunk-66VMUL7Q.js";
+import "./chunk-Q7DUK4LX.js";
+import "./chunk-AW7R2GWG.js";
+import "./chunk-RWWYJ623.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-QOBUHWHX.js";
+import "./chunk-QILIYSJF.js";
+import "./chunk-6C7JWPCP.js";
+import "./chunk-5NGR67U5.js";
+import "./chunk-C34ZXZ7O.js";
+import "./chunk-BW5KFIQC.js";
+import "./chunk-QYF5S6P6.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-ZANLILYD.js";
+import "./chunk-2EECBNC5.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
+import "./chunk-LJDODBBZ.js";
+import "./chunk-CHOW74WE.js";
+import "./chunk-ABBOA7UD.js";
+import "./chunk-N2H3ZPZY.js";
+import "./chunk-NXL4FFQQ.js";
+export {
+  _getWarmWordIndexCacheStateForTests,
+  _resetWarmWordIndexCacheForTests,
+  acquireWarmWordIndex,
+  analyzeFile,
+  summarizeWarningTiers
+};

package/dist/{chunk-VHQLPIRJ.js → chunk-5NGR67U5.js}

@@ -1,14 +1,14 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   isExcludedDirName
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-C34ZXZ7O.js";
 import {
   createDeadline,
   yieldIfOverBudget
 } from "./chunk-QYF5S6P6.js";
 import {
   isGeneratedArtifactDirectoryName
-} from "./chunk-DQ2NZ7C4.js";
+} from "./chunk-2BBLFX75.js";
 
 // dist/clients/source-walker.js
 import * as fs from "node:fs";

package/dist/{chunk-DFVMIKMQ.js → chunk-66SXUJCA.js}

@@ -1,16 +1,23 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
-  getScratchTreeGlobPatterns
-} from "./chunk-TO6WL3GM.js";
+  getScratchTreeGlobPatterns,
+  nestedWorktreeOffsets
+} from "./chunk-VCHXCQFG.js";
 import {
   SecurityScanClient
-} from "./chunk-7F72PXY2.js";
+} from "./chunk-IXXDFY73.js";
 import {
   safeSpawnAsync
-} from "./chunk-VN2AXLEX.js";
+} from "./chunk-C34ZXZ7O.js";
 import {
   loadPiLensProjectConfig
-} from "./chunk-DQ2NZ7C4.js";
+} from "./chunk-2BBLFX75.js";
+import {
+  incrementDegradationCount
+} from "./chunk-JAU72XNY.js";
+import {
+  toPosix
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/trivy-client.js
 import * as fs from "node:fs";
@@ -96,6 +103,34 @@ function resolveSeverityFloor(cwd) {
   const floor = Math.min(requested ?? SEVERITY_RANK.HIGH, SEVERITY_RANK.HIGH);
   return ["LOW", "MEDIUM", "HIGH", "CRITICAL"].filter((s) => SEVERITY_RANK[s] >= floor);
 }
+function worktreeSkipDirs(cwd, separator = path.sep, maxArgumentChars = separator === "\\" ? 3e4 : Number.POSITIVE_INFINITY) {
+  const unsafe = separator === "\\" ? /[,"*?[\]{}]/ : /[,"*?[\]{}\\]/;
+  const skips = [];
+  let argumentChars = 0;
+  for (const offset of nestedWorktreeOffsets(cwd)) {
+    if (unsafe.test(offset)) {
+      incrementDegradationCount({
+        kind: "scan-worktree-exclusion-skipped",
+        subject: "trivy",
+        reason: `csv-or-glob-char-in-path: ${offset} not skipped under ${cwd}`
+      });
+      continue;
+    }
+    const value = toPosix(offset);
+    const addedChars = "--skip-dirs".length + value.length + 2;
+    if (argumentChars + addedChars > maxArgumentChars) {
+      incrementDegradationCount({
+        kind: "scan-worktree-exclusion-skipped",
+        subject: "trivy",
+        reason: `windows-command-line-cap: ${offset} not skipped under ${cwd}`
+      });
+      continue;
+    }
+    skips.push(value);
+    argumentChars += addedChars;
+  }
+  return skips;
+}
 var TrivyClient = class extends SecurityScanClient {
   constructor(verbose = false) {
     super("trivy", verbose);
@@ -158,10 +193,10 @@ var TrivyClient = class extends SecurityScanClient {
         reportPath,
         "--quiet",
         "--no-progress",
-        ...getScratchTreeGlobPatterns().flatMap((glob) => [
-          "--skip-dirs",
-          glob
-        ]),
+        ...[
+          ...getScratchTreeGlobPatterns(),
+          ...worktreeSkipDirs(cwd)
+        ].flatMap((glob) => ["--skip-dirs", glob]),
         cwd
       ], { cwd, timeout: SCAN_TIMEOUT_MS });
       if (result.error) {
@@ -342,6 +377,7 @@ export {
   isTrivyEnabled,
   shouldScanTrivy,
   resolveSeverityFloor,
+  worktreeSkipDirs,
   TrivyClient,
   parseTrivyReport,
   parseTrivySecrets,