pi-lens 4.4.1 → 4.4.2

package/dist/mcp/worker.js

@@ -2,74 +2,79 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   analyzeFile
-} from "../chunk-ZZUFZUQZ.js";
-import "../chunk-ZOEYVXSV.js";
-import "../chunk-KJN4IOEJ.js";
+} from "../chunk-ODBNXWT4.js";
+import "../chunk-OXXKQCSV.js";
+import "../chunk-EJIUXPBX.js";
 import "../chunk-FC4RP4I2.js";
-import "../chunk-YLN4K6WD.js";
-import "../chunk-J3FZR3YY.js";
-import "../chunk-5JHXUETW.js";
-import "../chunk-3MRXIJ6I.js";
-import "../chunk-TA5L5KWQ.js";
-import "../chunk-FGALODG3.js";
-import "../chunk-OC7LYAU5.js";
-import "../chunk-NFXP47RV.js";
-import "../chunk-MGIWSROG.js";
-import "../chunk-WSEWKCXU.js";
-import "../chunk-MQA2YBAH.js";
-import "../chunk-TQFBZVCG.js";
-import "../chunk-WATC3IQR.js";
-import "../chunk-OYOB3ZFG.js";
-import "../chunk-XHSCVSOL.js";
-import "../chunk-V5MEBST3.js";
+import "../chunk-66SXUJCA.js";
+import "../chunk-VCHXCQFG.js";
+import "../chunk-IXXDFY73.js";
+import "../chunk-MRXKYPCS.js";
+import "../chunk-2CD5RS6M.js";
+import "../chunk-UZ3TUTRV.js";
+import "../chunk-EETY4LF7.js";
+import "../chunk-GOYRYZ2R.js";
+import "../chunk-RPLINGVB.js";
+import "../chunk-XCJN5IJU.js";
+import "../chunk-76MWC2K6.js";
+import "../chunk-GXW6K4YJ.js";
+import "../chunk-2B73ZPOK.js";
+import "../chunk-XMSXXAHW.js";
+import "../chunk-7DYBLXYA.js";
+import "../chunk-PV6LR5P5.js";
 import "../chunk-3MED75HT.js";
-import "../chunk-IMSQR4WO.js";
-import "../chunk-MTDRLSI7.js";
-import "../chunk-OZJINN4O.js";
-import "../chunk-3JSEWUWI.js";
+import "../chunk-CO2G5PHH.js";
+import "../chunk-IBGIOBEE.js";
+import "../chunk-PNQDPDRC.js";
 import "../chunk-XIMYZ3JA.js";
-import "../chunk-IQZXOZ7S.js";
-import "../chunk-LNOMA3MP.js";
-import "../chunk-U52SAGRM.js";
+import "../chunk-ESBQHFMJ.js";
+import "../chunk-34WSVGEM.js";
+import "../chunk-VWCXW2E7.js";
+import "../chunk-ZXYDQ3TZ.js";
 import "../chunk-5W3R6LFT.js";
-import "../chunk-UEAHAMEI.js";
+import "../chunk-QHJ6DQ2R.js";
 import "../chunk-Z54ZSOBZ.js";
-import "../chunk-KJCWXUUS.js";
+import "../chunk-724UL2TJ.js";
 import "../chunk-QOZXJ4NA.js";
-import "../chunk-6XX5HCLK.js";
-import "../chunk-S6AMWKPC.js";
-import "../chunk-F5VLZHUW.js";
-import "../chunk-AXKPQ6ZI.js";
-import "../chunk-7BX5DWSA.js";
-import "../chunk-IUKPRZER.js";
+import "../chunk-GBPP5P7X.js";
+import "../chunk-P7266HLM.js";
+import "../chunk-MQLUAEOC.js";
+import "../chunk-52FUZI6K.js";
+import "../chunk-SAEFPSB6.js";
+import "../chunk-GAEGEPOC.js";
 import "../chunk-Z3CCVDUB.js";
-import "../chunk-XGUL4SLQ.js";
+import "../chunk-L3BLXZG7.js";
 import "../chunk-2BEMIWEW.js";
-import "../chunk-LD7WFTRX.js";
-import "../chunk-IUR76K6A.js";
-import "../chunk-T4QZ6FEH.js";
-import "../chunk-D6YF5HKX.js";
-import "../chunk-CMU4RMJB.js";
-import "../chunk-O7HZX7CA.js";
-import "../chunk-VYKKMYVT.js";
-import "../chunk-BNKLYOOO.js";
-import "../chunk-USHG4DLH.js";
-import "../chunk-H5EV3VMF.js";
-import "../chunk-T54VJRAD.js";
+import "../chunk-66VMUL7Q.js";
+import "../chunk-Q7DUK4LX.js";
+import "../chunk-AW7R2GWG.js";
+import "../chunk-RWWYJ623.js";
+import "../chunk-VRZP76YM.js";
+import "../chunk-QOBUHWHX.js";
+import "../chunk-QILIYSJF.js";
+import "../chunk-6C7JWPCP.js";
+import "../chunk-5NGR67U5.js";
+import "../chunk-C34ZXZ7O.js";
 import "../chunk-BW5KFIQC.js";
 import "../chunk-QYF5S6P6.js";
-import "../chunk-64LU2OVH.js";
-import "../chunk-N2IRDBZI.js";
-import "../chunk-Z6BB4JLQ.js";
+import "../chunk-PHDMFAKM.js";
+import "../chunk-2BBLFX75.js";
+import "../chunk-XVF2VVXP.js";
+import {
+  setProjectTrustState
+} from "../chunk-ZANLILYD.js";
 import "../chunk-2EECBNC5.js";
-import "../chunk-7ELY2CSM.js";
-import "../chunk-34OCDWOS.js";
-import "../chunk-3PNFWVHT.js";
-import "../chunk-VSMJK3ZJ.js";
+import "../chunk-JAU72XNY.js";
+import {
+  logExtension
+} from "../chunk-XTMJ7XDT.js";
+import "../chunk-JMYYOTQG.js";
+import "../chunk-QQNQ7SJW.js";
+import "../chunk-AOHZU2BM.js";
 import "../chunk-LJDODBBZ.js";
-import "../chunk-UGSMCQ4D.js";
+import "../chunk-CHOW74WE.js";
 import "../chunk-ABBOA7UD.js";
-import "../chunk-G3RLJYA2.js";
+import "../chunk-N2H3ZPZY.js";
 import "../chunk-NXL4FFQQ.js";
 
 // dist/mcp/worker.js
@@ -79,6 +84,12 @@ function arg(name) {
   return found ? found.slice(prefix.length) : void 0;
 }
 async function main() {
+  setProjectTrustState("trusted");
+  logExtension({
+    subsystem: "project-trust",
+    level: "debug",
+    message: "mcp-worker: workspace trust belongs to the MCP client; pi trust not consulted"
+  });
   const file = arg("file");
   const cwd = arg("cwd") ?? process.cwd();
   if (!file) {

package/dist/probes/installer.js

@@ -53,30 +53,31 @@ import {
   verifyNpmPackageEntry,
   verifyToolBinary,
   wasLastResolveTransient
-} from "../chunk-LD7WFTRX.js";
-import "../chunk-IUR76K6A.js";
-import "../chunk-T4QZ6FEH.js";
-import "../chunk-D6YF5HKX.js";
-import "../chunk-CMU4RMJB.js";
-import "../chunk-O7HZX7CA.js";
-import "../chunk-VYKKMYVT.js";
-import "../chunk-BNKLYOOO.js";
-import "../chunk-USHG4DLH.js";
-import "../chunk-H5EV3VMF.js";
-import "../chunk-T54VJRAD.js";
+} from "../chunk-66VMUL7Q.js";
+import "../chunk-Q7DUK4LX.js";
+import "../chunk-AW7R2GWG.js";
+import "../chunk-RWWYJ623.js";
+import "../chunk-VRZP76YM.js";
+import "../chunk-QOBUHWHX.js";
+import "../chunk-QILIYSJF.js";
+import "../chunk-6C7JWPCP.js";
+import "../chunk-5NGR67U5.js";
+import "../chunk-C34ZXZ7O.js";
 import "../chunk-BW5KFIQC.js";
 import "../chunk-QYF5S6P6.js";
-import "../chunk-64LU2OVH.js";
-import "../chunk-N2IRDBZI.js";
-import "../chunk-Z6BB4JLQ.js";
+import "../chunk-PHDMFAKM.js";
+import "../chunk-2BBLFX75.js";
+import "../chunk-XVF2VVXP.js";
+import "../chunk-ZANLILYD.js";
 import "../chunk-2EECBNC5.js";
-import "../chunk-7ELY2CSM.js";
-import "../chunk-34OCDWOS.js";
-import "../chunk-3PNFWVHT.js";
-import "../chunk-VSMJK3ZJ.js";
+import "../chunk-JAU72XNY.js";
+import "../chunk-XTMJ7XDT.js";
+import "../chunk-JMYYOTQG.js";
+import "../chunk-QQNQ7SJW.js";
+import "../chunk-AOHZU2BM.js";
 import "../chunk-LJDODBBZ.js";
 import "../chunk-ABBOA7UD.js";
-import "../chunk-G3RLJYA2.js";
+import "../chunk-N2H3ZPZY.js";
 import "../chunk-NXL4FFQQ.js";
 export {
   GITHUB_TOOLS,

package/docs/astplayground.md

@@ -17,7 +17,7 @@ The shipped rule set runs in two engines:
 
 | Path | Engine | Source |
 |------|--------|--------|
-| ast-grep LSP (the live path) | upstream binary, auto-installed by `ensureTool` | the binary's `ast-grep` version may be ahead of `npx ast-grep@x` |
+| ast-grep LSP (the live path) | upstream binary, auto-installed by `ensureTool` | the binary's `ast-grep` version may be ahead of the npm `@ast-grep/cli` version |
 | ast-grep napi runner (fallback) | `@ast-grep/napi` npm package, version-pinned in `package.json` | can lag the binary by a release |
 
 The CLI test in `tests/clients/dispatch/runners/ast-grep-catalog-rules.test.ts`

package/docs/configuration.md

@@ -10,6 +10,13 @@ There are **two** pi-lens config files:
 Both files have the same shape, with one exception noted below the example:
 everything LSP-related lives under an `lsp` namespace inside them.
 
+Executable LSP fields from a project config are admitted only when pi has
+marked the project trusted. This includes custom `command` values, command
+overrides, `env`, and `initializationOptions`; an untrusted or older host is
+fail-closed and emits one bounded notice telling you to mark the project
+trusted in pi or upgrade pi. Global config remains trusted, and a project can
+always disable a server. pi-lens does not maintain a second trust setting.
+
 The editor-facing JSON Schema is published at
 [`docs/schema/pi-lens-config-v1.json`](schema/pi-lens-config-v1.json). LSP
 server entries also accept canonical argv arrays, optional `name` (defaulting
@@ -44,6 +51,10 @@ schema slice does not change server launch behavior.
 }
 ```
 
+An override may also provide an experimental launcher `command` and `env`.
+The built-in server ID and strategy remain in force; only the launcher is
+replaced, and project-sourced launcher fields follow the same pi trust gate.
+
 Each model-facing tool accepts `tools.<name>.enabled` in the config file. Valid
 names include `ast_grep_search`, `ast_grep_replace`, `ast_grep_outline`,
 `lsp_navigation`, `lens_diagnostics`,
@@ -53,6 +64,24 @@ names include `ast_grep_search`, `ast_grep_replace`, `ast_grep_outline`,
 lifecycle tools `session_start`, `turn_end`, and `session_end` remain enabled
 because their host protocols require them.
 
+To see the resolved tool surface, use `/lens-health`; the `effective_config`
+tool provides the full configuration provenance. Bundled skills are managed by
+pi's package-manifest filters.
+
+### Session-start orientation
+
+The session-start orientation names only the tools pi-lens actually registered.
+A tool disabled with `tools.<name>.enabled: false` is never advertised, so the
+orientation cannot direct the agent to a tool it cannot call. The tool roster is
+the same registry that drives registration; there is no second list.
+
+`contextInjection.requirePreExistingFixes` (default `true`) controls one
+sentence in that orientation: whether pre-existing blocking errors must be
+fixed. Set it to `false` when the task's scope excludes pre-existing debt. The
+orientation then requires fixes only for blocking errors the agent's own edits
+introduce; pre-existing ones are reported, not demanded. It is a global setting,
+like every `contextInjection` key.
+
 ### `lsp.servers.<id>.covers` — declaring which runners a custom server subsumes
 
 A custom server entry accepts an optional `covers` array naming dispatch

package/docs/dependencies.md

@@ -28,6 +28,7 @@ Auto-install behavior depends on gate type:
 | `shellcheck`                        | Shell script linting             | Yes            | GitHub release                     |
 | `shfmt`                             | Shell script formatting          | Yes            | GitHub release                     |
 | `rust-analyzer`                     | Rust LSP                         | Yes            | GitHub release                     |
+| `lake serve`                        | Lean 4 LSP                       | No             | `lake` must be on PATH; uses the project's Lean toolchain |
 | `golangci-lint`                     | Go linting                       | Yes            | GitHub release                     |
 | `hadolint`                          | Dockerfile linting               | Yes            | GitHub release                     |
 | `ktlint`                            | Kotlin linting                   | Yes            | GitHub release                     |
@@ -51,6 +52,8 @@ Auto-install behavior depends on gate type:
 | `trivy`                             | Dependency-CVE session scan      | Auto-install   | Explicit opt-in (`trivy.enabled`)  |
 | `psscriptanalyzer`                  | PowerShell linting               | Manual         | —                                  |
 
+Lean LSP is launched as `lake serve` from the detected Lake project root, so elan selects the toolchain from that project's `lean-toolchain` file and Lake supplies its project environment. pi-lens does not install or manage Lean/elan; install Lean and Lake separately and ensure `lake` is on `PATH`.
+
 Additional language servers (gopls, ruby-lsp, solargraph, etc.) are auto-detected from PATH or installed via native package managers (`go install`, `gem install`) when their language is detected.
 
 ## Pip tool installation order

package/docs/features.md

@@ -2,7 +2,7 @@
 
 ### LSP Support
 
-pi-lens includes **48 language server definitions** (including four cross-cutting *auxiliary* scanners that attach alongside the file's language server — Opengrep, ast-grep, zizmor, and typos — see below). LSP is **enabled by default**; use `--no-lsp` to disable it for a session. Servers are auto-discovered from PATH, project `node_modules`, and managed installs. When a server is not installed, pi-lens offers an interactive install prompt.
+pi-lens includes **49 language server definitions** (including four cross-cutting *auxiliary* scanners that attach alongside the file's language server — Opengrep, ast-grep, zizmor, and typos — see below). LSP is **enabled by default**; use `--no-lsp` to disable it for a session. Servers are auto-discovered from PATH, project `node_modules`, and managed installs. When a server with a managed installer is not installed, pi-lens offers an interactive install prompt; toolchain-bundled servers, such as Lean's `lake`, are PATH-only, and pi-lens never installs or manages them.
 
 **LSP Idle Management:** LSP servers shut down after 240 seconds of inactivity (no files modified) to free resources. The timer resets when you resume editing, preventing cold-start penalties during active development.
 
@@ -19,7 +19,7 @@ pi-lens includes **48 language server definitions** (including four cross-cuttin
 - **`capabilities`** — shows which operations are supported by the active LSP server(s) for a file, read directly from the cached `initialize` response (no round-trip).
 - **Symbol column resolution** — passing `symbol: "myFunc"` instead of an exact `character` position resolves the correct column automatically. Use `symbol: "foo#2"` for the second occurrence of `foo` on the line.
 
-LSP servers for: TypeScript, Deno, Python (pyright/basedpyright + jedi), Go, Rust, Ruby (ruby-lsp + solargraph), PHP, PowerShell, C# (omnisharp), F#, Java (JDT LS, with Lombok javaagent support when a Lombok jar is available), Kotlin, Swift, Dart, Lua, C/C++, Zig, Haskell, Elixir, Gleam, Typst (tinymist), Markdown (marksman), OCaml, Clojure, CUE (syntax and parse diagnostics; evaluation errors via the cue-vet auxiliary runner), Terraform, Nix, Bash, Shuck (zsh-aware shell language server), Fish, CMake, Docker, YAML, JSON, HTML, TOML, Prisma, Vue, Svelte, CSS.
+LSP servers for: TypeScript, Deno, Python (pyright/basedpyright + jedi), Go, Rust, Ruby (ruby-lsp + solargraph), PHP, PowerShell, C# (omnisharp), F#, Java (JDT LS, with Lombok javaagent support when a Lombok jar is available), Kotlin, Lean, Swift, Dart, Lua, C/C++, Zig, Haskell, Elixir, Gleam, Typst (tinymist), Markdown (marksman), OCaml, Clojure, CUE (syntax and parse diagnostics; evaluation errors via the cue-vet auxiliary runner), Terraform, Nix, Bash, Shuck (zsh-aware shell language server), Fish, CMake, Docker, YAML, JSON, HTML, TOML, Prisma, Vue, Svelte, CSS.
 
 ### Formatters
 

package/docs/globalconfig.md

@@ -112,6 +112,8 @@ Hide the diagnostics widget by default, run formatting immediately after write/e
 
 `contextInjection.enabled` (default `true`) controls whether pi-lens prepends automatic findings — session-start guidance, turn-end findings, and test findings — into the next model turn. Set it to `false` (or use `--no-lens-context` / `PI_LENS_NO_CONTEXT_INJECTION=1` / `/lens-context-toggle`) to keep tools, LSP, read-guard, and formatting running while avoiding the prompt-cache invalidation that injected messages cause in long, cache-sensitive sessions. Findings are still cached, so `lens_diagnostics` and `/lens-health` keep working.
 
+`contextInjection.requirePreExistingFixes` (default `true`) controls whether the session-start orientation tells the agent to fix pre-existing blocking errors; set `false` to scope that demand to errors its own edits introduce.
+
 `actionableWarnings.enabled` gates the turn_end report. `includeLspCodeActions` fetches LSP code actions for each warning (requires an active language server). `deltaOnly` (default `true`) limits the report to lines touched in the current turn. `autoFix.enabled` applies conservative LSP quickfixes at `agent_end`; `autoFix.maxFixes` caps the number applied per turn (default `5`, must be a non-negative whole number). `maxFixes: 0` keeps the report and applies nothing, which is a useful halfway step before enabling `autoFix` for real. Unlike the toggles in the table above there is no CLI counterpart, since it takes a number rather than being on or off.
 
 `turnEnd.madge.enabled` (default `false`) runs the per-turn-end madge circular-dependency check on import-changed files. It is off by default because that pass only writes debug output — user-facing madge diagnostics come from the session-start scan cache and the `lens_diagnostics` extractor — and its subprocess spawns dominated the turn-end latency tail (#766). Enable it with `--lens-turn-end-madge` or `turnEnd.madge.enabled: true` if you want the per-edit circular-dependency note.

package/docs/language-coverage.md

@@ -1,6 +1,6 @@
 # Language Coverage
 
-pi-lens supports **36+ languages** through dispatch runners and LSP integration.
+pi-lens supports **37+ languages** through dispatch runners and LSP integration.
 
 Formatting uses a single selected formatter per file: explicit project config wins, otherwise pi-lens uses a smart default where supported, and config-first ecosystems do not autoformat without config.
 
@@ -33,6 +33,7 @@ Dispatch is diagnostics-oriented: automatic formatting and safe autofix happen i
 | Java                  | ✓   | lsp, javac                                                                                                     | google-java-format      |
 | Java + Lombok         | ✓   | JDT LS launched with `-javaagent:<lombok.jar>` when Lombok is detected and a jar is found (`PI_LENS_LOMBOK_JAR` / `LOMBOK_JAR`, project `.lombok/lombok.jar`, or Maven/Gradle cache) | google-java-format      |
 | Kotlin                | ✓   | lsp, ktlint, detekt                                                                                            | ktlint                  |
+| Lean 4                | ✓ (Lake `serve`) | lsp; uses each project's Lake toolchain and environment                                               | —                       |
 | Swift                 | ✓   | lsp, swiftlint                                                                                                 | swiftformat             |
 | Dart                  | ✓   | lsp, dart-analyze                                                                                              | dart format             |
 | Lua                   | ✓   | lsp                                                                                                            | stylua                  |

package/docs/lsp-capability-matrix.md

@@ -1,5 +1,22 @@
 # LSP capability matrix — affirmative-clean-signal strategy
 
+## Project-code trust class (#4269)
+
+Some global language-server binaries execute repository-owned build, plugin, or
+macro code while starting or indexing. The built-in registry marks these with
+`executesProjectCode`; the launch gate refuses them unless pi reports the
+project as trusted. Unknown trust is a `spawn-failed` refusal, not
+`tool-not-found`, and does not install or retry the server. The class currently
+includes rust-analyzer (Cargo `build.rs` and proc macros), Ruby LSP
+(Bundler/Gemfile composed-bundle setup), PowerShell Editor Services (workspace
+modules), C# / F# servers (MSBuild targets), JDT LS and Kotlin (Gradle/Maven),
+SourceKit-LSP (SwiftPM plugins), Haskell Language Server (Cabal/Stack and
+Template Haskell), ElixirLS / Expert (`mix compile`), and the project-configured
+analysis servers whose startup evaluates workspace configuration: Dart, ZLS,
+OCaml, Clojure, Terraform, Nix, CMake, Vue, and Svelte. Lean is tracked by
+#4122 and will declare itself when that change lands. gopls is excluded: its
+startup/index discovery uses `go list`; cgo is not compiled by gopls startup.
+
 How pi-lens knows a just-edited file is **clean** (no diagnostics) vs the server
 simply **hasn't answered yet** (cold/crashed/silent). pi-lens waits *synchronously*
 for a verdict, so — unlike an editor, which renders asynchronously and never needs
@@ -68,8 +85,10 @@ discriminator either.
 
 `tests/config/lsp-first-publish-census.test.ts` compares this column against the
 `emptyFirstPublish` markers and reds in BOTH directions, which is the expiry
-check: when the nightly re-measures a server into a different class, the docs
-refresh cannot merge until the marker is updated with it.
+check: when two consecutive nights re-measure a server into a different class,
+the docs refresh commits the confirmed class and the marker must move with it.
+A single-night flip remains in the refresh-state JSON below and does not change
+the census's confirmed population.
 
 ## The strategies
 
@@ -148,7 +167,7 @@ carries the named admission until then.
 | deno | deno (alt of typescript) | pull | — | n/a (pull) | 1 | dev+ci |
 | ruby | ruby-lsp | pull | — | n/a (pull) | 1 | ci |
 | csharp | csharp-ls | pull | — | n/a (pull) | 1 | ci |
-| typescript | typescript-language-server | push-only | silent | direct | 3 | dev+ci |
+| typescript | typescript-language-server | push-only | silent | empty-first | 3 | dev+ci |
 | markdown | marksman | push-only | silent | direct | 3 | ci |
 | lua | lua-language-server | push-only | silent | direct | 3 | dev+ci |
 | python | pyright | push-only | publishes-versioned | direct | 2 | dev+ci |
@@ -156,7 +175,7 @@ carries the named admission until then.
 | yaml | yaml-language-server | push-only | publishes-unversioned | direct | 2* | dev+ci |
 | shell | bash-language-server | push-only | publishes-versioned | direct | 2 | dev+ci |
 | dockerfile | docker-langserver | push-only | publishes-unversioned | direct | 2* | dev+ci |
-| dockerfile-official | docker-language-server (official) | push-only | unknown | empty-only | ? | dev+ci |
+| dockerfile-official | docker-language-server (official) | push-only | publishes-versioned | direct | 2 | dev+ci |
 | toml | taplo | push-only | publishes-unversioned | direct | 2* | dev+ci |
 | terraform | terraform-ls | push-only | publishes-unversioned | empty-first | 2* | dev+ci |
 | prisma | @prisma/language-server | push-only | publishes-unversioned | direct | 2* | dev+ci |
@@ -211,6 +230,9 @@ and were characterized `push-only` in the run above).
   `first-publish` measurements on the dev box, 2026-09-23: php `empty-first`,
   typescript / opengrep / ast-grep / marksman `direct` (so the class does not
   extend to them on the measurement, whatever their comments suggest).
+- The official Docker row's clean-gate witness requires the BuildKit-backed
+  `JSONArgsRecommended` rule and skips when `docker buildx` is unavailable;
+  its first-publish class is the nightly's measured `direct`.
 - **#458's learned-deadline target set = the tier-3 rows only.** 2\* rows resolve
   the wait at runtime and must NOT be given learned deadlines.
 - **Tier 3 is budget-bound by necessity**, not laziness: a silent server's silence is
@@ -256,10 +278,10 @@ _None observed as of the last probe run._
 
 ## Capability matrix refresh state (nightly-generated)
 
-Bookkeeping for the date-based `direct` `first-publish` expiry (#3401), the
-two-run `clean-behavior` hysteresis and the consecutive-night `idle-eviction`
+Bookkeeping for the two-run `first-publish`/`clean-behavior` hysteresis, the
+date-based `direct` expiry (#3401) and consecutive-night `idle-eviction`
 counts (#3989). Regenerated every run; never a measurement.
 
 ```json
-{"clean-behavior":{"dockerfile-official":{"pendingBehavior":"publishes-versioned","pendingTier":"2","runs":1}},"idle-eviction":{"docker":{"nights":[{"day":"2026-10-07","rssMb":64,"coldMs":566}]},"json":{"nights":[{"day":"2026-10-07","rssMb":67,"coldMs":1116}]},"powershell":{"nights":[{"day":"2026-10-07","rssMb":155,"coldMs":2601}]},"python-jedi":{"nights":[{"day":"2026-10-07","rssMb":51,"coldMs":1796}]},"zizmor":{"nights":[{"day":"2026-10-07","rssMb":58,"coldMs":608}]}}}
+{"first-publish":{"dockerfile":{"firstMissed":"2026-10-10"},"prisma":{"firstMissed":"2026-10-10"},"python":{"firstMissed":"2026-10-10"},"shell":{"firstMissed":"2026-10-10"},"terraform":{"pendingFirstPublish":"direct","runs":1},"yaml":{"firstMissed":"2026-10-10"}}}
 ```

package/docs/lsp-idle-eviction.md

@@ -15,7 +15,7 @@ respawned server reports every finding it reported before eviction; the
 content-bound coverage check the auxiliary freeze depends on. A server that
 cannot demonstrate it is never proposed for eviction on perf grounds alone.
 
-_Last generated: 2026-10-07 on linux; 48 registry servers: 32 eligible, 0 vetoed, 2 inconclusive, 14 unavailable (0 not reached: budget)._
+_Last generated: 2026-10-10 on linux; 48 registry servers: 8 eligible, 0 vetoed, 16 inconclusive, 24 unavailable (0 not reached: budget)._
 
 ## Per-server rows
 
@@ -35,54 +35,54 @@ step log only, because it flaps.
 
 | server | role | declared | result | reason | respawn | coverage |
 |---|---|---|---|---|---|---|
-| ast-grep | auxiliary | unmeasured | eligible | · | ok | preserved |
-| bash | primary | transparent | eligible | · | ok | preserved |
+| ast-grep | auxiliary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| bash | primary | transparent | unavailable | server-not-started | n/a | n/a |
 | clojure | primary | transparent | eligible | · | ok | preserved |
 | cmake | primary | unmeasured | inconclusive | no-baseline | n/a | unproven |
 | cpp | primary | transparent | eligible | · | ok | preserved |
 | csharp | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| css | primary | transparent | eligible | · | ok | preserved |
-| cue | primary | unmeasured | eligible | · | ok | preserved |
+| css | primary | transparent | unavailable | server-not-started | n/a | n/a |
+| cue | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 | dart | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
 | deno | primary | transparent | eligible | · | ok | preserved |
-| docker | primary | unmeasured | eligible | · | ok | preserved |
-| docker-official | primary | unmeasured | eligible | · | ok | preserved |
+| docker | primary | transparent | unavailable | server-not-started | n/a | n/a |
+| docker-official | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 | elixir | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| expert | primary | unmeasured | eligible | · | ok | preserved |
-| fish | primary | transparent | eligible | · | ok | preserved |
+| expert | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| fish | primary | transparent | unavailable | server-not-started | n/a | n/a |
 | fsharp | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| gleam | primary | unmeasured | eligible | · | ok | preserved |
+| gleam | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 | go | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
 | haskell | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| html | primary | transparent | eligible | · | ok | preserved |
+| html | primary | transparent | unavailable | server-not-started | n/a | n/a |
 | java | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| json | primary | unmeasured | eligible | · | ok | preserved |
-| kotlin | primary | unmeasured | eligible | · | ok | preserved |
-| lua | primary | unmeasured | eligible | · | ok | preserved |
+| json | primary | transparent | eligible | · | ok | preserved |
+| kotlin | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| lua | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 | marksman | primary | transparent | eligible | · | ok | preserved |
 | nix | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
 | ocaml | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
 | omnisharp | primary | unmeasured | unavailable | no-fixture | n/a | n/a |
 | opengrep | auxiliary | transparent | eligible | · | ok | preserved |
-| php | primary | transparent | eligible | · | ok | preserved |
-| powershell | primary | unmeasured | eligible | · | ok | preserved |
-| prisma | primary | transparent | eligible | · | ok | preserved |
-| python | primary | transparent | eligible | · | ok | preserved |
-| python-jedi | primary | unmeasured | eligible | · | ok | preserved |
+| php | primary | transparent | unavailable | server-not-started | n/a | n/a |
+| powershell | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| prisma | primary | transparent | unavailable | server-not-started | n/a | n/a |
+| python | primary | transparent | unavailable | server-not-started | n/a | n/a |
+| python-jedi | primary | transparent | eligible | · | ok | preserved |
 | ruby | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| rust | primary | unmeasured | eligible | · | ok | preserved |
+| rust | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 | shuck | primary | unmeasured | unavailable | server-not-started | n/a | n/a |
-| svelte | primary | unmeasured | eligible | · | ok | preserved |
+| svelte | primary | unmeasured | unavailable | server-not-started | n/a | n/a |
 | swift | primary | unmeasured | unavailable | tool-unavailable | n/a | n/a |
-| terraform | primary | unmeasured | eligible | · | ok | preserved |
-| tinymist | primary | unmeasured | eligible | · | ok | preserved |
-| toml | primary | unmeasured | eligible | · | ok | preserved |
+| terraform | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| tinymist | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| toml | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 | typescript | primary | transparent | eligible | · | ok | preserved |
-| typos | auxiliary | unmeasured | eligible | · | ok | preserved |
-| vue | primary | unmeasured | inconclusive | no-baseline | n/a | unproven |
-| yaml | primary | transparent | eligible | · | ok | preserved |
-| zig | primary | unmeasured | eligible | · | ok | preserved |
-| zizmor | auxiliary | unmeasured | eligible | · | ok | preserved |
+| typos | auxiliary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| vue | primary | unmeasured | unavailable | server-not-started | n/a | n/a |
+| yaml | primary | transparent | unavailable | server-not-started | n/a | n/a |
+| zig | primary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
+| zizmor | auxiliary | unmeasured | inconclusive | not-evicted | not-evicted | n/a |
 
 ## Declared versus measured
 
@@ -90,24 +90,15 @@ step log only, because it flaps.
 or `info` line is for a maintainer to act on in a follow-up; this run changed
 nothing.
 
-- **ast-grep** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **cue** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **docker** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **expert** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **gleam** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **json** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **kotlin** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **lua** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **powershell** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **python-jedi** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **rust** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **svelte** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **terraform** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **tinymist** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **toml** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **typos** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **zig** [proposal] declared unmeasured but eviction and respawn preserved its findings
-- **zizmor** [proposal] declared unmeasured but eviction and respawn preserved its findings
+- **bash** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **css** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **docker** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **fish** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **html** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **php** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **prisma** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **python** [info] declared transparent with no evidence this run: unavailable (server-not-started)
+- **yaml** [info] declared transparent with no evidence this run: unavailable (server-not-started)
 
 ## Reasons
 

package/docs/pi-lens-fixer.md

@@ -10,6 +10,10 @@ mechanics"; a brief supplies only `lane=<name>`, scope, and the grant.
 
 ## Before code
 
+Before mocking a `clients/` module, look for its test seam (`set*`, `adopt*`, or
+`reset*`). The pre-flight must list the mock dependents of any module whose
+exports change.
+
 - Trace the production entry point and reproduce the defect through it
   (principles §1, "Premise first"). Name no seam before the reproduction; the
   red reproduction is your feedback loop, built before any theory of the fix.

package/docs/pi-lens-merge-policy.md

@@ -611,6 +611,11 @@ Each row cost a lane at least once; the prose above carries the record.
 
 | Mistake | Fix |
 |---------|-----|
+| Writing incident numbers and examples into an `AGENTS.md` rule | AGENTS.md stays lean; issues, PRs and examples go to `HISTORY.md` (maintainer, 2026-10-10). `tests/config/agents-governance.test.ts` ratchets the reference count down only |
+| Routing a review finding as one PR's bug when it is a member of a class | Name the shape, grep for members, and record the verdict before the fix round; `plegma-delegate-guard` refuses a fix brief with a HIGH/MEDIUM finding and no `Shape:` line |
+| Taking a causal premise ("a later merge dropped X") from a hand-back into a PR body or brief | Bisect before writing it: `git show <sha>:<file>` along the path from the fix commit to master. A lane round can revert its own earlier round, and that is not a merge drop |
+| Trusting a wrapper script's exit status when it echoes a check's result | `pr-body.sh lint` printed `lint-exit=1` and exited 0, so a failing body went live; the wrapper now exits with the check's status. Read the check's own result line |
+| Hand-rolling the governance suite in a fresh worktree | `npm run build` alone left `dist/` missing and three census suites red; use the orchestrator's `gov-check.sh <tree>`, which builds both outputs and keeps the `node_modules` link for the commit hook |
 | Reading a CI verdict without checking the SHA it judged | `ci-verdict --wait` returned exit 0 for the PREVIOUS head seconds after a push (#2878 trailing, 2026-09-10); compare the verdict's SHA with `gh pr view --json headRefOid` before merging |
 | Reporting "pushed" before `git log -1` shows the commit | Two trailing commits failed the pre-commit hook (changelog one-entry rule, unused vars) and the ledger/body already said pushed; verify the head, then write the row |
 | Folding a worker's extra changelog fragment into an existing one | One fragment = one top-level entry (`rollup-changelog --check`); keep a second fragment separate or drop it |

package/docs/pi-lens-retro.md

@@ -61,7 +61,8 @@ is involved. Every finding cites the source it came from.
    exactly as a regression test would; a check without a red is a proposal and
    is filed as an issue naming the incident as its recurrence, not merged.
 4. **Judgement candidates become one line in the right place.** A defect shape
-   goes into the `AGENTS.md` catalog with the reference; a reviewer duty goes
+   goes into the `AGENTS.md` catalog as a lean screen, and its issues, PRs and
+   examples go to `HISTORY.md`; a reviewer duty goes
    into `docs/pi-lens-reviewer.md`; a fixer duty goes into `docs/pi-lens-fixer.md`
    only when the fixer is the sole actor who can honour it. Standards are
    enforced by the reviewer, whose context pressure is lowest; fixers get

package/docs/pi-lens-reviewer.md

@@ -52,6 +52,11 @@ a brief supplies only `lane=<name>`, scope, and the grant.
 
 ## Verification
 
+For each new or changed `vi.mock` or hand-built double of a `clients/` module,
+check whether a real test seam exists (`set*`, `adopt*`, or `reset*`). If it
+does, treat the double as a finding and require the behavior to run through the
+real seam. Check that every gate the diff adds is exercised through that path.
+
 - **Name the behaviour population.** When a change replaces, moves, or widens
   a lifecycle, dispatch, or ownership seam, run EVERY suite that exercises the
   behaviour the seam governs and name the list; a curated file set cannot
@@ -73,6 +78,8 @@ a brief supplies only `lane=<name>`, scope, and the grant.
   a review input.
 - Repeat the pattern and population sweeps. Check blast radius, bounded
   observability, changelog, commit, and PR-body requirements.
+- Re-run the PR's `## Class sweep` search yourself and widen it when the
+  named shape is broader than the touched seam (#4273, #4268).
 - For LSP, dispatch, cache, runner, or tool changes, test one non-TypeScript
   registry entry through the same seam.
 - On a net-count fold, mutate every predicate the deleted sibling used to
@@ -210,3 +217,11 @@ merge-order interactions with other open PRs, plus:
 - Cleared categories (one compact list) and exact-head identity.
 
 Use short, active, plain prose.
+
+## Documentation and prose standard
+
+Apply this standard to PR and issue bodies, review comments, commit messages, documentation, and changelog entries. Lead with the outcome. Remove words that do no work. Use active voice and present tense. Use second person for instructions, and use the imperative for steps. Keep one idea per sentence, with about 20–25 words and no more than 30 words. Use consistent terminology and sentence-case headings. Define acronyms on first use. Prefer plain words over jargon. Avoid `please`, filler, noun piles, nested parentheticals, and em-dash chains. Use the Oxford comma.
+
+The mechanical rules are checked by `scripts/check-prose.mjs`. The checker ignores fenced code, inline code, URLs, quoted log lines, blockquotes, and tables. It blocks long sentences, filler, and title-case headings. It warns on passive voice. The CLI accepts a body file or standard input and supports `--json`.
+
+Reviewers judge clarity, terminology, active voice, sentence structure, and whether each list uses parallel grammar. Treat a mechanically clean result as necessary, not sufficient. Report prose that obscures the outcome or makes a user infer the action.

package/docs/pi-lens-subagent.md

@@ -8,6 +8,8 @@ holds the pi-lens rules every role shares, for every runner and model. The
 principles apply throughout and are not restated; project files win on
 conflict.
 
+User-facing prose follows the live standard in `docs/pi-lens-reviewer.md`.
+
 ## Worktree and Git
 
 Work only in the assigned worktree. Before editing, verify its absolute path,