pi-lens 4.4.1 → 4.4.2

package/dist/{chunk-T54VJRAD.js → chunk-C34ZXZ7O.js}

@@ -12,7 +12,7 @@ import {
   reportPiLensConfigRecords,
   resolveOnePiLensConfigDocument,
   warnIgnoredConfigOnce
-} from "./chunk-N2IRDBZI.js";
+} from "./chunk-2BBLFX75.js";
 import {
   CANONICAL_GLOBAL_CONFIG_FILE,
   FRESHNESS_CADENCE_MS,
@@ -22,7 +22,7 @@ import {
   errorClassName,
   getPiLensGlobalConfigPath,
   getProductionGlobalConfigResolution
-} from "./chunk-Z6BB4JLQ.js";
+} from "./chunk-XVF2VVXP.js";
 import {
   DEFAULT_MAX_OUTPUT_BYTES,
   createBoundedOutputSink,
@@ -42,16 +42,16 @@ import {
   readToolConfig,
   recordDegradation,
   recordDegradationOnce
-} from "./chunk-7ELY2CSM.js";
+} from "./chunk-JAU72XNY.js";
 import {
   logExtension
-} from "./chunk-34OCDWOS.js";
+} from "./chunk-XTMJ7XDT.js";
 import {
   logLatency
-} from "./chunk-3PNFWVHT.js";
+} from "./chunk-QQNQ7SJW.js";
 import {
   getProcessSingleton
-} from "./chunk-VSMJK3ZJ.js";
+} from "./chunk-AOHZU2BM.js";
 import {
   sweepOwnStagingFiles
 } from "./chunk-LJDODBBZ.js";
@@ -71,7 +71,7 @@ import {
   normalizeLoggedPath,
   normalizeMapKey,
   toProjectRelativePath
-} from "./chunk-G3RLJYA2.js";
+} from "./chunk-N2H3ZPZY.js";
 import {
   __commonJS,
   __require,
@@ -1744,6 +1744,15 @@ function loadPiLensGlobalConfig(configPath) {
         warnInvalid("actionableWarnings.autoFix.maxFixes must be a non-negative finite number");
       }
     }
+    const contextInjection = asConfigObject(raw.contextInjection);
+    if (contextInjection && "requirePreExistingFixes" in contextInjection) {
+      if (typeof contextInjection.requirePreExistingFixes === "boolean") {
+        config.contextInjection ??= {};
+        config.contextInjection.requirePreExistingFixes = contextInjection.requirePreExistingFixes;
+      } else {
+        warnInvalid("contextInjection.requirePreExistingFixes must be a boolean");
+      }
+    }
     const widget = asConfigObject(raw.widget);
     if (widget) {
       if (typeof widget.visible === "boolean") {
@@ -1876,6 +1885,17 @@ function classifyTmpDir(dir) {
 function ephemeralStagingRoot(filePath) {
   return classifyTmpDir(path6.dirname(path6.resolve(filePath))).stagingRoot;
 }
+function isPiOwnedTempPath(filePath) {
+  const tmpRoot = realPathOfNearestExisting(os.tmpdir());
+  const real = realPathOfNearestExisting(filePath);
+  if (!isUnderDir(real, tmpRoot))
+    return false;
+  const relative3 = path6.relative(tmpRoot, real);
+  if (relative3.length === 0 || path6.isAbsolute(relative3))
+    return false;
+  const segments = relative3.split(path6.sep);
+  return segments.length === 1 || /^pi-/i.test(segments[0] ?? "");
+}
 function isEphemeralCheckoutRoot(dir) {
   return classifyTmpDir(dir).checkout;
 }
@@ -2049,6 +2069,21 @@ function getGlobalPiLensDir() {
     return path7.resolve(override);
   return path7.join(os2.homedir(), ".pi-lens");
 }
+function isPiLensInternalPath(filePath, projectRoot) {
+  const absolute = path7.resolve(filePath);
+  const home = path7.resolve(os2.homedir());
+  const candidates = [
+    getGlobalPiLensDir(),
+    getProjectDataDir(projectRoot),
+    path7.join(home, ".pi"),
+    path7.join(home, ".pi-lens")
+  ];
+  if (candidates.some((dir) => isUnderDir(absolute, dir)))
+    return true;
+  if (isPiOwnedTempPath(absolute))
+    return true;
+  return false;
+}
 var EXCLUDED_DIRS = [
   "node_modules",
   ".git",
@@ -4592,8 +4627,16 @@ function resolveWindowsCommandForEnvironment(command, cwd, env) {
 function resolveWindowsCommand(command, cwd, env) {
   return resolveWindowsCommandForEnvironment(command, cwd, env);
 }
-function getSpawnEnvironment(overrides) {
-  return process.platform === "win32" ? mergeWindowsEnvironment(process.env, overrides) : { ...process.env, ...overrides };
+function getSpawnEnvironment(overrides, stripNpmConfig) {
+  const merged = process.platform === "win32" ? mergeWindowsEnvironment(process.env, overrides) : { ...process.env, ...overrides };
+  if (!stripNpmConfig)
+    return merged;
+  const stripped = {};
+  for (const [key, value] of Object.entries(merged)) {
+    if (!/^npm_config_/i.test(key))
+      stripped[key] = value;
+  }
+  return stripped;
 }
 var CMD_UNSAFE_CHARS = /["%!\r\n]/;
 function findCmdUnsafeValue(command, args) {
@@ -4786,7 +4829,7 @@ async function safeSpawnAsync(command, args, options) {
       }
     };
     const isWindows2 = process.platform === "win32";
-    const spawnEnv = getSpawnEnvironment(options?.env);
+    const spawnEnv = getSpawnEnvironment(options?.env, options?.stripNpmConfig);
     const spawnCwd = isWindows2 ? resolveEffectiveWindowsCwd(options?.cwd, spawnEnv) ?? options?.cwd : options?.cwd;
     let spawnCmd = command;
     let spawnArgs = args;
@@ -5270,7 +5313,7 @@ async function findCommandAsync(command) {
   return result.stdout.trim().split("\n")[0] || null;
 }
 function safeSpawn(command, args, options) {
-  const spawnEnv = getSpawnEnvironment(options?.env);
+  const spawnEnv = getSpawnEnvironment(options?.env, options?.stripNpmConfig);
   if (process.platform === "win32") {
     const spawnCwd = resolveEffectiveWindowsCwd(options?.cwd, spawnEnv) ?? options?.cwd;
     const resolved = resolveWindowsCommand(command, options?.cwd, spawnEnv);
@@ -5439,6 +5482,7 @@ export {
   drainProjectDataDirMigrations,
   displayProjectDataPath,
   getGlobalPiLensDir,
+  isPiLensInternalPath,
   EXCLUDED_DIRS,
   getProjectIgnoreMatcher,
   isPathIgnoredByProject,

package/dist/{chunk-CBD2B5CP.js → chunk-CF24OIYI.js}

@@ -6,7 +6,7 @@ import {
 import {
   HOOK_WALL_BUDGET_MS,
   bounded
-} from "./chunk-F5VLZHUW.js";
+} from "./chunk-52FUZI6K.js";
 import {
   acquireManagedInstallGate,
   commitDurableStoreAsync,
@@ -19,38 +19,39 @@ import {
   refreshManagedTool,
   resolveManagedNpmBinPath,
   verifyToolBinary
-} from "./chunk-LD7WFTRX.js";
-import "./chunk-IUR76K6A.js";
+} from "./chunk-66VMUL7Q.js";
+import "./chunk-Q7DUK4LX.js";
 import {
   pmBinary,
   resolveNodePackageManager,
   updateArgs
-} from "./chunk-T4QZ6FEH.js";
-import "./chunk-D6YF5HKX.js";
-import "./chunk-CMU4RMJB.js";
-import "./chunk-O7HZX7CA.js";
-import "./chunk-VYKKMYVT.js";
-import "./chunk-BNKLYOOO.js";
-import "./chunk-USHG4DLH.js";
-import "./chunk-H5EV3VMF.js";
+} from "./chunk-AW7R2GWG.js";
+import "./chunk-RWWYJ623.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-QOBUHWHX.js";
+import "./chunk-QILIYSJF.js";
+import "./chunk-6C7JWPCP.js";
+import "./chunk-5NGR67U5.js";
 import {
   safeSpawnAsync
-} from "./chunk-T54VJRAD.js";
+} from "./chunk-C34ZXZ7O.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-64LU2OVH.js";
-import "./chunk-N2IRDBZI.js";
-import "./chunk-Z6BB4JLQ.js";
+import "./chunk-PHDMFAKM.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-ZANLILYD.js";
 import "./chunk-2EECBNC5.js";
 import {
   recordDegradationOnce
-} from "./chunk-7ELY2CSM.js";
-import "./chunk-34OCDWOS.js";
-import "./chunk-3PNFWVHT.js";
-import "./chunk-VSMJK3ZJ.js";
+} from "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-G3RLJYA2.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/installer/managed-tool-refresh.js

package/dist/{chunk-UGSMCQ4D.js → chunk-CHOW74WE.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-ABBOA7UD.js";
 import {
   normalizeMapKey
-} from "./chunk-G3RLJYA2.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/dispatch/fact-store.js
 var capacityEvictionReporter;

package/dist/{chunk-OZJINN4O.js → chunk-CO2G5PHH.js}

@@ -1,10 +1,10 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   incrementDegradationCount
-} from "./chunk-7ELY2CSM.js";
+} from "./chunk-JAU72XNY.js";
 import {
   logLatency
-} from "./chunk-3PNFWVHT.js";
+} from "./chunk-QQNQ7SJW.js";
 
 // dist/clients/bounded-telemetry.js
 var MAX_TRACKED_TURN_CAPS = 64;

package/dist/{chunk-OC7LYAU5.js → chunk-EETY4LF7.js}

@@ -4,29 +4,32 @@ import {
   discoverManagedTool,
   getManagedToolEnvironment,
   resolveAvailableOrInstall
-} from "./chunk-NFXP47RV.js";
+} from "./chunk-GOYRYZ2R.js";
 import {
   mapWithConcurrency
 } from "./chunk-XIMYZ3JA.js";
 import {
   findNodeToolBinary
-} from "./chunk-T4QZ6FEH.js";
+} from "./chunk-AW7R2GWG.js";
+import {
+  getIsolatedNpxSpawnOptions
+} from "./chunk-RWWYJ623.js";
 import {
   createAvailabilityLatch
-} from "./chunk-O7HZX7CA.js";
+} from "./chunk-VRZP76YM.js";
 import {
   safeSpawnAsync
-} from "./chunk-T54VJRAD.js";
+} from "./chunk-C34ZXZ7O.js";
 import {
   compareOrdinal,
   recordDegradationOnce
-} from "./chunk-7ELY2CSM.js";
+} from "./chunk-JAU72XNY.js";
 import {
   createSubsystemLogger
-} from "./chunk-34OCDWOS.js";
+} from "./chunk-XTMJ7XDT.js";
 import {
   isFullyQualified
-} from "./chunk-G3RLJYA2.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/dependency-checker.js
 import * as fs from "node:fs";
@@ -41,7 +44,12 @@ function buildMadgeArgs(target, projectRoot) {
   return args;
 }
 function parseMadgeCycles(stdout, baseDir, projectRoot) {
-  const parsed = JSON.parse(stdout || "[]");
+  let parsed;
+  try {
+    parsed = JSON.parse(stdout || "[]");
+  } catch (err) {
+    throw new Error(`madge report is not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
+  }
   const cycles = Array.isArray(parsed) ? parsed : [];
   const circular = [];
   const circularFiles = /* @__PURE__ */ new Set();
@@ -446,7 +454,10 @@ var DependencyChecker = class _DependencyChecker {
     try {
       const result = await safeSpawnAsync(cmd, [...prefix, ...buildMadgeArgs(normalized, projectRoot)], {
         timeout: 15e3,
-        cwd: projectRoot
+        // A cache-only npx fallback must not read the project's `.npmrc`
+        // (#4268 acceptance 3); a resolved madge keeps the project cwd.
+        cwd: projectRoot,
+        ...cmd === "npx" ? getIsolatedNpxSpawnOptions() : {}
       });
       if (result.error) {
         this.log(`Check error: ${result.error.message}`);
@@ -661,7 +672,10 @@ var DependencyChecker = class _DependencyChecker {
       const { cmd, prefix } = await this.resolveMadge(projectRoot);
       const result = await safeSpawnAsync(cmd, [...prefix, ...buildMadgeArgs(projectRoot, projectRoot)], {
         timeout: 3e4,
-        cwd: projectRoot
+        // A cache-only npx fallback must not read the project's `.npmrc`
+        // (#4268 acceptance 3); a resolved madge keeps the project cwd.
+        cwd: projectRoot,
+        ...cmd === "npx" ? getIsolatedNpxSpawnOptions() : {}
       });
       if (result.error) {
         this.log(`Scan error: ${result.error.message}`);

package/dist/{chunk-KJN4IOEJ.js → chunk-EJIUXPBX.js}

@@ -1,7 +1,7 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   detectFileRole
-} from "./chunk-N2IRDBZI.js";
+} from "./chunk-2BBLFX75.js";
 
 // dist/clients/collateral-test-role.js
 function isTestRoleCollateral(filePath) {