pi-lens 4.4.1 → 4.4.3

package/dist/{chunk-LNOMA3MP.js → chunk-FCSOVF55.js}

@@ -3,10 +3,20 @@ import {
   extractTomlTableSection,
   hasTomlTable,
   parseTomlStringArray
-} from "./chunk-S6AMWKPC.js";
+} from "./chunk-P7266HLM.js";
 import {
+  getProjectTrustState
+} from "./chunk-ZANLILYD.js";
+import {
+  incrementDegradationCount,
   recordDegradationOnce
-} from "./chunk-7ELY2CSM.js";
+} from "./chunk-JAU72XNY.js";
+import {
+  logExtension
+} from "./chunk-XTMJ7XDT.js";
+import {
+  logLatency
+} from "./chunk-QQNQ7SJW.js";
 import {
   UV_WORKSPACE_EXCLUDE_DIALECT,
   UV_WORKSPACE_MEMBERS_DIALECT,
@@ -14,7 +24,79 @@ import {
   matchesWorkspaceMemberPattern,
   toPosix,
   walkUpDirs
-} from "./chunk-G3RLJYA2.js";
+} from "./chunk-N2H3ZPZY.js";
+
+// dist/clients/bounded-telemetry.js
+var MAX_TRACKED_TURN_CAPS = 64;
+var turnCounts = /* @__PURE__ */ new Map();
+var latestCountedTurnIndex;
+var retiredThroughTurnIndex = Number.NEGATIVE_INFINITY;
+function admitBounded(phase, identity, options = {}) {
+  try {
+    let isRisingEdge = true;
+    if (options.ledgerKind !== void 0) {
+      isRisingEdge = incrementDegradationCount({
+        kind: options.ledgerKind,
+        subject: identity,
+        reason: options.reason ?? phase
+      });
+    }
+    if (options.risingEdgePer !== void 0 && !isRisingEdge)
+      return false;
+    return admitAgainstTurnCap(phase, options.capPerTurn);
+  } catch {
+    return true;
+  }
+}
+function emitBounded(phase, identity, payload, options = {}) {
+  try {
+    if (!admitBounded(phase, identity, options))
+      return false;
+    logLatency({
+      ...payload,
+      type: payload.type ?? "phase",
+      phase,
+      // `filePath` is what existing latency.log queries filter on, so a site
+      // may keep a coarser one; `metadata.identity` below always carries the
+      // full discriminating identity. Aggregation that loses WHICH subject
+      // is stuck is the failure AGENTS.md names.
+      filePath: payload.filePath ?? identity,
+      metadata: { ...payload.metadata, identity }
+    });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function admitAgainstTurnCap(phase, cap) {
+  if (cap === void 0)
+    return true;
+  if (cap.turnIndex <= retiredThroughTurnIndex)
+    return false;
+  let counts = turnCounts.get(cap.turnIndex);
+  if (!counts) {
+    if (turnCounts.size >= MAX_TRACKED_TURN_CAPS) {
+      const oldestTrackedTurn = Math.min(...turnCounts.keys());
+      if (cap.turnIndex < oldestTrackedTurn)
+        return false;
+      turnCounts.delete(oldestTrackedTurn);
+      retiredThroughTurnIndex = Math.max(retiredThroughTurnIndex, oldestTrackedTurn);
+    }
+    counts = /* @__PURE__ */ new Map();
+    turnCounts.set(cap.turnIndex, counts);
+  }
+  latestCountedTurnIndex = Math.max(latestCountedTurnIndex ?? cap.turnIndex, cap.turnIndex);
+  const used = counts.get(phase) ?? 0;
+  if (used >= cap.limit)
+    return false;
+  counts.set(phase, used + 1);
+  return true;
+}
+function resetBoundedTelemetry() {
+  turnCounts = /* @__PURE__ */ new Map();
+  latestCountedTurnIndex = void 0;
+  retiredThroughTurnIndex = Number.NEGATIVE_INFINITY;
+}
 
 // dist/clients/python-environment.js
 import { access, readFile } from "node:fs/promises";
@@ -68,6 +150,11 @@ function isUvWorkspaceMember(workspace, projectRoot) {
   }));
   return !workspace.exclude.some(matches(UV_WORKSPACE_EXCLUDE_DIALECT)) && workspace.members.some(matches(UV_WORKSPACE_MEMBERS_DIALECT));
 }
+var PROJECT_SOURCED_PYTHON_SOURCES = /* @__PURE__ */ new Set([
+  "project-dot-venv",
+  "project-venv",
+  "uv-workspace"
+]);
 var AMBIENT_ENVIRONMENT_VARIABLES = {
   "uv-project-environment": "UV_PROJECT_ENVIRONMENT",
   "virtual-env": "VIRTUAL_ENV",
@@ -115,6 +202,21 @@ async function detectPythonEnvironment(projectRoot, homeDir = os.homedir(), opti
       continue;
     if (!allowAmbient && candidate.source in AMBIENT_ENVIRONMENT_VARIABLES && !isWithinProjectRoot(candidate.root))
       continue;
+    if (PROJECT_SOURCED_PYTHON_SOURCES.has(candidate.source) && getProjectTrustState() !== "trusted") {
+      if (recordDegradationOnce({
+        kind: "trust-refusal",
+        subject: `python-environment:${candidate.root}`,
+        reason: `project Python environment refused: pi project trust is ${getProjectTrustState()}`
+      })) {
+        logExtension({
+          subsystem: "project-trust",
+          level: "warn",
+          message: "project Python environment refused: mark the project trusted in pi or upgrade pi",
+          metadata: { source: candidate.source }
+        });
+      }
+      continue;
+    }
     const binDir = path.join(candidate.root, process.platform === "win32" ? "Scripts" : "bin");
     const pythonPath = path.join(binDir, process.platform === "win32" ? "python.exe" : "python");
     try {
@@ -161,6 +263,8 @@ function pythonEnvironmentToolCandidates(environment, command) {
 }
 
 export {
+  emitBounded,
+  resetBoundedTelemetry,
   hasAmbientPythonEnvironment,
   detectPythonEnvironment,
   detectPythonVenv,

package/dist/{chunk-CFYISHUW.js → chunk-FLKWCIZH.js}

@@ -4,6 +4,7 @@ import {
   DOTNET_CSHARP_ROOT_MARKERS,
   DOTNET_FSHARP_ROOT_MARKERS,
   KIND_EXTENSIONS,
+  LEAN_ROOT_MARKERS,
   NON_CODE_KINDS,
   SPECIAL_FILENAMES,
   TERRAGRUNT_FILENAMES,
@@ -16,17 +17,19 @@ import {
   isHelmYamlTemplatePath,
   isJstsFactFile,
   isReadableSourceFile
-} from "./chunk-64LU2OVH.js";
-import "./chunk-Z6BB4JLQ.js";
-import "./chunk-3PNFWVHT.js";
-import "./chunk-VSMJK3ZJ.js";
-import "./chunk-G3RLJYA2.js";
+} from "./chunk-PHDMFAKM.js";
+import "./chunk-XVF2VVXP.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   CODE_KINDS,
   DOTNET_CSHARP_ROOT_MARKERS,
   DOTNET_FSHARP_ROOT_MARKERS,
   KIND_EXTENSIONS,
+  LEAN_ROOT_MARKERS,
   NON_CODE_KINDS,
   SPECIAL_FILENAMES,
   TERRAGRUNT_FILENAMES,

package/dist/{chunk-OYTMZXRF.js → chunk-FMSO6RDZ.js}

@@ -9,24 +9,26 @@ import {
   resolveSeverityFloor,
   shouldScanTrivy,
   worktreeSkipDirs
-} from "./chunk-YLN4K6WD.js";
-import "./chunk-J3FZR3YY.js";
-import "./chunk-5JHXUETW.js";
-import "./chunk-IMSQR4WO.js";
-import "./chunk-CMU4RMJB.js";
-import "./chunk-O7HZX7CA.js";
-import "./chunk-T54VJRAD.js";
+} from "./chunk-77M37OKR.js";
+import "./chunk-CSHFH5IN.js";
+import "./chunk-VCHXCQFG.js";
+import "./chunk-3EFKIGZN.js";
+import "./chunk-PNQDPDRC.js";
+import "./chunk-RWWYJ623.js";
+import "./chunk-VRZP76YM.js";
+import "./chunk-C34ZXZ7O.js";
 import "./chunk-BW5KFIQC.js";
-import "./chunk-N2IRDBZI.js";
-import "./chunk-Z6BB4JLQ.js";
+import "./chunk-2BBLFX75.js";
+import "./chunk-XVF2VVXP.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-7ELY2CSM.js";
-import "./chunk-34OCDWOS.js";
-import "./chunk-3PNFWVHT.js";
-import "./chunk-VSMJK3ZJ.js";
+import "./chunk-JAU72XNY.js";
+import "./chunk-XTMJ7XDT.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QQNQ7SJW.js";
+import "./chunk-AOHZU2BM.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-G3RLJYA2.js";
+import "./chunk-N2H3ZPZY.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   TrivyClient,

package/dist/{chunk-IUKPRZER.js → chunk-GAEGEPOC.js}

@@ -1,11 +1,11 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   loadPiLensProjectConfig
-} from "./chunk-N2IRDBZI.js";
+} from "./chunk-2BBLFX75.js";
 import {
   lazyEnvNumber,
   toPositiveFinite
-} from "./chunk-VSMJK3ZJ.js";
+} from "./chunk-AOHZU2BM.js";
 
 // dist/clients/project-scale.js
 var DEFAULT_PROJECT_SCALE_BASE = 2e3;

package/dist/{chunk-6XX5HCLK.js → chunk-GBPP5P7X.js}

@@ -4,17 +4,17 @@ import {
   readCargoDependencyNames,
   readCargoPackageName,
   readCargoWorkspaceMembers
-} from "./chunk-S6AMWKPC.js";
+} from "./chunk-P7266HLM.js";
 import {
   getProjectIgnoreMatcher,
   isExcludedDirName
-} from "./chunk-T54VJRAD.js";
+} from "./chunk-C34ZXZ7O.js";
 import {
   getWorkspaceManifestMarkers
-} from "./chunk-Z6BB4JLQ.js";
+} from "./chunk-XVF2VVXP.js";
 import {
   normalizeMapKey
-} from "./chunk-G3RLJYA2.js";
+} from "./chunk-N2H3ZPZY.js";
 
 // dist/clients/review-graph/workspace-modules.js
 import * as fs from "node:fs";

package/dist/{chunk-TQFBZVCG.js → chunk-GXW6K4YJ.js}

@@ -1,7 +1,7 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   withTreeSitterRoot
-} from "./chunk-UEAHAMEI.js";
+} from "./chunk-QHJ6DQ2R.js";
 
 // dist/clients/dispatch/facts/tree-sitter-facts.js
 var withFactTree = withTreeSitterRoot;