pi-lens 4.4.2 → 4.4.3

package/dist/mcp/analyze-cli.js

@@ -199,7 +199,7 @@ async function main() {
       process.exit(0);
     let result = await requestWarmAnalyze(cwd, file);
     if (!result) {
-      const { analyzeFile } = await import("../chunk-5JM2524W.js");
+      const { analyzeFile } = await import("../chunk-3YN6V5TV.js");
       result = await analyzeFile(file, cwd, {
         flags: withLsp ? {} : { "no-lsp": true },
         record: false,

package/dist/mcp/cli.js

@@ -8,15 +8,15 @@ import {
   getLastReviewGraphBuildAttempt,
   graphWasmTrapDetail,
   reviewGraphCachePath
-} from "../chunk-PV6LR5P5.js";
+} from "../chunk-YYOIQFRS.js";
 import "../chunk-3MED75HT.js";
-import "../chunk-CO2G5PHH.js";
+import "../chunk-M6HSLBWY.js";
 import "../chunk-IBGIOBEE.js";
-import "../chunk-PNQDPDRC.js";
 import "../chunk-XIMYZ3JA.js";
-import "../chunk-ESBQHFMJ.js";
-import "../chunk-34WSVGEM.js";
+import "../chunk-EU63SDCG.js";
 import "../chunk-VWCXW2E7.js";
+import "../chunk-FCSOVF55.js";
+import "../chunk-PNQDPDRC.js";
 import "../chunk-ZXYDQ3TZ.js";
 import "../chunk-5W3R6LFT.js";
 import {
@@ -34,7 +34,7 @@ import "../chunk-GAEGEPOC.js";
 import "../chunk-Z3CCVDUB.js";
 import "../chunk-L3BLXZG7.js";
 import "../chunk-2BEMIWEW.js";
-import "../chunk-66VMUL7Q.js";
+import "../chunk-ACXEQZOU.js";
 import "../chunk-Q7DUK4LX.js";
 import "../chunk-AW7R2GWG.js";
 import "../chunk-RWWYJ623.js";

package/dist/mcp/server.js

@@ -7,10 +7,10 @@ import {
   deadCodeIssues,
   formatDeadCodeDelta,
   stableFindingKey
-} from "../chunk-OG5UUPN7.js";
+} from "../chunk-OCAGUNBC.js";
 import {
   clearFormatterCache
-} from "../chunk-ARJ6PLFH.js";
+} from "../chunk-3W7IEVVL.js";
 import {
   findNearestProjectRoot,
   isStartupScanVerdictFresh,
@@ -19,23 +19,23 @@ import {
 import {
   loadCallGraph
 } from "../chunk-WOA4LN2R.js";
+import {
+  isHardFailureSummary
+} from "../chunk-7U2IDNXN.js";
 import {
   RUNNERS,
   formatRunDurationMs,
   isExcludedTestTarget,
   isRunnerErrorResult
-} from "../chunk-JWA5I3SR.js";
+} from "../chunk-VCO24T4L.js";
 import {
   GovulncheckClient
-} from "../chunk-GZYBXISR.js";
+} from "../chunk-SQ4TVJBR.js";
 import {
   GitleaksClient,
   classifyAndFilterFindings
-} from "../chunk-VITUCP5A.js";
+} from "../chunk-SS36ZX4J.js";
 import "../chunk-ZGDGW2V3.js";
-import {
-  isHardFailureSummary
-} from "../chunk-7U2IDNXN.js";
 import {
   resetManagedToolRefreshSession
 } from "../chunk-UXVNL3D7.js";
@@ -99,42 +99,53 @@ import {
   resetPendingRunnerFindings,
   resetPsScriptAnalyzerAvailability,
   runProviders
-} from "../chunk-ODBNXWT4.js";
+} from "../chunk-H6MF6EVN.js";
 import {
   resetLazyInstallAttempts
 } from "../chunk-OXXKQCSV.js";
 import {
   isTestRoleCollateral
 } from "../chunk-EJIUXPBX.js";
+import {
+  findingsResult,
+  hasUsableResult
+} from "../chunk-2CD5RS6M.js";
 import "../chunk-FC4RP4I2.js";
+import "../chunk-UZ3TUTRV.js";
+import {
+  resetGoAvailability
+} from "../chunk-XMSXXAHW.js";
 import {
   TrivyClient
-} from "../chunk-66SXUJCA.js";
+} from "../chunk-77M37OKR.js";
+import "../chunk-CSHFH5IN.js";
 import "../chunk-VCHXCQFG.js";
-import "../chunk-IXXDFY73.js";
+import "../chunk-3EFKIGZN.js";
 import {
   resetRustAvailability
 } from "../chunk-MRXKYPCS.js";
-import {
-  findingsResult,
-  hasUsableResult
-} from "../chunk-2CD5RS6M.js";
-import "../chunk-UZ3TUTRV.js";
-import "../chunk-EETY4LF7.js";
+import "../chunk-7DYBLXYA.js";
+import "../chunk-AB3YYG6N.js";
 import {
   getSgCommand,
   resetDispatchAvailabilityState,
   resolveManagedToolClient
-} from "../chunk-GOYRYZ2R.js";
+} from "../chunk-YSZNHOBY.js";
 import "../chunk-RPLINGVB.js";
 import "../chunk-XCJN5IJU.js";
 import "../chunk-76MWC2K6.js";
 import "../chunk-GXW6K4YJ.js";
 import "../chunk-2B73ZPOK.js";
 import {
-  resetGoAvailability
-} from "../chunk-XMSXXAHW.js";
-import "../chunk-7DYBLXYA.js";
+  SYMBOL_KIND_NAMES,
+  captureReviewGraphStructuralIr,
+  formatReviewGraphRevisionDriftNote,
+  publishReviewGraphFileIr,
+  reviewGraphIrContentHash
+} from "../chunk-YYOIQFRS.js";
+import {
+  buildSymbolId
+} from "../chunk-3MED75HT.js";
 import {
   DEPENDENCY_DRIFT_MAX_DELIVERIES,
   MAX_LATE_AUX_REARMS,
@@ -142,7 +153,6 @@ import {
   RUNTIME_CONFIG,
   ReadGuard,
   STALE_LINE_MARKER,
-  SYMBOL_KIND_NAMES,
   Text,
   TreeSitterSymbolExtractor,
   WriteOrderingGuard,
@@ -157,8 +167,6 @@ import {
   beginScope,
   buildScopeKey,
   canRearmPendingAuxiliary,
-  canWriteAnalysisRoot,
-  captureReviewGraphStructuralIr,
   classifyDiagnosticTier,
   clearAllSessions,
   countRetainedSuppressedRows,
@@ -172,7 +180,6 @@ import {
   drainRenderedDependencyDriftFilePaths,
   exceedsLspSyncLimits,
   findAuxiliaryProfileForSource,
-  formatReviewGraphRevisionDriftNote,
   getActiveSessionId,
   getDisposition,
   getFileDiagnosticSummaries,
@@ -195,7 +202,6 @@ import {
   newLspMutationCorrelationId,
   nextOrderTurn,
   pendingAuxiliaryCoverageSize,
-  publishReviewGraphFileIr,
   rearmPendingAuxiliaryCoverage,
   reconcileCorrelatedScanDiagnostics,
   reconcileScanDiagnostics,
@@ -218,7 +224,6 @@ import {
   retagAuxiliaryDiagnostics,
   retireScope,
   retireWidgetDependencyDriftBlockers,
-  reviewGraphIrContentHash,
   runPerServerGroups,
   scopeCell,
   setSessionLanguages,
@@ -232,14 +237,7 @@ import {
   widgetDiagnosticUri,
   workspaceEditTextPaths,
   writeOrderToken
-} from "../chunk-PV6LR5P5.js";
-import {
-  buildSymbolId
-} from "../chunk-3MED75HT.js";
-import {
-  emitBounded,
-  resetBoundedTelemetry
-} from "../chunk-CO2G5PHH.js";
+} from "../chunk-M6HSLBWY.js";
 import {
   hashText,
   normalizeMessage,
@@ -247,14 +245,11 @@ import {
   resetMutationAttribution,
   stableFindingId
 } from "../chunk-IBGIOBEE.js";
-import {
-  resolveGitCheckout,
-  resolveLinkedWorktreeOwner
-} from "../chunk-PNQDPDRC.js";
 import {
   mapWithConcurrency
 } from "../chunk-XIMYZ3JA.js";
 import {
+  canWriteAnalysisRoot,
   classifyCascadeWaitTier,
   customServerSpecsOf,
   describeRootFallback,
@@ -272,11 +267,17 @@ import {
   resetLSPCaseSensitivityState,
   resolveLspCwdForFile,
   shouldInitializeSessionRoot
-} from "../chunk-ESBQHFMJ.js";
-import {
-  hasAmbientPythonEnvironment
-} from "../chunk-34WSVGEM.js";
+} from "../chunk-EU63SDCG.js";
 import "../chunk-VWCXW2E7.js";
+import {
+  emitBounded,
+  hasAmbientPythonEnvironment,
+  resetBoundedTelemetry
+} from "../chunk-FCSOVF55.js";
+import {
+  resolveGitCheckout,
+  resolveLinkedWorktreeOwner
+} from "../chunk-PNQDPDRC.js";
 import {
   PROJECT_SNAPSHOT_VERSION,
   getProjectSnapshotLegacyPath,
@@ -360,7 +361,7 @@ import {
   commitDurableStore,
   resetResolvedPathCache,
   resetZizmorTokenAvailability
-} from "../chunk-66VMUL7Q.js";
+} from "../chunk-ACXEQZOU.js";
 import {
   resolveToolCwd
 } from "../chunk-Q7DUK4LX.js";
@@ -2937,13 +2938,13 @@ async function buildBootstrapClients() {
     }
   }
   const [ruffClient, biomeClient, knipClient, todoScanner, jscpdClient, depChecker, testRunnerClient, metricsClient, complexityClient, goClient, govulncheckClient, gitleaksClient, trivyClient, opengrepClient, rustClient, agentBehaviorClient2, deadCodeClients] = await Promise.all([
-    load("ruff", async () => new (await import("../chunk-PFNSLWU5.js")).RuffClient()),
-    load("biome", async () => new (await import("../chunk-QZVW3AAK.js")).BiomeClient()),
-    load("knip", async () => new (await import("../chunk-7ULNCDCO.js")).KnipClient()),
+    load("ruff", async () => new (await import("../chunk-T6CPIZNT.js")).RuffClient()),
+    load("biome", async () => new (await import("../chunk-ZWFS3OEF.js")).BiomeClient()),
+    load("knip", async () => new (await import("../chunk-YIUAVF7E.js")).KnipClient()),
     load("todo", async () => new (await import("../chunk-JSQFTSC6.js")).TodoScanner()),
-    load("jscpd", async () => new (await import("../chunk-3UUPUE3O.js")).JscpdClient()),
-    load("dependency-checker", async () => new (await import("../chunk-3WA4HP4I.js")).DependencyChecker()),
-    load("test-runner", async () => new (await import("../chunk-Q6ZWTCLY.js")).TestRunnerClient()),
+    load("jscpd", async () => new (await import("../chunk-CMMHNUZ2.js")).JscpdClient()),
+    load("dependency-checker", async () => new (await import("../chunk-EC47DWFA.js")).DependencyChecker()),
+    load("test-runner", async () => new (await import("../chunk-XAGLWMJ4.js")).TestRunnerClient()),
     load("metrics", async () => new (await import("../chunk-N3X6Q4YT.js")).MetricsClient()),
     load("complexity", async () => new (await import("../chunk-VSSBEUFT.js")).ComplexityClient()),
     // The process-wide singleton, NOT a fresh instance (#2455 fix round 4,
@@ -2952,14 +2953,14 @@ async function buildBootstrapClients() {
     // second instance here meant the reset never reached the surface a
     // user actually sees.
     load("go", async () => (await import("../chunk-Z527N6YQ.js")).goClient),
-    load("govulncheck", async () => new (await import("../chunk-XPZPXCBV.js")).GovulncheckClient()),
-    load("gitleaks", async () => new (await import("../chunk-WOKKRCJ5.js")).GitleaksClient()),
-    load("trivy", async () => new (await import("../chunk-IBRALRBR.js")).TrivyClient()),
-    load("opengrep", async () => new (await import("../chunk-XKIZ2HNN.js")).OpengrepClient()),
+    load("govulncheck", async () => new (await import("../chunk-KDERNTCQ.js")).GovulncheckClient()),
+    load("gitleaks", async () => new (await import("../chunk-XIJZVPD5.js")).GitleaksClient()),
+    load("trivy", async () => new (await import("../chunk-FMSO6RDZ.js")).TrivyClient()),
+    load("opengrep", async () => new (await import("../chunk-MXGY6KPT.js")).OpengrepClient()),
     // The process-wide singleton, for the same reason as "go" above.
     load("rust", async () => (await import("../chunk-BRGDSBJE.js")).rustClient),
     load("agent-behavior", async () => (await import("../chunk-23WOO7TX.js")).agentBehaviorClient),
-    loadList("dead-code", async () => (await import("../chunk-NW7BOILN.js")).getDeadCodeClients())
+    loadList("dead-code", async () => (await import("../chunk-6STA6Z7I.js")).getDeadCodeClients())
   ]);
   if (failures.length > 0)
     await logBootstrapFailures(failures);
@@ -3046,7 +3047,7 @@ function resetAnalyzerBootstrapSessionState() {
 }
 
 // dist/clients/formatters-lazy.js
-var lazyFormatters = createLazyImport(() => import("../chunk-GHB6AYCP.js"));
+var lazyFormatters = createLazyImport(() => import("../chunk-RXCOMYPY.js"));
 function warmFormatters() {
   return lazyFormatters.get();
 }
@@ -5670,7 +5671,7 @@ function scheduleManagedToolRefresh(dbg) {
   const timer = setTimeout(() => {
     void (async () => {
       try {
-        const refresh = await import("../chunk-CF24OIYI.js");
+        const refresh = await import("../chunk-5UCAH366.js");
         const outcome = await refresh.runManagedToolRefresh();
         if (outcome.skipped) {
           dbg(`session_start tool-refresh: skipped (${outcome.skipped})`);
@@ -6184,7 +6185,7 @@ function scheduleStartupScansWithClients(deps, runtime, sessionGeneration, analy
   let callGraphIdentity;
   const callGraphTask = runTask("call-graph", async () => {
     const { FactStore: FactStore2 } = await import("../chunk-QGQ5CCCG.js");
-    const { buildOrUpdateGraph, extractSymbolsAndRefsFromGraph, getReviewGraphCacheIdentity } = await import("../chunk-2ZGIZPDG.js");
+    const { buildOrUpdateGraph, extractSymbolsAndRefsFromGraph, getReviewGraphCacheIdentity } = await import("../chunk-2VUQMUMT.js");
     const { buildCallGraph, saveCallGraph, loadCallGraph: loadCallGraph2 } = await import("../chunk-BKE7E7TC.js");
     if (!runtime.isCurrentSession(sessionGeneration))
       return;
@@ -13784,7 +13785,7 @@ async function moduleReport(file, cwd, options) {
   let callGraphIdentity;
   let revisionDriftNote;
   try {
-    const { getCachedReviewGraph, getReviewGraphCacheIdentity, getReviewGraphSizeSkipVerdict, getReviewGraphRevisionDrift, formatReviewGraphRevisionDriftNote: formatReviewGraphRevisionDriftNote2 } = await import("../chunk-2ZGIZPDG.js");
+    const { getCachedReviewGraph, getReviewGraphCacheIdentity, getReviewGraphSizeSkipVerdict, getReviewGraphRevisionDrift, formatReviewGraphRevisionDriftNote: formatReviewGraphRevisionDriftNote2 } = await import("../chunk-2VUQMUMT.js");
     graph = getCachedReviewGraph(cwd);
     graphFileCap = getReviewGraphSizeSkipVerdict(cwd)?.maxFileCount;
     const drift = graph ? getReviewGraphRevisionDrift(cwd) : void 0;
@@ -14820,7 +14821,7 @@ async function projectReport(cwd, options) {
   const limit = clampLimit(options?.limit);
   const focusTerms = normalizeFocus2(options?.focus);
   const view = options?.view;
-  const { getCachedReviewGraph, getReviewGraphSizeSkipVerdict, getLastReviewGraphBuildAttempt, buildOrUpdateGraph, isGraphBuildInFlight, getReviewGraphRevisionDrift } = await import("../chunk-2ZGIZPDG.js");
+  const { getCachedReviewGraph, getReviewGraphSizeSkipVerdict, getLastReviewGraphBuildAttempt, buildOrUpdateGraph, isGraphBuildInFlight, getReviewGraphRevisionDrift } = await import("../chunk-2VUQMUMT.js");
   let graph;
   try {
     graph = getCachedReviewGraph(cwd);
@@ -15263,7 +15264,7 @@ async function symbolSearch(query, cwd, limit = 20, options = {}) {
     warmLease.release();
   }
   const hits = results.map(toSymbolSearchHit);
-  const { getCachedReviewGraph } = await import("../chunk-2ZGIZPDG.js");
+  const { getCachedReviewGraph } = await import("../chunk-2VUQMUMT.js");
   const graph = getCachedReviewGraph(cwd);
   if (graph)
     annotateSymbolSearchHitsWithGraph(hits, centrality, graph);

package/dist/mcp/worker.js

@@ -2,34 +2,35 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   analyzeFile
-} from "../chunk-ODBNXWT4.js";
+} from "../chunk-H6MF6EVN.js";
 import "../chunk-OXXKQCSV.js";
 import "../chunk-EJIUXPBX.js";
+import "../chunk-2CD5RS6M.js";
 import "../chunk-FC4RP4I2.js";
-import "../chunk-66SXUJCA.js";
+import "../chunk-UZ3TUTRV.js";
+import "../chunk-XMSXXAHW.js";
+import "../chunk-77M37OKR.js";
+import "../chunk-CSHFH5IN.js";
 import "../chunk-VCHXCQFG.js";
-import "../chunk-IXXDFY73.js";
+import "../chunk-3EFKIGZN.js";
 import "../chunk-MRXKYPCS.js";
-import "../chunk-2CD5RS6M.js";
-import "../chunk-UZ3TUTRV.js";
-import "../chunk-EETY4LF7.js";
-import "../chunk-GOYRYZ2R.js";
+import "../chunk-7DYBLXYA.js";
+import "../chunk-AB3YYG6N.js";
+import "../chunk-YSZNHOBY.js";
 import "../chunk-RPLINGVB.js";
 import "../chunk-XCJN5IJU.js";
 import "../chunk-76MWC2K6.js";
 import "../chunk-GXW6K4YJ.js";
 import "../chunk-2B73ZPOK.js";
-import "../chunk-XMSXXAHW.js";
-import "../chunk-7DYBLXYA.js";
-import "../chunk-PV6LR5P5.js";
+import "../chunk-YYOIQFRS.js";
 import "../chunk-3MED75HT.js";
-import "../chunk-CO2G5PHH.js";
+import "../chunk-M6HSLBWY.js";
 import "../chunk-IBGIOBEE.js";
-import "../chunk-PNQDPDRC.js";
 import "../chunk-XIMYZ3JA.js";
-import "../chunk-ESBQHFMJ.js";
-import "../chunk-34WSVGEM.js";
+import "../chunk-EU63SDCG.js";
 import "../chunk-VWCXW2E7.js";
+import "../chunk-FCSOVF55.js";
+import "../chunk-PNQDPDRC.js";
 import "../chunk-ZXYDQ3TZ.js";
 import "../chunk-5W3R6LFT.js";
 import "../chunk-QHJ6DQ2R.js";
@@ -45,7 +46,7 @@ import "../chunk-GAEGEPOC.js";
 import "../chunk-Z3CCVDUB.js";
 import "../chunk-L3BLXZG7.js";
 import "../chunk-2BEMIWEW.js";
-import "../chunk-66VMUL7Q.js";
+import "../chunk-ACXEQZOU.js";
 import "../chunk-Q7DUK4LX.js";
 import "../chunk-AW7R2GWG.js";
 import "../chunk-RWWYJ623.js";

package/dist/probes/installer.js

@@ -53,7 +53,7 @@ import {
   verifyNpmPackageEntry,
   verifyToolBinary,
   wasLastResolveTransient
-} from "../chunk-66VMUL7Q.js";
+} from "../chunk-ACXEQZOU.js";
 import "../chunk-Q7DUK4LX.js";
 import "../chunk-AW7R2GWG.js";
 import "../chunk-RWWYJ623.js";

package/docs/pi-lens-merge-policy.md

@@ -497,10 +497,11 @@ operator's private notes, so a different orchestrator can run the same train.
 - **Detection retrospective on every merged bug fix (2026-09-06).** The
   catalog records the CODE lesson of a bug (a shape, a screen, a guard). Before
   a bug-labelled lane's ledger row closes, the orchestrator also records the
-  DETECTION lesson in one line: which verification layer caught it (external
-  user, reviewer probe, CI job, governance sweep, install/compat/tool smoke,
-  dogfood, release gate) and which layer SHOULD have caught it earlier and at
-  what cost. If that layer does not exist, file it as an issue with the bug as
+  DETECTION lesson in one line: which verification layer caught it and which
+  layer SHOULD have caught it earlier and at what cost. The accepted layer
+  words are the `DETECTION_LAYERS` list exported by `scripts/check-pr-body.mjs`,
+  which the `## Detection` body check reads; the prose does not restate them.
+  If that layer does not exist, file it as an issue with the bug as
   its named recurrence — the same standard shapes are held to. The ledger
   carries a `caught by / should have been caught by` column. Record: #2587's
   manifest entry escaped the package for four releases; a second registration
@@ -613,6 +614,13 @@ Each row cost a lane at least once; the prose above carries the record.
 |---------|-----|
 | Writing incident numbers and examples into an `AGENTS.md` rule | AGENTS.md stays lean; issues, PRs and examples go to `HISTORY.md` (maintainer, 2026-10-10). `tests/config/agents-governance.test.ts` ratchets the reference count down only |
 | Routing a review finding as one PR's bug when it is a member of a class | Name the shape, grep for members, and record the verdict before the fix round; `plegma-delegate-guard` refuses a fix brief with a HIGH/MEDIUM finding and no `Shape:` line |
+| Dispatching a fixer on an issue's text without checking it against the code | Grep the claimed gap on master before the brief. A stale premise turns the lane into a no-op or a witness-only PR |
+| Writing off a worker's reds as "sandbox" without a same-env base run | Accept a sandbox attribution only with the same test names red on origin/master under the same env vars. Hundreds of guard reds can hide one real red |
+| Folding a reviewer's remedy after running only the file the reviewer named | Run every test that references the changed symbol (`rg -l <symbol> tests`) before pushing a fold |
+| Pushing with `-q` or a grep filter, then landing on whatever the PR head is | Read the push result unfiltered, check `git merge-base --is-ancestor <intended> origin/<branch>`, and land with `EXPECT_HEAD=<intended or its merge>` |
+| Gating a background step on `until ! pgrep -f '<pattern>'` | That command line matches itself and never exits. Chain the steps in one command, or wait on a PID |
+| Editing an orchestrator script while a chain or monitor runs it | Stop the chain first, or write a new file and `mv` it into place |
+| Patching a CI-only red for a fifth round without CI evidence | When a red does not reproduce locally, put temporary instrumentation in a do-not-merge PR and read the CI log before the next fix round |
 | Taking a causal premise ("a later merge dropped X") from a hand-back into a PR body or brief | Bisect before writing it: `git show <sha>:<file>` along the path from the fix commit to master. A lane round can revert its own earlier round, and that is not a merge drop |
 | Trusting a wrapper script's exit status when it echoes a check's result | `pr-body.sh lint` printed `lint-exit=1` and exited 0, so a failing body went live; the wrapper now exits with the check's status. Read the check's own result line |
 | Hand-rolling the governance suite in a fresh worktree | `npm run build` alone left `dist/` missing and three census suites red; use the orchestrator's `gov-check.sh <tree>`, which builds both outputs and keeps the `node_modules` link for the commit hook |

package/docs/pi-lens-reviewer.md

@@ -80,6 +80,9 @@ real seam. Check that every gate the diff adds is exercised through that path.
   observability, changelog, commit, and PR-body requirements.
 - Re-run the PR's `## Class sweep` search yourself and widen it when the
   named shape is broader than the touched seam (#4273, #4268).
+- On a bug-closing PR, check the `## Detection` lesson: the layer named under
+  `Should have been caught by:` must be one that would actually have caught
+  the bug, and `Gap:` must be a real issue, test, or reason (#4288).
 - For LSP, dispatch, cache, runner, or tool changes, test one non-TypeScript
   registry entry through the same seam.
 - On a net-count fold, mutate every predicate the deleted sibling used to

package/docs/pi-lens-subagent.md

@@ -224,6 +224,11 @@ runner's own notes say which mode lifts it). Run Vitest as
 tree-sitter grammar prefetch hangs offline, verify through direct probes of the
 built code and say so; the orchestrator re-runs the files outside the sandbox.
 
+A worker may call a red "sandbox" only with the same test names red on
+`origin/master` in the same worktree, under the same env vars (including
+`GITHUB_ACTIONS` when the test reads it). The plegma git guard reds hundreds
+of fixture tests, and a real red hidden among them reaches CI (#4308).
+
 ## Follow-ups
 
 Fold a review follow-up into the same PR when it shares the seam or files, is

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-lens",
-	"version": "4.4.2",
+	"version": "4.4.3",
 	"type": "module",
 	"description": "Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo",
 	"repository": {

package/dist/chunk-CO2G5PHH.js

@@ -1,84 +0,0 @@
-import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
-import {
-  incrementDegradationCount
-} from "./chunk-JAU72XNY.js";
-import {
-  logLatency
-} from "./chunk-QQNQ7SJW.js";
-
-// dist/clients/bounded-telemetry.js
-var MAX_TRACKED_TURN_CAPS = 64;
-var turnCounts = /* @__PURE__ */ new Map();
-var latestCountedTurnIndex;
-var retiredThroughTurnIndex = Number.NEGATIVE_INFINITY;
-function admitBounded(phase, identity, options = {}) {
-  try {
-    let isRisingEdge = true;
-    if (options.ledgerKind !== void 0) {
-      isRisingEdge = incrementDegradationCount({
-        kind: options.ledgerKind,
-        subject: identity,
-        reason: options.reason ?? phase
-      });
-    }
-    if (options.risingEdgePer !== void 0 && !isRisingEdge)
-      return false;
-    return admitAgainstTurnCap(phase, options.capPerTurn);
-  } catch {
-    return true;
-  }
-}
-function emitBounded(phase, identity, payload, options = {}) {
-  try {
-    if (!admitBounded(phase, identity, options))
-      return false;
-    logLatency({
-      ...payload,
-      type: payload.type ?? "phase",
-      phase,
-      // `filePath` is what existing latency.log queries filter on, so a site
-      // may keep a coarser one; `metadata.identity` below always carries the
-      // full discriminating identity. Aggregation that loses WHICH subject
-      // is stuck is the failure AGENTS.md names.
-      filePath: payload.filePath ?? identity,
-      metadata: { ...payload.metadata, identity }
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function admitAgainstTurnCap(phase, cap) {
-  if (cap === void 0)
-    return true;
-  if (cap.turnIndex <= retiredThroughTurnIndex)
-    return false;
-  let counts = turnCounts.get(cap.turnIndex);
-  if (!counts) {
-    if (turnCounts.size >= MAX_TRACKED_TURN_CAPS) {
-      const oldestTrackedTurn = Math.min(...turnCounts.keys());
-      if (cap.turnIndex < oldestTrackedTurn)
-        return false;
-      turnCounts.delete(oldestTrackedTurn);
-      retiredThroughTurnIndex = Math.max(retiredThroughTurnIndex, oldestTrackedTurn);
-    }
-    counts = /* @__PURE__ */ new Map();
-    turnCounts.set(cap.turnIndex, counts);
-  }
-  latestCountedTurnIndex = Math.max(latestCountedTurnIndex ?? cap.turnIndex, cap.turnIndex);
-  const used = counts.get(phase) ?? 0;
-  if (used >= cap.limit)
-    return false;
-  counts.set(phase, used + 1);
-  return true;
-}
-function resetBoundedTelemetry() {
-  turnCounts = /* @__PURE__ */ new Map();
-  latestCountedTurnIndex = void 0;
-  retiredThroughTurnIndex = Number.NEGATIVE_INFINITY;
-}
-
-export {
-  emitBounded,
-  resetBoundedTelemetry
-};

package/dist/{chunk-OG5UUPN7.js → chunk-OCAGUNBC.js}

@@ -2,9 +2,6 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   HardFailureStamps
 } from "./chunk-7U2IDNXN.js";
-import {
-  getScratchTreeFnmatchPatterns
-} from "./chunk-VCHXCQFG.js";
 import {
   formatToolFailure
 } from "./chunk-2CD5RS6M.js";
@@ -12,6 +9,9 @@ import {
   firstOutputLine,
   spawnFailedWithNoOutput
 } from "./chunk-UZ3TUTRV.js";
+import {
+  getScratchTreeFnmatchPatterns
+} from "./chunk-VCHXCQFG.js";
 import {
   listNestedLinkedWorktreeRoots
 } from "./chunk-PNQDPDRC.js";