pi-lens 4.4.2 → 4.4.4

package/dist/{chunk-GBPP5P7X.js → chunk-XTBDCR27.js}

@@ -4,17 +4,17 @@ import {
   readCargoDependencyNames,
   readCargoPackageName,
   readCargoWorkspaceMembers
-} from "./chunk-P7266HLM.js";
+} from "./chunk-MPNJLASA.js";
 import {
   getProjectIgnoreMatcher,
   isExcludedDirName
-} from "./chunk-C34ZXZ7O.js";
+} from "./chunk-KUA4OJ5Y.js";
 import {
   getWorkspaceManifestMarkers
-} from "./chunk-XVF2VVXP.js";
+} from "./chunk-5HSRT26B.js";
 import {
   normalizeMapKey
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/review-graph/workspace-modules.js
 import * as fs from "node:fs";

package/dist/{chunk-4UNXBNE2.js → chunk-XTFDJI3T.js}

@@ -2,21 +2,21 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   computeImpactCascade,
   computeTransitiveImpact
-} from "./chunk-2B73ZPOK.js";
-import "./chunk-GBPP5P7X.js";
-import "./chunk-P7266HLM.js";
-import "./chunk-C34ZXZ7O.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
+} from "./chunk-KN35K52N.js";
+import "./chunk-XTBDCR27.js";
+import "./chunk-MPNJLASA.js";
+import "./chunk-KUA4OJ5Y.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
-import "./chunk-AOHZU2BM.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   computeImpactCascade,

package/dist/{chunk-UXGETRP4.js → chunk-XYURS6EN.js}

@@ -44,26 +44,27 @@ import {
   setProjectSnapshotPromotionSeamForTests,
   terminateProjectSnapshotPersistWorkerForTests,
   waitForProjectSnapshotPersistsForTests
-} from "./chunk-ZXYDQ3TZ.js";
-import "./chunk-SAEFPSB6.js";
-import "./chunk-GAEGEPOC.js";
+} from "./chunk-T7FEBKXN.js";
+import "./chunk-W66O5E25.js";
+import "./chunk-7HXE67BN.js";
 import "./chunk-Z3CCVDUB.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-C34ZXZ7O.js";
+import "./chunk-IJYGIDF4.js";
+import "./chunk-KUA4OJ5Y.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-PHDMFAKM.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
+import "./chunk-DUO2TU77.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
-import "./chunk-AOHZU2BM.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   PROJECT_SNAPSHOT_MAX_WARM_ROOTS,

package/dist/{chunk-RPLINGVB.js → chunk-Y6GZHWSJ.js}

@@ -1,24 +1,24 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   loadProjectSnapshotWithoutWordIndex
-} from "./chunk-ZXYDQ3TZ.js";
+} from "./chunk-T7FEBKXN.js";
 import {
   resolvePackagePath
-} from "./chunk-QOZXJ4NA.js";
+} from "./chunk-FM4RDMKT.js";
 import {
   TERRAGRUNT_FILENAMES
-} from "./chunk-PHDMFAKM.js";
+} from "./chunk-DUO2TU77.js";
 import {
   recordDegradationOnce
-} from "./chunk-JAU72XNY.js";
+} from "./chunk-J64T55EI.js";
 import {
   logLatency
-} from "./chunk-QQNQ7SJW.js";
+} from "./chunk-QBFBRV2B.js";
 import {
   findNearestContaining,
   normalizeMapKey,
   walkUpDirs
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/tool-policy.js
 import * as fs from "node:fs";

package/dist/{chunk-2ZGIZPDG.js → chunk-YCWYO6TQ.js}

@@ -54,56 +54,59 @@ import {
   reviewGraphCachePath,
   terminateReviewGraphPersistWorkerForTests,
   waitForReviewGraphPersistsForTests
-} from "./chunk-PV6LR5P5.js";
+} from "./chunk-XHJBS436.js";
 import "./chunk-3MED75HT.js";
-import "./chunk-CO2G5PHH.js";
-import "./chunk-IBGIOBEE.js";
-import "./chunk-PNQDPDRC.js";
+import "./chunk-RVK72CZX.js";
+import "./chunk-IWDLU6K3.js";
 import "./chunk-XIMYZ3JA.js";
-import "./chunk-ESBQHFMJ.js";
-import "./chunk-34WSVGEM.js";
-import "./chunk-VWCXW2E7.js";
-import "./chunk-ZXYDQ3TZ.js";
+import "./chunk-3DA2JDOL.js";
+import "./chunk-HWCCCQNX.js";
+import "./chunk-CUHSHSB6.js";
+import "./chunk-UA7ZXYDR.js";
+import "./chunk-T7FEBKXN.js";
+import "./chunk-SRYEJNES.js";
 import "./chunk-5W3R6LFT.js";
-import "./chunk-QHJ6DQ2R.js";
+import "./chunk-V35JG4JB.js";
+import "./chunk-XTBDCR27.js";
+import "./chunk-MPNJLASA.js";
+import "./chunk-US7ECLD7.js";
 import "./chunk-Z54ZSOBZ.js";
-import "./chunk-724UL2TJ.js";
-import "./chunk-QOZXJ4NA.js";
-import "./chunk-GBPP5P7X.js";
-import "./chunk-P7266HLM.js";
-import "./chunk-MQLUAEOC.js";
-import "./chunk-52FUZI6K.js";
-import "./chunk-SAEFPSB6.js";
-import "./chunk-GAEGEPOC.js";
+import "./chunk-GXFV6MYU.js";
+import "./chunk-FM4RDMKT.js";
+import "./chunk-RMLC67LF.js";
+import "./chunk-W66O5E25.js";
+import "./chunk-7HXE67BN.js";
 import "./chunk-Z3CCVDUB.js";
-import "./chunk-L3BLXZG7.js";
+import "./chunk-KAPJINKN.js";
+import "./chunk-AGSS7277.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-66VMUL7Q.js";
-import "./chunk-Q7DUK4LX.js";
-import "./chunk-AW7R2GWG.js";
-import "./chunk-RWWYJ623.js";
-import "./chunk-VRZP76YM.js";
-import "./chunk-QOBUHWHX.js";
-import "./chunk-QILIYSJF.js";
-import "./chunk-6C7JWPCP.js";
-import "./chunk-5NGR67U5.js";
-import "./chunk-C34ZXZ7O.js";
+import "./chunk-IJYGIDF4.js";
+import "./chunk-GAQ7OQG6.js";
+import "./chunk-DEL2U6CM.js";
+import "./chunk-5VSF4UUQ.js";
+import "./chunk-3KAZU3VR.js";
+import "./chunk-P63GXC37.js";
+import "./chunk-HRNHZA3N.js";
+import "./chunk-TLX72JTG.js";
+import "./chunk-DGUKIYSI.js";
+import "./chunk-XBJVAEEO.js";
+import "./chunk-KUA4OJ5Y.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-PHDMFAKM.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
-import "./chunk-ZANLILYD.js";
+import "./chunk-DUO2TU77.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
+import "./chunk-M2IFVFWU.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
-import "./chunk-AOHZU2BM.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
-import "./chunk-CHOW74WE.js";
+import "./chunk-CYRKQRPM.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   GRAPH_PERSIST_MAX_ELEMENTS_DEFAULT,

package/dist/{chunk-66SXUJCA.js → chunk-YH5MVY2U.js}

@@ -1,27 +1,29 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  scannerReportParentDir
+} from "./chunk-ED36RF6Y.js";
 import {
   getScratchTreeGlobPatterns,
   nestedWorktreeOffsets
-} from "./chunk-VCHXCQFG.js";
+} from "./chunk-BWD5EPKO.js";
 import {
   SecurityScanClient
-} from "./chunk-IXXDFY73.js";
+} from "./chunk-TIQ2PKDW.js";
 import {
   safeSpawnAsync
-} from "./chunk-C34ZXZ7O.js";
+} from "./chunk-KUA4OJ5Y.js";
 import {
   loadPiLensProjectConfig
-} from "./chunk-2BBLFX75.js";
+} from "./chunk-J6MPGQTS.js";
 import {
   incrementDegradationCount
-} from "./chunk-JAU72XNY.js";
+} from "./chunk-J64T55EI.js";
 import {
   toPosix
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/trivy-client.js
 import * as fs from "node:fs";
-import * as os from "node:os";
 import * as path from "node:path";
 import { mkdtempSync } from "node:fs";
 var EMPTY_RESULT = {
@@ -178,7 +180,7 @@ var TrivyClient = class extends SecurityScanClient {
     const scannedAt = (/* @__PURE__ */ new Date()).toISOString();
     const bin = this.binaryPath ?? "trivy";
     const severities = resolveSeverityFloor(cwd);
-    const outDir = mkdtempSync(path.join(os.tmpdir(), "pi-lens-trivy-"));
+    const outDir = mkdtempSync(path.join(scannerReportParentDir(), "pi-lens-trivy-"));
     const reportPath = path.join(outDir, "trivy-report.json");
     try {
       const result = await safeSpawnAsync(bin, [

package/dist/{chunk-AOHZU2BM.js → chunk-YNE3RP52.js}

@@ -3,7 +3,7 @@ import {
   isUnderDir,
   normalizeFilePath,
   pathsEqual
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/env-utils.js
 function isTestMode() {

package/dist/{chunk-GOYRYZ2R.js → chunk-ZHH37KZL.js}

@@ -2,12 +2,16 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   getToolCommandSpec,
   shouldAutoInstallTool
-} from "./chunk-RPLINGVB.js";
+} from "./chunk-Y6GZHWSJ.js";
 import {
   BUILTIN_SERVER_RUNNER_COVERS,
   getServersForFileWithConfig,
-  isAuxiliary
-} from "./chunk-ESBQHFMJ.js";
+  isAuxiliary,
+  resolveAnalysisRootPath
+} from "./chunk-3DA2JDOL.js";
+import {
+  emitBounded
+} from "./chunk-CUHSHSB6.js";
 import {
   PathKeyedMap
 } from "./chunk-Z3CCVDUB.js";
@@ -20,10 +24,10 @@ import {
   isSpawnableCommand,
   logSessionStart,
   resetPathWalkMemo
-} from "./chunk-66VMUL7Q.js";
+} from "./chunk-GAQ7OQG6.js";
 import {
   resolveToolCwd
-} from "./chunk-Q7DUK4LX.js";
+} from "./chunk-DEL2U6CM.js";
 import {
   VENDOR_BIN_DIRS,
   VENV_BIN_DIRS,
@@ -31,11 +35,11 @@ import {
   findLocalBinAt,
   findLocalBinUpwards,
   localBinPath
-} from "./chunk-AW7R2GWG.js";
+} from "./chunk-5VSF4UUQ.js";
 import {
   createAvailabilityProbeFlight,
   probeToolAsync
-} from "./chunk-RWWYJ623.js";
+} from "./chunk-3KAZU3VR.js";
 import {
   classifyProbeFailure,
   createAvailabilityLatch,
@@ -45,28 +49,31 @@ import {
   logAvailabilityDecision,
   startHostStallSampler,
   transientRetryDelayMs
-} from "./chunk-VRZP76YM.js";
+} from "./chunk-P63GXC37.js";
 import {
   createGenerationSource,
   getGlobalPiLensDir,
   isInSpawnTimeoutCooldown,
+  resolveWindowsCommandForEnvironment,
   safeSpawnAsync
-} from "./chunk-C34ZXZ7O.js";
+} from "./chunk-KUA4OJ5Y.js";
 import {
   getProjectTrustState
-} from "./chunk-ZANLILYD.js";
+} from "./chunk-M2IFVFWU.js";
 import {
   compareOrdinal,
   incrementDegradationCount
-} from "./chunk-JAU72XNY.js";
+} from "./chunk-J64T55EI.js";
 import {
+  isUnderDir,
   normalizeEphemeralMapKey,
   normalizeMapKey
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/dispatch/runners/utils/runner-helpers.js
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { delimiter, resolve as resolveCommandPath } from "node:path";
 import { fileURLToPath } from "node:url";
 function lspPrimaryCoversFile(ctx, runnerId) {
   if (ctx.pi?.getFlag?.("no-lsp"))
@@ -189,14 +196,58 @@ async function findManagedReleaseBinary(tool, verificationArgs = ["--version"])
   const verdict = await verifyManagedCandidate(candidate, verificationArgs);
   return verdict === "ok" || verdict === "unverified" ? candidate : null;
 }
-function createVenvFinder(command, windowsExt = "", verificationArgs = ["--version"]) {
+function resolveAdoptedRootCommand(command, ctx, cwd) {
+  const candidates = managedNodeToolCandidates(command);
+  let selected = candidates.find((candidate) => candidate && fs.existsSync(candidate));
+  if (!selected) {
+    if (process.platform === "win32") {
+      selected = resolveWindowsCommandForEnvironment(command, cwd, process.env)?.resolvedPath;
+    } else {
+      selected = (process.env.PATH ?? "").split(delimiter).map((dir) => resolveCommandPath(cwd, dir, command)).find((candidate) => {
+        try {
+          fs.accessSync(candidate, fs.constants.X_OK);
+          return fs.statSync(candidate).isFile();
+        } catch {
+          return false;
+        }
+      });
+    }
+  }
+  if (!selected)
+    return null;
+  try {
+    const binary = fs.realpathSync.native(selected);
+    const session = ctx.projectRoot ?? ctx.cwd;
+    const adopted = resolveAnalysisRootPath(ctx.filePath, session);
+    if (!adopted)
+      return null;
+    const roots = [adopted, session].map((root) => fs.realpathSync.native(root));
+    if (roots.some((root) => binary === root || isUnderDir(binary, root) || isUnderDir(selected, root))) {
+      emitBounded("adopted_root_binary_refused", `${ctx.filePath}:${command}:${binary}`, {
+        filePath: ctx.filePath,
+        durationMs: 0,
+        metadata: { command, binary }
+      }, {
+        ledgerKind: "adopted-root-binary-refused",
+        risingEdgePer: "identity"
+      });
+      return null;
+    }
+    return binary;
+  } catch {
+    return null;
+  }
+}
+function createVenvFinder(command, windowsExt = "", verificationArgs = ["--version"], allowProjectLocal = true) {
   return async (cwd) => {
-    const venvBin = localBinPath(findLocalBinAt(command, cwd, {
-      windowsExt,
-      binDirs: VENV_BIN_DIRS
-    }));
-    if (venvBin)
-      return { path: venvBin, rung: "venv" };
+    if (allowProjectLocal) {
+      const venvBin = localBinPath(findLocalBinAt(command, cwd, {
+        windowsExt,
+        binDirs: VENV_BIN_DIRS
+      }));
+      if (venvBin)
+        return { path: venvBin, rung: "venv" };
+    }
     const managed = await findManagedNodeToolBinary(command, verificationArgs);
     if (managed)
       return { path: managed, rung: "managed-dir" };
@@ -434,7 +485,7 @@ function createAvailabilityChecker(command, windowsExt = "", versionArgs = ["--v
   const inFlightByCwd = new PathKeyedMap(normalizeEphemeralMapKey);
   let checkerGeneration = availabilityGeneration.current();
   let checkerFlightGeneration = 0;
-  const findCommand = createVenvFinder(command, windowsExt, versionArgs);
+  const findCommand = createVenvFinder(command, windowsExt, versionArgs, options.allowProjectLocal !== false);
   function ensureCurrentGeneration() {
     if (checkerGeneration === availabilityGeneration.current())
       return;
@@ -982,6 +1033,7 @@ export {
   lspPrimaryCoversFile,
   coveringLaneAvailable,
   findManagedNodeToolBinary,
+  resolveAdoptedRootCommand,
   resolveManagedToolClient,
   getManagedToolEnvironment,
   discoverManagedTool,

package/dist/{chunk-ZGDGW2V3.js → chunk-ZIVJBOO3.js}

@@ -1,10 +1,10 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   isMutatingToolName
-} from "./chunk-IBGIOBEE.js";
+} from "./chunk-IWDLU6K3.js";
 import {
   normalizeMapKey
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/agent-behavior-client.js
 var READ_OPS = /* @__PURE__ */ new Set(["read", "bash", "grep", "glob", "find", "rg"]);

package/dist/{chunk-GHB6AYCP.js → chunk-ZVUL7QYY.js}

@@ -52,42 +52,43 @@ import {
   tryLazyInstallFormatterTool,
   typstyleFormatter,
   zigFormatter
-} from "./chunk-ARJ6PLFH.js";
-import "./chunk-OXXKQCSV.js";
-import "./chunk-FC4RP4I2.js";
-import "./chunk-RPLINGVB.js";
-import "./chunk-ZXYDQ3TZ.js";
-import "./chunk-QOZXJ4NA.js";
-import "./chunk-P7266HLM.js";
-import "./chunk-SAEFPSB6.js";
-import "./chunk-GAEGEPOC.js";
+} from "./chunk-GSM5UU7A.js";
+import "./chunk-UBOQLVT2.js";
+import "./chunk-6HWVI6MI.js";
+import "./chunk-Y6GZHWSJ.js";
+import "./chunk-T7FEBKXN.js";
+import "./chunk-MPNJLASA.js";
+import "./chunk-FM4RDMKT.js";
+import "./chunk-W66O5E25.js";
+import "./chunk-7HXE67BN.js";
 import "./chunk-Z3CCVDUB.js";
 import "./chunk-2BEMIWEW.js";
-import "./chunk-66VMUL7Q.js";
-import "./chunk-Q7DUK4LX.js";
-import "./chunk-AW7R2GWG.js";
-import "./chunk-RWWYJ623.js";
-import "./chunk-VRZP76YM.js";
-import "./chunk-QOBUHWHX.js";
-import "./chunk-QILIYSJF.js";
-import "./chunk-6C7JWPCP.js";
-import "./chunk-5NGR67U5.js";
-import "./chunk-C34ZXZ7O.js";
+import "./chunk-IJYGIDF4.js";
+import "./chunk-GAQ7OQG6.js";
+import "./chunk-DEL2U6CM.js";
+import "./chunk-5VSF4UUQ.js";
+import "./chunk-3KAZU3VR.js";
+import "./chunk-P63GXC37.js";
+import "./chunk-HRNHZA3N.js";
+import "./chunk-TLX72JTG.js";
+import "./chunk-DGUKIYSI.js";
+import "./chunk-XBJVAEEO.js";
+import "./chunk-KUA4OJ5Y.js";
 import "./chunk-BW5KFIQC.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-PHDMFAKM.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
-import "./chunk-ZANLILYD.js";
+import "./chunk-DUO2TU77.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
+import "./chunk-M2IFVFWU.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
-import "./chunk-AOHZU2BM.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   ALL_FORMATTERS,