pi-lens 4.4.3 → 4.4.4

package/dist/chunk-IJYGIDF4.js

@@ -0,0 +1,186 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  stagePathFor
+} from "./chunk-LJDODBBZ.js";
+
+// dist/clients/gzip-stage-write.js
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { parentPort } from "node:worker_threads";
+import { createGzip } from "node:zlib";
+function routingFields(value) {
+  if (typeof value !== "object" || value === null || Array.isArray(value)) {
+    return `not a routable object (${value === null ? "null" : Array.isArray(value) ? "array" : typeof value})`;
+  }
+  const wire = value;
+  const missing = [];
+  const id = requiredNumber(wire, "id", missing);
+  const generation = requiredNumber(wire, "generation", missing);
+  if (missing.length > 0)
+    return `no numeric ${missing.join(" and ")}`;
+  return {
+    id,
+    generation,
+    ...fieldEntry(wire, "stagePath", "string", [])
+  };
+}
+function requiredNumber(wire, key, missing) {
+  const field = wire[key];
+  if (typeof field === "number")
+    return field;
+  missing.push(key);
+  return Number.NaN;
+}
+function fieldEntry(wire, key, type, malformed) {
+  const field = wire[key];
+  if (typeof field === type) {
+    return { [key]: field };
+  }
+  if (field !== void 0)
+    malformed.push(key);
+  return {};
+}
+function readGzipStageWorkerResult(value) {
+  const routing = routingFields(value);
+  if (typeof routing === "string")
+    return routing;
+  const wire = value;
+  const malformed = [];
+  const result = {
+    ...routing,
+    ...fieldEntry(wire, "rawBytes", "number", malformed),
+    ...fieldEntry(wire, "gzBytes", "number", malformed),
+    ...fieldEntry(wire, "serializeMs", "number", malformed),
+    ...fieldEntry(wire, "writeMs", "number", malformed),
+    ...fieldEntry(wire, "durationMs", "number", malformed),
+    ...fieldEntry(wire, "semanticFingerprint", "string", malformed),
+    ...fieldEntry(wire, "skippedUnchanged", "boolean", malformed),
+    ...fieldEntry(wire, "error", "string", malformed)
+  };
+  if (malformed.length === 0)
+    return result;
+  return {
+    ...routing,
+    error: `malformed worker result: ${malformed.join(", ")}`
+  };
+}
+function isGzipStageWorkerRequest(value) {
+  const routing = routingFields(value);
+  return typeof routing !== "string" && routing.stagePath !== void 0;
+}
+function reapStageFile(stagePath) {
+  try {
+    fs.rmSync(stagePath, { force: true });
+    return void 0;
+  } catch (err) {
+    return err instanceof Error ? err : new Error(String(err));
+  }
+}
+async function writeGzipStageFile(data, stagePath, testDelayMs, options) {
+  const startedAt = performance.now();
+  const tmpPath = stagePathFor(stagePath);
+  try {
+    if (testDelayMs) {
+      await new Promise((resolve) => setTimeout(resolve, testDelayMs));
+    }
+    const serializeStarted = performance.now();
+    const body = data instanceof Uint8Array ? data : JSON.stringify(data);
+    const serializeMs = performance.now() - serializeStarted;
+    const rawBytes = Buffer.byteLength(body);
+    const semanticFingerprint = options?.semanticFingerprint?.(body);
+    if (semanticFingerprint !== void 0 && options?.skipIfFingerprints?.includes(semanticFingerprint)) {
+      return {
+        rawBytes,
+        gzBytes: 0,
+        serializeMs,
+        writeMs: 0,
+        durationMs: performance.now() - startedAt,
+        semanticFingerprint,
+        skippedUnchanged: true
+      };
+    }
+    const writeStarted = performance.now();
+    await fs.promises.mkdir(path.dirname(stagePath), { recursive: true });
+    const chunks = function* () {
+      const chunkSize = 256 * 1024;
+      let offset = 0;
+      while (offset < body.length) {
+        let end = Math.min(offset + chunkSize, body.length);
+        if (typeof body === "string" && end < body.length) {
+          const last = body.charCodeAt(end - 1);
+          if (last >= 55296 && last <= 56319)
+            end--;
+        }
+        yield typeof body === "string" ? body.slice(offset, end) : body.subarray(offset, end);
+        offset = end;
+      }
+    };
+    await pipeline(Readable.from(chunks()), createGzip(), fs.createWriteStream(tmpPath));
+    await fs.promises.rename(tmpPath, stagePath);
+    const writeMs = performance.now() - writeStarted;
+    const gzBytes = (await fs.promises.stat(stagePath)).size;
+    return {
+      rawBytes,
+      gzBytes,
+      serializeMs,
+      writeMs,
+      durationMs: performance.now() - startedAt,
+      semanticFingerprint
+    };
+  } catch (err) {
+    await fs.promises.rm(tmpPath, { force: true }).catch(() => {
+    });
+    throw err;
+  }
+}
+function serveGzipStageWorker(buildBaseResult, options) {
+  const port = parentPort;
+  if (!port) {
+    throw new Error("gzip stage persist worker requires a parent port");
+  }
+  port.on("message", (message) => {
+    void (async () => {
+      try {
+        if (!isGzipStageWorkerRequest(message)) {
+          const routing = routingFields(message);
+          throw new Error(`malformed persist request: ${typeof routing === "string" ? routing : "no stage path"}`);
+        }
+        const request = message;
+        const result = {
+          ...buildBaseResult(request)
+        };
+        try {
+          const fingerprint = options?.semanticFingerprint;
+          const metrics = await writeGzipStageFile(request.data, request.stagePath, request.testDelayMs, {
+            semanticFingerprint: fingerprint ? (body) => fingerprint(request, body) : void 0,
+            skipIfFingerprints: options?.skipIfFingerprints?.(request)
+          });
+          result.rawBytes = metrics.rawBytes;
+          result.gzBytes = metrics.gzBytes;
+          result.serializeMs = metrics.serializeMs;
+          result.writeMs = metrics.writeMs;
+          result.durationMs = metrics.durationMs;
+          result.semanticFingerprint = metrics.semanticFingerprint;
+          result.skippedUnchanged = metrics.skippedUnchanged;
+        } catch (err) {
+          result.error = err instanceof Error ? err.message : String(err);
+        }
+        port.postMessage(result);
+      } catch (err) {
+        const routing = routingFields(message);
+        port.postMessage({
+          ...typeof routing === "string" ? {} : routing,
+          error: err instanceof Error ? err.message : String(err)
+        });
+      }
+    })();
+  });
+}
+
+export {
+  readGzipStageWorkerResult,
+  reapStageFile,
+  serveGzipStageWorker
+};

package/dist/{chunk-4W4VLAPJ.js → chunk-IQWN5JCP.js}

@@ -15,22 +15,22 @@ import {
   getFilterStats,
   isBuildArtifact,
   sourceTwinCandidates
-} from "./chunk-6C7JWPCP.js";
-import "./chunk-5NGR67U5.js";
-import "./chunk-C34ZXZ7O.js";
+} from "./chunk-DGUKIYSI.js";
+import "./chunk-XBJVAEEO.js";
+import "./chunk-KUA4OJ5Y.js";
 import "./chunk-QYF5S6P6.js";
-import "./chunk-PHDMFAKM.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
+import "./chunk-DUO2TU77.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
-import "./chunk-AOHZU2BM.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   ALL_SCANNABLE_EXTENSIONS,

package/dist/{chunk-SQ4TVJBR.js → chunk-IUE7SSKV.js}

@@ -2,29 +2,29 @@ import { createRequire as __pilensCreateRequire } from "node:module"; const requ
 import {
   firstOutputLine,
   spawnFailedWithNoOutput
-} from "./chunk-UZ3TUTRV.js";
+} from "./chunk-S67KYG37.js";
 import {
   SecurityScanClient
-} from "./chunk-3EFKIGZN.js";
+} from "./chunk-TIQ2PKDW.js";
 import {
   probeToolAsync
-} from "./chunk-RWWYJ623.js";
+} from "./chunk-3KAZU3VR.js";
 import {
   INSTALL_TRANSIENT_MAX_ATTEMPTS,
   classifyProbeFailure,
   describeProbeEvidence,
   logAvailabilityDecision,
   startHostStallSampler
-} from "./chunk-VRZP76YM.js";
+} from "./chunk-P63GXC37.js";
 import {
   safeSpawnAsync
-} from "./chunk-C34ZXZ7O.js";
+} from "./chunk-KUA4OJ5Y.js";
 import {
   assertInstallAllowed
-} from "./chunk-ZANLILYD.js";
+} from "./chunk-M2IFVFWU.js";
 import {
   recordDegradationOnce
-} from "./chunk-JAU72XNY.js";
+} from "./chunk-J64T55EI.js";
 
 // dist/clients/govulncheck-client.js
 import * as fs from "node:fs";

package/dist/{chunk-IBGIOBEE.js → chunk-IWDLU6K3.js}

@@ -1,21 +1,21 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getProjectDataDir
-} from "./chunk-C34ZXZ7O.js";
+} from "./chunk-KUA4OJ5Y.js";
 import {
   createNdjsonLogger,
   getGlobalPiLensLogDir,
   getProcessSingleton,
   getTurnId,
   isTestMode
-} from "./chunk-AOHZU2BM.js";
+} from "./chunk-YNE3RP52.js";
 import {
   BoundedFifoMap
 } from "./chunk-ABBOA7UD.js";
 import {
   normalizeFilePath,
   normalizeMapKey
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/hashline-anchor.js
 var HASHLINE_ANCHOR_LENGTH = 3;
@@ -98,6 +98,62 @@ var FINDING_ID_HASH_LENGTH = 12;
 function normalizeMessage(message) {
   return message.replace(/\s+/g, " ").trim().toLowerCase();
 }
+function findingIdentity(d) {
+  return JSON.stringify([
+    d.tool ?? "",
+    d.rule ?? "",
+    normalizeMessage(d.message)
+  ]);
+}
+function foldedFindingIdentity(d) {
+  return findingIdentity({ ...d, message: d.message.replace(/\d+/g, "#") });
+}
+var ANY_POSITION = "anywhere";
+function retainRecordedFindings(prior, observed, options) {
+  const identity = foldedFindingIdentity;
+  const byPlace = /* @__PURE__ */ new Map();
+  const byIdentity = /* @__PURE__ */ new Map();
+  const file = (map, key, d) => {
+    const bucket = map.get(key);
+    if (bucket)
+      bucket.push(d);
+    else
+      map.set(key, [d]);
+  };
+  for (const d of observed) {
+    file(byIdentity, identity(d), d);
+    if (d.line !== void 0)
+      file(byPlace, `${identity(d)}@${d.line}`, d);
+  }
+  const taken = /* @__PURE__ */ new Set();
+  const take = (bucket, accepts = () => true) => {
+    const match = bucket?.find((d) => !taken.has(d) && accepts(d));
+    if (match !== void 0)
+      taken.add(match);
+    return match;
+  };
+  const positions = prior.map((d) => options.positionOf(d));
+  const matches = prior.map((d, i) => {
+    const at = positions[i];
+    return typeof at === "number" ? take(byPlace.get(`${identity(d)}@${at}`)) : void 0;
+  });
+  prior.forEach((d, i) => {
+    if (positions[i] === ANY_POSITION)
+      matches[i] = take(byIdentity.get(identity(d)), (o) => options.matchesAnywhere?.(d, o) ?? true);
+  });
+  const kept = [];
+  const retired = [];
+  prior.forEach((d, i) => {
+    const match = matches[i];
+    if (match !== void 0)
+      kept.push(match);
+    else if (options.keepUnobserved(d))
+      kept.push(d);
+    else
+      retired.push(d);
+  });
+  return { kept, retired };
+}
 function hashText(value, length = FINDING_ID_HASH_LENGTH) {
   return createHash("sha256").update(value).digest("hex").slice(0, length);
 }
@@ -236,8 +292,11 @@ function shouldLogEvent(event) {
   // rising-edge gated once per file per session, so always-on
   // visibility costs nothing.
   event === "read_file_evicted" || event === "edits_cap_trimmed" || // #4131: a file's authorship ended because another writer changed its
-  // bytes. Once per authorship episode: the retired file needs a read or
-  // a known-content write before a writer can author it again.
+  // bytes, or a mutation-bridge write with no pre-write check landed on
+  // it (`writer: "bridge"`, #4187). Since #4387 an UNKNOWN-range credit
+  // never retires one. Once per authorship episode: the retired file
+  // needs a read or a known-content write before a writer can author it
+  // again.
   event === "authorship_retired";
 }
 var MAX_TELEMETRY_STRING = 512;
@@ -315,6 +374,10 @@ var RESOLVED_RANGE_CARRY = new BoundedFifoMap(RESOLVED_RANGE_CARRY_LIMIT);
 
 export {
   normalizeMessage,
+  findingIdentity,
+  foldedFindingIdentity,
+  ANY_POSITION,
+  retainRecordedFindings,
   hashText,
   stableFindingId,
   sanitizeCorrelationId,

package/dist/{chunk-XCJN5IJU.js → chunk-IYNJ6YPZ.js}

@@ -1,18 +1,18 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   withFactTree
-} from "./chunk-GXW6K4YJ.js";
+} from "./chunk-T57LYLZT.js";
 import {
   childrenOfType,
   firstChildOfType,
   walk
-} from "./chunk-QHJ6DQ2R.js";
+} from "./chunk-US7ECLD7.js";
 import {
   isJstsFactFile
-} from "./chunk-PHDMFAKM.js";
+} from "./chunk-DUO2TU77.js";
 import {
   logLatency
-} from "./chunk-QQNQ7SJW.js";
+} from "./chunk-QBFBRV2B.js";
 
 // dist/clients/dispatch/facts/import-facts.js
 function importFactsApplyTo(filePath) {

package/dist/{chunk-JAU72XNY.js → chunk-J64T55EI.js}

@@ -1,13 +1,13 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   logExtension
-} from "./chunk-XTMJ7XDT.js";
+} from "./chunk-POMLXPMY.js";
 import {
   DEPRECATED_CONFIG_SURFACES
 } from "./chunk-JMYYOTQG.js";
 import {
   logLatency
-} from "./chunk-QQNQ7SJW.js";
+} from "./chunk-QBFBRV2B.js";
 import {
   PROCESS_SINGLETON_RESET_KIND,
   getProbeHomeRedirectEvent,
@@ -18,7 +18,7 @@ import {
   getSinkWriteFailures,
   resetSinkRotations,
   resetSinkWriteFailures
-} from "./chunk-AOHZU2BM.js";
+} from "./chunk-YNE3RP52.js";
 
 // dist/clients/ledger-bounds.js
 var LEDGER_FIELD_MAX = 200;

package/dist/{chunk-2BBLFX75.js → chunk-J6MPGQTS.js}

@@ -14,7 +14,7 @@ import {
   findPiLensConfigMarkerInDir,
   getPiLensGlobalConfigPath,
   isResolvedGlobalConfigPath
-} from "./chunk-XVF2VVXP.js";
+} from "./chunk-5HSRT26B.js";
 import {
   DEGRADATION_ENTRIES_PER_KIND,
   GLOBAL_NON_FLAG_CONFIG_SECTIONS,
@@ -31,10 +31,10 @@ import {
   readFlagConfigValue,
   readToolConfig,
   recordDegradationOnce
-} from "./chunk-JAU72XNY.js";
+} from "./chunk-J64T55EI.js";
 import {
   logExtension
-} from "./chunk-XTMJ7XDT.js";
+} from "./chunk-POMLXPMY.js";
 import {
   CONFIG_SCHEMA_ANCHOR_KEY,
   CONFIG_SCHEMA_ID,
@@ -45,7 +45,7 @@ import {
 import {
   redactSecrets,
   toPositiveFinite
-} from "./chunk-AOHZU2BM.js";
+} from "./chunk-YNE3RP52.js";
 import {
   BoundedLruCache
 } from "./chunk-ABBOA7UD.js";
@@ -54,7 +54,7 @@ import {
   isAtOrAboveHomeDir,
   isWindowsPath,
   walkUpDirs
-} from "./chunk-N2H3ZPZY.js";
+} from "./chunk-3RKP3FMS.js";
 
 // dist/clients/generated-artifacts.js
 import * as fs from "node:fs";

package/dist/chunk-JORED7EX.js

@@ -0,0 +1,44 @@
+import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
+import {
+  DEPENDENCY_DRIFT_MAX_DELIVERIES,
+  _getForwardImportParsesForTests,
+  collectForwardImportMtimes,
+  extractForwardImportPaths,
+  extractForwardImports,
+  sweepInlineBlockerFreshness
+} from "./chunk-V35JG4JB.js";
+import "./chunk-XTBDCR27.js";
+import "./chunk-MPNJLASA.js";
+import "./chunk-US7ECLD7.js";
+import "./chunk-Z54ZSOBZ.js";
+import "./chunk-GXFV6MYU.js";
+import "./chunk-FM4RDMKT.js";
+import "./chunk-RMLC67LF.js";
+import {
+  MTIME_DRIFT_TOLERANCE_MS
+} from "./chunk-AGSS7277.js";
+import "./chunk-P63GXC37.js";
+import "./chunk-KUA4OJ5Y.js";
+import "./chunk-DUO2TU77.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
+import "./chunk-M2IFVFWU.js";
+import "./chunk-2EECBNC5.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
+import "./chunk-JMYYOTQG.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
+import "./chunk-LJDODBBZ.js";
+import "./chunk-ABBOA7UD.js";
+import "./chunk-3RKP3FMS.js";
+import "./chunk-NXL4FFQQ.js";
+export {
+  DEPENDENCY_DRIFT_MAX_DELIVERIES,
+  MTIME_DRIFT_TOLERANCE_MS,
+  _getForwardImportParsesForTests,
+  collectForwardImportMtimes,
+  extractForwardImportPaths,
+  extractForwardImports,
+  sweepInlineBlockerFreshness
+};

package/dist/{chunk-6SDEP3AJ.js → chunk-JUKMK5Y4.js}

@@ -1,20 +1,20 @@
 import { createRequire as __pilensCreateRequire } from "node:module"; const require = __pilensCreateRequire(import.meta.url);
 import {
   getProjectDataDir
-} from "./chunk-C34ZXZ7O.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
+} from "./chunk-KUA4OJ5Y.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
+import "./chunk-QBFBRV2B.js";
 import {
   redactSecrets
-} from "./chunk-AOHZU2BM.js";
+} from "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 
 // dist/clients/fix-worklog.js

package/dist/{chunk-FMSO6RDZ.js → chunk-JW3YWBVB.js}

@@ -9,26 +9,26 @@ import {
   resolveSeverityFloor,
   shouldScanTrivy,
   worktreeSkipDirs
-} from "./chunk-77M37OKR.js";
-import "./chunk-CSHFH5IN.js";
-import "./chunk-VCHXCQFG.js";
-import "./chunk-3EFKIGZN.js";
-import "./chunk-PNQDPDRC.js";
-import "./chunk-RWWYJ623.js";
-import "./chunk-VRZP76YM.js";
-import "./chunk-C34ZXZ7O.js";
+} from "./chunk-YH5MVY2U.js";
+import "./chunk-ED36RF6Y.js";
+import "./chunk-BWD5EPKO.js";
+import "./chunk-TIQ2PKDW.js";
+import "./chunk-UA7ZXYDR.js";
+import "./chunk-3KAZU3VR.js";
+import "./chunk-P63GXC37.js";
+import "./chunk-KUA4OJ5Y.js";
 import "./chunk-BW5KFIQC.js";
-import "./chunk-2BBLFX75.js";
-import "./chunk-XVF2VVXP.js";
+import "./chunk-J6MPGQTS.js";
+import "./chunk-5HSRT26B.js";
 import "./chunk-2EECBNC5.js";
-import "./chunk-JAU72XNY.js";
-import "./chunk-XTMJ7XDT.js";
+import "./chunk-J64T55EI.js";
+import "./chunk-POMLXPMY.js";
 import "./chunk-JMYYOTQG.js";
-import "./chunk-QQNQ7SJW.js";
-import "./chunk-AOHZU2BM.js";
+import "./chunk-QBFBRV2B.js";
+import "./chunk-YNE3RP52.js";
 import "./chunk-LJDODBBZ.js";
 import "./chunk-ABBOA7UD.js";
-import "./chunk-N2H3ZPZY.js";
+import "./chunk-3RKP3FMS.js";
 import "./chunk-NXL4FFQQ.js";
 export {
   TrivyClient,