pi-usereq 0.44.0 → 0.45.0

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.45.0](https://github.com/Ogekuri/PI-useReq/compare/v0.44.0..v0.45.0) - 2026-07-13
+### 🐛  Bug Fixes
+- Fix packages.
+- Fix packages.
+
+### 🚜  Changes
+- add view/reset menu actions, removal confirmation, embedded keyword resolution, approve-scripts [useReq] *(static-check)*
+  - REQ-008/248/345-349: add View static code checker (read-only, before
+  - Remove), Reset static code checker (after Remove, restores embedded
+  - defaults), and require config preview plus confirmation before Remove.
+  - DES-019/REQ-350/351: resolveCheckerExecutable substitutes the
+  - %%INSTALLATION_PATH%% keyword and fixes hoisted node_modules/.bin probing.
+  - DES-020/REQ-352: postinstall best-effort runs npm approve-scripts for
+  - bundled checker dependencies before probing.
+  - Update REQUIREMENTS/WORKFLOW/REFERENCES and the static-check menu test.
+
 ## [0.44.0](https://github.com/Ogekuri/PI-useReq/compare/v0.43.0..v0.44.0) - 2026-07-13
 ### 🚜  Changes
 - BREAKING CHANGE: park failed worktree runs in error without resuming base-path [useReq] *(prompt-closure)*
@@ -609,6 +625,7 @@
 - \[0.42.0\]: https://github.com/Ogekuri/PI-useReq/releases/tag/v0.42.0
 - \[0.43.0\]: https://github.com/Ogekuri/PI-useReq/releases/tag/v0.43.0
 - \[0.44.0\]: https://github.com/Ogekuri/PI-useReq/releases/tag/v0.44.0
+- \[0.45.0\]: https://github.com/Ogekuri/PI-useReq/releases/tag/v0.45.0
 
 [0.1.0]: https://github.com/Ogekuri/PI-useReq/releases/tag/v0.1.0
 [0.2.0]: https://github.com/Ogekuri/PI-useReq/compare/v0.1.0..v0.2.0
@@ -652,3 +669,4 @@
 [0.42.0]: https://github.com/Ogekuri/PI-useReq/compare/v0.41.0..v0.42.0
 [0.43.0]: https://github.com/Ogekuri/PI-useReq/compare/v0.42.0..v0.43.0
 [0.44.0]: https://github.com/Ogekuri/PI-useReq/compare/v0.43.0..v0.44.0
+[0.45.0]: https://github.com/Ogekuri/PI-useReq/compare/v0.44.0..v0.45.0

package/README.md

@@ -1,4 +1,4 @@
-# PI-useReq/pi-usereq (0.44.0)
+# PI-useReq/pi-usereq (0.45.0)
 
 <p align="center">
   <img src="https://img.shields.io/badge/python-3.11%2B-3776AB?style=flat-square&logo=python&logoColor=white" alt="Python 3.11+">

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pi-usereq",
-  "version": "0.44.0",
+  "version": "0.45.0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/Ogekuri/PI-useReq.git"
@@ -34,7 +34,7 @@
     "@sinclair/typebox": "^0.34.49"
   },
   "dependencies": {
-    "eslint": "^10.2.0",
+    "eslint": "^10.7.0",
     "fast-glob": "^3.3.3",
     "js-tiktoken": "^1.0.21",
     "pyright": "^1.1.411",
@@ -45,5 +45,10 @@
     "@eslint/js": "^10.0.1",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.58.2"
+  },
+  "allowScripts": {
+    "esbuild@0.27.7": true,
+    "koffi@2.15.6": true,
+    "protobufjs@7.5.4": true
   }
 }

package/pi-usereq/docs/REFERENCES.md

@@ -4091,7 +4091,7 @@ import { formatDoxygenFieldsAsMarkdown, parseDoxygenComment } from "./doxygen-pa
 
 ---
 
-# static-check.ts | TypeScript | 595L | 18 symbols | 8 imports | 31 comments
+# static-check.ts | TypeScript | 601L | 18 symbols | 8 imports | 31 comments
 > Path: `src/core/static-check.ts`
 - @brief Defines static-check language mappings and checker dispatch implementations.
 - @details Parses Command-only user static-check specifications, preserves debug `Dummy` config handling, resolves file targets, and runs modular dummy or command-based analyzers. Runtime is linear in file count plus external tool cost. Side effects include filesystem reads, PATH probing, process spawning, and console output.
@@ -4173,7 +4173,7 @@ import { getInstallationPath } from "./path-context.js";
 - @brief Provides the shared and debug-capable base implementation for file-oriented static checks.
 - @details Resolves input files once, emits standardized headers, implements the debug `Dummy` checker behavior, and defines overridable `checkFile` plus `emitLine` hooks used by concrete analyzers. Runtime is O(f) plus subclass checker cost. Side effects include console output.
 
-### class `export class StaticCheckCommand extends StaticCheckBase` : StaticCheckBase (L389-438)
+### class `export class StaticCheckCommand extends StaticCheckBase` : StaticCheckBase (L389-439)
 - @brief Runs the user-facing external-command static checker.
 - @brief Initializes a command-backed checker instance.
 - @details Validates command availability on PATH during construction, then invokes the command with configured extra arguments plus one target file at a time. Runtime is dominated by external command execution. Side effects include PATH probing, process spawning, and console output.
@@ -4184,33 +4184,33 @@ import { getInstallationPath } from "./path-context.js";
 - @param[in] failOnly {boolean} When `true`, suppress successful-file output.
 - @throws {ReqError} Throws when the executable cannot be found on PATH.
 
-### fn `function isExecutableFile(candidate: string): boolean` (L446-456)
+### fn `function isExecutableFile(candidate: string): boolean` (L447-457)
 - @brief Tests whether one filesystem path is executable.
 - @details Requires the candidate to exist, be a regular file, and pass `X_OK` access checks. Runtime is O(1). Side effects are limited to filesystem reads.
 - @param[in] candidate {string} Absolute or relative path to inspect.
 - @return {boolean} `true` when the candidate is executable by the current process.
 
-### fn `export function findExecutable(cmd: string): string | undefined` (L464-475)
+### fn `export function findExecutable(cmd: string): string | undefined` (L465-476)
 - @brief Locates an executable by scanning the current PATH.
 - @details Checks each PATH directory for an executable file named exactly as the requested command. Runtime is O(p) in PATH entry count. Side effects are filesystem reads.
 - @param[in] cmd {string} Executable name to locate.
 - @return {string | undefined} Absolute executable path, or `undefined` when not found.
 
-### fn `export function resolveCheckerExecutable(cmd: string): string | undefined` (L484-499)
-- @brief Resolves one checker executable across bundled `node_modules/.bin` locations and PATH.
-- @details Probes the installation-owned `node_modules/.bin` directory, the project-scope parent `node_modules/.bin` directory used by `--prefix` layouts, and finally the system PATH scan, returning the first executable match. Runtime is O(p) in PATH entry count plus bounded filesystem metadata checks. Side effects are limited to filesystem reads.
-- @param[in] cmd {string} Executable name or relative path to resolve.
+### fn `export function resolveCheckerExecutable(cmd: string): string | undefined` (L485-505)
+- @brief Resolves one checker executable across installation-keyword, bundled `node_modules/.bin`, and PATH locations.
+- @details Substitutes the `%%INSTALLATION_PATH%%` keyword with the runtime installation path and verifies the resulting explicit path when present, then probes the installation-owned `node_modules/.bin` directory, the project-scope parent `node_modules/.bin` directory used by `--prefix` layouts, and finally the system PATH scan, returning the first executable match so default configuration requires no target-project module installation. Runtime is O(p) in PATH entry count plus bounded filesystem metadata checks. Side effects are limited to filesystem reads.
+- @param[in] cmd {string} Executable name, explicit path, or `%%INSTALLATION_PATH%%`-anchored path to resolve.
 - @return {string | undefined} Absolute executable path, or `undefined` when not found in any probed location.
-- @satisfies REQ-023, REQ-037, DES-018
+- @satisfies REQ-023, REQ-037, DES-018, DES-019, REQ-350, REQ-351
 
-### fn `export function checkDefaultCheckersAvailability(config: UseReqConfig): string[]` (L508-528)
+### fn `export function checkDefaultCheckersAvailability(config: UseReqConfig): string[]` (L514-534)
 - @brief Determines which enabled static-check executables are missing from the runtime environment.
 - @details Iterates every enabled language checker entry in the effective config, resolves each `Command` entry executable through `resolveCheckerExecutable`, and collects the missing command names so the caller can surface one consolidated warning. Runtime is O(l * c * p) where l is language count, c is checker count, and p is PATH entry count. Side effects are limited to filesystem reads.
 - @param[in] config {UseReqConfig} Effective merged configuration.
 - @return {string[]} Unique command names that are enabled but unresolvable.
 - @satisfies REQ-341, REQ-343, REQ-344
 
-### fn `export function dispatchStaticCheckForFile(` (L539-542)
+### fn `export function dispatchStaticCheckForFile(` (L545-548)
 - @brief Dispatches one configured static checker for a single file.
 - @details Selects the debug `Dummy` or user-facing `Command` implementation by module name, normalizes parameter arrays, and runs exactly one checker instance against the target file. Runtime is dominated by the selected checker. Side effects include console output and possible process spawning.
 - @param[in] filePath {string} Absolute or relative file path to check.
@@ -4219,7 +4219,7 @@ import { getInstallationPath } from "./path-context.js";
 - @return {number} Checker exit status where `0` means success and non-zero means failure.
 - @throws {ReqError} Throws when configuration is incomplete or names an unknown module.
 
-### fn `export function runStaticCheck(argv: string[]): number` (L571-595)
+### fn `export function runStaticCheck(argv: string[]): number` (L577-601)
 - @brief Runs the standalone static-check test driver.
 - @details Dispatches debug `dummy` or user-facing `command` subcommands without consulting project configuration. Runtime is O(n) in argument count plus checker cost. Side effects include console output and external process spawning.
 - @param[in] argv {string[]} Raw static-check subcommand arguments.
@@ -4240,13 +4240,13 @@ import { getInstallationPath } from "./path-context.js";
 |`validateStaticCheckEntry`|fn||260-271|export function validateStaticCheckEntry(entry: StaticChe...|
 |`resolveFiles`|fn||279-303|function resolveFiles(inputs: string[]): string[]|
 |`StaticCheckBase`|class||309-383|export class StaticCheckBase|
-|`StaticCheckCommand`|class||389-438|export class StaticCheckCommand extends StaticCheckBase|
-|`isExecutableFile`|fn||446-456|function isExecutableFile(candidate: string): boolean|
-|`findExecutable`|fn||464-475|export function findExecutable(cmd: string): string | und...|
-|`resolveCheckerExecutable`|fn||484-499|export function resolveCheckerExecutable(cmd: string): st...|
-|`checkDefaultCheckersAvailability`|fn||508-528|export function checkDefaultCheckersAvailability(config: ...|
-|`dispatchStaticCheckForFile`|fn||539-542|export function dispatchStaticCheckForFile(|
-|`runStaticCheck`|fn||571-595|export function runStaticCheck(argv: string[]): number|
+|`StaticCheckCommand`|class||389-439|export class StaticCheckCommand extends StaticCheckBase|
+|`isExecutableFile`|fn||447-457|function isExecutableFile(candidate: string): boolean|
+|`findExecutable`|fn||465-476|export function findExecutable(cmd: string): string | und...|
+|`resolveCheckerExecutable`|fn||485-505|export function resolveCheckerExecutable(cmd: string): st...|
+|`checkDefaultCheckersAvailability`|fn||514-534|export function checkDefaultCheckersAvailability(config: ...|
+|`dispatchStaticCheckForFile`|fn||545-548|export function dispatchStaticCheckForFile(|
+|`runStaticCheck`|fn||577-601|export function runStaticCheck(argv: string[]): number|
 
 
 ---
@@ -4769,7 +4769,7 @@ import path from "node:path";
 
 ---
 
-# index.ts | TypeScript | 4624L | 106 symbols | 27 imports | 124 comments
+# index.ts | TypeScript | 4820L | 111 symbols | 27 imports | 129 comments
 > Path: `src/index.ts`
 - @brief Registers the pi-usereq extension commands, tools, and configuration UI.
 - @details Bridges the standalone tool-runner layer into the pi extension API by registering prompt commands, agent tools, and interactive configuration menus. Runtime at module load is O(1); later behavior depends on the selected command or tool. Side effects include extension registration, UI updates, filesystem reads/writes, and delegated tool execution.
@@ -5459,48 +5459,85 @@ registration and status updates.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {string} Compact summary string.
 
-### fn `function buildStaticCheckMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3796-3828)
+### fn `function buildStaticCheckMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3796-3840)
 - @brief Builds the shared settings-menu choices for static-check management.
 - @details Serializes guided Command-oriented add and remove actions, renders one direct on/off toggle row for every supported language, and appends canonical terminal rows while omitting raw-spec and reference-only actions. Runtime is O(l). No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered static-check menu choices.
-- @satisfies REQ-008, REQ-150, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-248
+- @satisfies REQ-008, REQ-150, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-248, REQ-345, REQ-347
 
-### fn `function buildSupportedStaticCheckLanguageChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3836-3853)
+### fn `function buildSupportedStaticCheckLanguageChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3848-3865)
 - @brief Builds the shared settings-menu choices for supported static-check languages.
 - @details Exposes every supported language as one row whose right-side value reports extensions, enablement, and configured checker count for guided Command configuration flows, then appends subtree-local terminal rows. Runtime is O(l). No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered language-choice vector.
 
-### fn `function buildConfiguredStaticCheckLanguageChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3861-3878)
+### fn `function buildConfiguredStaticCheckLanguageChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3873-3890)
 - @brief Builds the shared settings-menu choices for configured static-check languages.
 - @details Exposes only languages whose checker lists are non-empty so removal remains deterministic, then appends subtree-local terminal rows. Runtime is O(l). No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered configured-language vector.
 
-### fn `async function configureStaticCheckMenu(` (L3888-4034)
+### fn `function formatStaticCheckCheckerEntry(entry: StaticCheckEntry): string` (L3898-3902)
+- @brief Formats one static-check checker entry as a compact command summary.
+- @details Joins the module command plus its parameter list into a single shell-like token sequence so inspection and confirmation menus can render checker identity deterministically. Runtime is O(p) in parameter count. No external state is mutated.
+- @param[in] entry {StaticCheckEntry} Static-check configuration entry.
+- @return {string} Compact command summary string.
+
+### fn `function formatStaticCheckLanguageCheckerSummary(config: UseReqConfig, language: string): string` (L3911-3917)
+- @brief Summarizes every configured checker for one language as a delimited command list.
+- @details Joins each checker entry summary with `; ` so the value column exposes the full language configuration in one row. Runtime is O(c * p). No external state is mutated.
+- @param[in] config {UseReqConfig} Effective project configuration.
+- @param[in] language {string} Canonical language name.
+- @return {string} Delimited checker summary string, or `(none)` when no checkers are configured.
+
+### fn `function buildStaticCheckViewChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L3926-3971)
+- @brief Builds the shared settings-menu choices for the read-only static-check inspection submenu.
+- @details Exposes only configured languages as disabled rows whose value column renders the full checker command list, appends one selectable `Close` row, and emits a disabled placeholder when no language is configured so the submenu never mutates configuration. Runtime is O(l * c * p). No external state is mutated.
+- @param[in] config {UseReqConfig} Effective project configuration.
+- @return {PiUsereqSettingsMenuChoice[]} Ordered read-only inspection choices.
+- @satisfies REQ-346
+
+### fn `function buildStaticCheckRemovalConfirmationChoices(` (L3981-4019)
+- @brief Builds the confirmation submenu choices for removing one configured static-check language.
+- @details Renders each configured checker as a disabled preview row, appends explicit approve and abort actions, and falls back to one disabled no-op row when the language has no checkers. Runtime is O(c * p). No external state is mutated.
+- @param[in] language {string} Canonical language name targeted for removal.
+- @param[in] checkers {StaticCheckEntry[]} Configured checker entries that removal would clear.
+- @return {PiUsereqSettingsMenuChoice[]} Ordered removal-confirmation choices.
+- @satisfies REQ-349
+
+### fn `async function confirmStaticCheckRemoval(` (L4030-4041)
+- @brief Opens one explicit removal-confirmation submenu for a configured static-check language.
+- @details Renders the targeted checker entries before removal and returns `true` only when the user selects the explicit approval action. Runtime depends on user interaction count. Side effects are limited to transient custom-UI rendering.
+- @param[in] ctx {ExtensionCommandContext} Active command context.
+- @param[in] language {string} Canonical language name targeted for removal.
+- @param[in] checkers {StaticCheckEntry[]} Configured checker entries that removal would clear.
+- @return {Promise<boolean>} `true` when the removal is explicitly approved.
+- @satisfies REQ-349
+
+### fn `async function configureStaticCheckMenu(` (L4051-4230)
 - @brief Runs the interactive static-check configuration menu.
-- @details Lets the user add and remove global Command entries, toggle direct local per-language enable flags, and reset the subtree to documented defaults through the shared settings-menu renderer until the user exits. Runtime depends on user interaction count. Side effects include UI updates and config mutation.
+- @details Lets the user add, inspect, confirm-before-remove, and reset global Command entries, toggle direct local per-language enable flags, and reset the subtree to documented defaults through the shared settings-menu renderer until the user exits. Runtime depends on user interaction count. Side effects include UI updates and config mutation.
 - @param[in] ctx {ExtensionCommandContext} Active command context.
 - @param[in,out] config {UseReqConfig} Mutable configuration object.
 - @return {Promise<void>} Promise resolved when the menu closes.
-- @satisfies REQ-008, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-195, REQ-248, REQ-253
+- @satisfies REQ-008, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-195, REQ-248, REQ-253, REQ-345, REQ-346, REQ-347, REQ-348, REQ-349
 
-### fn `function formatContextFilesSummary(config: UseReqConfig): string` (L4043-4045)
+### fn `function formatContextFilesSummary(config: UseReqConfig): string` (L4239-4241)
 - @brief Summarizes the `Context Files` flag state for the top-level menu value column.
 - @details Renders the three context-file flags as compact `name:on|off` segments in the documented order so the top-level row reflects the current injection configuration. Runtime is O(1). No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {string} Compact `Context Files` summary string.
 - @satisfies REQ-327
 
-### fn `function buildContextFilesMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L4054-4081)
+### fn `function buildContextFilesMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L4250-4277)
 - @brief Builds the shared settings-menu choices for the `Context Files` submenu.
 - @details Exposes one inline on|off toggle row per context file in the documented `REQUIREMENTS.md`, `REFERENCES.md`, `WORKFLOW.md` order plus a value-less subtree-local `Reset defaults` row. Runtime is O(1). No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered `Context Files` submenu choices.
 - @satisfies REQ-327, REQ-328, REQ-333
 
-### fn `async function configureContextFilesMenu(` (L4092-4150)
+### fn `async function configureContextFilesMenu(` (L4288-4346)
 - @brief Runs the `Context Files` configuration submenu.
 - @details Loads the shared settings menu with the three context-file toggle rows, persists each inline toggle immediately through the shared change callback, restores all three flags to enabled on approved subtree reset, preserves focus on the toggled row, and returns to the top-level menu on cancel. Runtime depends on user interaction count. Side effects include config writes and UI notifications.
 - @param[in] ctx {ExtensionCommandContext} Active command context.
@@ -5509,9 +5546,9 @@ registration and status updates.
 - @return {Promise<void>} Promise resolved when the submenu closes.
 - @satisfies REQ-327, REQ-328, REQ-333
 
-### fn `const setFlag = (flagKey: "context-files-requirements" | "context-files-references" | "context-files-workflow", enabled: boolean): void =>` (L4097-4101)
+### fn `const setFlag = (flagKey: "context-files-requirements" | "context-files-references" | "context-files-workflow", enabled: boolean): void =>` (L4293-4297)
 
-### fn `function buildPiUsereqMenuChoices(` (L4160-4265)
+### fn `function buildPiUsereqMenuChoices(` (L4356-4461)
 - @brief Builds the shared settings-menu choices for the top-level pi-usereq configuration UI.
 - @details Serializes primary configuration actions into right-valued menu rows consumed by the shared settings-menu renderer, including the `Context Files` injection toggles, automatic git-commit mode, effective prompt-command worktree state, notification summary, debug summary, locked worktree rows when automatic git commit is disabled, and display-only local plus global config paths. Runtime is O(s) in source-directory count. No external state is mutated.
 - @param[in] cwd {string} Current working directory.
@@ -5519,21 +5556,21 @@ registration and status updates.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered top-level menu choices.
 - @satisfies REQ-006, REQ-031, REQ-137, REQ-150, REQ-151, REQ-152, REQ-162, REQ-190, REQ-191, REQ-197, REQ-204, REQ-205, REQ-212, REQ-215, REQ-216, REQ-236, REQ-237, REQ-238, REQ-239, REQ-240, REQ-314, REQ-318, REQ-319, REQ-320, REQ-326
 
-### fn `function buildSrcDirMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L4274-4292)
+### fn `function buildSrcDirMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L4470-4488)
 - @brief Builds the shared settings-menu choices for source-directory management.
 - @details Exposes add and remove actions for `src-dir` entries through right-valued menu rows consumed by the shared settings-menu renderer. Runtime is O(s) in source-directory count. No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered source-directory management choices.
 - @satisfies REQ-006, REQ-151, REQ-152, REQ-153, REQ-154, REQ-193
 
-### fn `function buildSrcDirRemovalChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L4301-4313)
+### fn `function buildSrcDirRemovalChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[]` (L4497-4509)
 - @brief Builds the shared settings-menu choices for removing one source-directory entry.
 - @details Exposes every configured `src-dir` entry as one removable row and appends a value-less subtree-local `Reset defaults` row. Runtime is O(s) in source-directory count. No external state is mutated.
 - @param[in] config {UseReqConfig} Effective project configuration.
 - @return {PiUsereqSettingsMenuChoice[]} Ordered removable source-directory choices.
 - @satisfies REQ-006, REQ-151, REQ-152, REQ-153, REQ-154
 
-### fn `async function configurePiUsereq(` (L4324-4582)
+### fn `async function configurePiUsereq(` (L4520-4778)
 - @brief Runs the top-level pi-usereq configuration menu.
 - @details Loads the effective merged config, exposes docs/test/source/automatic-commit/worktree/static-check/startup-tool/notification/debug actions through the shared settings-menu renderer, forces worktree disablement when automatic git commit is disabled, prevents locked row edits, persists changes on exit, closes immediately after `Show local configuration` or `Show global configuration`, and refreshes the single-line status bar. Runtime depends on user interaction count. Side effects include UI updates, config writes, active-tool changes, and editor text updates.
 - @param[in] pi {ExtensionAPI} Active extension API instance.
@@ -5542,9 +5579,9 @@ registration and status updates.
 - @return {Promise<void>} Promise resolved when configuration is saved and the menu closes.
 - @satisfies REQ-006, REQ-031, REQ-137, REQ-150, REQ-151, REQ-152, REQ-153, REQ-154, REQ-162, REQ-190, REQ-191, REQ-192, REQ-194, REQ-195, REQ-204, REQ-205, REQ-212, REQ-215, REQ-216, REQ-236, REQ-237, REQ-238, REQ-239, REQ-240, REQ-241, REQ-242, REQ-243, REQ-314, REQ-318, REQ-319, REQ-320, REQ-326, REQ-327, REQ-328, REQ-333
 
-### fn `const persistConfigChange = () =>` (L4335-4340)
+### fn `const persistConfigChange = () =>` (L4531-4536)
 
-### fn `function registerConfigCommands(` (L4592-4602)
+### fn `function registerConfigCommands(` (L4788-4798)
 - @brief Registers configuration-management commands.
 - @details Adds the interactive `pi-usereq` configuration command only; the config-viewer action is now exposed exclusively inside that menu. Runtime is O(1) for registration. Side effects include command registration.
 - @param[in] pi {ExtensionAPI} Active extension API instance.
@@ -5552,7 +5589,7 @@ registration and status updates.
 - @return {void} No return value.
 - @satisfies REQ-006, REQ-031
 
-### fn `export default function piUsereqExtension(pi: ExtensionAPI): void` (L4611-4624)
+### fn `export default function piUsereqExtension(pi: ExtensionAPI): void` (L4807-4820)
 - @brief Registers the complete pi-usereq extension.
 - @details Validates installation-owned bundled resources, registers the specialized `req-reset` and `req-references` commands plus bundled prompt-backed commands and agent tools, conditionally registers config-gated debug tool wrapper commands when the current project enables them, registers configuration commands, registers the configurable notification-sound shortcut when the runtime supports shortcuts, and installs shared wrappers for all supported pi lifecycle hooks so status telemetry, context usage, prompt timing, cumulative runtime, prompt-specific Pushover metadata, tool-result debug logging, and prompt-orchestration effects remain synchronized with runtime events. Runtime is O(h) in hook count during registration. Side effects include filesystem reads, command/tool/shortcut registration, UI updates, active-tool changes, optional debug-log writes, and timer scheduling.
 - @param[in] pi {ExtensionAPI} Active extension API instance.
@@ -5653,19 +5690,24 @@ registration and status updates.
 |`countEnabledStaticCheckLanguages`|fn||3764-3766|function countEnabledStaticCheckLanguages(config: UseReqC...|
 |`resetStaticCheckConfig`|fn||3775-3777|function resetStaticCheckConfig(config: UseReqConfig): void|
 |`formatStaticCheckLanguagesSummary`|fn||3785-3787|function formatStaticCheckLanguagesSummary(config: UseReq...|
-|`buildStaticCheckMenuChoices`|fn||3796-3828|function buildStaticCheckMenuChoices(config: UseReqConfig...|
-|`buildSupportedStaticCheckLanguageChoices`|fn||3836-3853|function buildSupportedStaticCheckLanguageChoices(config:...|
-|`buildConfiguredStaticCheckLanguageChoices`|fn||3861-3878|function buildConfiguredStaticCheckLanguageChoices(config...|
-|`configureStaticCheckMenu`|fn||3888-4034|async function configureStaticCheckMenu(|
-|`formatContextFilesSummary`|fn||4043-4045|function formatContextFilesSummary(config: UseReqConfig):...|
-|`buildContextFilesMenuChoices`|fn||4054-4081|function buildContextFilesMenuChoices(config: UseReqConfi...|
-|`configureContextFilesMenu`|fn||4092-4150|async function configureContextFilesMenu(|
-|`setFlag`|fn||4097-4101|const setFlag = (flagKey: "context-files-requirements" | ...|
-|`buildPiUsereqMenuChoices`|fn||4160-4265|function buildPiUsereqMenuChoices(|
-|`buildSrcDirMenuChoices`|fn||4274-4292|function buildSrcDirMenuChoices(config: UseReqConfig): Pi...|
-|`buildSrcDirRemovalChoices`|fn||4301-4313|function buildSrcDirRemovalChoices(config: UseReqConfig):...|
-|`configurePiUsereq`|fn||4324-4582|async function configurePiUsereq(|
-|`persistConfigChange`|fn||4335-4340|const persistConfigChange = () =>|
-|`registerConfigCommands`|fn||4592-4602|function registerConfigCommands(|
-|`piUsereqExtension`|fn||4611-4624|export default function piUsereqExtension(pi: ExtensionAP...|
+|`buildStaticCheckMenuChoices`|fn||3796-3840|function buildStaticCheckMenuChoices(config: UseReqConfig...|
+|`buildSupportedStaticCheckLanguageChoices`|fn||3848-3865|function buildSupportedStaticCheckLanguageChoices(config:...|
+|`buildConfiguredStaticCheckLanguageChoices`|fn||3873-3890|function buildConfiguredStaticCheckLanguageChoices(config...|
+|`formatStaticCheckCheckerEntry`|fn||3898-3902|function formatStaticCheckCheckerEntry(entry: StaticCheck...|
+|`formatStaticCheckLanguageCheckerSummary`|fn||3911-3917|function formatStaticCheckLanguageCheckerSummary(config: ...|
+|`buildStaticCheckViewChoices`|fn||3926-3971|function buildStaticCheckViewChoices(config: UseReqConfig...|
+|`buildStaticCheckRemovalConfirmationChoices`|fn||3981-4019|function buildStaticCheckRemovalConfirmationChoices(|
+|`confirmStaticCheckRemoval`|fn||4030-4041|async function confirmStaticCheckRemoval(|
+|`configureStaticCheckMenu`|fn||4051-4230|async function configureStaticCheckMenu(|
+|`formatContextFilesSummary`|fn||4239-4241|function formatContextFilesSummary(config: UseReqConfig):...|
+|`buildContextFilesMenuChoices`|fn||4250-4277|function buildContextFilesMenuChoices(config: UseReqConfi...|
+|`configureContextFilesMenu`|fn||4288-4346|async function configureContextFilesMenu(|
+|`setFlag`|fn||4293-4297|const setFlag = (flagKey: "context-files-requirements" | ...|
+|`buildPiUsereqMenuChoices`|fn||4356-4461|function buildPiUsereqMenuChoices(|
+|`buildSrcDirMenuChoices`|fn||4470-4488|function buildSrcDirMenuChoices(config: UseReqConfig): Pi...|
+|`buildSrcDirRemovalChoices`|fn||4497-4509|function buildSrcDirRemovalChoices(config: UseReqConfig):...|
+|`configurePiUsereq`|fn||4520-4778|async function configurePiUsereq(|
+|`persistConfigChange`|fn||4531-4536|const persistConfigChange = () =>|
+|`registerConfigCommands`|fn||4788-4798|function registerConfigCommands(|
+|`piUsereqExtension`|fn||4807-4820|export default function piUsereqExtension(pi: ExtensionAP...|
 

package/pi-usereq/docs/REQUIREMENTS.md

@@ -1,8 +1,8 @@
 ---
 title: "PI-useReq Requirements"
 description: Software requirements specification
-version: "0.0.76"
-date: "2026-07-10"
+version: "0.0.77"
+date: "2026-07-13"
 author: "OpenAI Codex"
 scope:
   paths:
@@ -93,6 +93,8 @@ PI-useReq is a TypeScript pi extension plus companion Node CLI and standalone ex
 - **DES-016**: MUST deliver rendered bundled-prompt content to the LLM through `sendMessage` as a `display:false` custom message with `triggerTurn:true` and MUST NOT use `sendUserMessage` when `sendMessage` is available.
 - **DES-017**: MUST declare `pyright`, `ruff`, and `eslint` as pinned caret-range npm dependencies and register a `postinstall` script that installs bundled static checkers.
 - **DES-018**: MUST resolve checker executables by probing bundled `node_modules/.bin` paths relative to the installation path before falling back to `PATH` scan.
+- **DES-019**: MUST resolve the `%%INSTALLATION_PATH%%` keyword inside static-check `Command` `cmd` fields to the runtime installation path within `resolveCheckerExecutable` before executable probing.
+- **DES-020**: MUST extend `scripts/install-static-checkers.ts` to best-effort approve pending npm install scripts for bundled checker dependencies before probing bundled executables.
 
 ### 3.2 Functions
 - **REQ-001**: MUST access bundled prompts, git execution instructions, templates, and guidelines from `<installation-path>/resources` without requiring user-home resource copies before prompt or tool execution.
@@ -166,10 +168,10 @@ PI-useReq is a TypeScript pi extension plus companion Node CLI and standalone ex
 - **REQ-336**: MUST render the command invocation summary with the command name without the `req-` prefix in uppercase and the user request arguments.
 - **REQ-337**: MUST include `docs-dir`, `src-dir`, `tests-dir`, enabled context files, `AUTO_GIT_COMMIT`, effective `GIT_WORKTREE_ENABLED`, `GIT_WORKTREE_PREFIX`, enabled static-check languages, and `enabled-tools` in the command invocation summary.
 - **REQ-338**: MUST render `none` for the command invocation summary `context files`, `static code checks`, and `enabled tools` fields whenever their respective enabled-item list is empty.
-- **REQ-008**: MUST provide a `Language static code checkers` submenu that adds global Command entries by guided language flow, removes configured global checker entries, toggles local per-language enablement, and resets static-check configuration.
+- **REQ-008**: MUST provide a `Language static code checkers` submenu that adds, views, confirms-before-removes, and resets global Command checker entries, plus toggles local per-language enablement.
 - **REQ-160**: MUST hardcode `Command` as the only user-configurable static-check module and omit module-selection UI from static-check configuration menus.
 - **REQ-161**: MUST hide `Dummy` from user-configurable static-check menus while preserving existing-config parsing and debug-driver support for `Dummy` entries.
-- **REQ-248**: MUST render 20 per-language static-check toggle rows between `Remove static code checker` and `Reset defaults`, with right-aligned `on|off` values derived from persisted local enablement.
+- **REQ-248**: MUST render 20 per-language static-check toggle rows between `Reset static code checker` and `Reset defaults`, with right-aligned `on|off` values derived from persisted local enablement.
 - **REQ-249**: MUST persist local `static-check.<language>.enabled` with allowed values `enable|disable` and global `static-check.<language>.checkers` as ordered arrays.
 - **REQ-250**: MUST default global `static-check.C` and `static-check.C++` checker arrays to documented `cppcheck` and `clang-format` Command entries.
 - **REQ-251**: MUST default global `static-check.Python`, `JavaScript`, and `TypeScript` checker arrays to their documented Command entries.
@@ -411,6 +413,14 @@ PI-useReq is a TypeScript pi extension plus companion Node CLI and standalone ex
 - **REQ-342**: MUST keep `STATIC_CHECK_MODULES`, `dispatchStaticCheckForFile` signature, and `StaticCheckEntry` shape unchanged when adding bundled executable resolution.
 - **REQ-343**: MUST NOT transition workflow state or abort `session_start` when one or more enabled static checkers are missing.
 - **REQ-344**: MUST place the `session_start` missing-checker helper in `src/core/static-check.ts` so `src/index.ts` remains thin.
+- **REQ-345**: MUST expose `View static code checker` immediately before `Remove static code checker` inside the `Language static code checkers` submenu.
+- **REQ-346**: MUST make `View static code checker` render configured checker entries as read-only disabled inspection rows terminated by a `Close` row without mutating configuration.
+- **REQ-347**: MUST expose `Reset static code checker` immediately after `Remove static code checker` inside the `Language static code checkers` submenu.
+- **REQ-348**: MUST make `Reset static code checker` restore global checker arrays plus derived local enable flags to embedded defaults after explicit user confirmation.
+- **REQ-349**: MUST render the targeted configured checker entries and require explicit user confirmation before `Remove static code checker` removes any global checker entries.
+- **REQ-350**: MUST substitute the `%%INSTALLATION_PATH%%` keyword with the runtime extension installation path inside static-check `Command` `cmd` fields before executable resolution and execution.
+- **REQ-351**: MUST resolve bundled static-check executables from the extension installation `node_modules/.bin` so default configuration requires no target-project module installation.
+- **REQ-352**: MUST best-effort approve pending npm install scripts for bundled checker dependencies during extension install or run so embedded checkers execute without manual approval.
 
 ## 4. Test Requirements
 - **TST-001**: MUST verify extension activation registers every documented prompt command, agent tool, and configuration command while omitting tool-name slash commands, `test-static-check`, and the removed standalone config-viewer command.
@@ -421,7 +431,7 @@ PI-useReq is a TypeScript pi extension plus companion Node CLI and standalone ex
 - **TST-005**: MUST verify the configuration menu saves `docs-dir` locally and `AUTO_GIT_COMMIT`, `GIT_WORKTREE_ENABLED`, plus `GIT_WORKTREE_PREFIX` globally immediately after each change.
 - **TST-084**: MUST verify local configuration persistence trims trailing `/` and keeps `docs-dir`, `tests-dir`, and `src-dir` relative.
 - **TST-046**: MUST verify `Language static code checkers` omits module selection, raw-spec actions, supported-language reference actions, and hides `Dummy`, `Pylance`, and `Ruff` from user-configurable actions.
-- **TST-077**: MUST verify `Language static code checkers` renders 20 per-language `on|off` toggle rows between `Remove static code checker` and `Reset defaults`, and persists toggle changes only in local configuration.
+- **TST-077**: MUST verify `Language static code checkers` renders 20 per-language `on|off` toggle rows between `Reset static code checker` and `Reset defaults`, and persists toggle changes only in local configuration.
 - **TST-078**: MUST verify default configuration stores documented per-language `enabled` flags locally and checker lists globally for `C`, `C++`, `Python`, `JavaScript`, and `TypeScript`.
 - **TST-108**: MUST verify guided static-check entry addition updates global checker lists and sets the targeted local enable flag to `enable`, and guided removal updates global checker lists.
 - **TST-112**: MUST verify `--enable-static-check` stores checker commands in global configuration and preserves local enablement according to the documented defaulting rules.
@@ -536,6 +546,11 @@ PI-useReq is a TypeScript pi extension plus companion Node CLI and standalone ex
 - **TST-123**: MUST verify `resolveCheckerExecutable` probes bundled `node_modules/.bin` paths before `PATH` scan.
 - **TST-124**: MUST verify `scripts/install-static-checkers.ts` always returns exit code `0` regardless of probe or install outcomes.
 - **TST-125**: MUST verify `session_start` emits one warning notification for missing enabled checkers without aborting or transitioning workflow state.
+- **TST-126**: MUST verify `View static code checker` appears before `Remove static code checker` and renders configured checkers as read-only inspection rows.
+- **TST-127**: MUST verify `Reset static code checker` appears after `Remove static code checker` and restores embedded defaults after explicit confirmation.
+- **TST-128**: MUST verify `Remove static code checker` previews targeted checker entries and requires explicit confirmation before removing configured global checker entries.
+- **TST-129**: MUST verify `resolveCheckerExecutable` substitutes `%%INSTALLATION_PATH%%` with the runtime installation path inside static-check `Command` `cmd` fields.
+- **TST-130**: MUST verify `scripts/install-static-checkers.ts` best-effort approves pending npm install scripts and always returns exit code `0`.
 
 ## 5. Observed Component Model
 

package/pi-usereq/docs/WORKFLOW.md

@@ -51,7 +51,7 @@
   - Threads: no explicit threads detected
 - ID: `PROC:install-static-checkers`
   - Type: Process
-  - Role: Best-effort npm `postinstall` installer that probes bundled static-checker executables, attempts `npm install` on miss, and prints platform guidance for native checkers.
+  - Role: Best-effort npm `postinstall` installer that approves pending install scripts, probes bundled static-checker executables, attempts `npm install` on miss, and prints platform guidance for native checkers.
   - Entrypoints:
     - `main(...)` [`scripts/install-static-checkers.ts`]
   - Parent Process: none
@@ -1191,12 +1191,12 @@
         - `formatElapsedStatusValue(...)`: compose `⏱︎`, `⚑`, and `⌛︎` timer segments [`src/core/extension-status.ts`]
           - `formatCompletedStatusDuration(...)`: render completed timers or the unset placeholder [`src/core/extension-status.ts`]
           - `formatStatusDuration(...)`: render `M:SS` durations [`src/core/extension-status.ts`]
-    - `configureStaticCheckMenu(...)`: interactive editor that adds and removes global Command entries while toggling local per-language enable flags [`src/index.ts`]
+    - `configureStaticCheckMenu(...)`: interactive editor that adds, inspects, confirms-before-removes, and resets global Command entries while toggling local per-language enable flags [`src/index.ts`]
       - `getStaticCheckLanguageConfigForMenu(...)`: resolve a menu-facing per-language static-check object [`src/index.ts`]
       - `countConfiguredStaticCheckLanguages(...)`: count languages that retain global checker entries [`src/index.ts`]
       - `countEnabledStaticCheckLanguages(...)`: count languages whose local enable flag is on [`src/index.ts`]
       - `formatStaticCheckLanguagesSummary(...)`: summarize enabled languages and configured global checker languages [`src/index.ts`]
-      - `buildStaticCheckMenuChoices(...)`: serialize guided add/remove actions plus direct per-language local toggle rows [`src/index.ts`]
+      - `buildStaticCheckMenuChoices(...)`: serialize guided add/view/remove/reset actions plus direct per-language local toggle rows [`src/index.ts`]
         - `getSupportedStaticCheckLanguageSupport(...)`: enumerate supported languages and extensions [`src/core/static-check.ts`]
           - `getSupportedStaticCheckLanguages(...)`: enumerate canonical supported languages [`src/core/static-check.ts`]
         - `buildTerminalSettingsMenuChoices(...)`: append the canonical value-less `Reset defaults` row to the selector menu [`src/index.ts`]
@@ -1208,6 +1208,11 @@
         - `getSupportedStaticCheckLanguageSupport(...)`: enumerate supported languages and extensions [`src/core/static-check.ts`]
           - `getSupportedStaticCheckLanguages(...)`: enumerate canonical supported languages [`src/core/static-check.ts`]
         - `buildTerminalSettingsMenuChoices(...)`: append the canonical value-less `Reset defaults` row to the selector menu [`src/index.ts`]
+      - `formatStaticCheckCheckerEntry(...)`: format one checker entry as a shell-like command summary for inspection and confirmation menus [`src/index.ts`]
+      - `formatStaticCheckLanguageCheckerSummary(...)`: summarize configured checkers for one language as a delimited command list [`src/index.ts`]
+      - `buildStaticCheckViewChoices(...)`: serialize configured checkers as read-only disabled inspection rows terminated by a `Close` row [`src/index.ts`]
+      - `buildStaticCheckRemovalConfirmationChoices(...)`: serialize targeted checker preview rows plus approve and abort actions for removal confirmation [`src/index.ts`]
+      - `confirmStaticCheckRemoval(...)`: open one explicit removal-confirmation submenu and return the approval result [`src/index.ts`]
       - `resetStaticCheckConfig(...)`: restore documented per-language static-check defaults [`src/index.ts`]
         - `getDefaultStaticCheckConfig(...)`: build documented per-language static-check defaults [`src/core/config.ts`]
           - `createStaticCheckLanguageConfig(...)`: clone checker entries and derive the enable flag [`src/core/config.ts`]
@@ -1302,8 +1307,10 @@
   - Looping model: single-pass probe plus optional install with no persistent loop.
   - Threads: no explicit threads detected.
 - Internal Call-Trace Tree:
-  - `main(...)`: probe each bundled npm checker, attempt best-effort install on miss, print native-checker guidance, and return `0` [`scripts/install-static-checkers.ts`]
-    - `resolveCheckerExecutable(...)`: resolve one checker across bundled `node_modules/.bin` locations and PATH scan [`src/core/static-check.ts`]
+  - `main(...)`: best-effort approve pending npm install scripts, probe each bundled npm checker, attempt best-effort install on miss, print native-checker guidance, and return `0` [`scripts/install-static-checkers.ts`]
+    - `approvePendingInstallScripts(...)`: best-effort approve pending npm install scripts for bundled checker dependencies before probing [`scripts/install-static-checkers.ts`]
+      - `hasPendingInstallScriptPackages(...)`: report whether the parsed pending-scripts payload references install-script packages [`scripts/install-static-checkers.ts`]
+    - `resolveCheckerExecutable(...)`: resolve one checker across `%%INSTALLATION_PATH%%` keyword, bundled `node_modules/.bin`, and PATH scan locations [`src/core/static-check.ts`]
       - `findExecutable(...)`: resolve executable on PATH or explicit path [`src/core/static-check.ts`]
         - `isExecutableFile(...)`: verify executable access bits [`src/core/static-check.ts`]
     - `attemptBundledInstall(...)`: best-effort `npm install <pkg>@<range> --no-save --prefix <install-root>` swallowing all errors [`scripts/install-static-checkers.ts`]

package/scripts/install-static-checkers.ts

@@ -42,6 +42,52 @@ function bundledCheckerRange(pkg: string): string {
   }
 }
 
+/**
+ * @brief Reports whether one parsed `npm approve-scripts --allow-scripts-pending` payload references pending install-script packages.
+ * @details Accepts an array of package specifiers or a map of package specifiers to pending-script descriptors, treating any non-empty array or non-empty object with at least one entry as pending. Runtime is O(n) in pending entry count. No external state is mutated.
+ * @param[in] pending {unknown} Parsed JSON payload emitted by `npm approve-scripts --allow-scripts-pending`.
+ * @return {boolean} `true` when at least one pending install-script package is referenced.
+ */
+function hasPendingInstallScriptPackages(pending: unknown): boolean {
+  if (Array.isArray(pending)) {
+    return pending.length > 0;
+  }
+  if (pending && typeof pending === "object") {
+    return Object.keys(pending as Record<string, unknown>).length > 0;
+  }
+  return false;
+}
+
+/**
+ * @brief Best-effort approves pending npm install scripts for bundled checker dependencies.
+ * @details Probes `npm approve-scripts --allow-scripts-pending`, parses the JSON payload when available, and runs `npm approve-scripts --all` only when pending script-bearing packages are detected so bundled checkers and their transitive dependencies execute without manual script approval. Swallows all errors so the postinstall flow never fails. Runtime is dominated by npm execution. Side effects include optional writes to the installation-owned `package.json` allowScripts map and subprocess spawning.
+ * @return {void} No return value.
+ * @satisfies DES-020, REQ-352
+ */
+function approvePendingInstallScripts(): void {
+  const pendingResult = spawnSync(
+    "npm",
+    ["approve-scripts", "--allow-scripts-pending", "--json"],
+    { encoding: "utf8" },
+  );
+  if (pendingResult.error || (pendingResult.status !== null && pendingResult.status !== 0)) {
+    return;
+  }
+  let pendingPayload: unknown;
+  try {
+    pendingPayload = JSON.parse(pendingResult.stdout ?? "");
+  } catch {
+    return;
+  }
+  if (!hasPendingInstallScriptPackages(pendingPayload)) {
+    return;
+  }
+  const approveResult = spawnSync("npm", ["approve-scripts", "--all"], { encoding: "utf8" });
+  if (approveResult.error) {
+    process.stderr.write(`Warning: failed to approve pending install scripts: ${approveResult.error.message}\n`);
+  }
+}
+
 /**
  * @brief Prints platform-specific install guidance for native checkers.
  * @details Detects the current platform and emits one consolidated stderr line per native checker describing the recommended system package manager command. Runtime is O(1). Side effect: writes to stderr.
@@ -101,10 +147,11 @@ function attemptBundledInstall(pkg: string): void {
  * @details Probes each bundled npm checker through `resolveCheckerExecutable`, attempts a best-effort install on miss, prints native-checker guidance for unresolvable native checkers, and always returns `0` so `npm install` never fails because of missing optional checkers. Runtime is dominated by PATH probing and optional npm execution. Side effects include stdout/stderr writes and best-effort `npm install` subprocess spawning. The script never modifies git-tracked files.
  * @param[in] argv {string[]} Raw CLI arguments (unused, retained for CLI convention parity).
  * @return {number} Always returns `0`.
- * @satisfies REQ-339, DES-017
+ * @satisfies REQ-339, DES-017, DES-020, REQ-352
  */
 export function main(argv = process.argv.slice(2)): number {
   void argv;
+  approvePendingInstallScripts();
   for (const checker of BUNDLED_NPM_CHECKERS) {
     if (resolveCheckerExecutable(checker)) {
       process.stdout.write(`Bundled static checker '${checker}' is available.\n`);

package/src/core/static-check.ts

@@ -399,11 +399,12 @@ export class StaticCheckCommand extends StaticCheckBase {
    * @throws {ReqError} Throws when the executable cannot be found on PATH.
    */
   constructor(cmd: string, inputs: string[], extraArgs?: string[], failOnly = false) {
-    if (!resolveCheckerExecutable(cmd)) {
+    const resolvedCmd = resolveCheckerExecutable(cmd);
+    if (!resolvedCmd) {
       throw new ReqError(`Error: external command '${cmd}' not found on PATH.`, 1);
     }
     super(inputs, extraArgs, failOnly);
-    this.cmd = cmd;
+    this.cmd = cmd.includes("%%INSTALLATION_PATH%%") ? resolvedCmd : cmd;
     this.label = `Command[${cmd}]`;
   }
 
@@ -475,20 +476,25 @@ export function findExecutable(cmd: string): string | undefined {
 }
 
 /**
- * @brief Resolves one checker executable across bundled `node_modules/.bin` locations and PATH.
- * @details Probes the installation-owned `node_modules/.bin` directory, the project-scope parent `node_modules/.bin` directory used by `--prefix` layouts, and finally the system PATH scan, returning the first executable match. Runtime is O(p) in PATH entry count plus bounded filesystem metadata checks. Side effects are limited to filesystem reads.
- * @param[in] cmd {string} Executable name or relative path to resolve.
+ * @brief Resolves one checker executable across installation-keyword, bundled `node_modules/.bin`, and PATH locations.
+ * @details Substitutes the `%%INSTALLATION_PATH%%` keyword with the runtime installation path and verifies the resulting explicit path when present, then probes the installation-owned `node_modules/.bin` directory, the project-scope parent `node_modules/.bin` directory used by `--prefix` layouts, and finally the system PATH scan, returning the first executable match so default configuration requires no target-project module installation. Runtime is O(p) in PATH entry count plus bounded filesystem metadata checks. Side effects are limited to filesystem reads.
+ * @param[in] cmd {string} Executable name, explicit path, or `%%INSTALLATION_PATH%%`-anchored path to resolve.
  * @return {string | undefined} Absolute executable path, or `undefined` when not found in any probed location.
- * @satisfies REQ-023, REQ-037, DES-018
+ * @satisfies REQ-023, REQ-037, DES-018, DES-019, REQ-350, REQ-351
  */
 export function resolveCheckerExecutable(cmd: string): string | undefined {
+  if (cmd.includes("%%INSTALLATION_PATH%%")) {
+    const installationPath = getInstallationPath();
+    const resolvedPath = cmd.split("%%INSTALLATION_PATH%%").join(installationPath);
+    return isExecutableFile(resolvedPath) ? path.resolve(resolvedPath) : undefined;
+  }
   if (cmd.includes(path.sep)) {
     return isExecutableFile(cmd) ? path.resolve(cmd) : undefined;
   }
   const installationPath = getInstallationPath();
   const bundledBinCandidates = [
     path.join(installationPath, "..", "node_modules", ".bin", cmd),
-    path.join(installationPath, "..", "..", "node_modules", ".bin", cmd),
+    path.join(installationPath, "..", "..", ".bin", cmd),
   ];
   for (const candidate of bundledBinCandidates) {
     if (isExecutableFile(candidate)) {

package/src/index.ts

@@ -3791,7 +3791,7 @@ function formatStaticCheckLanguagesSummary(config: UseReqConfig): string {
  * @details Serializes guided Command-oriented add and remove actions, renders one direct on/off toggle row for every supported language, and appends canonical terminal rows while omitting raw-spec and reference-only actions. Runtime is O(l). No external state is mutated.
  * @param[in] config {UseReqConfig} Effective project configuration.
  * @return {PiUsereqSettingsMenuChoice[]} Ordered static-check menu choices.
- * @satisfies REQ-008, REQ-150, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-248
+ * @satisfies REQ-008, REQ-150, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-248, REQ-345, REQ-347
  */
 function buildStaticCheckMenuChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[] {
   const supportedLanguages = getSupportedStaticCheckLanguageSupport();
@@ -3803,11 +3803,23 @@ function buildStaticCheckMenuChoices(config: UseReqConfig): PiUsereqSettingsMenu
       value: `${supportedLanguages.length} languages`,
       description: "Select a supported language, then configure one Command static-check executable.",
     },
+    {
+      id: "view-static-check-entry",
+      label: "View static code checker",
+      value: configuredLanguageCount > 0 ? `${configuredLanguageCount} configured` : "(none)",
+      description: "Inspect the configured Command static-check entries for every language without mutating configuration.",
+    },
     {
       id: "remove-static-check-entry",
       label: "Remove static code checker",
       value: configuredLanguageCount > 0 ? `${configuredLanguageCount} configured` : "(none)",
-      description: "Remove every configured static-check entry for one language.",
+      description: "Preview and confirm removal of every configured static-check entry for one language.",
+    },
+    {
+      id: "reset-static-check-entry",
+      label: "Reset static code checker",
+      value: "embedded defaults",
+      description: "Restore the documented per-language static-check defaults after explicit confirmation.",
     },
     ...supportedLanguages.map(({ language, extensions }) => {
       const languageConfig = getStaticCheckLanguageConfigForMenu(config, language);
@@ -3877,13 +3889,164 @@ function buildConfiguredStaticCheckLanguageChoices(config: UseReqConfig): PiUser
   ];
 }
 
+/**
+ * @brief Formats one static-check checker entry as a compact command summary.
+ * @details Joins the module command plus its parameter list into a single shell-like token sequence so inspection and confirmation menus can render checker identity deterministically. Runtime is O(p) in parameter count. No external state is mutated.
+ * @param[in] entry {StaticCheckEntry} Static-check configuration entry.
+ * @return {string} Compact command summary string.
+ */
+function formatStaticCheckCheckerEntry(entry: StaticCheckEntry): string {
+  const cmd = typeof entry.cmd === "string" ? entry.cmd.trim() : "";
+  const params = Array.isArray(entry.params) ? entry.params.map(String) : [];
+  return [cmd, ...params].filter((value) => value !== "").join(" ");
+}
+
+/**
+ * @brief Summarizes every configured checker for one language as a delimited command list.
+ * @details Joins each checker entry summary with `; ` so the value column exposes the full language configuration in one row. Runtime is O(c * p). No external state is mutated.
+ * @param[in] config {UseReqConfig} Effective project configuration.
+ * @param[in] language {string} Canonical language name.
+ * @return {string} Delimited checker summary string, or `(none)` when no checkers are configured.
+ */
+function formatStaticCheckLanguageCheckerSummary(config: UseReqConfig, language: string): string {
+  const checkers = getStaticCheckLanguageConfigForMenu(config, language).checkers;
+  if (checkers.length === 0) {
+    return "(none)";
+  }
+  return checkers.map(formatStaticCheckCheckerEntry).join("; ");
+}
+
+/**
+ * @brief Builds the shared settings-menu choices for the read-only static-check inspection submenu.
+ * @details Exposes only configured languages as disabled rows whose value column renders the full checker command list, appends one selectable `Close` row, and emits a disabled placeholder when no language is configured so the submenu never mutates configuration. Runtime is O(l * c * p). No external state is mutated.
+ * @param[in] config {UseReqConfig} Effective project configuration.
+ * @return {PiUsereqSettingsMenuChoice[]} Ordered read-only inspection choices.
+ * @satisfies REQ-346
+ */
+function buildStaticCheckViewChoices(config: UseReqConfig): PiUsereqSettingsMenuChoice[] {
+  const configured = getSupportedStaticCheckLanguageSupport()
+    .filter(({ language }) => getStaticCheckLanguageConfigForMenu(config, language).checkers.length > 0);
+  if (configured.length === 0) {
+    return [
+      {
+        id: "view-static-check-empty",
+        label: "No configured static checkers",
+        value: "(none)",
+        description: "Configure at least one Command static-check entry before inspecting configuration.",
+        disabled: true,
+        labelTone: "dim",
+        valueTone: "dim",
+      },
+      {
+        id: "view-static-check-close",
+        label: "Close",
+        value: "",
+        description: "Close the static-check inspection view and return to the previous menu.",
+      },
+    ];
+  }
+  return [
+    ...configured.map(({ language, extensions }) => {
+      const languageConfig = getStaticCheckLanguageConfigForMenu(config, language);
+      const summary = formatStaticCheckLanguageCheckerSummary(config, language);
+      const checkerCount = languageConfig.checkers.length;
+      const suffix = checkerCount === 1 ? "checker" : "checkers";
+      return {
+        id: `view-static-check-language:${language}`,
+        label: language,
+        value: summary,
+        description: `Read-only inspection of the configured Command static-check entries for ${language}. Supported extensions: ${extensions.join(", ")}. ${checkerCount} ${suffix}.`,
+        disabled: true,
+        labelTone: "dim" as const,
+        valueTone: "dim" as const,
+      };
+    }),
+    {
+      id: "view-static-check-close",
+      label: "Close",
+      value: "",
+      description: "Close the static-check inspection view and return to the previous menu.",
+    },
+  ];
+}
+
+/**
+ * @brief Builds the confirmation submenu choices for removing one configured static-check language.
+ * @details Renders each configured checker as a disabled preview row, appends explicit approve and abort actions, and falls back to one disabled no-op row when the language has no checkers. Runtime is O(c * p). No external state is mutated.
+ * @param[in] language {string} Canonical language name targeted for removal.
+ * @param[in] checkers {StaticCheckEntry[]} Configured checker entries that removal would clear.
+ * @return {PiUsereqSettingsMenuChoice[]} Ordered removal-confirmation choices.
+ * @satisfies REQ-349
+ */
+function buildStaticCheckRemovalConfirmationChoices(
+  language: string,
+  checkers: StaticCheckEntry[],
+): PiUsereqSettingsMenuChoice[] {
+  const previewRows = checkers.length > 0
+    ? checkers.map((entry, index) => ({
+      id: `removal-preview:${language}:${index}`,
+      label: formatStaticCheckCheckerEntry(entry),
+      value: `${language} checker`,
+      description: `Remove the configured Command static-check entry ${formatStaticCheckCheckerEntry(entry)} from ${language}.`,
+      disabled: true,
+      labelTone: "dim" as const,
+      valueTone: "dim" as const,
+    }))
+    : [{
+      id: `removal-preview:${language}:none`,
+      label: `No configured checkers for ${language}`,
+      value: "nothing to remove",
+      description: `No configured static-check entries exist for ${language}.`,
+      disabled: true,
+      labelTone: "dim" as const,
+      valueTone: "dim" as const,
+    }];
+  return [
+    ...previewRows,
+    {
+      id: "removal-approve",
+      label: "Approve removal",
+      value: `${checkers.length} ${checkers.length === 1 ? "checker" : "checkers"}`,
+      description: `Remove every configured static-check entry for ${language}.`,
+    },
+    {
+      id: "removal-abort",
+      label: "Abort removal",
+      value: "keep current",
+      description: `Keep the configured static-check entries for ${language}.`,
+    },
+  ];
+}
+
+/**
+ * @brief Opens one explicit removal-confirmation submenu for a configured static-check language.
+ * @details Renders the targeted checker entries before removal and returns `true` only when the user selects the explicit approval action. Runtime depends on user interaction count. Side effects are limited to transient custom-UI rendering.
+ * @param[in] ctx {ExtensionCommandContext} Active command context.
+ * @param[in] language {string} Canonical language name targeted for removal.
+ * @param[in] checkers {StaticCheckEntry[]} Configured checker entries that removal would clear.
+ * @return {Promise<boolean>} `true` when the removal is explicitly approved.
+ * @satisfies REQ-349
+ */
+async function confirmStaticCheckRemoval(
+  ctx: ExtensionCommandContext,
+  language: string,
+  checkers: StaticCheckEntry[],
+): Promise<boolean> {
+  const choice = await showPiUsereqSettingsMenu(
+    ctx,
+    `Remove static code checker: ${language}`,
+    buildStaticCheckRemovalConfirmationChoices(language, checkers),
+  );
+  return choice === "removal-approve";
+}
+
 /**
  * @brief Runs the interactive static-check configuration menu.
- * @details Lets the user add and remove global Command entries, toggle direct local per-language enable flags, and reset the subtree to documented defaults through the shared settings-menu renderer until the user exits. Runtime depends on user interaction count. Side effects include UI updates and config mutation.
+ * @details Lets the user add, inspect, confirm-before-remove, and reset global Command entries, toggle direct local per-language enable flags, and reset the subtree to documented defaults through the shared settings-menu renderer until the user exits. Runtime depends on user interaction count. Side effects include UI updates and config mutation.
  * @param[in] ctx {ExtensionCommandContext} Active command context.
  * @param[in,out] config {UseReqConfig} Mutable configuration object.
  * @return {Promise<void>} Promise resolved when the menu closes.
- * @satisfies REQ-008, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-195, REQ-248, REQ-253
+ * @satisfies REQ-008, REQ-151, REQ-152, REQ-153, REQ-154, REQ-160, REQ-161, REQ-193, REQ-195, REQ-248, REQ-253, REQ-345, REQ-346, REQ-347, REQ-348, REQ-349
  */
 async function configureStaticCheckMenu(
   ctx: ExtensionCommandContext,
@@ -3978,6 +4141,11 @@ async function configureStaticCheckMenu(
       continue;
     }
 
+    if (staticChoice === "view-static-check-entry") {
+      await showPiUsereqSettingsMenu(ctx, "View static code checker", buildStaticCheckViewChoices(config));
+      continue;
+    }
+
     if (staticChoice === "remove-static-check-entry") {
       const configuredLanguage = await showPiUsereqSettingsMenu(ctx, "Remove static code checker", buildConfiguredStaticCheckLanguageChoices(config));
       if (!configuredLanguage) {
@@ -4004,12 +4172,40 @@ async function configureStaticCheckMenu(
         ctx.ui.notify("Restored default static code checker configuration", "info");
         continue;
       }
+      const targetedCheckers = getStaticCheckLanguageConfigForMenu(config, configuredLanguage).checkers;
+      const removalApproved = await confirmStaticCheckRemoval(ctx, configuredLanguage, targetedCheckers);
+      if (!removalApproved) {
+        ctx.ui.notify(`Aborted removal of static-check entries for ${configuredLanguage}`, "info");
+        continue;
+      }
       config["static-check"][configuredLanguage] = createStaticCheckLanguageConfig([]);
       onConfigChange();
       ctx.ui.notify(`Removed static-check entries for ${configuredLanguage}`, "info");
       continue;
     }
 
+    if (staticChoice === "reset-static-check-entry") {
+      const approved = await confirmResetChanges(
+        ctx,
+        "Confirm static-check reset",
+        [{
+          label: "Language static code checkers",
+          previousValue: formatStaticCheckLanguagesSummary(config),
+          nextValue: formatStaticCheckLanguagesSummary({ ...config, "static-check": getDefaultStaticCheckConfig() }),
+        }].filter((change) => change.previousValue !== change.nextValue),
+        "Approve restoring the documented per-language static-check defaults.",
+        "Abort the static-check reset and keep the current values.",
+      );
+      if (!approved) {
+        ctx.ui.notify("Aborted static-check reset", "info");
+        continue;
+      }
+      resetStaticCheckConfig(config);
+      onConfigChange();
+      ctx.ui.notify("Restored default static code checker configuration", "info");
+      continue;
+    }
+
     if (staticChoice === "reset-defaults") {
       const approved = await confirmResetChanges(
         ctx,

package/tests/extension-registration.test.ts

@@ -6692,10 +6692,17 @@ test("configuration menu omits removed static-check raw-spec and reference actio
   const renderedStaticCheckMenu = (ctx.__state.customRenderLines[1] ?? []).join("\n");
   const staticCheckItems = ctx.__state.selectCalls[1]?.items ?? [];
   assert.match(renderedStaticCheckMenu, /Add static code checker/);
+  assert.match(renderedStaticCheckMenu, /View static code checker/);
   assert.match(renderedStaticCheckMenu, /Remove static code checker/);
-  assert.deepEqual(staticCheckItems.slice(0, 2), ["Add static code checker", "Remove static code checker"]);
+  assert.match(renderedStaticCheckMenu, /Reset static code checker/);
+  assert.deepEqual(staticCheckItems.slice(0, 4), [
+    "Add static code checker",
+    "View static code checker",
+    "Remove static code checker",
+    "Reset static code checker",
+  ]);
   assert.deepEqual(
-    staticCheckItems.slice(2, 22),
+    staticCheckItems.slice(4, 24),
     getSupportedStaticCheckLanguageSupport().map((entry) => entry.language),
   );
   assert.deepEqual(staticCheckItems.slice(-1), ["Reset defaults"]);