@yagni-app/code-staging 0.1.0-staging.1015.1 → 0.1.0-staging.1017.1

package/README.md

@@ -139,9 +139,12 @@ yagni use prod                           # switch back (sticky); prod is the def
 
 ## Configuration
 
-| Variable         | Default                  | Purpose                                            |
-| ---------------- | ------------------------ | -------------------------------------------------- |
-| `YAGNI_BASE_URL` | active environment's URL | Override the base URL for a **single run** (escape hatch). Prefer `yagni use` for anything sticky. |
+| Variable                      | Default                  | Purpose                                            |
+| ----------------------------- | ------------------------ | -------------------------------------------------- |
+| `YAGNI_BASE_URL`              | active environment's URL | Override the base URL for a **single run** (escape hatch). Prefer `yagni use` for anything sticky. |
+| `YAGNI_DISABLE_BRANDING`      | unset                    | `1` skips the YAGNI Code system-prompt rewrite entirely, so the engine's assembled prompt passes through byte-exact (no identity swap, no company-brief injection). |
+| `YAGNI_DISABLE_UPDATE_CHECK`  | unset                    | `1` silences the new-version notice and the background update check. |
+| `YAGNI_DISABLE_CLAUDE_COMPAT` | unset                    | `1` turns off the zero-config `.claude` assets bridge (skills and commands). |
 
 Credentials live in `~/.yagni-code/profiles/<name>.json` (mode `0600`); the active
 environment is recorded in `~/.yagni-code/config.json`. A pre-profiles

package/dist/cli.js

@@ -176,6 +176,7 @@ export const HELP_TEXT = [
     "Set YAGNI_BASE_URL to override the base URL for a single run.",
     "Set YAGNI_DISABLE_UPDATE_CHECK=1 to silence the new-version notice.",
     "Set YAGNI_DISABLE_CLAUDE_COMPAT=1 to skip loading .claude assets.",
+    "Set YAGNI_DISABLE_BRANDING=1 to pass the system prompt through unmodified.",
     "Set YAGNI_DISABLE_CRASH_REPORTS=1 to turn off sanitized crash reports.",
 ].join("\n");
 /** Parse `use <name> [--base-url <url>]` argv into its parts. */

package/dist/doctor.d.ts

@@ -60,6 +60,13 @@ export declare function checkCliUpdate(probe: {
     latest: string | null;
 }): CheckResult;
 export declare function checkGh(onPath: boolean): CheckResult;
+/** What the Windows bash probe found (pi needs a bash — Git Bash — on win32). */
+export interface BashProbe {
+    found: boolean;
+    /** The resolved bash path, when found. */
+    where?: string;
+}
+export declare function checkBash(probe: BashProbe): CheckResult;
 export interface DoctorReport {
     checks: CheckResult[];
     exitCode: number;
@@ -75,12 +82,26 @@ export interface DoctorDeps {
     probeBackend?: (baseUrl: string, token: string) => Promise<BackendProbe>;
     probeStateDir?: () => StateDirProbe;
     ghOnPath?: () => boolean;
+    /** Platform seam for the win32-only bash check (defaults to process.platform). */
+    platform?: NodeJS.Platform;
+    /** Windows bash probe; only ever called when the platform is win32. */
+    probeBash?: () => BashProbe;
     currentVersion?: string;
     probeLatestVersion?: () => Promise<string | null>;
     log?: (msg: string) => void;
 }
 /** Whether a `gh` executable is resolvable on PATH (no subprocess spawn). */
 export declare function ghOnPathDefault(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Locate the bash pi will actually use on Windows. The order and locations
+ * MIRROR pi 0.83's own shell resolution (dist/utils/shell.js) exactly:
+ * `%ProgramFiles%\Git\bin\bash.exe`, then `%ProgramFiles(x86)%\Git\bin\bash.exe`,
+ * then `bash.exe` on PATH (`where bash.exe`). Deliberately NOTHING wider — a
+ * per-user Git install in `%LOCALAPPDATA%` that is not on PATH is invisible
+ * to pi, and a doctor that reported it green would bless a machine where the
+ * first bash tool call throws. Pure function of env, like the gh probe.
+ */
+export declare function bashOnWindowsDefault(env?: NodeJS.ProcessEnv): BashProbe;
 /**
  * Gather every check result against the (injectable) probes. Pure ordering; each
  * individual check is a pure function of its probe.

package/dist/doctor.js

@@ -198,6 +198,24 @@ export function checkGh(onPath) {
         required: false,
     };
 }
+export function checkBash(probe) {
+    if (!probe.found) {
+        return {
+            name: "bash",
+            status: "fail",
+            detail: "no bash found (pi runs its shell commands through bash)",
+            hint: "Install Git for Windows — pi needs its bash: https://gitforwindows.org "
+                + "(a per-user install must also put bash.exe on PATH)",
+            required: true,
+        };
+    }
+    return {
+        name: "bash",
+        status: "ok",
+        detail: probe.where ? `found (${probe.where})` : "found",
+        required: true,
+    };
+}
 function toOctal(mode) {
     return `0${(mode & 0o777).toString(8).padStart(3, "0")}`;
 }
@@ -296,6 +314,32 @@ export function ghOnPathDefault(env = process.env) {
     }
     return false;
 }
+/**
+ * Locate the bash pi will actually use on Windows. The order and locations
+ * MIRROR pi 0.83's own shell resolution (dist/utils/shell.js) exactly:
+ * `%ProgramFiles%\Git\bin\bash.exe`, then `%ProgramFiles(x86)%\Git\bin\bash.exe`,
+ * then `bash.exe` on PATH (`where bash.exe`). Deliberately NOTHING wider — a
+ * per-user Git install in `%LOCALAPPDATA%` that is not on PATH is invisible
+ * to pi, and a doctor that reported it green would bless a machine where the
+ * first bash tool call throws. Pure function of env, like the gh probe.
+ */
+export function bashOnWindowsDefault(env = process.env) {
+    for (const root of [env.ProgramFiles, env["ProgramFiles(x86)"]]) {
+        if (!root)
+            continue;
+        const candidate = join(root, "Git", "bin", "bash.exe");
+        if (existsSync(candidate))
+            return { found: true, where: candidate };
+    }
+    for (const dir of (env.PATH ?? "").split(delimiter)) {
+        if (!dir)
+            continue;
+        const candidate = join(dir, "bash.exe");
+        if (existsSync(candidate))
+            return { found: true, where: candidate };
+    }
+    return { found: false };
+}
 /**
  * Gather every check result against the (injectable) probes. Pure ordering; each
  * individual check is a pure function of its probe.
@@ -308,10 +352,18 @@ export async function gatherChecks(deps = {}) {
     const probeBackend = deps.probeBackend ?? defaultProbeBackend;
     const probeStateDir = deps.probeStateDir ?? defaultProbeStateDir;
     const ghOnPath = deps.ghOnPath ?? (() => ghOnPathDefault());
+    const platform = deps.platform ?? process.platform;
+    const probeBash = deps.probeBash ?? (() => bashOnWindowsDefault());
     const probeLatestVersion = deps.probeLatestVersion ?? (() => fetchLatestVersion());
     const checks = [];
     checks.push(checkPiEngine(probePiEngine()));
     checks.push(checkExtension(probeExtension()));
+    // win32 only, and skipped means NOT SHOWN: on macOS/Linux there is nothing
+    // to say. pi shells out through bash, so a Windows machine without Git Bash
+    // cannot launch at all — a required red, like a missing engine.
+    if (platform === "win32") {
+        checks.push(checkBash(probeBash()));
+    }
     checks.push(checkCliUpdate({
         current: deps.currentVersion ?? currentCliVersion(),
         latest: await probeLatestVersion(),

package/dist/extension/bless.js

@@ -17,6 +17,14 @@
  * one (and vice versa). Everything is pure except the in-memory rule list.
  */
 import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
+/**
+ * Windows-only separator normalization so prefixes compare and display with
+ * `/` on every platform: pi's tools emit forward-slash paths even on Windows,
+ * and a rule keyed `C:\repo\src\api` would silently never match a call for
+ * `C:/repo/src/api/a.ts`. On POSIX this is the identity (a `\` there is a
+ * legal filename character, not a separator).
+ */
+const norm = sep === "\\" ? (p) => p.split("\\").join("/") : (p) => p;
 /** The file path a call targets, or null for path-less tools (bash). */
 export function blessPath(params) {
     const p = params.path;
@@ -25,7 +33,12 @@ export function blessPath(params) {
 /** Build a fresh, empty session bless store rooted at `cwd`. */
 export function makeBlessStore(cwd) {
     const rules = [];
-    const abs = (p) => (isAbsolute(p) ? p : resolve(cwd, p));
+    // Always THROUGH resolve, even for absolute inputs: on Windows a bare
+    // "/repo/…" is drive-relative and resolve() drive-qualifies it, so a rule
+    // minted from a relative path and a call carrying an absolute one land on
+    // the same canonical form. (For an already-absolute POSIX path this is just
+    // normalization.)
+    const abs = (p) => norm(resolve(cwd, p));
     /** Absolute directory prefix a bless of this call would cover, or null. */
     function prefixFor(params) {
         const p = blessPath(params);
@@ -41,7 +54,7 @@ export function makeBlessStore(cwd) {
             const prefix = prefixFor(params);
             if (prefix === null)
                 return null;
-            const rel = relative(cwd, prefix);
+            const rel = norm(relative(cwd, prefix));
             // Inside the tree → the relative dir (or "." for the repo root); outside →
             // the absolute path so the user sees exactly what they are blessing.
             if (rel === "")
@@ -64,7 +77,7 @@ export function makeBlessStore(cwd) {
             if (p === null)
                 return false; // path-less (bash) never auto-approves
             const target = abs(p);
-            return rules.some((r) => r.tool === tool && (target === r.prefix || target.startsWith(r.prefix + sep)));
+            return rules.some((r) => r.tool === tool && (target === r.prefix || target.startsWith(`${r.prefix}/`)));
         },
         rules() {
             return rules.slice();

package/dist/extension/branding.d.ts

@@ -17,6 +17,15 @@ export declare const BRAND_NAME = "YAGNI Code";
  */
 export declare const YAGNI_IDENTITY: string;
 export declare const PI_IDENTITY_RE: RegExp;
+/**
+ * Env switch that bypasses the system-prompt rewrite entirely, so pi's
+ * assembled prompt passes through byte-exact (no identity swap, no scrub, no
+ * brief injection, no closing reminder). Same predicate as the sibling
+ * switches YAGNI_DISABLE_UPDATE_CHECK / YAGNI_DISABLE_CLAUDE_COMPAT.
+ */
+export declare const BRANDING_DISABLE_ENV = "YAGNI_DISABLE_BRANDING";
+/** `"1"`/anything truthy disables; unset, empty, and `"0"` keep branding on. */
+export declare function brandingDisabled(env: NodeJS.ProcessEnv): boolean;
 export interface BrandSystemPromptOptions {
     /** Override the identity paragraph (defaults to {@link YAGNI_IDENTITY}). */
     identity?: string;

package/dist/extension/branding.js

@@ -56,6 +56,18 @@ function scrubOutsideProjectContext(s) {
         .map((p) => (p.startsWith("<project_context>") ? p : scrubPiHarness(p)))
         .join("");
 }
+/**
+ * Env switch that bypasses the system-prompt rewrite entirely, so pi's
+ * assembled prompt passes through byte-exact (no identity swap, no scrub, no
+ * brief injection, no closing reminder). Same predicate as the sibling
+ * switches YAGNI_DISABLE_UPDATE_CHECK / YAGNI_DISABLE_CLAUDE_COMPAT.
+ */
+export const BRANDING_DISABLE_ENV = "YAGNI_DISABLE_BRANDING";
+/** `"1"`/anything truthy disables; unset, empty, and `"0"` keep branding on. */
+export function brandingDisabled(env) {
+    const value = env[BRANDING_DISABLE_ENV];
+    return value !== undefined && value !== "" && value !== "0";
+}
 /**
  * Rebrand pi's assembled system prompt as YAGNI Code's, and optionally inject a
  * live company brief.

package/dist/extension/chipEditor.js

@@ -26,7 +26,7 @@ import { matchesKey } from "@earendil-works/pi-tui";
 import { spawnSync } from "node:child_process";
 import { readFileSync, unlinkSync, existsSync } from "node:fs";
 import { tmpdir } from "node:os";
-import { join, basename } from "node:path";
+import { join, basename, isAbsolute } from "node:path";
 import { randomUUID } from "node:crypto";
 import { logImagePaste } from "./diagnostics.js";
 /** Matches the `[Image #N]` chip token in the editor text. */
@@ -81,10 +81,14 @@ export function readPastedImagePath(pastedText) {
     // must confirm the un-escaped form is a well-formed tmp image path before any
     // unescaping or path resolution. cmux tmp paths contain no escapable chars
     // (no spaces/metacharacters), so a legitimate paste has NO backslashes at all.
-    if (trimmed.includes("\\"))
+    // On Windows the backslash IS the path separator (and cmd/PowerShell do no
+    // backslash-escaping), so the escape-smuggling rejection applies only where
+    // a backslash could be an escape: POSIX shells.
+    const isWindows = process.platform === "win32";
+    if (!isWindows && trimmed.includes("\\"))
         return null; // escapes => not a plain cmux tmp path
     const path = trimmed;
-    if (!path.startsWith("/"))
+    if (isWindows ? !isAbsolute(path) : !path.startsWith("/"))
         return null;
     const name = basename(path);
     if (!name.startsWith("clipboard-"))

package/dist/extension/index.js

@@ -6,7 +6,7 @@ import { makeReviewBusinessMatchTool } from "./reviewTool.js";
 import { makeRecordEngineeringContextTool } from "./recordContextTool.js";
 import { makeRecordDecisionTool } from "./recordDecisionTool.js";
 import { makeSuggestNextWorkTool } from "./nextWorkTool.js";
-import { BRAND_NAME, brandSystemPrompt, buildMastheadString } from "./branding.js";
+import { BRAND_NAME, brandSystemPrompt, brandingDisabled, buildMastheadString } from "./branding.js";
 import { appendClaudeRules, claudeRulesSection } from "./claudeRules.js";
 import { registerCostCommand } from "./costHud.js";
 import { isFreshWorkspace, runInitPass as defaultRunInitPass } from "./initPass.js";
@@ -238,10 +238,16 @@ export async function registerYagni(pi, deps = {}) {
     // pointers. Computed once per activation (rules are launch-time state, like
     // pi's own skill discovery); fail-soft to null.
     const rulesSection = claudeRulesSection(deps.env ?? process.env);
-    // Own the identity + inject live company context (and repo rules) on every turn.
-    pi.on("before_agent_start", (event) => ({
-        systemPrompt: appendClaudeRules(brandSystemPrompt(event.systemPrompt, { contextBrief }), rulesSection),
-    }));
+    // Own the identity + inject live company context (and repo rules) on every
+    // turn. Under YAGNI_DISABLE_BRANDING the handler returns nothing, so pi's
+    // assembled prompt passes through byte-exact (no rewrite, no brief
+    // injection, no rules section).
+    const noBranding = brandingDisabled(deps.env ?? process.env);
+    pi.on("before_agent_start", (event) => noBranding
+        ? undefined
+        : {
+            systemPrompt: appendClaudeRules(brandSystemPrompt(event.systemPrompt, { contextBrief }), rulesSection),
+        });
     // Two finalized-message guards share this handler (their conditions are
     // mutually exclusive: YAG-460 takes error-stopped messages, YAG-466 takes
     // stop/length ones without an errorMessage).

package/dist/extension/pipeline/verify.js

@@ -46,7 +46,12 @@
  */
 import { execFile } from "node:child_process";
 import { readFileSync } from "node:fs";
-import { basename, dirname, join } from "node:path";
+// posix path math on purpose, on every platform: the rel paths here come from
+// git porcelain output, which is forward-slash even on Windows, and Windows fs
+// APIs accept forward-slash paths — while win32 join/dirname would emit
+// backslashed strings that no longer compare equal to the git-derived repoRoot
+// and would break the walk-up termination check.
+import { basename, dirname, join } from "node:path/posix";
 import { composeAbortSignal } from "./resilience.js";
 import { scrubSecrets } from "./scrubSecrets.js";
 import { snapshotWorkspace } from "./workspace.js";

package/dist/extension/pipeline/worktree.js

@@ -25,7 +25,9 @@
  */
 import { execFile } from "node:child_process";
 import { mkdirSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+// posix join on purpose (see verify.ts): worktree paths are composed from
+// git output and compared as strings; Windows fs APIs accept forward slashes.
+import { dirname, join } from "node:path/posix";
 import { composeAbortSignal } from "./resilience.js";
 import { buildVerifyEnv, detectPackageManager } from "./verify.js";
 /** Wall-clock cap on the best-effort worktree bootstrap install (spec §3b). */

package/dist/extension/recall.js

@@ -22,7 +22,7 @@
  *  - skipped entirely when the corpus is thin (<3 active decisions) or eval mode.
  *  - any failure degrades to no injection.
  */
-import { isAbsolute, relative } from "node:path";
+import { isAbsolute, relative, sep } from "node:path";
 import { composeAbortSignal } from "./pipeline/resilience.js";
 /** Recall must never block a read beyond this (spec §4). */
 export const RECALL_TIMEOUT_MS = 1500;
@@ -60,7 +60,10 @@ export function normalizeRecall(data) {
 export function toRepoRelativePath(readPath, cwd) {
     let p = readPath.trim();
     if (isAbsolute(p)) {
-        const rel = relative(cwd, p);
+        // The backend keys judgments by forward-slash repo paths, so the rebased
+        // form must not carry win32 separators (also keeps the per-path session
+        // cache keyed identically across platforms).
+        const rel = relative(cwd, p).split(sep).join("/");
         if (rel && !rel.startsWith("..") && !isAbsolute(rel))
             p = rel;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yagni-app/code-staging",
-  "version": "0.1.0-staging.1015.1",
+  "version": "0.1.0-staging.1017.1",
   "description": "YAGNI Code: a terminal coding agent that already knows your company. One YAGNI login routes the model and grounds the agent in your team's context.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "YAGNI, Inc. <jack@yagni.app> (https://yagni.app)",
@@ -38,5 +38,5 @@
     "@earendil-works/pi-tui": "0.83.0",
     "typebox": "^1.1.38"
   },
-  "yagniSourceSha": "eac9ab13212b31799bf860cd83d39dcb325e5c39"
+  "yagniSourceSha": "c52a9bdcb42c50177c0d753f839fe884cc96c784"
 }