@yagni-app/code-staging 1.0.3-staging.1222.1 → 1.0.4-staging.1225.1

package/dist/extension/permission/execPolicy.js

@@ -616,10 +616,20 @@ function classifySegmentTokens(rawTokens, policy, opts) {
     }
     const { tokens: strippedTokens, stripped } = stripLeadingTokens(rawTokens);
     if (strippedTokens.length === 0) {
+        // A segment made only of environment assignments (`FOO=bar`) is a no-op: it
+        // sets shell variables and executes nothing. Recognize it so a compound like
+        // `SF="$F"; echo hi` is not floored by its leading assignment. Safety holds
+        // because classifyCommand's construct floor + substitution danger scan run
+        // afterward: an assignment whose value is a `$(...)` substitution frees the
+        // inner text for the danger scan and downgrades the overall result to prompt
+        // or forbidden there.
+        if (!opts.forbiddenOnly && rawTokens.length > 0 && rawTokens.every((t) => ENV_ASSIGNMENT_RE.test(t))) {
+            return { decision: "allow", justification: "no-op environment assignment" };
+        }
         // env standalone: `env` or `env VAR=val` with no following command prints
         // environment variables — a read-only operation. stripLeadingTokens removes
         // `env` as a wrapper word, leaving empty tokens. Recognize this case instead
-        // of returning "empty command segment" (YAG-549).
+        // of returning "empty command segment".
         if (!opts.forbiddenOnly && rawTokens.length > 0 && basenameToken(rawTokens[0]) === "env") {
             const onlyEnvAndAssignments = rawTokens.every((t) => basenameToken(t) === "env" || ENV_ASSIGNMENT_RE.test(t));
             if (onlyEnvAndAssignments) {
@@ -951,6 +961,9 @@ export const DEFAULT_EXEC_POLICY = {
         { pattern: ["printf"], decision: "allow", justification: "print formatted text" },
         { pattern: ["whoami"], decision: "allow", justification: "show current user" },
         { pattern: ["uname"], decision: "allow", justification: "show system info" },
+        { pattern: ["ps"], decision: "allow", justification: "list processes (read-only)" },
+        { pattern: ["lsof"], decision: "allow", justification: "list open files and ports (read-only)" },
+        { pattern: ["sleep"], decision: "allow", justification: "no-op delay" },
         { pattern: ["git", "status"], decision: "allow", justification: "show working tree status" },
         { pattern: ["git", "log"], decision: "allow", justification: "show commit log" },
         { pattern: ["git", "diff"], decision: "allow", justification: "show changes" },
@@ -989,6 +1002,9 @@ export const DEFAULT_EXEC_POLICY = {
         },
         { pattern: ["linear", ["--help", "-h"]], decision: "allow", justification: "show Linear CLI help" },
         { pattern: ["linear", ["--version", "-V"]], decision: "allow", justification: "show Linear CLI version" },
+        { pattern: ["linear", "user", "list"], decision: "allow", justification: "list Linear workspace members (read-only)" },
+        { pattern: ["linear", "team", ["list", "members", "states", "id"]], decision: "allow", justification: "read Linear team data (read-only)" },
+        { pattern: ["linear", "project", ["list", "view"]], decision: "allow", justification: "read Linear project data (read-only)" },
         // gh api — REST GET (no params, no method override) and GraphQL queries (no mutation)
         // gh api defaults to POST when -f/-F params are present, so params are disqualifying.
         // GraphQL is always POST, but queries are reads; mutations/subscriptions are disqualifying.
@@ -1065,7 +1081,6 @@ export const DEFAULT_EXEC_POLICY = {
         { pattern: ["tar"], decision: "prompt", justification: "archive operation" },
         { pattern: ["zip"], decision: "prompt", justification: "archive operation" },
         { pattern: ["unzip"], decision: "prompt", justification: "archive operation" },
-        { pattern: ["ps"], decision: "prompt", justification: "lists processes" },
         { pattern: ["kill"], decision: "prompt", justification: "sends a signal to a process" },
         { pattern: ["chmod"], decision: "prompt", justification: "permission change — review the mode" },
         { pattern: ["chown"], decision: "prompt", justification: "ownership change" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yagni-app/code-staging",
-  "version": "1.0.3-staging.1222.1",
+  "version": "1.0.4-staging.1225.1",
   "description": "YAGNI Code: a terminal coding agent that already knows your company. One YAGNI login routes the model and grounds the agent in your team's context.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "YAGNI, Inc. <jack@yagni.app> (https://yagni.app)",
@@ -41,5 +41,5 @@
     "turndown": "^7.2.4",
     "typebox": "^1.3.15"
   },
-  "yagniSourceSha": "180f2fe5eda13aabc43dde056df32b5a4e4a6195"
+  "yagniSourceSha": "0a684e046e6b27f6b5ad797376620a98031b671f"
 }