@yagni-app/code-staging 1.1.4-staging.1384.1 → 1.1.4-staging.1386.1

package/dist/extension/config.d.ts

@@ -206,12 +206,15 @@ export declare function sanitizeCallerSegment(name: string, maxLength?: number):
  * Attribution headers for the boot-time /context fetch. Extends
  * {@link attributionHeaders} (session id + caller) with the surface the
  * session is painting for (the desktop driver sets YAGNI_SURFACE=desktop;
- * the terminal CLI sets nothing) and the shipping client version. The server
- * uses these to emit its "YAGNI Code Session Started" analytics event —
- * labels only on that side: a missing or malformed value can never fail the
- * fetch, it just goes uncounted or unversioned.
+ * the terminal CLI sets nothing), the shipping client version, and — when
+ * known — whether the OS-level bash sandbox was active at session start
+ * ("1"/"0"; omitted when the resolved state is unknown, e.g. eval mode or an
+ * unsupported platform, so the server never reads "off" as "unknown"). The
+ * server uses these to emit its "YAGNI Code Session Started" analytics
+ * event — labels only on that side: a missing or malformed value can never
+ * fail the fetch, it just goes uncounted or unversioned.
  */
-export declare function sessionTelemetryHeaders(env?: NodeJS.ProcessEnv): Record<string, string>;
+export declare function sessionTelemetryHeaders(env?: NodeJS.ProcessEnv, sandboxActive?: boolean): Record<string, string>;
 /** Options for {@link fetchContextBrief}. */
 export interface FetchContextBriefOptions {
     baseUrl: string;
@@ -219,6 +222,12 @@ export interface FetchContextBriefOptions {
     fetchImpl?: typeof fetch;
     /** Env seam for the telemetry headers; defaults to process.env. */
     env?: NodeJS.ProcessEnv;
+    /**
+     * Whether the OS-level bash sandbox was active at session start. Absent
+     * (undefined) when unknown — eval mode, unsupported platform, or a null
+     * sandbox handle — so the header is omitted rather than misreporting off.
+     */
+    sandboxActive?: boolean;
     /**
      * The session repo (`owner/name`), when resolvable. Rides as `?repo=` so
      * the response can carry `repoDecisionCount` for the mining beat — no

package/dist/extension/config.js

@@ -193,17 +193,23 @@ const CLIENT_VERSION_RE = /^[0-9a-z][0-9a-z.+-]{0,31}$/i;
  * Attribution headers for the boot-time /context fetch. Extends
  * {@link attributionHeaders} (session id + caller) with the surface the
  * session is painting for (the desktop driver sets YAGNI_SURFACE=desktop;
- * the terminal CLI sets nothing) and the shipping client version. The server
- * uses these to emit its "YAGNI Code Session Started" analytics event —
- * labels only on that side: a missing or malformed value can never fail the
- * fetch, it just goes uncounted or unversioned.
+ * the terminal CLI sets nothing), the shipping client version, and — when
+ * known — whether the OS-level bash sandbox was active at session start
+ * ("1"/"0"; omitted when the resolved state is unknown, e.g. eval mode or an
+ * unsupported platform, so the server never reads "off" as "unknown"). The
+ * server uses these to emit its "YAGNI Code Session Started" analytics
+ * event — labels only on that side: a missing or malformed value can never
+ * fail the fetch, it just goes uncounted or unversioned.
  */
-export function sessionTelemetryHeaders(env = process.env) {
+export function sessionTelemetryHeaders(env = process.env, sandboxActive) {
     const headers = attributionHeaders(env);
     headers["x-yagni-surface"] = env.YAGNI_SURFACE === "desktop" ? "desktop" : "cli";
     const version = env.YAGNI_CODE_VERSION ?? "";
     if (CLIENT_VERSION_RE.test(version))
         headers["x-yagni-client-version"] = version;
+    if (sandboxActive !== undefined) {
+        headers["x-yagni-sandbox-active"] = sandboxActive ? "1" : "0";
+    }
     return headers;
 }
 /**
@@ -220,7 +226,7 @@ export async function fetchContextBrief(opts) {
             method: "GET",
             headers: {
                 authorization: `Bearer ${opts.getToken() ?? ""}`,
-                ...sessionTelemetryHeaders(opts.env),
+                ...sessionTelemetryHeaders(opts.env, opts.sandboxActive),
             },
         }, { fetchImpl: opts.fetchImpl });
         if (!res.ok)

package/dist/extension/index.d.ts

@@ -42,6 +42,7 @@ export interface RegisterYagniDeps {
         getToken: () => string | undefined;
         fetchImpl?: typeof fetch;
         repo?: string;
+        sandboxActive?: boolean;
     }) => Promise<ContextBrief | null>;
     /**
      * The session repo (`owner/name`), resolved from the origin remote before

package/dist/extension/index.js

@@ -1192,6 +1192,21 @@ export async function registerYagni(pi, deps = {}) {
     }
     let contextBrief;
     let briefResult = null;
+    // Session-start sandbox snapshot: a CONFIGURED-ENABLED snapshot, with the
+    // one divergence that is knowable at factory time folded in — the
+    // passthrough --no-sandbox flag, read from pi's own command line (pi
+    // applies extension flag values AFTER extension load, so pi.getFlag
+    // reads unset here; argv is the one reliable pre-session view). Omitted
+    // (undefined) when there is no handle — eval mode or an unsupported
+    // platform — so the telemetry header is absent rather than misreporting
+    // off. Known remainders, both accepted: a sandbox init FAILURE at
+    // session_start (missing deps) still reports true here (logged as
+    // init_failed in the local sink; rare broken-deps territory), and
+    // mid-session /sandbox toggles are out of scope — the per-call Guardian
+    // events remain the ground truth for both.
+    const sandboxActive = sandboxHandle && !process.argv.includes("--no-sandbox")
+        ? sandboxHandle.settings().enabled === true
+        : undefined;
     if (!evalMode) {
         try {
             briefResult = await fetchBrief({
@@ -1199,6 +1214,7 @@ export async function registerYagni(pi, deps = {}) {
                 getToken: getTokenFn,
                 fetchImpl: authedFetch,
                 repo: sessionRepo,
+                sandboxActive,
             });
             contextBrief = briefResult?.brief?.trim() ? briefResult.brief : undefined;
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yagni-app/code-staging",
-  "version": "1.1.4-staging.1384.1",
+  "version": "1.1.4-staging.1386.1",
   "description": "YAGNI Code: a terminal coding agent that already knows your company. One YAGNI login routes the model and grounds the agent in your team's context.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "YAGNI, Inc. <jack@yagni.app> (https://yagni.app)",
@@ -58,5 +58,5 @@
     "turndown": "^7.2.4",
     "typebox": "^1.3.15"
   },
-  "yagniSourceSha": "b8f4ca30233d5e288a98b18dca6931a6da9973dc"
+  "yagniSourceSha": "0fa67403fcaeaf2bdba61d03dc84eb9816b46a0f"
 }