@yagni-app/code 0.3.0 → 0.3.1

package/dist/extension/index.d.ts

@@ -5,6 +5,7 @@ import { fetchMcpServers as defaultFetchMcpServers } from "./mcpTools.js";
 import { type FlushOutcome, type SpoolClientOpts } from "./spool.js";
 import { type TokenProvider } from "./tokenProvider.js";
 import { type CatalogResult, type ContextBrief } from "./config.js";
+import { maybeOfferMiningBeat as defaultMaybeOfferMiningBeat, type MineBeatMarkers } from "./mineBeat.js";
 /**
  * YAGNI Code extension entry point.
  *
@@ -36,7 +37,21 @@ export interface RegisterYagniDeps {
         baseUrl: string;
         getToken: () => string | undefined;
         fetchImpl?: typeof fetch;
+        repo?: string;
     }) => Promise<ContextBrief | null>;
+    /**
+     * The session repo (`owner/name`), resolved from the origin remote before
+     * the boot brief fetch so `/context` can carry `repoDecisionCount` for the
+     * mining beat. Injectable (no git in tests); undefined outside a repo.
+     */
+    resolveRepoFullName?: (cwd: string) => string | undefined;
+    /**
+     * The opt-in seeding beat itself (Run 7). Injectable so tests assert it
+     * fires only on a startup with an explicitly-zero repo ledger.
+     */
+    offerMiningBeat?: typeof defaultMaybeOfferMiningBeat;
+    /** The beat's once-per-repo marker store. Injectable (no disk in tests). */
+    mineBeatMarkers?: MineBeatMarkers;
     /**
      * Workspace MCP server list seam (YAG-446). The default hits
      * `/api/yagni-code/mcp/servers` and is fail-soft: older backends and
@@ -122,7 +137,9 @@ export type { RecordDecisionParams } from "./recordDecisionTool.js";
 export { runInitPass, runTeamSetup, registerTeamSetupCommand, isFreshWorkspace, readRepoIntake, draftEngineering, summarizeDraft, FRESH_BRIEF_MIN_CHARS, } from "./initPass.js";
 export type { RunInitPassDeps, InitPassOutcome, RunTeamSetupDeps, TeamSetupOutcome, RepoIntake, RepoIntakeFs, EngineeringDraft, DraftTeam, } from "./initPass.js";
 export { isInitDone, markInitDone, initDoneMarkerFile, _setInitDoneHomeForTest } from "./initDone.js";
-export { brandSystemPrompt, YAGNI_IDENTITY, YAGNI_IDENTITY_DRIVER, BRAND_NAME } from "./branding.js";
+export { brandSystemPrompt, YAGNI_IDENTITY, YAGNI_IDENTITY_DRIVER, YAGNI_IDENTITY_ULTRA, BRAND_NAME } from "./branding.js";
+export { createUltraHolder, registerUltraCommand } from "./ultra.js";
+export type { UltraHolder } from "./ultra.js";
 export { attributionHeaders, isDriverCaller, fetchCatalog, getToken, getWorkspaceId, resolveBaseUrl, sanitizeCallerSegment, } from "./config.js";
 export type { CatalogResult, FetchCatalogOptions, ModelEntry } from "./config.js";
 export { buildYagniProvider } from "./provider.js";
@@ -139,9 +156,9 @@ export type { VerifyCommand, VerifyOutcome } from "./pipeline/verify.js";
 export { blindStages, reportOnlyStages, makeGroundedVsBlindEval, formatComparisonReport } from "./pipeline/eval.js";
 export type { ComparisonReport, LaneFit, LaneOutcome } from "./pipeline/eval.js";
 export { registerGoCompareCommand } from "./pipeline/goCompareCommand.js";
-export { registerSubagents, makeSubagentTool, discoverSubagents, parseAgentMarkdown, buildSubagentStage, formatAgentList, mapModelTier, SUBAGENT_TOOL_NAME, GENERAL_AGENT_NAME, MAX_PARALLEL_SUBAGENTS, DEFAULT_SUBAGENT_TOOLS, } from "./subagents.js";
+export { registerSubagents, makeSubagentTool, discoverSubagents, parseAgentMarkdown, buildSubagentStage, formatAgentList, mapModelTier, SUBAGENT_TOOL_NAME, GENERAL_AGENT_NAME, MAX_PARALLEL_SUBAGENTS, MAX_PARALLEL_SUBAGENTS_ULTRA, DEFAULT_SUBAGENT_TOOLS, } from "./subagents.js";
 export type { SubagentDef, SubagentSource } from "./subagents.js";
-export { registerTodos, makeTodoTool, normalizeTodos, reconstructTodos, renderTodoWidget, formatTodoList, todoSummary, TODO_TOOL_NAME, MAX_TODOS, } from "./todos.js";
+export { registerTodos, makeTodoTool, normalizeTodos, reconstructTodos, renderTodoWidget, formatTodoList, formatTodoReminder, shouldRemindTodos, todoSummary, TODO_TOOL_NAME, TODO_REMINDER_TURNS, MAX_TODOS, } from "./todos.js";
 export type { TodoItem, TodoStatus, TodoTheme } from "./todos.js";
 export { decideGate, registerPermissionGate, filterStaleModeContext, filterStalePlanContext, buildModeContextMessage, DEFAULT_PERMISSION_POLICY, MODE_CONTEXT_TYPE, PLAN_CONTEXT_TYPE, PLAN_CONTEXT_MESSAGE, } from "./permission.js";
 export { classifyCommand, DEFAULT_EXEC_POLICY, } from "./execPolicy.js";

package/dist/extension/index.js

@@ -14,13 +14,13 @@ import { registerCmuxBridge } from "./cmux/index.js";
 import { makeRecordEngineeringContextTool } from "./recordContextTool.js";
 import { makeRecordDecisionTool } from "./recordDecisionTool.js";
 import { makeSuggestNextWorkTool } from "./nextWorkTool.js";
-import { BRAND_NAME, brandSystemPrompt, brandingDisabled, buildMastheadString, YAGNI_IDENTITY_DRIVER } from "./branding.js";
+import { BRAND_NAME, brandSystemPrompt, brandingDisabled, buildMastheadString, YAGNI_IDENTITY_DRIVER, YAGNI_IDENTITY_ULTRA } from "./branding.js";
 import { claudeRulesSection } from "./claudeRules.js";
 import { registerCostCommand } from "./costHud.js";
 import { isDebug } from "./diagnostics.js";
 import { droppedSessionRuns, sessionRunIds } from "./sessionRuns.js";
 import { codeStateHome } from "./stateHome.js";
-import { createYagniFooterFactory, formatCwd } from "./footer.js";
+import { createYagniFooterFactory, cyclePermissionMode, formatCwd, GIT_MUTATING_PATTERN, isShiftTab } from "./footer.js";
 import { RerouteNotifier } from "./rerouteNotice.js";
 import { isFreshWorkspace, registerTeamSetupCommand, runInitPass as defaultRunInitPass } from "./initPass.js";
 import { isInitDone as defaultIsInitDone, markInitDone as defaultMarkInitDone } from "./initDone.js";
@@ -29,6 +29,7 @@ import { registerGoCommand } from "./pipeline/goCommand.js";
 import { registerGoCompareCommand } from "./pipeline/goCompareCommand.js";
 import { DEFAULT_PERMISSION_POLICY, createModeHolder, registerPermissionGate } from "./permission.js";
 import { registerSubagents } from "./subagents.js";
+import { createUltraHolder, registerUltraCommand } from "./ultra.js";
 import { registerTodos } from "./todos.js";
 import { registerDecisionCommands } from "./decisions.js";
 import { makeDecisionCapture } from "./decisionCapture.js";
@@ -40,6 +41,8 @@ import { makeAuthedFetch, makeTokenProvider } from "./tokenProvider.js";
 import { attributionHeaders, fetchCatalog as defaultFetchCatalog, fetchContextBrief as defaultFetchContextBrief, getToken, getTokenExpiresAt as defaultGetTokenExpiresAt, getWorkspaceId as defaultGetWorkspaceId, isDriverCaller, resolveBaseUrl, tokenExpiryNotice, } from "./config.js";
 import { buildYagniProvider } from "./provider.js";
 import { registerChipEditor } from "./chipEditor.js";
+import { defaultMineBeatGit, fileMineBeatMarkers, maybeOfferMiningBeat as defaultMaybeOfferMiningBeat, } from "./mineBeat.js";
+import { makeFlywheelState } from "./flywheel.js";
 function isEvalMode(env = process.env) {
     return env.YAGNI_CODE_EVAL_MODE === "1";
 }
@@ -143,7 +146,11 @@ export async function registerYagni(pi, deps = {}) {
     // child, a subagent, or an advisor consult).
     pi.registerProvider("yagni", buildYagniProvider(catalog, baseUrl, attributionHeaders(deps.env)));
     const toolOpts = { baseUrl, getToken: getTokenFn, fetchImpl: authedFetch };
-    pi.registerTool(makeAskYagniTool(toolOpts));
+    // One flywheel state per session, shared by ask_yagni (caps how many
+    // no-position record suggestions reach the model) and record_decision
+    // (flywheel-attributed records send dedupe: true). Run 7.
+    const flywheelState = makeFlywheelState();
+    pi.registerTool(makeAskYagniTool({ ...toolOpts, flywheel: flywheelState, getRepo: () => sessionRepo }));
     // Ticket write-back (spec 2026-08-09): explicit user-intent writes to the
     // workspace tracker, attributed to the developer via per-user credentials.
     if (!evalMode) {
@@ -171,7 +178,7 @@ export async function registerYagni(pi, deps = {}) {
         pi.registerTool(makeRecordEngineeringContextTool(toolOpts));
         // The capture half of the judgment loop: bank a product-intent decision so
         // ask_yagni answers the same question next time instead of interrupting a human.
-        pi.registerTool(makeRecordDecisionTool(toolOpts));
+        pi.registerTool(makeRecordDecisionTool({ ...toolOpts, flywheel: flywheelState }));
     }
     // The visible checklist for multi-step work: the todo_write tool, its
     // above-editor widget, and /todos. Branch-replayed, so forks and resumes
@@ -185,7 +192,12 @@ export async function registerYagni(pi, deps = {}) {
     // The general subagent tool: delegate self-contained tasks (optionally in
     // parallel) to fresh-context agents defined in .claude/agents / .pi/agents,
     // riding the /go pipeline's child runner. /agents lists what's available.
-    registerSubagents(pi);
+    // Ultra mode (/ultra) is an explicit orchestration dial: it swaps the
+    // driver's delegation identity for the diamond directive (see the
+    // before_agent_start handler below) and widens the tool's fan-out ceiling.
+    const ultraHolder = createUltraHolder();
+    registerSubagents(pi, { isUltra: () => ultraHolder.get() });
+    registerUltraCommand(pi, ultraHolder);
     // Shared fetch timeout for the small, interactive display-path reads below
     // (/cost's spend + headroom, and Task 8's per-run spend for /go's summary):
     // 5s, not the 10s other boot/grounding fetches use, because the user is
@@ -238,6 +250,7 @@ export async function registerYagni(pi, deps = {}) {
     // Mutating MCP tools join write/edit/bash in the gate policy: plan mode
     // holds them, review mode confirms them.
     const modeHolder = createModeHolder();
+    const footerInvalidateHandle = { invalidateGit: () => { }, requestRender: () => { } };
     const guardianState = makeGuardianState();
     // Disabled by the local env override OR the workspace kill switch
     // (yagni_code.guardian, read from the catalog response at launch). The env
@@ -262,7 +275,9 @@ export async function registerYagni(pi, deps = {}) {
         catch { /* logging must never break the session */ }
     };
     // YAG-510: persisted "don't ask again" grants, per-repo keyed. Loaded once
-    // at startup (grants added by other concurrent sessions appear next launch).
+    // at startup (grants added by other concurrent sessions appear next launch —
+    // the startup load is the trust boundary; live reload was reviewed and
+    // rejected as a same-session self-authorization path, PR #1698).
     const sessionGrants = evalMode ? [] : loadGrants();
     const GUARDIAN_EVENT_TIMEOUT_MS = 5_000;
     registerPermissionGate(pi, {
@@ -452,11 +467,27 @@ export async function registerYagni(pi, deps = {}) {
     // must never block the agent), then inject it into the system prompt so the
     // very first turn already knows how this company and codebase work.
     const fetchBrief = deps.fetchContextBrief ?? defaultFetchContextBrief;
+    // Resolved BEFORE the brief fetch so /context can answer repoDecisionCount
+    // in the same round-trip (the mining beat's signal). Best-effort: undefined
+    // outside a git repo or without an origin remote.
+    const resolveRepoFn = deps.resolveRepoFullName ?? ((cwd) => defaultMineBeatGit.repoFullName(cwd));
+    let sessionRepo;
+    try {
+        sessionRepo = evalMode ? undefined : resolveRepoFn(process.cwd());
+    }
+    catch {
+        sessionRepo = undefined;
+    }
     let contextBrief;
     let briefResult = null;
     if (!evalMode) {
         try {
-            briefResult = await fetchBrief({ baseUrl, getToken: getTokenFn, fetchImpl: authedFetch });
+            briefResult = await fetchBrief({
+                baseUrl,
+                getToken: getTokenFn,
+                fetchImpl: authedFetch,
+                repo: sessionRepo,
+            });
             contextBrief = briefResult?.brief?.trim() ? briefResult.brief : undefined;
         }
         catch {
@@ -517,13 +548,19 @@ export async function registerYagni(pi, deps = {}) {
     // assembled prompt passes through byte-exact (no rewrite, no brief
     // injection, no rules section, no delegation identity).
     const noBranding = brandingDisabled(env);
-    const identity = isDriverCaller(env) ? YAGNI_IDENTITY_DRIVER : undefined;
+    // Resolved per turn (not once at activation): /ultra can flip the driver
+    // between the delegation and diamond identities mid-session.
+    const isDriver = isDriverCaller(env);
     pi.on("before_agent_start", (event) => noBranding
         ? undefined
         : {
             systemPrompt: brandSystemPrompt(event.systemPrompt, {
                 contextBrief,
-                identity,
+                identity: isDriver
+                    ? ultraHolder.get()
+                        ? YAGNI_IDENTITY_ULTRA
+                        : YAGNI_IDENTITY_DRIVER
+                    : undefined,
                 rulesSection,
             }),
         });
@@ -681,7 +718,15 @@ export async function registerYagni(pi, deps = {}) {
             // context % on line 2, and extension statuses (brand, todos, mode) on
             // line 3. The factory captures ctx so the footer can read session data
             // (token stats, context usage) that isn't on the footerData provider.
-            ctx.ui?.setFooter?.((tui, theme, footerData) => createYagniFooterFactory(ctx, modeHolder)(tui, theme, footerData));
+            ctx.ui?.setFooter?.((tui, theme, footerData) => createYagniFooterFactory(ctx, modeHolder, footerInvalidateHandle)(tui, theme, footerData));
+            ctx.ui?.onTerminalInput?.((data) => {
+                if (isShiftTab(data)) {
+                    modeHolder.set(cyclePermissionMode(modeHolder.get()));
+                    footerInvalidateHandle.requestRender();
+                    return { consume: true };
+                }
+                return undefined;
+            });
             // Label the collapsed chain-of-thought line so users know it is reasoning
             // and how to reveal the full trace. Harmless when reasoning is expanded
             // (the label only shows on hidden thinking blocks). Fails closed to pi's
@@ -755,6 +800,38 @@ export async function registerYagni(pi, deps = {}) {
                 // The init pass is best-effort; a failure never blocks the session.
             }
         }
+        // Run 7: the opt-in repo seeding beat. Fires only on a genuine startup
+        // when /context reported an explicitly-empty repo-scoped ledger, once per
+        // repo (marker store). Fully fail-soft — a beat failure never blocks the
+        // session.
+        if (event.reason === "startup" && !evalMode) {
+            try {
+                const offerBeat = deps.offerMiningBeat ?? defaultMaybeOfferMiningBeat;
+                const markers = deps.mineBeatMarkers ?? fileMineBeatMarkers(codeStateHome(null, env));
+                await offerBeat(ctx, {
+                    repoFullName: sessionRepo,
+                    repoDecisionCount: briefResult?.repoDecisionCount,
+                    cwd: process.cwd(),
+                    baseUrl,
+                    getToken: getTokenFn,
+                    fetchImpl: authedFetch,
+                    markers,
+                });
+            }
+            catch {
+                // Seeding is best-effort; a failure never blocks the session.
+            }
+        }
+    });
+    pi.on("tool_result", (event) => {
+        if (event.toolName !== "bash")
+            return;
+        const command = typeof event.input?.command === "string"
+            ? event.input.command
+            : "";
+        if (GIT_MUTATING_PATTERN.test(command)) {
+            footerInvalidateHandle.invalidateGit();
+        }
     });
 }
 export default async function (pi) {
@@ -781,7 +858,9 @@ export { recordDecision } from "./recordDecisionTool.js";
 export { runInitPass, runTeamSetup, registerTeamSetupCommand, isFreshWorkspace, readRepoIntake, draftEngineering, summarizeDraft, FRESH_BRIEF_MIN_CHARS, } from "./initPass.js";
 // Onramp Door B (F2a): the one-time init-pass idempotency marker.
 export { isInitDone, markInitDone, initDoneMarkerFile, _setInitDoneHomeForTest } from "./initDone.js";
-export { brandSystemPrompt, YAGNI_IDENTITY, YAGNI_IDENTITY_DRIVER, BRAND_NAME } from "./branding.js";
+export { brandSystemPrompt, YAGNI_IDENTITY, YAGNI_IDENTITY_DRIVER, YAGNI_IDENTITY_ULTRA, BRAND_NAME } from "./branding.js";
+// Ultra mode (/ultra): the aggressive fan-out/verify/synthesize dial.
+export { createUltraHolder, registerUltraCommand } from "./ultra.js";
 export { attributionHeaders, isDriverCaller, fetchCatalog, getToken, getWorkspaceId, resolveBaseUrl, sanitizeCallerSegment, } from "./config.js";
 export { buildYagniProvider } from "./provider.js";
 export { registerGoCommand } from "./pipeline/goCommand.js";
@@ -796,9 +875,9 @@ export { buildVerifyEnv, detectVerifyCommand, makeRunVerify, parseVerifyFailures
 export { blindStages, reportOnlyStages, makeGroundedVsBlindEval, formatComparisonReport } from "./pipeline/eval.js";
 export { registerGoCompareCommand } from "./pipeline/goCompareCommand.js";
 // The general subagent tool: Claude Code-format agent discovery + fan-out.
-export { registerSubagents, makeSubagentTool, discoverSubagents, parseAgentMarkdown, buildSubagentStage, formatAgentList, mapModelTier, SUBAGENT_TOOL_NAME, GENERAL_AGENT_NAME, MAX_PARALLEL_SUBAGENTS, DEFAULT_SUBAGENT_TOOLS, } from "./subagents.js";
+export { registerSubagents, makeSubagentTool, discoverSubagents, parseAgentMarkdown, buildSubagentStage, formatAgentList, mapModelTier, SUBAGENT_TOOL_NAME, GENERAL_AGENT_NAME, MAX_PARALLEL_SUBAGENTS, MAX_PARALLEL_SUBAGENTS_ULTRA, DEFAULT_SUBAGENT_TOOLS, } from "./subagents.js";
 // The session todo checklist: todo_write tool, widget renderer, /todos.
-export { registerTodos, makeTodoTool, normalizeTodos, reconstructTodos, renderTodoWidget, formatTodoList, todoSummary, TODO_TOOL_NAME, MAX_TODOS, } from "./todos.js";
+export { registerTodos, makeTodoTool, normalizeTodos, reconstructTodos, renderTodoWidget, formatTodoList, formatTodoReminder, shouldRemindTodos, todoSummary, TODO_TOOL_NAME, TODO_REMINDER_TURNS, MAX_TODOS, } from "./todos.js";
 // P3 + W4: the permission gate seam (decideGate is pure; policy injectable) plus
 // the session bless-with-remember capture hook.
 export { decideGate, registerPermissionGate, filterStaleModeContext, filterStalePlanContext, buildModeContextMessage, DEFAULT_PERMISSION_POLICY, MODE_CONTEXT_TYPE, PLAN_CONTEXT_TYPE, PLAN_CONTEXT_MESSAGE, } from "./permission.js";

package/dist/extension/mineBeat.d.ts

@@ -0,0 +1,95 @@
+/**
+ * The opt-in repo seeding beat (org plane, Run 7).
+ *
+ * On the first interactive session in a repo whose repo-scoped decision
+ * ledger is empty (`/context?repo=` reports `repoDecisionCount: 0`), YAGNI
+ * Code offers — once — to read the repo's own decision record and seed the
+ * ledger: "Read this repo's ADRs and docs and seed the decision ledger?".
+ * One keystroke, then the backend extracts, dedupes, and banks at most 12
+ * `repo_mined` asserted rows, and the beat prints the banked count plus the
+ * Library review deep link.
+ *
+ * Never automatic, never a nag: a decline writes a per-repo marker so the
+ * beat does not recur; an accepted pass marks the repo only after the server
+ * confirms (a transport failure leaves the offer available next session).
+ * The corpus is collected at git HEAD (same echo-chamber guard as
+ * repoDocs.ts) — ADR directories, agent-instruction root docs, top-level
+ * docs/*.md, and recent merge subjects — bounded client-side to the same
+ * limits the backend enforces.
+ */
+/**
+ * Client-side bounds on the mining corpus — mirror of the backend's
+ * MINE_INPUT_LIMITS so nothing is silently truncated server-side.
+ */
+export declare const MINE_BEAT_LIMITS: {
+    readonly maxDocs: 40;
+    readonly maxPathChars: 300;
+    readonly maxExcerptChars: 8000;
+    readonly maxCommitSubjects: 200;
+    readonly maxSubjectChars: 200;
+};
+/** One document offered to the mining pass. */
+export interface MineBeatDoc {
+    path: string;
+    excerpt: string;
+}
+/** Injectable git seam (default: execFileSync; every call fail-soft). */
+export interface MineBeatGit {
+    /** `owner/name` from the origin remote, or undefined outside a repo. */
+    repoFullName: (cwd: string) => string | undefined;
+    /** Tracked paths at HEAD, or null when cwd is not a usable git tree. */
+    listAtHead: (cwd: string) => string[] | null;
+    /** One file's HEAD content, or null when unreadable. */
+    readAtHead: (cwd: string, rel: string) => string | null;
+    /** Recent merge-commit subjects (fallback: plain subjects on squash repos). */
+    mergeSubjects: (cwd: string, max: number) => string[];
+}
+/** Parse `owner/name` from an origin remote URL (ssh or https). */
+export declare function parseRepoFullName(remote: string | null | undefined): string | undefined;
+export declare const defaultMineBeatGit: MineBeatGit;
+/** Is this HEAD-tracked path part of the repo's decision record? */
+export declare function isMineCandidate(rel: string): boolean;
+/** Collect the HEAD-era mining corpus, bounded to MINE_BEAT_LIMITS. */
+export declare function collectMineCorpus(cwd: string, gitImpl?: MineBeatGit): {
+    docs: MineBeatDoc[];
+    commitSubjects: string[];
+};
+/** Injectable marker-store seam (default: a JSON file per repo on disk). */
+export interface MineBeatMarkers {
+    has: (repoFullName: string) => boolean;
+    write: (repoFullName: string, status: "declined" | "seeded") => void;
+}
+/** Filesystem path of one repo's beat marker under the state home. */
+export declare function mineMarkerPath(stateHome: string, repoFullName: string): string;
+export declare function fileMineBeatMarkers(stateHome: string): MineBeatMarkers;
+/** The subset of the session-start ctx the beat needs. */
+export interface MineBeatUi {
+    hasUI: boolean;
+    ui: {
+        confirm?: (title: string, message: string) => Promise<boolean>;
+        notify: (message: string, level: "info" | "error") => void;
+    };
+}
+export interface OfferMiningBeatOptions {
+    repoFullName: string | undefined;
+    /** From `/context?repo=`; the beat fires ONLY on an explicit 0. */
+    repoDecisionCount: number | undefined;
+    cwd: string;
+    baseUrl: string;
+    getToken: () => string | undefined;
+    fetchImpl?: typeof fetch;
+    markers: MineBeatMarkers;
+    gitImpl?: MineBeatGit;
+    collect?: typeof collectMineCorpus;
+}
+export interface MiningBeatOutcome {
+    offered: boolean;
+    accepted?: boolean;
+    banked?: number;
+}
+/**
+ * Offer (once per repo) and, on yes, run the seeding pass. Fail-soft
+ * throughout: any error surfaces as a notify at most, never a broken session.
+ */
+export declare function maybeOfferMiningBeat(ctx: MineBeatUi, opts: OfferMiningBeatOptions): Promise<MiningBeatOutcome>;
+//# sourceMappingURL=mineBeat.d.ts.map

package/dist/extension/mineBeat.js

@@ -0,0 +1,193 @@
+/**
+ * The opt-in repo seeding beat (org plane, Run 7).
+ *
+ * On the first interactive session in a repo whose repo-scoped decision
+ * ledger is empty (`/context?repo=` reports `repoDecisionCount: 0`), YAGNI
+ * Code offers — once — to read the repo's own decision record and seed the
+ * ledger: "Read this repo's ADRs and docs and seed the decision ledger?".
+ * One keystroke, then the backend extracts, dedupes, and banks at most 12
+ * `repo_mined` asserted rows, and the beat prints the banked count plus the
+ * Library review deep link.
+ *
+ * Never automatic, never a nag: a decline writes a per-repo marker so the
+ * beat does not recur; an accepted pass marks the repo only after the server
+ * confirms (a transport failure leaves the offer available next session).
+ * The corpus is collected at git HEAD (same echo-chamber guard as
+ * repoDocs.ts) — ADR directories, agent-instruction root docs, top-level
+ * docs/*.md, and recent merge subjects — bounded client-side to the same
+ * limits the backend enforces.
+ */
+import { execFileSync } from "node:child_process";
+import * as fs from "node:fs";
+import { dirname, join } from "node:path";
+import { METERED_POST_FETCH_POLICY, resilientFetch } from "./resilientFetch.js";
+/**
+ * Client-side bounds on the mining corpus — mirror of the backend's
+ * MINE_INPUT_LIMITS so nothing is silently truncated server-side.
+ */
+export const MINE_BEAT_LIMITS = {
+    maxDocs: 40,
+    maxPathChars: 300,
+    maxExcerptChars: 8_000,
+    maxCommitSubjects: 200,
+    maxSubjectChars: 200,
+};
+const GIT_OPTS = {
+    encoding: "utf8",
+    maxBuffer: 16 * 1024 * 1024,
+    stdio: ["ignore", "pipe", "ignore"],
+};
+function git(cwd, args) {
+    try {
+        return execFileSync("git", args, { cwd, ...GIT_OPTS });
+    }
+    catch {
+        return null;
+    }
+}
+/** Parse `owner/name` from an origin remote URL (ssh or https). */
+export function parseRepoFullName(remote) {
+    if (!remote)
+        return undefined;
+    const m = remote.trim().match(/[:/]([^/:]+\/[^/]+?)(?:\.git)?$/);
+    return m ? m[1] : undefined;
+}
+export const defaultMineBeatGit = {
+    repoFullName: (cwd) => parseRepoFullName(git(cwd, ["config", "--get", "remote.origin.url"])),
+    listAtHead: (cwd) => {
+        const out = git(cwd, ["ls-tree", "-r", "--name-only", "HEAD"]);
+        return out === null ? null : out.split("\n").filter(Boolean);
+    },
+    readAtHead: (cwd, rel) => git(cwd, ["show", `HEAD:${rel}`]),
+    mergeSubjects: (cwd, max) => {
+        const merges = git(cwd, ["log", "--merges", `-n`, String(max), "--pretty=%s"]);
+        const chosen = merges && merges.trim().length > 0
+            ? merges
+            : // Squash-merge repos have no merge commits; plain subjects still
+                // carry the shipped-work trail. No further heuristics (spec flag).
+                git(cwd, ["log", `-n`, String(max), "--pretty=%s"]);
+        return (chosen ?? "").split("\n").map((s) => s.trim()).filter(Boolean).slice(0, max);
+    },
+};
+/** Is this HEAD-tracked path part of the repo's decision record? */
+export function isMineCandidate(rel) {
+    if (/^(?:docs\/)?adrs?\/[^/]+\.md$/i.test(rel))
+        return true;
+    if (/^(?:AGENTS|CLAUDE|CONTRIBUTING|CONTEXT|ARCHITECTURE)\.md$/i.test(rel))
+        return true;
+    if (/^docs\/[^/]+\.md$/i.test(rel))
+        return true;
+    return false;
+}
+/** Collect the HEAD-era mining corpus, bounded to MINE_BEAT_LIMITS. */
+export function collectMineCorpus(cwd, gitImpl = defaultMineBeatGit) {
+    const tracked = gitImpl.listAtHead(cwd);
+    if (tracked === null)
+        return { docs: [], commitSubjects: [] };
+    const docs = [];
+    for (const rel of tracked) {
+        if (docs.length >= MINE_BEAT_LIMITS.maxDocs)
+            break;
+        if (rel.length > MINE_BEAT_LIMITS.maxPathChars)
+            continue;
+        if (!isMineCandidate(rel))
+            continue;
+        const body = gitImpl.readAtHead(cwd, rel);
+        if (body === null || body.trim().length === 0)
+            continue;
+        docs.push({ path: rel, excerpt: body.trim().slice(0, MINE_BEAT_LIMITS.maxExcerptChars) });
+    }
+    const commitSubjects = gitImpl
+        .mergeSubjects(cwd, MINE_BEAT_LIMITS.maxCommitSubjects)
+        .map((s) => s.slice(0, MINE_BEAT_LIMITS.maxSubjectChars));
+    return { docs, commitSubjects };
+}
+/** Filesystem path of one repo's beat marker under the state home. */
+export function mineMarkerPath(stateHome, repoFullName) {
+    return join(stateHome, "mine-beat", `${repoFullName.replace(/[/\\]/g, "__")}.json`);
+}
+export function fileMineBeatMarkers(stateHome) {
+    return {
+        has: (repo) => {
+            try {
+                return fs.existsSync(mineMarkerPath(stateHome, repo));
+            }
+            catch {
+                return false;
+            }
+        },
+        write: (repo, status) => {
+            try {
+                const p = mineMarkerPath(stateHome, repo);
+                fs.mkdirSync(dirname(p), { recursive: true });
+                fs.writeFileSync(p, JSON.stringify({ status, at: new Date().toISOString() }), "utf8");
+            }
+            catch {
+                // A marker failure must never break the session; worst case the beat
+                // asks once more next launch.
+            }
+        },
+    };
+}
+/**
+ * Offer (once per repo) and, on yes, run the seeding pass. Fail-soft
+ * throughout: any error surfaces as a notify at most, never a broken session.
+ */
+export async function maybeOfferMiningBeat(ctx, opts) {
+    const { repoFullName } = opts;
+    // Only an EXPLICIT zero fires the beat: an absent count means an older
+    // backend or a count failure, and a nag on either would be wrong.
+    if (!repoFullName || opts.repoDecisionCount !== 0)
+        return { offered: false };
+    if (opts.markers.has(repoFullName))
+        return { offered: false };
+    if (!ctx.hasUI || typeof ctx.ui.confirm !== "function")
+        return { offered: false };
+    const collect = opts.collect ?? collectMineCorpus;
+    const corpus = collect(opts.cwd, opts.gitImpl ?? defaultMineBeatGit);
+    // Nothing to mine yet: skip WITHOUT a marker, so a later checkout that
+    // gains docs still gets its one offer.
+    if (corpus.docs.length === 0 && corpus.commitSubjects.length === 0) {
+        return { offered: false };
+    }
+    const accepted = await ctx.ui.confirm("Seed the decision ledger?", `Read this repo's ADRs and docs and bank up to 12 candidate decisions for ${repoFullName}? You review every one in the Library before it counts as confirmed.`);
+    if (!accepted) {
+        opts.markers.write(repoFullName, "declined");
+        return { offered: true, accepted: false };
+    }
+    try {
+        const res = await resilientFetch(`${opts.baseUrl}/api/yagni-code/decisions/mine`, {
+            method: "POST",
+            headers: {
+                authorization: `Bearer ${opts.getToken() ?? ""}`,
+                "content-type": "application/json",
+            },
+            body: JSON.stringify({
+                repo: repoFullName,
+                docs: corpus.docs,
+                commitSubjects: corpus.commitSubjects,
+                // Stable per repo: the write-spool replay contract makes a retry of
+                // the same pass idempotent server-side.
+                idempotencyKey: `mine:${repoFullName}`,
+            }),
+        }, { fetchImpl: opts.fetchImpl, policy: METERED_POST_FETCH_POLICY });
+        if (!res.ok) {
+            // No marker: the offer stays available next session.
+            ctx.ui.notify("Seeding the decision ledger failed; YAGNI Code will offer again next session.", "error");
+            return { offered: true, accepted: true };
+        }
+        const body = (await res.json());
+        opts.markers.write(repoFullName, "seeded");
+        if (body.alreadyMined)
+            return { offered: true, accepted: true, banked: 0 };
+        const banked = typeof body.banked === "number" ? body.banked : 0;
+        const noun = banked === 1 ? "decision" : "decisions";
+        ctx.ui.notify(`Banked ${banked} ${noun} read from this repo's docs. Review them: ${opts.baseUrl}/knowledge/decisions`, "info");
+        return { offered: true, accepted: true, banked };
+    }
+    catch {
+        ctx.ui.notify("Seeding the decision ledger failed; YAGNI Code will offer again next session.", "error");
+        return { offered: true, accepted: true };
+    }
+}
+//# sourceMappingURL=mineBeat.js.map

package/dist/extension/permission.d.ts

@@ -41,6 +41,7 @@ export type PermissionMode = "auto" | "plan" | "review";
 export interface ModeHolder {
     get(): PermissionMode;
     set(m: PermissionMode): void;
+    onSet(fn: (m: PermissionMode) => void): void;
 }
 export declare function createModeHolder(initial?: PermissionMode): ModeHolder;
 /** Which tools each tier acts on, plus the optional grounding-bless predicate. */

package/dist/extension/permission.js

@@ -33,9 +33,15 @@ import { isDebug } from "./diagnostics.js";
 import { buildDiagnosticEvent, checkCircuitBreaker, DEFAULT_GUARDIAN_LIMITS, } from "./guardian.js";
 export function createModeHolder(initial = "auto") {
     let current = initial;
+    const listeners = new Set();
     return {
         get: () => current,
-        set: (m) => { current = m; },
+        set: (m) => {
+            current = m;
+            for (const fn of listeners)
+                fn(m);
+        },
+        onSet: (fn) => { listeners.add(fn); },
     };
 }
 export const DEFAULT_PERMISSION_POLICY = {
@@ -199,11 +205,6 @@ export function filterStaleModeContext(messages, currentMode) {
 }
 /** Legacy alias — the original plan-mode filter name. */
 export const filterStalePlanContext = filterStaleModeContext;
-const MODE_STATUS = {
-    auto: undefined,
-    plan: "⏸ plan",
-    review: "✓ review",
-};
 const MODE_COPY = {
     auto: "auto: coding changes apply directly; external tracker changes ask first (default).",
     plan: "plan: write, edit, and bash are held so the agent can explore and propose only.",
@@ -257,6 +258,11 @@ export function registerPermissionGate(pi, deps = {}) {
     const basePolicy = deps.policy ?? DEFAULT_PERMISSION_POLICY;
     let mode = deps.mode ?? "auto";
     const makeStore = deps.makeBlessStore ?? defaultMakeBlessStore;
+    deps.modeHolder?.onSet((m) => {
+        if (m !== mode)
+            approvedCommands.clear();
+        mode = m;
+    });
     // The session bless store is created lazily on the first tool_call (it needs
     // the cwd). Its isBlessed backs the review-mode auto-approve, UNLESS the caller
     // injected its own isBlessed (e.g. a test policy) — that always wins.
@@ -279,6 +285,11 @@ export function registerPermissionGate(pi, deps = {}) {
     const guardianTier = deps.guardianTier;
     // --- YAG-510 gate state ---
     // Grants: in-memory list seeded from deps, appended on "don't ask again".
+    // Deliberately NOT live-reloaded from disk: auto mode can write files, so a
+    // mid-session re-read of rules.json would let the agent (or a prompt
+    // injection) author its own grants and self-authorize within the same
+    // session. New grants from concurrent sessions apply at next launch — the
+    // startup load is the trust boundary (PR #1698 review).
     const grants = [...(deps.grants ?? [])];
     // Keyed by cwd: a session can change working directory (cd, /go worktrees),
     // and a repoKey memoized from the first cwd would let repo-A grants match
@@ -410,12 +421,13 @@ export function registerPermissionGate(pi, deps = {}) {
                 const guardianAvailable = Boolean(guardianState && !guardianDisabled && guardianReview);
                 const limits = guardianLimits ?? DEFAULT_GUARDIAN_LIMITS;
                 if (guardianAvailable && guardianState.read().reviews >= limits.maxReviews) {
-                    // Session consult cap. Review mode falls through to its ordinary
-                    // confirm (no LLM cost); auto blocks.
+                    // Sliding-window consult cap (capacity recovers as old reviews age
+                    // out — a long-lived session is never bricked). Review mode falls
+                    // through to its ordinary confirm (no LLM cost); auto blocks.
                     if (modeAtEntry === "auto") {
                         if (ctx?.hasUI)
-                            ctx.ui.notify(`Guardian review cap reached (${limits.maxReviews} this session).`, "warning");
-                        return { block: true, reason: `Guardian review cap reached (${limits.maxReviews} this session). Switch to /mode review to approve manually.` };
+                            ctx.ui.notify(`Guardian review cap reached (${limits.maxReviews} in the last hour).`, "warning");
+                        return { block: true, reason: `Guardian review cap reached (${limits.maxReviews} in the last hour). Capacity recovers as older reviews age out; switch to /mode review to approve manually, or retry this step later.` };
                     }
                     // fall through to decision.confirm below
                 }
@@ -447,7 +459,7 @@ export function registerPermissionGate(pi, deps = {}) {
                     }
                     // Show the reviewing chip.
                     if (ctx?.hasUI)
-                        ctx.ui.setStatus?.("yagni-guardian", "🛡 reviewing");
+                        ctx.ui.setStatus?.("yagni-guardian", "Guardian Reviewing");
                     const startMs = Date.now();
                     let reviewResult;
                     try {
@@ -740,13 +752,6 @@ export function registerPermissionGate(pi, deps = {}) {
     });
     const paintMode = (ctx) => {
         deps.modeHolder?.set(mode);
-        try {
-            if (ctx.hasUI)
-                ctx.ui.setStatus?.("yagni-mode", MODE_STATUS[mode]);
-        }
-        catch {
-            // The chip is chrome; never let it break /mode.
-        }
     };
     pi.registerCommand("mode", {
         description: "Set the permission tier: /mode auto | plan | review. No argument shows the current mode.",