@yagni-app/code 0.3.1 → 0.3.3

package/dist/cli.js

@@ -22,6 +22,7 @@ import { claudeCompatArgs } from "./claudeCompat.js";
 import { agentDir, credentialsDir, piPackageDir } from "./credentials.js";
 import { DISTRIBUTION } from "./distribution.js";
 import { connectCommand } from "./connectClaudeCode.js";
+import { goCommand } from "./goHeadless.js";
 import { login } from "./login.js";
 import { logout } from "./logout.js";
 import { tokenCommand } from "./token.js";
@@ -288,6 +289,10 @@ export const HELP_TEXT = [
     "  yagni login              Authorize the active environment (device-code flow).",
     "  yagni logout             Revoke and clear the active environment's token.",
     "  yagni doctor             Check that everything is ready (green/red checklist).",
+    "  yagni go --headless      Run the /go pipeline without a session, for scripts",
+    "                           and CI: --ticket-file <path> [--plan-file <path>]",
+    "                           [--memo-file <path>] [--run-id <id>] [--json].",
+    "                           Exits 0 only on a reviewed, verified candidate.",
     "  yagni connect claude-code  Route Claude Code through the YAGNI model proxy",
     "                           (--project scopes to this repo; --off disconnects).",
     "  yagni connect codex      Route Codex CLI through the YAGNI model proxy.",
@@ -313,6 +318,8 @@ export const HELP_TEXT = [
     "The active environment is sticky; `use` switches it (prod is the default).",
     "Set YAGNI_BASE_URL to override the base URL for a single run.",
     "Set YAGNI_DISABLE_UPDATE_CHECK=1 to silence the new-version notice.",
+    "Set YAGNI_GO_TIER_CAP=<tier> to cap every pipeline stage at that tier",
+    "  (peak, advanced, standard, efficient). For eval and smoke lanes only.",
     "Set YAGNI_DISABLE_CLAUDE_COMPAT=1 to skip loading .claude assets.",
     "Set YAGNI_DISABLE_BRANDING=1 to pass the system prompt through unmodified.",
     "Set YAGNI_DISABLE_CRASH_REPORTS=1 to turn off sanitized crash reports.",
@@ -424,6 +431,12 @@ export async function main(argv) {
     if (command === "connect") {
         return connectCommand(rest);
     }
+    // The headless pipeline entry. `go` is a real subcommand, not passthrough:
+    // the interactive run stays `/go` inside a session, and a `yagni go` without
+    // --headless is refused with usage rather than launched as an agent prompt.
+    if (command === "go") {
+        return goCommand(rest, {}, cliVersion());
+    }
     if (command === "token") {
         return tokenCommand();
     }

package/dist/crashReport.d.ts

@@ -29,6 +29,18 @@ export declare const MAX_CRASH_STACK_FRAMES = 40;
 export declare const MAX_CRASH_PAYLOAD_BYTES = 16384;
 /** Same truthiness rule as updateChecksDisabled: set and not "" / "0". */
 export declare function crashReportsDisabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * True when this process is a test run. A crash reporter that phones home
+ * from a test suite files FICTIONAL crashes against real production
+ * telemetry — see the twin comment in `pi-extension-yagni/src/crashReport.ts`
+ * (Sentry YAGNI-BACKEND-2P / -2Q). Kept in sync with that copy.
+ *
+ * Deliberately broad: a false positive costs one unreported crash on a
+ * developer machine, a false negative pollutes production.
+ */
+export declare function runningUnderTest(env?: NodeJS.ProcessEnv): boolean;
+/** Reporting is off when the user disabled it OR this is a test process. */
+export declare function crashReportsSuppressed(env?: NodeJS.ProcessEnv): boolean;
 export interface SanitizeCrashOptions {
     /** Environment whose values get redacted (defaults to process.env). */
     env?: NodeJS.ProcessEnv;

package/dist/crashReport.js

@@ -33,6 +33,33 @@ export function crashReportsDisabled(env = process.env) {
     const value = env[CRASH_REPORT_DISABLE_ENV];
     return value !== undefined && value !== "" && value !== "0";
 }
+/**
+ * True when this process is a test run. A crash reporter that phones home
+ * from a test suite files FICTIONAL crashes against real production
+ * telemetry — see the twin comment in `pi-extension-yagni/src/crashReport.ts`
+ * (Sentry YAGNI-BACKEND-2P / -2Q). Kept in sync with that copy.
+ *
+ * Deliberately broad: a false positive costs one unreported crash on a
+ * developer machine, a false negative pollutes production.
+ */
+export function runningUnderTest(env = process.env) {
+    if (env.NODE_ENV === "test")
+        return true;
+    // node:test sets this in every spawned test-file process.
+    if (env.NODE_TEST_CONTEXT)
+        return true;
+    if (env.VITEST || env.JEST_WORKER_ID)
+        return true;
+    // npm/pnpm export the script name being run (`pnpm test`, `pnpm test:file`).
+    const script = env.npm_lifecycle_event;
+    if (script === "test" || (script !== undefined && script.startsWith("test:")))
+        return true;
+    return false;
+}
+/** Reporting is off when the user disabled it OR this is a test process. */
+export function crashReportsSuppressed(env = process.env) {
+    return crashReportsDisabled(env) || runningUnderTest(env);
+}
 // Mirrors scrubSecrets (backend yagniCode/scrubSecrets.ts and
 // pi-extension-yagni pipeline/scrubSecrets.ts) — keep in sync.
 const SECRET_PATTERNS = [
@@ -147,7 +174,7 @@ export function sanitizeCrashError(err, opts = {}) {
 export async function sendCrashReport(input) {
     try {
         const env = input.env ?? process.env;
-        if (crashReportsDisabled(env))
+        if (crashReportsSuppressed(env))
             return;
         const opts = { env, repoRoot: input.repoRoot };
         const stack = input.stack !== undefined

package/dist/extension/crashReport.d.ts

@@ -33,6 +33,24 @@ export declare const MAX_CRASH_STACK_FRAMES = 40;
 export declare const MAX_CRASH_PAYLOAD_BYTES = 16384;
 /** Same truthiness rule as the CLI's YAGNI_DISABLE_* family. */
 export declare function crashReportsDisabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * True when this process is a test run.
+ *
+ * A crash reporter that phones home from a test suite reports FICTIONAL
+ * crashes against real production telemetry. That is not theoretical: the
+ * `/go` terminal catch builds a live reporter whenever its caller doesn't
+ * inject one, so `goCommand.test.ts`'s deliberate `throw new Error("boom")`
+ * POSTed to https://yagni.app on every run — 915 events across Sentry
+ * YAGNI-BACKEND-2P / -2Q, from a team that had never witnessed a crash.
+ *
+ * Injecting a stub at each call site fixes one test; this makes the whole
+ * class impossible, so a future test that forgets cannot re-open the leak.
+ * Detection is deliberately broad — a false positive costs one unreported
+ * crash on a developer machine, a false negative pollutes production.
+ */
+export declare function runningUnderTest(env?: NodeJS.ProcessEnv): boolean;
+/** Reporting is off when the user disabled it OR this is a test process. */
+export declare function crashReportsSuppressed(env?: NodeJS.ProcessEnv): boolean;
 export interface SanitizeCrashOptions {
     env?: NodeJS.ProcessEnv;
     repoRoot?: string;

package/dist/extension/crashReport.js

@@ -40,6 +40,39 @@ export function crashReportsDisabled(env = process.env) {
     const value = env[CRASH_REPORT_DISABLE_ENV];
     return value !== undefined && value !== "" && value !== "0";
 }
+/**
+ * True when this process is a test run.
+ *
+ * A crash reporter that phones home from a test suite reports FICTIONAL
+ * crashes against real production telemetry. That is not theoretical: the
+ * `/go` terminal catch builds a live reporter whenever its caller doesn't
+ * inject one, so `goCommand.test.ts`'s deliberate `throw new Error("boom")`
+ * POSTed to https://yagni.app on every run — 915 events across Sentry
+ * YAGNI-BACKEND-2P / -2Q, from a team that had never witnessed a crash.
+ *
+ * Injecting a stub at each call site fixes one test; this makes the whole
+ * class impossible, so a future test that forgets cannot re-open the leak.
+ * Detection is deliberately broad — a false positive costs one unreported
+ * crash on a developer machine, a false negative pollutes production.
+ */
+export function runningUnderTest(env = process.env) {
+    if (env.NODE_ENV === "test")
+        return true;
+    // node:test sets this in every spawned test-file process.
+    if (env.NODE_TEST_CONTEXT)
+        return true;
+    if (env.VITEST || env.JEST_WORKER_ID)
+        return true;
+    // npm/pnpm export the script name being run (`pnpm test`, `pnpm test:file`).
+    const script = env.npm_lifecycle_event;
+    if (script === "test" || (script !== undefined && script.startsWith("test:")))
+        return true;
+    return false;
+}
+/** Reporting is off when the user disabled it OR this is a test process. */
+export function crashReportsSuppressed(env = process.env) {
+    return crashReportsDisabled(env) || runningUnderTest(env);
+}
 const HOME_DIR_RE = /(?:\/(?:Users|home)\/|[A-Za-z]:\\Users\\)[^\s/\\]+/g;
 // Spaces deliberately allowed inside the token (real directories contain
 // them); prose after a path may fold into the kept basename — over-redacts
@@ -122,7 +155,7 @@ export function makeCrashReporter(opts) {
     return async (error, context, repoRoot) => {
         try {
             const env = opts.env ?? process.env;
-            if (crashReportsDisabled(env))
+            if (crashReportsSuppressed(env))
                 return;
             const token = opts.getToken();
             const sanitized = sanitizeCrashError(error, { env, repoRoot });
@@ -191,7 +224,7 @@ const DETACHED_SENDER_SRC = [
 export function reportFatalCrash(error, opts, context) {
     try {
         const env = opts.env ?? process.env;
-        if (crashReportsDisabled(env))
+        if (crashReportsSuppressed(env))
             return;
         const token = opts.getToken();
         if (!token)

package/dist/extension/footer.d.ts

@@ -39,7 +39,7 @@
  * — useful reference for what data to replicate and how to format it.
  */
 import type { ExtensionContext, ReadonlyFooterDataProvider, Theme } from "@earendil-works/pi-coding-agent";
-import type { ModeHolder, PermissionMode } from "./permission.js";
+import type { ModeHolder, PermissionMode } from "./permission/gate.js";
 export declare const BRANCH_MAX_WIDTH = 60;
 export declare function cyclePermissionMode(current: PermissionMode): PermissionMode;
 export declare function isShiftTab(data: string): boolean;

package/dist/extension/hooks.d.ts

@@ -0,0 +1,111 @@
+/**
+ * Lifecycle hooks system — user-configurable event hooks (YAG-506).
+ *
+ * Reads hook config from `~/.yagni-code/config.json` (user) and
+ * `.yagni-code/config.json` (project), and fires user-defined shell commands
+ * at lifecycle events. The config format mirrors Claude Code's `settings.json`
+ * hooks shape so a user can copy-paste between them.
+ *
+ * Supported events (8): SessionStart, UserPromptSubmit, PreToolUse,
+ * PostToolUse, PermissionRequest, PreCompact, PostCompact, SessionEnd.
+ *
+ * Exit code semantics (matching Claude Code / Codex):
+ *   0   = success; stdout parsed as JSON for structured decisions
+ *   2   = explicit block/deny (control events only); stderr = reason
+ *   other = hook failure; decision ignored, warning surfaced, normal flow
+ *
+ * Fail-soft: a broken hook degrades to "no hook," never to "broken session."
+ */
+import type { ExtensionAPI } from "@earendil-works/pi-coding-agent";
+/** A single hook command entry, matching Claude Code's wire format. */
+export interface HookEntry {
+    type: "command";
+    command: string;
+}
+/** A configured hook group with an optional matcher and source tag. */
+export interface HookGroup {
+    matcher?: string;
+    hooks: HookEntry[];
+    /** Where this group was loaded from. Project-level groups are gated on workspace trust. */
+    _source?: "user" | "project";
+}
+/** The hooks section of config.json. */
+export type HooksConfig = Record<string, HookGroup[]>;
+/** Supported Claude Code event names. */
+export type HookEventName = "SessionStart" | "UserPromptSubmit" | "PreToolUse" | "PostToolUse" | "PermissionRequest" | "PreCompact" | "PostCompact" | "SessionEnd";
+declare const SUPPORTED_EVENTS: readonly HookEventName[];
+/** Result of a PreToolUse hook evaluation. */
+export type PreToolUseHookResult = {
+    decision: "allow";
+} | {
+    decision: "deny";
+    reason: string;
+} | {
+    decision: "ask";
+} | null;
+/** Result of a PermissionRequest hook evaluation. */
+export type PermissionRequestHookResult = {
+    decision: "allow";
+} | {
+    decision: "deny";
+    reason: string;
+} | null;
+/** Interface injected into the permission gate. */
+export interface HookRunner {
+    preToolUse(toolName: string, input: Record<string, unknown>, cwd: string, trusted?: boolean): Promise<PreToolUseHookResult>;
+    permissionRequest(toolName: string, input: Record<string, unknown>, cwd: string, trusted?: boolean): Promise<PermissionRequestHookResult>;
+}
+/** Read and merge hooks config from user and project files. Pure I/O, fail-soft. */
+export declare function loadHooksConfig(userHome?: string, cwd?: string, env?: NodeJS.ProcessEnv): HooksConfig;
+/**
+ * Check if a matcher matches a tool name. Matches Claude Code / Codex:
+ * - No matcher → matches everything
+ * - "*" → matches everything
+ * - Exact string or pipe-separated alternatives ("Edit|Write") → exact match
+ * - Contains regex chars → regex match
+ */
+export declare function matchesMatcher(matcher: string | undefined, input: string | undefined): boolean;
+interface ExecResult {
+    exitCode: number | null;
+    stdout: string;
+    stderr: string;
+    error: string | null;
+    durationMs: number;
+}
+/** Execute a hook command with stdin JSON, timeout, and fail-soft. */
+declare function execHook(command: string, inputJson: string, cwd: string, timeoutMs?: number, env?: NodeJS.ProcessEnv): Promise<ExecResult>;
+/** Extract permissionDecision from PreToolUse stdout JSON. */
+export declare function parsePreToolUseOutput(stdout: string): PreToolUseHookResult;
+/** Extract decision from PermissionRequest stdout JSON. */
+export declare function parsePermissionRequestOutput(stdout: string): PermissionRequestHookResult;
+/** Extract additionalContext from stdout JSON (for SessionStart, UserPromptSubmit, PostToolUse). */
+export declare function parseAdditionalContext(stdout: string): string | null;
+/** Check if stdout JSON has continue: false (for PreCompact cancellation). */
+export declare function parseCompactCancel(stdout: string): boolean;
+interface HookExecutorOptions {
+    config: HooksConfig;
+    env?: NodeJS.ProcessEnv;
+    execImpl?: typeof execHook;
+    /** Returns true when the workspace is trusted (pi's project trust model). */
+    isTrusted?: () => boolean;
+}
+/**
+ * Create a HookRunner for injection into the permission gate. The `isTrusted`
+ * function is called per hook invocation to gate project-level hooks on
+ * workspace trust (pi's project trust model). Defaults to always-trusted.
+ */
+export declare function makeHookRunner(opts: HookExecutorOptions): HookRunner | null;
+export interface RegisterHooksDeps {
+    config?: HooksConfig;
+    env?: NodeJS.ProcessEnv;
+    execImpl?: typeof execHook;
+    /** Returns true when the workspace is trusted (pi's project trust model). */
+    isTrusted?: () => boolean;
+}
+/**
+ * Register pi event handlers for all configured lifecycle hooks.
+ * No-op if no hooks are configured or in eval mode.
+ */
+export declare function registerHooks(pi: ExtensionAPI, deps?: RegisterHooksDeps): void;
+export { SUPPORTED_EVENTS as HOOK_SUPPORTED_EVENTS };
+//# sourceMappingURL=hooks.d.ts.map