@yagni-app/code 0.3.5 → 1.0.0

package/dist/extension/feedbackCommand.js

@@ -0,0 +1,151 @@
+/**
+ * The `/feedback` (alias `/bug`) command + the `/diagnostics` companion
+ * (YAG-580).
+ *
+ * `/feedback` captures the session transcript (pi's own append-only JSONL, read
+ * via `ctx.sessionManager` — never reconstructed from YAGNI_SESSION_ID, which is
+ * the proxy-attribution id), the session-scoped error trail (from the unified
+ * sink), any child `/go` run transcripts, a sanitized `yagni doctor` report, and
+ * git metadata — sanitizes the whole bundle with the shared scrub contract, and
+ * POSTs it to the YAGNI backend (opt-in, gated, named-human).
+ *
+ * `/diagnostics` is the read-only companion: it prints the last N sink lines for
+ * THIS session so the user can see what failed before deciding to attach it.
+ *
+ * Both treat the transcript as best-effort enrichment: pi's flush-to-file timing
+ * at command-invoke is not guaranteed, so a report never claims the reporting
+ * turn is captured unless it verifiably is.
+ */
+import { readFileSync } from "node:fs";
+import { scrubSecrets } from "./pipeline/scrubSecrets.js";
+import { readSessionTrail } from "./errorSink.js";
+const MAX_DESCRIPTION = 512;
+const MAX_TRANSCRIPT_READ_BYTES = 512 * 1024;
+const notify = (ctx, message, type) => {
+    if (ctx.hasUI)
+        ctx.ui.notify(message, type);
+};
+function redact(text) {
+    return scrubSecrets(text);
+}
+/**
+ * Read the durable transcript, clamped by byte size. Returns empty on any
+ * failure or when too large (mirrors Claude's MAX_TRANSCRIPT_READ_BYTES guard).
+ */
+function readTranscript(sessionFile) {
+    if (!sessionFile)
+        return "";
+    try {
+        const data = readFileSync(sessionFile, "utf8");
+        if (Buffer.byteLength(data, "utf8") > MAX_TRANSCRIPT_READ_BYTES)
+            return "";
+        return data;
+    }
+    catch {
+        return "";
+    }
+}
+async function handleFeedback(args, ctx, deps) {
+    const sessionId = ctx.sessionManager.getSessionId?.() ?? deps.env?.YAGNI_SESSION_ID ?? "";
+    const sessionFile = ctx.sessionManager.getSessionFile?.();
+    const cwd = ctx.cwd;
+    const description = args.trim()
+        ? args.trim()
+        : await ctx.ui.input("Describe the issue", "What went wrong, in one or two lines?");
+    if (!description || description.trim().length === 0) {
+        notify(ctx, "Feedback cancelled.", "info");
+        return;
+    }
+    if (!ctx.isIdle()) {
+        notify(ctx, "YAGNI Code is busy; wait for the current turn to finish before /feedback.", "warning");
+        return;
+    }
+    const transcript = readTranscript(sessionFile);
+    const trail = readSessionTrail(sessionId);
+    const doctorReport = deps.getDoctorReport
+        ? await deps.getDoctorReport().catch(() => undefined)
+        : undefined;
+    const git = deps.getGitState
+        ? await deps.getGitState(cwd).catch(() => ({}))
+        : {};
+    const childTranscripts = deps.getChildTranscripts
+        ? await deps.getChildTranscripts(cwd, sessionFile).catch(() => ({}))
+        : {};
+    // Consent: enumerate exactly what is about to leave the machine.
+    const lines = [
+        "Your feedback description",
+        `This session's transcript${transcript ? "" : " (could not be read — possibly one turn stale)"}`,
+        `${Object.keys(childTranscripts).length} child run transcript(s)`,
+        "Recent error trail for this session",
+        ...(doctorReport ? ["Sanitized yagni doctor report"] : []),
+        ...(git.branch ? ["Git metadata (branch/commit/remote/dirty)"] : []),
+    ];
+    const ok = await ctx.ui.confirm("Submit feedback?", lines.join("\n     - ") + "\n\nSend this report?");
+    if (!ok) {
+        notify(ctx, "Feedback cancelled.", "info");
+        return;
+    }
+    const payload = {
+        client: "cli",
+        clientVersion: deps.env?.YAGNI_CODE_VERSION?.trim() || "unknown",
+        platform: `${process.platform} ${process.arch}`,
+        description: redact(description).slice(0, MAX_DESCRIPTION),
+        sessionId,
+        ...(transcript ? { transcriptJsonl: redact(transcript) } : {}),
+        ...(trail ? { errorTrailJsonl: redact(trail) } : {}),
+        ...(Object.keys(childTranscripts).length > 0
+            ? { childTranscripts: Object.fromEntries(Object.entries(childTranscripts).map(([k, v]) => [k, redact(v)])) }
+            : {}),
+        ...(doctorReport ? { doctorReport: redact(doctorReport) } : {}),
+        ...(git.branch ? { gitBranch: git.branch } : {}),
+        ...(git.commit ? { gitCommit: git.commit } : {}),
+        ...(git.remote ? { gitRemote: git.remote } : {}),
+        ...(git.dirty !== undefined ? { gitDirty: git.dirty } : {}),
+    };
+    try {
+        const fetchImpl = deps.fetchImpl ?? fetch;
+        const res = await fetchImpl(`${deps.baseUrl.replace(/\/$/, "")}/api/yagni-code/feedback`, {
+            method: "POST",
+            headers: {
+                "content-type": "application/json",
+                authorization: `Bearer ${deps.getToken() ?? ""}`,
+            },
+            body: JSON.stringify(payload),
+            signal: AbortSignal.timeout(30_000),
+        });
+        if (res.ok) {
+            notify(ctx, "Feedback submitted. Thank you!", "info");
+        }
+        else {
+            notify(ctx, "Could not submit feedback. Please try again.", "error");
+        }
+    }
+    catch {
+        notify(ctx, "Could not submit feedback (network error). Please try again.", "error");
+    }
+}
+export function registerFeedbackCommands(pi, deps) {
+    pi.registerCommand("feedback", {
+        description: "File a bug report with your session transcript + error trail attached.",
+        handler: (args, ctx) => handleFeedback(args, ctx, deps),
+    });
+    pi.registerCommand("bug", {
+        description: "Alias for /feedback.",
+        handler: (args, ctx) => handleFeedback(args, ctx, deps),
+    });
+    pi.registerCommand("diagnostics", {
+        description: "Show recent error-trail lines for this session.",
+        handler: async (_args, ctx) => {
+            const sessionId = ctx.sessionManager.getSessionId?.() ?? deps.env?.YAGNI_SESSION_ID ?? "";
+            const trail = readSessionTrail(sessionId, 16 * 1024);
+            if (!trail) {
+                notify(ctx, "No recent diagnostics for this session.", "info");
+                return;
+            }
+            const lines = trail.split("\n").filter(Boolean);
+            const tail = lines.slice(-20);
+            notify(ctx, `Recent diagnostics (${lines.length} events):\n${tail.join("\n")}`, "info");
+        },
+    });
+}
+//# sourceMappingURL=feedbackCommand.js.map

package/dist/extension/hooks.js

@@ -17,11 +17,12 @@
  * Fail-soft: a broken hook degrades to "no hook," never to "broken session."
  */
 import { spawn } from "node:child_process";
-import { mkdirSync, appendFileSync, existsSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
 import { homedir } from "node:os";
 import { codeStateHome } from "./stateHome.js";
 import { isDebug } from "./diagnostics.js";
+import { logEvent } from "./errorSink.js";
 const SUPPORTED_EVENTS = [
     "SessionStart",
     "UserPromptSubmit",
@@ -286,16 +287,15 @@ export function parseCompactCancel(stdout) {
 function logHookEvent(env, payload) {
     if (!isDebug(env))
         return;
-    try {
-        if (process.env.NODE_TEST_CONTEXT)
-            return;
-        const logPath = join(codeStateHome(null, env), "logs", "hooks.log");
-        mkdirSync(dirname(logPath), { recursive: true });
-        appendFileSync(logPath, JSON.stringify({ ts: new Date().toISOString(), ...payload }) + "\n", "utf8");
-    }
-    catch {
-        // logging must never break the session
-    }
+    const event = typeof payload.event === "string" ? payload.event : "hook_event";
+    const { event: _ignored, ...fields } = payload;
+    logEvent({
+        source: "hooks",
+        level: "debug",
+        event,
+        sessionId: env.YAGNI_SESSION_ID ?? undefined,
+        fields,
+    });
 }
 /** Filter hook groups by workspace trust: project-level groups are skipped when untrusted. */
 function filterByTrust(groups, isTrusted) {

package/dist/extension/index.d.ts

@@ -120,6 +120,7 @@ export default function (pi: ExtensionAPI): Promise<void>;
 export { makeAskYagniTool } from "./askYagniTool.js";
 export { makeFileTicketTool, makeUpdateTicketStatusTool } from "./ticketTools.js";
 export { makeAskAdvisorTool, registerAdviseCommand } from "./askAdvisorTool.js";
+export { makeAskUserQuestionTool } from "./askUserQuestionTool.js";
 export { ADVISOR_TIER, DEFAULT_ADVISOR_LIMITS, decideConsult, formatAdvisorSubtotal, makeAdvisorState, } from "./advisor.js";
 export { DEFAULT_GUARDIAN_LIMITS, GUARDIAN_MODEL_TIER, formatGuardianSubtotal, makeGuardianState, resolveGuardianLimits, reviewCommand, deriveGuardianTimeoutMs, } from "./permission/guardian.js";
 export type { GuardianOutcome, GuardianVerdict, GuardianState, GuardianStateHandle, GuardianLimits, ReviewResult, ReviewCommandDeps, } from "./permission/guardian.js";

package/dist/extension/index.js

@@ -1,13 +1,13 @@
 import { createHash } from "node:crypto";
-import { appendFileSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
 import { Text } from "@earendil-works/pi-tui";
 import { DEFAULT_ADVISOR_LIMITS, formatAdvisorSubtotal, makeAdvisorState } from "./advisor.js";
 import { appendGrant, loadGrants, resolveRepoKey, storagePrefix } from "./permission/approvedPrefixes.js";
 import { redactCommand } from "./redact.js";
 import { formatGuardianSubtotal, GUARDIAN_MODEL_TIER, makeGuardianState, resolveGuardianLimits, reviewCommand, deriveGuardianTimeoutMs } from "./permission/guardian.js";
 import { makeAskAdvisorTool, registerAdviseCommand } from "./askAdvisorTool.js";
+import { makeAskUserQuestionTool } from "./askUserQuestionTool.js";
 import { makeAskYagniTool } from "./askYagniTool.js";
+import { makeWebFetchTool } from "./webFetchTool.js";
 import { makeFileTicketTool, makeUpdateTicketStatusTool } from "./ticketTools.js";
 import { makeReviewBusinessMatchTool } from "./reviewTool.js";
 import { registerCmuxBridge } from "./cmux/index.js";
@@ -18,6 +18,8 @@ import { BRAND_NAME, brandSystemPrompt, brandingDisabled, buildMastheadString, Y
 import { claudeRulesSection } from "./claudeRules.js";
 import { registerCostCommand } from "./costHud.js";
 import { isDebug } from "./diagnostics.js";
+import { logEvent } from "./errorSink.js";
+import { registerFeedbackCommands } from "./feedbackCommand.js";
 import { droppedSessionRuns, sessionRunIds } from "./sessionRuns.js";
 import { codeStateHome } from "./stateHome.js";
 import { logTurnLifecycle } from "./turnLog.js";
@@ -159,6 +161,9 @@ export async function registerYagni(pi, deps = {}) {
     // (flywheel-attributed records send dedupe: true). Run 7.
     const flywheelState = makeFlywheelState();
     pi.registerTool(makeAskYagniTool({ ...toolOpts, flywheel: flywheelState, getRepo: () => sessionRepo }));
+    // WebFetch (YAG-578): read an arbitrary URL as clean markdown + a
+    // standard-tier extraction, replacing the bash + curl + python dance.
+    pi.registerTool(makeWebFetchTool(toolOpts));
     // Ticket write-back (spec 2026-08-09): explicit user-intent writes to the
     // workspace tracker, attributed to the developer via per-user credentials.
     if (!evalMode) {
@@ -177,6 +182,9 @@ export async function registerYagni(pi, deps = {}) {
     // /advise runs the SAME tool, sharing the state handle, so a manual consult
     // draws on the same cap rather than opening a side channel around it.
     registerAdviseCommand(pi, askAdvisorTool);
+    // Structured human questions: the model poses a closed 2-4-option question
+    // and gets a clean machine-readable answer via ctx.ui.custom.
+    pi.registerTool(makeAskUserQuestionTool());
     // The differentiated business-grounded tools (loop bricks): review a change
     // for business fit, rank the next work by business priority, and record the
     // engineering rationale back onto the work-item.
@@ -244,6 +252,19 @@ export async function registerYagni(pi, deps = {}) {
     // M6 eval (report-only): /go-compare runs a ticket grounded vs blind and reports
     // the business-fit delta. Never wired to routing.
     registerGoCompareCommand(pi);
+    // YAG-580: /feedback (alias /bug) + /diagnostics. The capture/upload is the
+    // whole point, so it is gated to non-eval mode like every external side
+    // effect; the command's deps (doctor report, git state, child transcripts)
+    // are injected so the handler stays unit-testable without spawning git or
+    // reading the real session dir.
+    if (!evalMode) {
+        registerFeedbackCommands(pi, {
+            baseUrl,
+            getToken: getTokenFn,
+            fetchImpl: deps.fetchImpl,
+            env: deps.env,
+        });
+    }
     // W4 judgment loop: the decisions surface (/decide + /decisions) and the
     // bless-with-remember capture are the same product-intent write as the record
     // tools, so both are gated together (skipped in eval mode).
@@ -288,18 +309,19 @@ export async function registerYagni(pi, deps = {}) {
         ...(guardianMaxAttemptsAdvertised !== undefined ? { maxAttempts: guardianMaxAttemptsAdvertised } : {}),
     });
     guardianLimits.timeoutMs = guardianTimeoutMs;
-    // YAG-510: guardian.log stays the sanitized local debug sink (hash-only,
-    // never the command). The remote guardian-events stream below is the
-    // separate, opt-in, per-workspace analytics sink; the two are independent.
+    // YAG-510: Guardian events go to the unified sink under source:"guardian"
+    // (hash-only, never the command). The remote guardian-events stream below is
+    // the separate, opt-in, per-workspace analytics sink; the two are independent.
     const guardianLogSink = (payload) => {
-        try {
-            if (process.env.NODE_TEST_CONTEXT)
-                return;
-            const logPath = join(codeStateHome(null), "logs", "guardian.log");
-            mkdirSync(dirname(logPath), { recursive: true });
-            appendFileSync(logPath, JSON.stringify({ ts: new Date().toISOString(), ...payload }) + "\n", "utf8");
-        }
-        catch { /* logging must never break the session */ }
+        const event = typeof payload.event === "string" ? payload.event : "guardian_event";
+        const { event: _ignored, ...fields } = payload;
+        logEvent({
+            source: "guardian",
+            level: event === "guardian_event_post_failed" ? "error" : "info",
+            event,
+            sessionId: env.YAGNI_SESSION_ID ?? undefined,
+            fields,
+        });
     };
     // YAG-510: persisted "don't ask again" grants, per-repo keyed. Loaded once
     // at startup (grants added by other concurrent sessions appear next launch —
@@ -331,7 +353,8 @@ export async function registerYagni(pi, deps = {}) {
         // "off" → nothing (not even sent); "hash" → sha256 + family prefix +
         // metadata, no command content; "raw" → adds client-REDACTED command and
         // rationale. Fire-and-forget: one attempt, short timeout, failures logged
-        // fail-soft to guardian.log — a storage outage never touches the session.
+        // fail-soft to the unified sink (source:"guardian") — a storage outage
+        // never touches the session.
         onGuardianEvent: guardianStorageTier === "off" || evalMode
             ? undefined
             : (ev) => {
@@ -369,10 +392,10 @@ export async function registerYagni(pi, deps = {}) {
                             guardianLogSink({ event: "guardian_event_post_failed", status: res.status });
                         }
                     }
-                    catch (err) {
+                    catch {
                         guardianLogSink({
                             event: "guardian_event_post_failed",
-                            error: err instanceof Error ? err.message : "unknown",
+                            kind: "network",
                         });
                     }
                 })();
@@ -454,15 +477,13 @@ export async function registerYagni(pi, deps = {}) {
         onDivergence: (driverServerUsd, localUsd) => {
             if (!isDebug(env))
                 return;
-            try {
-                const path = join(codeStateHome(null, env), "logs", "cost-divergence.log");
-                mkdirSync(dirname(path), { recursive: true });
-                const line = { ts: new Date().toISOString(), driverServerUsd, localUsd };
-                appendFileSync(path, JSON.stringify(line) + "\n", "utf8");
-            }
-            catch {
-                /* a diagnostic must never break /cost */
-            }
+            logEvent({
+                source: "cost",
+                level: "debug",
+                event: "cost_divergence",
+                sessionId: env.YAGNI_SESSION_ID ?? undefined,
+                fields: { driverServerUsd, localUsd },
+            });
         },
         // Carry-over (/cost re-review): surfaces sessionRuns.ts's dropped-run-id
         // count as costHud's "Excludes N earlier /go runs." note.
@@ -691,21 +712,16 @@ export async function registerYagni(pi, deps = {}) {
                 // session token is expired and refresh failed — the most critical
                 // failure signal is no longer silently dropped.
                 void authReporter(new Error(`auth_401 on model path; refresh=${rotated ? "succeeded" : "failed"}`), "auth-failure").catch(() => { });
-                // YAG-500 Fix F: local diagnostics log under YAGNI_DEBUG.
-                if (isDebug(env)) {
-                    try {
-                        const logPath = join(codeStateHome(null, env), "logs", "auth-events.log");
-                        mkdirSync(dirname(logPath), { recursive: true });
-                        appendFileSync(logPath, JSON.stringify({
-                            ts: new Date().toISOString(),
-                            status: 401,
-                            refresh: rotated ? "succeeded" : "failed",
-                        }) + "\n", "utf8");
-                    }
-                    catch {
-                        // A diagnostic must never break the session.
-                    }
-                }
+                // YAG-500 Fix F: auth-401 signal is content-free (status + refresh
+                // boolean), so it is always-on and upload-safe by the default-on
+                // invariant. No message content, no tokens, no headers.
+                logEvent({
+                    source: "auth",
+                    level: "info",
+                    event: "auth_401",
+                    sessionId: env.YAGNI_SESSION_ID ?? undefined,
+                    fields: { status: 401, refresh: rotated ? "succeeded" : "failed" },
+                });
                 return { message: { ...msg, errorMessage: explanation } };
             }
             // YAG-460: the backend proxy answers an oversized conversation with an
@@ -759,6 +775,16 @@ export async function registerYagni(pi, deps = {}) {
     // and a "Pi can explain its own features…" line) with a YAGNI Code masthead,
     // set the terminal title, and add a footer brand mark. TUI only.
     pi.on("session_start", async (event, ctx) => {
+        // Surface Pi's native find/grep/ls on the driver. These are Pi's
+        // equivalents of Claude Code's Glob/Grep/LS; the /go stages and subagents
+        // already pass them explicitly, but the driver defaults to read/bash/edit/write
+        // and otherwise reaches for `bash` find/grep/ls.
+        try {
+            pi.setActiveTools([...pi.getActiveTools(), "grep", "find", "ls"]);
+        }
+        catch {
+            // Tool enrichment must never break session start.
+        }
         ctx.ui?.setTitle(BRAND_NAME);
         if (ctx.mode === "tui") {
             ctx.ui?.setStatus?.("brand", BRAND_NAME);
@@ -889,6 +915,30 @@ export async function registerYagni(pi, deps = {}) {
             footerInvalidateHandle.invalidateGit();
         }
     });
+    // Seed the unified error trail from tool-exec failures. A tool's SUCCESS
+    // is content (it lives in the transcript); its FAILURE is an error and belongs
+    // in the sink. We log only the tool name + error class — never args, partial
+    // results, or result bodies (those are content and stay out of the upload-safe
+    // tier). This is the tool-failure half of the error trail the ticket asks for.
+    pi.on("tool_execution_end", (event) => {
+        if (!event.isError)
+            return;
+        // `event.result` is any; its `.error`/message can echo a path or secret
+        // (a tool's own failure text). Keep the always-on trail content-free: use
+        // ONLY the Error subclass name, never the message or a String() of the
+        // result's error payload.
+        const errorClass = event.result instanceof Error
+            ? event.result.name || "Error"
+            : "tool_error";
+        logEvent({
+            source: "tool",
+            level: "error",
+            event: "tool_failed",
+            sessionId: sessionIdForLog(),
+            flush: "sync",
+            fields: { toolName: event.toolName, errorClass },
+        });
+    });
 }
 export default async function (pi) {
     await registerYagni(pi);
@@ -902,6 +952,7 @@ export default async function (pi) {
 export { makeAskYagniTool } from "./askYagniTool.js";
 export { makeFileTicketTool, makeUpdateTicketStatusTool } from "./ticketTools.js";
 export { makeAskAdvisorTool, registerAdviseCommand } from "./askAdvisorTool.js";
+export { makeAskUserQuestionTool } from "./askUserQuestionTool.js";
 export { ADVISOR_TIER, DEFAULT_ADVISOR_LIMITS, decideConsult, formatAdvisorSubtotal, makeAdvisorState, } from "./advisor.js";
 export { DEFAULT_GUARDIAN_LIMITS, GUARDIAN_MODEL_TIER, formatGuardianSubtotal, makeGuardianState, resolveGuardianLimits, reviewCommand, deriveGuardianTimeoutMs, } from "./permission/guardian.js";
 export { makeReviewBusinessMatchTool } from "./reviewTool.js";

package/dist/extension/mineBeat.js

@@ -20,6 +20,7 @@
 import { execFileSync } from "node:child_process";
 import * as fs from "node:fs";
 import { dirname, join } from "node:path";
+import { logEvent } from "./errorSink.js";
 import { METERED_POST_FETCH_POLICY, resilientFetch } from "./resilientFetch.js";
 /**
  * Client-side bounds on the mining corpus — mirror of the backend's
@@ -173,6 +174,12 @@ export async function maybeOfferMiningBeat(ctx, opts) {
         }, { fetchImpl: opts.fetchImpl, policy: METERED_POST_FETCH_POLICY });
         if (!res.ok) {
             // No marker: the offer stays available next session.
+            logEvent({
+                source: "mine-beat",
+                level: "error",
+                event: "mine_failed",
+                fields: { status: res.status },
+            });
             ctx.ui.notify("Seeding the decision ledger failed; YAGNI Code will offer again next session.", "error");
             return { offered: true, accepted: true };
         }
@@ -186,6 +193,12 @@ export async function maybeOfferMiningBeat(ctx, opts) {
         return { offered: true, accepted: true, banked };
     }
     catch {
+        logEvent({
+            source: "mine-beat",
+            level: "error",
+            event: "mine_failed",
+            fields: { kind: "network" },
+        });
         ctx.ui.notify("Seeding the decision ledger failed; YAGNI Code will offer again next session.", "error");
         return { offered: true, accepted: true };
     }

package/dist/extension/pipeline/goCommand.js

@@ -71,6 +71,7 @@ import { formatRunCostTable } from "./runCostTable.js";
 import { makeCombinedCheckpointStore, makeFileCheckpointStore, makePiJournalCheckpointStore, } from "./checkpoint.js";
 import { getToken as defaultGetToken, resolveBaseUrl } from "../config.js";
 import { makeCrashReporter } from "../crashReport.js";
+import { logEvent } from "../errorSink.js";
 import { scrubSecrets } from "./scrubSecrets.js";
 import { isDesktopSurface } from "../surface.js";
 import { runFinish as defaultRunFinish, verifyTrailerValue, } from "./finish.js";
@@ -1104,6 +1105,7 @@ export function registerGoCommand(pi, deps = {}) {
                     // return results instead) — report it, fire-and-forget. The default
                     // reporter never rejects; the catch guards an injected one.
                     void reportCrash(err, "go", runCwd).catch(() => { });
+                    logEvent({ source: "go", level: "error", event: "go_failed", fields: { runId } });
                     // The stopReason travels to the backend run record; scrub it like
                     // every other captured text (a raw error can echo a connection
                     // string or key).

package/dist/extension/pipeline/runner.js

@@ -25,6 +25,7 @@ import * as path from "node:path";
 import { fileURLToPath } from "node:url";
 import { trackChild } from "./childRegistry.js";
 import { finalOutputFrom, foldEvent, newEventAccumulator } from "./events.js";
+import { logEvent } from "../errorSink.js";
 import { buildStageInvocation, groundedChildArgv } from "./invocation.js";
 import { personaBody } from "./personas.js";
 import { clampTier, resolveTierCap } from "./tierCap.js";
@@ -311,6 +312,14 @@ export async function runStage(stage, ctx, deps) {
                     final_output: finalOut,
                 }, null, 2));
                 dbgLog("stage_end");
+                if (overlongLinesDropped > 0) {
+                    logEvent({
+                        source: "pipeline",
+                        level: "debug",
+                        event: "overlong_lines_dropped",
+                        fields: { stage: stage.id, dropped: overlongLinesDropped },
+                    });
+                }
             }
             catch { /* ignore */ }
         }

package/dist/extension/silentTurnReminder.js

@@ -177,23 +177,23 @@ export function registerSilentTurnReminder(pi, deps = {}) {
             // Never break input handling.
         }
     });
-    // The nudge itself rides an existing tool result. Never appended to a
-    // user-facing tool's own result (a file_ticket/todo_write already IS
-    // speaking), and fail-soft: a reminder must never break a tool call.
-    pi.on("tool_result", async (event) => {
+    // The nudge rides the `context` event, which pi fires before each provider
+    // request (transformContext) on a throwaway copy of the message array. That
+    // makes it reach the model as the most recent message — and, unlike the old
+    // `tool_result` seam, it is never rendered to the user and never persisted
+    // to the session file. Appending (not replacing) preserves prior `context`
+    // handlers (e.g. gate.ts's mode-context filter), and fail-soft means a
+    // reminder must never break a turn.
+    pi.on("context", async (event) => {
         try {
-            if (event.isError)
-                return;
-            if (event.toolName === "todo_write" || event.toolName === "file_ticket" || event.toolName === "update_ticket_status") {
-                return;
-            }
+            const messages = Array.isArray(event.messages) ? event.messages : [];
             if (!shouldRemind({
                 msSinceSpoke: now() - lastSpokeAt,
                 turnsSinceSpoke,
                 msSinceLastNudge: lastNudgeAt === null ? null : now() - lastNudgeAt,
                 intervalMs,
             })) {
-                return;
+                return undefined;
             }
             nudgeCount += 1;
             lastNudgeAt = now();
@@ -203,14 +203,18 @@ export function registerSilentTurnReminder(pi, deps = {}) {
                 secondsSinceSpoke: Math.round((now() - lastSpokeAt) / 1000),
             });
             return {
-                content: [
-                    ...event.content,
-                    { type: "text", text: `\n\n${formatSilentReminder()}` },
+                messages: [
+                    ...messages,
+                    {
+                        role: "user",
+                        content: [{ type: "text", text: formatSilentReminder() }],
+                        timestamp: now(),
+                    },
                 ],
             };
         }
         catch {
-            return;
+            return undefined;
         }
     });
 }