@yagni-app/code 1.0.3 → 1.0.5

package/dist/extension/askUserQuestionTool.js

@@ -309,14 +309,31 @@ class QuestionComponent {
         const indexText = `${this.otherIndex + 1}.`.padEnd(indexPad);
         if (isSelected) {
             // Inline input: show current text + inverse-video cursor at end.
+            // Wraps like a growing text field (the prompt input), never truncated.
             const cursor = "\x1b[7m \x1b[27m"; // space with reverse video = visible cursor
+            const gutter = `${marker} ${indexText}`;
+            const gutterWidth = visibleWidth(gutter);
+            // Reserve one column so the trailing cursor always fits on the last line.
+            const wrapWidth = Math.max(1, width - gutterWidth - 1);
             const text = this.otherValue || " ";
-            lines.push(clampLine(`${marker} ${indexText}${text}${cursor}`, width));
+            const wrapped = wrapTextWithAnsi(text, wrapWidth);
+            wrapped.forEach((w, i) => {
+                const prefix = i === 0 ? gutter : " ".repeat(gutterWidth);
+                const body = i === wrapped.length - 1 ? `${w}${cursor}` : w;
+                lines.push(clampLine(prefix + body, width));
+            });
         }
         else {
             // Not focused: show placeholder or current text in dim.
             const display = this.otherValue || "(type a custom answer)";
-            lines.push(clampLine(`${marker} ${indexText}${t.fg("dim", display)}`, width));
+            const gutter = `${marker} ${indexText}`;
+            const gutterWidth = visibleWidth(gutter);
+            const wrapWidth = Math.max(1, width - gutterWidth);
+            const wrapped = wrapTextWithAnsi(t.fg("dim", display), wrapWidth);
+            wrapped.forEach((w, i) => {
+                const prefix = i === 0 ? gutter : " ".repeat(gutterWidth);
+                lines.push(clampLine(prefix + w, width));
+            });
         }
     }
     handleInput(data) {

package/dist/extension/footer.d.ts

@@ -3,7 +3,7 @@
  *
  * Renders three lines:
  *   1. folder  ·  [worktree]  ·  branch        (git context; ~-path fallback off-repo)
- *   2. model  ·  ↑in ↓out $cost  ·  ctx%        (session stats; context % is an integer)
+ *   2. ↑in ↓out $cost  ·  ctx%                 (session stats; context % is an integer)
  *   3. extension statuses                       (branding, todo counter, mode) joined by " · "
  *
  * --- How to customize the status bar (for future tickets) ---
@@ -24,11 +24,11 @@
  *   - `footerData` — ReadonlyFooterDataProvider: `getGitBranch()`,
  *     `getExtensionStatuses()` (statuses set via `ctx.ui.setStatus(key, text)`),
  *     `getAvailableProviderCount()`
- * Model info, token stats, and context usage are NOT on `footerData` — they're
- * on `ctx` (the ExtensionContext passed to the session_start handler):
- * `ctx.model`, `ctx.sessionManager`, `ctx.getContextUsage()`. Thread them
- * through a closure if the footer needs them (this module's
- * `createYagniFooterFactory` does exactly that).
+ * Token stats and context usage are NOT on `footerData` — they're on `ctx`
+ * (the ExtensionContext passed to the session_start handler):
+ * `ctx.sessionManager`, `ctx.getContextUsage()`. Thread them through a closure
+ * if the footer needs them (this module's `createYagniFooterFactory` does
+ * exactly that).
  *
  * COMPONENT CONTRACT: the returned object needs `render(width: number): string[]`
  * (returns the lines to display, one string per row) and `invalidate()` (called
@@ -94,8 +94,7 @@ export declare function detectGitInfo(cwd: string, home: string | undefined): Gi
 /** Pure line-builder, exported for tests. All data injected; colors via theme. */
 export declare function renderFooterLines(input: {
     git: GitInfo;
-    model: string;
-    /** Current permission mode; shown on line 2 to the left of the model as "<mode> mode". */
+    /** Current permission mode; shown on line 2 to the left of the stats as "<mode> mode". */
     mode?: PermissionMode | null;
     /** Formatted `+N -M` / `±`, or null when clean — appended to the branch as `[ … ]`. */
     diff?: string | null;

package/dist/extension/footer.js

@@ -3,7 +3,7 @@
  *
  * Renders three lines:
  *   1. folder  ·  [worktree]  ·  branch        (git context; ~-path fallback off-repo)
- *   2. model  ·  ↑in ↓out $cost  ·  ctx%        (session stats; context % is an integer)
+ *   2. ↑in ↓out $cost  ·  ctx%                 (session stats; context % is an integer)
  *   3. extension statuses                       (branding, todo counter, mode) joined by " · "
  *
  * --- How to customize the status bar (for future tickets) ---
@@ -24,11 +24,11 @@
  *   - `footerData` — ReadonlyFooterDataProvider: `getGitBranch()`,
  *     `getExtensionStatuses()` (statuses set via `ctx.ui.setStatus(key, text)`),
  *     `getAvailableProviderCount()`
- * Model info, token stats, and context usage are NOT on `footerData` — they're
- * on `ctx` (the ExtensionContext passed to the session_start handler):
- * `ctx.model`, `ctx.sessionManager`, `ctx.getContextUsage()`. Thread them
- * through a closure if the footer needs them (this module's
- * `createYagniFooterFactory` does exactly that).
+ * Token stats and context usage are NOT on `footerData` — they're on `ctx`
+ * (the ExtensionContext passed to the session_start handler):
+ * `ctx.sessionManager`, `ctx.getContextUsage()`. Thread them through a closure
+ * if the footer needs them (this module's `createYagniFooterFactory` does
+ * exactly that).
  *
  * COMPONENT CONTRACT: the returned object needs `render(width: number): string[]`
  * (returns the lines to display, one string per row) and `invalidate()` (called
@@ -244,7 +244,7 @@ export function renderFooterLines(input, theme, width, padX = 0) {
         }
     }
     const line1 = pad + truncateToWidth(line1Parts.join(sep), contentWidth, dim("…"));
-    // Line 2: [mode ·] model · ↑in ↓out $cost · ctx%
+    // Line 2: [mode ·] ↑in ↓out $cost · ctx%
     // Child-process spend (subagents, advisor, /go) joins the driver totals so
     // the footer matches the per-child receipts and /cost's session scope.
     const child = input.childUsage;
@@ -265,7 +265,6 @@ export function renderFooterLines(input, theme, width, padX = 0) {
         const modeLabel = modeDisplay(input.mode);
         line2Parts.push(theme.fg(modeLabel.color, modeLabel.text) + dim(" (shift+tab to change)"));
     }
-    line2Parts.push(dim(input.model));
     if (stats)
         line2Parts.push(dim(stats));
     line2Parts.push(theme.fg(contextColor(input.contextPercent), percentText));
@@ -307,7 +306,6 @@ export function createYagniFooterFactory(ctx, modeHolder, invalidateHandle, chil
                     .map(([, text]) => text);
                 return renderFooterLines({
                     git: gitInfo(),
-                    model: ctx.model?.id ?? "no-model",
                     mode: modeHolder?.get() ?? null,
                     diff: formatDiffStat(diffStatCache?.get() ?? null),
                     usage: collectUsage(ctx.sessionManager),

package/dist/extension/index.js

@@ -885,9 +885,12 @@ export async function registerYagni(pi, deps = {}) {
         // Surface Pi's native find/grep/ls on the driver. These are Pi's
         // equivalents of Claude Code's Glob/Grep/LS; the /go stages and subagents
         // already pass them explicitly, but the driver defaults to read/bash/edit/write
-        // and otherwise reaches for `bash` find/grep/ls.
+        // and otherwise reaches for `bash` find/grep/ls. Dedupe against the active
+        // set — condensedTools re-registers these built-ins, so they can already be
+        // active here, and a duplicated name in the request's tool list is a hard
+        // 400 on some providers (Baseten: "Tool names must be unique.").
         try {
-            pi.setActiveTools([...pi.getActiveTools(), "grep", "find", "ls"]);
+            pi.setActiveTools([...new Set([...pi.getActiveTools(), "grep", "find", "ls"])]);
         }
         catch {
             // Tool enrichment must never break session start.

package/dist/extension/permission/execPolicy.js

@@ -616,10 +616,20 @@ function classifySegmentTokens(rawTokens, policy, opts) {
     }
     const { tokens: strippedTokens, stripped } = stripLeadingTokens(rawTokens);
     if (strippedTokens.length === 0) {
+        // A segment made only of environment assignments (`FOO=bar`) is a no-op: it
+        // sets shell variables and executes nothing. Recognize it so a compound like
+        // `SF="$F"; echo hi` is not floored by its leading assignment. Safety holds
+        // because classifyCommand's construct floor + substitution danger scan run
+        // afterward: an assignment whose value is a `$(...)` substitution frees the
+        // inner text for the danger scan and downgrades the overall result to prompt
+        // or forbidden there.
+        if (!opts.forbiddenOnly && rawTokens.length > 0 && rawTokens.every((t) => ENV_ASSIGNMENT_RE.test(t))) {
+            return { decision: "allow", justification: "no-op environment assignment" };
+        }
         // env standalone: `env` or `env VAR=val` with no following command prints
         // environment variables — a read-only operation. stripLeadingTokens removes
         // `env` as a wrapper word, leaving empty tokens. Recognize this case instead
-        // of returning "empty command segment" (YAG-549).
+        // of returning "empty command segment".
         if (!opts.forbiddenOnly && rawTokens.length > 0 && basenameToken(rawTokens[0]) === "env") {
             const onlyEnvAndAssignments = rawTokens.every((t) => basenameToken(t) === "env" || ENV_ASSIGNMENT_RE.test(t));
             if (onlyEnvAndAssignments) {
@@ -951,6 +961,9 @@ export const DEFAULT_EXEC_POLICY = {
         { pattern: ["printf"], decision: "allow", justification: "print formatted text" },
         { pattern: ["whoami"], decision: "allow", justification: "show current user" },
         { pattern: ["uname"], decision: "allow", justification: "show system info" },
+        { pattern: ["ps"], decision: "allow", justification: "list processes (read-only)" },
+        { pattern: ["lsof"], decision: "allow", justification: "list open files and ports (read-only)" },
+        { pattern: ["sleep"], decision: "allow", justification: "no-op delay" },
         { pattern: ["git", "status"], decision: "allow", justification: "show working tree status" },
         { pattern: ["git", "log"], decision: "allow", justification: "show commit log" },
         { pattern: ["git", "diff"], decision: "allow", justification: "show changes" },
@@ -989,6 +1002,9 @@ export const DEFAULT_EXEC_POLICY = {
         },
         { pattern: ["linear", ["--help", "-h"]], decision: "allow", justification: "show Linear CLI help" },
         { pattern: ["linear", ["--version", "-V"]], decision: "allow", justification: "show Linear CLI version" },
+        { pattern: ["linear", "user", "list"], decision: "allow", justification: "list Linear workspace members (read-only)" },
+        { pattern: ["linear", "team", ["list", "members", "states", "id"]], decision: "allow", justification: "read Linear team data (read-only)" },
+        { pattern: ["linear", "project", ["list", "view"]], decision: "allow", justification: "read Linear project data (read-only)" },
         // gh api — REST GET (no params, no method override) and GraphQL queries (no mutation)
         // gh api defaults to POST when -f/-F params are present, so params are disqualifying.
         // GraphQL is always POST, but queries are reads; mutations/subscriptions are disqualifying.
@@ -1065,7 +1081,6 @@ export const DEFAULT_EXEC_POLICY = {
         { pattern: ["tar"], decision: "prompt", justification: "archive operation" },
         { pattern: ["zip"], decision: "prompt", justification: "archive operation" },
         { pattern: ["unzip"], decision: "prompt", justification: "archive operation" },
-        { pattern: ["ps"], decision: "prompt", justification: "lists processes" },
         { pattern: ["kill"], decision: "prompt", justification: "sends a signal to a process" },
         { pattern: ["chmod"], decision: "prompt", justification: "permission change — review the mode" },
         { pattern: ["chown"], decision: "prompt", justification: "ownership change" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yagni-app/code",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "YAGNI Code: a terminal coding agent that already knows your company. One YAGNI login routes the model and grounds the agent in your team's context.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "YAGNI, Inc. <jack@yagni.app> (https://yagni.app)",
@@ -41,5 +41,5 @@
     "turndown": "^7.2.4",
     "typebox": "^1.3.15"
   },
-  "yagniSourceSha": "e8e3f653ae3366f156535d53740b775e21fc6fb4"
+  "yagniSourceSha": "5bd359dcd98d8104d425f698a65ed60d780df0af"
 }