@garuda-agent/garuda 0.14.1 → 0.16.0

package/dist/{chunk-U4OQVT2T.js → chunk-B6FA4I7Q.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-EU7PA45O.js";
 import {
   DEFAULT_ENV_ALLOWLIST
-} from "./chunk-D5O5CIWK.js";
+} from "./chunk-GXZACJUI.js";
 
 // src/lsp/install.ts
 import { mkdir } from "fs/promises";
@@ -70,4 +70,4 @@ export {
   installCommand,
   installServer
 };
-//# sourceMappingURL=chunk-U4OQVT2T.js.map
+//# sourceMappingURL=chunk-B6FA4I7Q.js.map

package/dist/chunk-EIXUSVFX.js

@@ -0,0 +1,116 @@
+#!/usr/bin/env node
+
+// src/session/redact.ts
+var REDACTED = "[REDACTED]";
+var PATTERNS = [
+  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/g,
+  /sk-ant-[A-Za-z0-9_-]{16,}/g,
+  /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g,
+  /\bgithub_pat_[A-Za-z0-9_]{30,}\b/g,
+  /\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
+  /\bAIza[0-9A-Za-z_-]{35}\b/g,
+  /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
+];
+var ASSIGNMENT = /\b([A-Za-z0-9_]*(?:api[_-]?key|secret|token|password|passwd)[A-Za-z0-9_]*)(["']?\s*[:=]\s*["']?)([^\s"'`,;]{8,})/gi;
+var OPAQUE_KEYS = /* @__PURE__ */ new Set(["encrypted_content", "encrypted_index", "signature"]);
+function looksLikeCode(name, value, next) {
+  if (/^[\d_.]+$/.test(value)) return !/pass|secret/i.test(name);
+  if (value.includes("(") || next === "(") return true;
+  return /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(value) && !/\d{4,}/.test(value);
+}
+var SECRET_ENV_NAME = /(KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL)/i;
+var movedSecrets = /* @__PURE__ */ new Map();
+function keepSecretForRedaction(name, value) {
+  movedSecrets.set(name, value);
+}
+var Redactor = class {
+  literals;
+  /**
+   * `env`: variables whose names look secret have their values removed wherever they appear.
+   * Default: this process's environment and the secrets moved out of it.
+   */
+  constructor(env = { ...process.env, ...Object.fromEntries(movedSecrets) }) {
+    this.literals = Object.entries(env).filter(
+      ([name, value]) => (SECRET_ENV_NAME.test(name) || value !== void 0 && movedSecrets.get(name) === value) && (value?.length ?? 0) >= 8
+    ).map(([, value]) => value).sort((a, b) => b.length - a.length);
+  }
+  text(input) {
+    let out = input;
+    for (const literal of this.literals) out = out.split(literal).join(REDACTED);
+    for (const pattern of PATTERNS) out = out.replace(pattern, REDACTED);
+    return out.replace(
+      ASSIGNMENT,
+      (all, name, sep, value, at) => looksLikeCode(name, value, out[at + all.length]) ? all : `${name}${sep}${REDACTED}`
+    );
+  }
+  /** A copy of `value` with every string redacted. */
+  value(value) {
+    return this.walk(value);
+  }
+  walk(value) {
+    if (typeof value === "string") return this.text(value);
+    if (Array.isArray(value)) return value.map((item) => this.walk(item));
+    if (value !== null && typeof value === "object") {
+      const redactedThinking = value.type === "redacted_thinking";
+      return Object.fromEntries(
+        Object.entries(value).map(([k, v]) => [
+          k,
+          (OPAQUE_KEYS.has(k) || redactedThinking && k === "data") && typeof v === "string" ? v : this.walk(v)
+        ])
+      );
+    }
+    return value;
+  }
+};
+
+// src/tools/atomicWrite.ts
+import { randomBytes } from "crypto";
+import { chmod, link, realpath, rename, stat, unlink, writeFile } from "fs/promises";
+import { basename, dirname, join } from "path";
+async function writeFileAtomic(path, content, { createOnly }) {
+  const target = createOnly ? path : await realpath(path);
+  const temp = join(
+    dirname(target),
+    `.${basename(target)}.garuda-${randomBytes(4).toString("hex")}.tmp`
+  );
+  const mode = createOnly ? void 0 : (await stat(target)).mode & 4095;
+  await writeFile(temp, content, { flag: "wx", ...mode === void 0 ? {} : { mode } });
+  try {
+    if (createOnly) {
+      try {
+        await link(temp, target);
+      } catch (error) {
+        const code = error.code;
+        if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV") throw error;
+        if (await exists(target)) throw Object.assign(new Error("EEXIST"), { code: "EEXIST" });
+        await rename(temp, target);
+        return;
+      }
+    } else {
+      await chmod(temp, mode ?? 420);
+      await rename(temp, target);
+      return;
+    }
+  } finally {
+    await unlink(temp).catch(() => {
+    });
+  }
+}
+async function exists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export {
+  REDACTED,
+  keepSecretForRedaction,
+  Redactor,
+  writeFileAtomic
+};
+//# sourceMappingURL=chunk-EIXUSVFX.js.map

package/dist/{chunk-YM6T4J5V.js → chunk-ENLDPN4S.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  colorDiff
+} from "./chunk-4JSUUDFQ.js";
 import {
   SPECIALIST_SPECS,
   THINKING_WORDS,
@@ -14,14 +17,14 @@ import {
   repoMapText,
   repoMapTool,
   verifyAuditFile
-} from "./chunk-ITITLNAR.js";
+} from "./chunk-WIJL72ZE.js";
 import {
   WEB_SEARCH_USD,
   totalTokens
-} from "./chunk-W7BPYQMW.js";
+} from "./chunk-R7I2NBPX.js";
 import {
   BUILTIN_COMMANDS
-} from "./chunk-KWRJREUH.js";
+} from "./chunk-23FXBNBB.js";
 import {
   LSP_LANGUAGES
 } from "./chunk-EU7PA45O.js";
@@ -29,108 +32,6 @@ import {
   listJobs
 } from "./chunk-KKB5W47S.js";
 
-// src/cli/approver.ts
-import { styleText } from "util";
-var TerminalApprover = class {
-  /** Set by the CLI: it aborts the current turn. */
-  onInterrupt = () => {
-  };
-  /** One question at a time (0.14.1, review): two prompts at once mixed their keys. */
-  ask(request, signal) {
-    const next = this.asking === 0 ? this.askNow(request, signal) : this.queue.then(() => this.askNow(request, signal));
-    this.asking++;
-    this.queue = next.catch(() => {
-    }).finally(() => {
-      this.asking--;
-    });
-    return next;
-  }
-  asking = 0;
-  queue = Promise.resolve();
-  async askNow(request, signal) {
-    signal.throwIfAborted();
-    const out = process.stderr;
-    out.write(`
-${header(request)}
-${colorPreview(request)}
-`);
-    if (!process.stdin.isTTY) {
-      out.write("No terminal to ask for approval, so Garuda denies this call.\n");
-      return "deny";
-    }
-    const sessionLabel = request.labels?.session ?? (request.target.kind === "command" ? "Yes, and allow this exact command for this session" : request.target.kind === "url" ? `Yes, and allow ${request.target.host} for this session` : `Yes, and allow all ${request.tool} calls for this session`);
-    const { select } = await import("@inquirer/prompts");
-    try {
-      return await select(
-        {
-          message: request.question ?? "Allow?",
-          choices: [
-            { name: request.labels?.once ?? "Yes, once", value: "once" },
-            { name: sessionLabel, value: "session" },
-            { name: request.labels?.deny ?? "No, deny", value: "deny" }
-          ].filter((c) => request.choices?.includes(c.value) ?? true)
-        },
-        { signal, output: out }
-      );
-    } catch (error) {
-      if (error.name === "ExitPromptError") this.onInterrupt();
-      throw error;
-    }
-  }
-};
-var SwitchApprover = class {
-  constructor(current) {
-    this.current = current;
-  }
-  current;
-  /** Called before each question: the chat's notifier (0.6). */
-  onAsk = () => {
-  };
-  ask(request, signal) {
-    this.onAsk(request);
-    return this.current.ask(request, signal);
-  }
-};
-function visible(text) {
-  return text.replace(/[\u0000-\u0008\u000b-\u001f]/g, (c) => String.fromCodePoint(9216 + c.charCodeAt(0))).replace(/\u007f/g, "\u2421").replace(
-    /[\u0080-\u009f\u200b-\u200f\u202a-\u202e\u2060-\u2064\u2066-\u2069\ufeff\u{e0000}-\u{e007f}]/gu,
-    (c) => `[U+${(c.codePointAt(0) ?? 0).toString(16).toUpperCase().padStart(4, "0")}]`
-  );
-}
-function hasHidden(text) {
-  return visible(text) !== text;
-}
-function header(request) {
-  const { tool, target, isolation } = request;
-  const title = request.title === void 0 ? void 0 : visible(request.title);
-  if (title !== void 0) return styleText("bold", title);
-  if (target.kind === "command") {
-    const where = isolation === "none" ? "on your machine, no sandbox" : target.outsideSandbox ? "OUTSIDE the sandbox: network on, writes anywhere" : `sandbox: ${isolation}`;
-    return styleText("bold", `${tool} wants to run a command (${where}):`);
-  }
-  if (target.kind === "input") return styleText("bold", `${tool} wants to run with this input:`);
-  if (target.kind === "url")
-    return styleText("bold", `${tool} wants to fetch from ${visible(target.host)}:`);
-  return styleText("bold", `${tool} wants to change ${visible(target.path)}:`);
-}
-function colorPreview({ target, preview }) {
-  const warning = hasHidden(preview) ? `
-${styleText("yellow", "  ! This holds hidden or control characters, shown as \u240D, \u241B or [U+\u2026]. Read it with care.")}` : "";
-  if (target.kind === "command") return `${styleText("cyan", `  $ ${visible(preview)}`)}${warning}`;
-  if (target.kind === "url") return `${visible(preview)}${warning}`;
-  return `${colorDiff(visible(preview))}${warning}`;
-}
-function colorDiff(text) {
-  return text.split("\n").map((line) => {
-    if (line.startsWith("+++") || line.startsWith("---") || line.startsWith("diff --git"))
-      return styleText("bold", line);
-    if (line.startsWith("+")) return styleText("green", line);
-    if (line.startsWith("-")) return styleText("red", line);
-    if (line.startsWith("@@")) return styleText("cyan", line);
-    return line;
-  }).join("\n");
-}
-
 // src/cli/errors.ts
 function describeError(error) {
   const parts = [];
@@ -588,7 +489,7 @@ async function jobsCommand(runtime, renderer, id) {
     return;
   }
   const jobs = await listJobs2(runtime.root);
-  const { defaultAgentEnv, nightAgentTime } = await import("./launchd-2FL5UN2U.js");
+  const { defaultAgentEnv, nightAgentTime } = await import("./launchd-SSX362VG.js");
   const night = nightAgentTime(runtime.root, defaultAgentEnv());
   const nightLine = night === void 0 ? [] : [
     `Night shift: launchd starts the queue at ${night.toTimeString().slice(0, 5)} on ${night.toDateString()} (/jobs cancel night removes it).`
@@ -1322,10 +1223,6 @@ var CommandArgs = class {
 };
 
 export {
-  TerminalApprover,
-  SwitchApprover,
-  header,
-  colorPreview,
   describeError,
   FOCUS_REPORTING_ON,
   FOCUS_REPORTING_OFF,
@@ -1347,4 +1244,4 @@ export {
   statusOf,
   CommandArgs
 };
-//# sourceMappingURL=chunk-YM6T4J5V.js.map
+//# sourceMappingURL=chunk-ENLDPN4S.js.map

package/dist/{chunk-D5O5CIWK.js → chunk-GXZACJUI.js}

@@ -2,6 +2,9 @@
 import {
   realRelative
 } from "./chunk-WMOLXTBU.js";
+import {
+  EFFORTS
+} from "./chunk-3EQU2GUX.js";
 import {
   isCommandDisallowedByPolicy,
   isHostBlockedByPolicy,
@@ -86,6 +89,8 @@ var DENY_READ_IN_HOME = [
   // Garuda's OAuth tokens for remote MCP servers (0.4). The rest of ~/.garuda stays readable:
   // skills and their scripts live there (0.5).
   ".garuda/mcp-auth.json",
+  // Provider keys that `garuda setup` stored (0.16).
+  ".garuda/credentials",
   // Claude Code: its config can hold MCP server tokens in env values; its credentials on Linux.
   ".claude.json",
   ".claude/.credentials.json"
@@ -698,27 +703,6 @@ function onPath(program) {
 import { readFile } from "fs/promises";
 import { join as join3 } from "path";
 import { z } from "zod";
-
-// src/model/types.ts
-var EFFORTS = ["low", "medium", "high", "xhigh", "max"];
-var ZERO_USAGE = {
-  inputTokens: 0,
-  outputTokens: 0,
-  cacheReadTokens: 0,
-  cacheWriteTokens: 0
-};
-function addUsage(a, b) {
-  const searches = (a.webSearches ?? 0) + (b.webSearches ?? 0);
-  return {
-    inputTokens: a.inputTokens + b.inputTokens,
-    outputTokens: a.outputTokens + b.outputTokens,
-    cacheReadTokens: a.cacheReadTokens + b.cacheReadTokens,
-    cacheWriteTokens: a.cacheWriteTokens + b.cacheWriteTokens,
-    ...searches === 0 ? {} : { webSearches: searches }
-  };
-}
-
-// src/permissions/settings.ts
 var SETTINGS_FILE = join3(".garuda", "settings.json");
 var NOTIFY_CHOICES = ["auto", "osc9", "bell", "off"];
 var schema = z.strictObject({
@@ -1155,6 +1139,8 @@ var PermissionEngine = class {
         target: asked,
         preview: info?.preview ?? describeTarget(asked),
         isolation: this.isolation,
+        ...request.callId === void 0 ? {} : { callId: request.callId },
+        ...info?.change === void 0 ? {} : { change: info.change },
         ...info?.title === void 0 ? {} : { title: info.title },
         ...info?.hunks === true ? {
           selectHunks: (hunks) => {
@@ -1318,9 +1304,6 @@ function describeTarget(target) {
 }
 
 export {
-  EFFORTS,
-  ZERO_USAGE,
-  addUsage,
   isSensitive,
   NETWORK_PORTS,
   expandAllowlist,
@@ -1336,4 +1319,4 @@ export {
   JOB_DENIAL,
   PermissionEngine
 };
-//# sourceMappingURL=chunk-D5O5CIWK.js.map
+//# sourceMappingURL=chunk-GXZACJUI.js.map

package/dist/{chunk-QOW5TK4L.js → chunk-HE2K657U.js}

@@ -4,9 +4,11 @@ import {
   pickChannel
 } from "./chunk-N4I6YS3E.js";
 import {
-  gateProjectSettings,
+  gateProjectSettings
+} from "./chunk-ULAJPMY7.js";
+import {
   totalTokens
-} from "./chunk-W7BPYQMW.js";
+} from "./chunk-R7I2NBPX.js";
 import {
   TrustStore
 } from "./chunk-5DEWP3YX.js";
@@ -15,11 +17,11 @@ import {
   commitJob,
   jobChanges,
   prepareWorktree
-} from "./chunk-YIZWYUBG.js";
+} from "./chunk-44QN5SWZ.js";
 import {
   defaultAgentEnv,
   removeAgent
-} from "./chunk-35GMLLJW.js";
+} from "./chunk-USCUXCAU.js";
 import {
   jobReport
 } from "./chunk-YQTGMCU6.js";
@@ -36,11 +38,11 @@ import {
   JobGitError,
   git,
   hostCommand
-} from "./chunk-ZGZ2ZADL.js";
+} from "./chunk-TUUEBHG2.js";
 import {
   createExecutor,
   loadSettings
-} from "./chunk-D5O5CIWK.js";
+} from "./chunk-GXZACJUI.js";
 import {
   JOBS_DIR,
   loadJob,
@@ -317,4 +319,4 @@ export {
   msUntil,
   finishJob
 };
-//# sourceMappingURL=chunk-QOW5TK4L.js.map
+//# sourceMappingURL=chunk-HE2K657U.js.map