@garuda-agent/garuda 0.16.0 → 0.17.0

package/dist/chunk-J4346IDH.js

@@ -0,0 +1,156 @@
+#!/usr/bin/env node
+import {
+  EFFORTS
+} from "./chunk-BHZ6G65V.js";
+
+// src/model/pricing.ts
+var DEFAULT_CONTEXT_WINDOW = 2e5;
+var M = 1e6;
+var ALWAYS = { mode: "always", efforts: EFFORTS };
+var OPTIONAL = { mode: "optional", efforts: EFFORTS };
+var OPTIONAL_46 = {
+  mode: "optional",
+  efforts: EFFORTS.filter((e) => e !== "xhigh")
+};
+var KNOWN = [
+  // October 2026. Sonnet 5.5 turns thinking "off" with `between_tools`, Haiku 5.5 only at high
+  // effort or below: Garuda does not offer off for them yet, so they are "always" here.
+  ["claude-sonnet-5-5", { price: p(2, 10, 0.1, 2.5), contextWindow: M, thinking: ALWAYS }],
+  [
+    "claude-haiku-5-5",
+    {
+      price: {
+        ...p(0.1, 0.5, 0.01, 0.125),
+        over: { tokens: 1e5, price: p(0.5, 2.5, 0.05, 0.625) }
+      },
+      contextWindow: M,
+      thinking: ALWAYS
+    }
+  ],
+  ["claude-fable-5-1", { price: p(10, 50, 0.25, 12.5), contextWindow: M, thinking: ALWAYS }],
+  ["claude-fable-5", { price: p(10, 50, 1, 12.5), contextWindow: M, thinking: ALWAYS }],
+  ["claude-opus-5-5", { price: p(4, 20, 0.2, 5), contextWindow: M, thinking: ALWAYS }],
+  ["claude-opus-5", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: ALWAYS }],
+  ["claude-opus-4-8", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: OPTIONAL }],
+  ["claude-opus-4-7", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: OPTIONAL }],
+  ["claude-opus-4-6", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: OPTIONAL_46 }],
+  ["claude-opus-4-5", { price: p(5, 25, 0.5, 6.25), contextWindow: 2e5 }],
+  ["claude-sonnet-5", { price: p(2, 10, 0.2, 2.5), contextWindow: M, thinking: ALWAYS }],
+  ["claude-sonnet-4-6", { price: p(3, 15, 0.3, 3.75), contextWindow: M, thinking: OPTIONAL_46 }],
+  ["claude-sonnet-4-5", { price: p(3, 15, 0.3, 3.75), contextWindow: 2e5 }],
+  ["claude-haiku-4-5", { price: p(1, 5, 0.1, 1.25), contextWindow: 2e5 }]
+];
+function p(input, output, cacheRead, cacheWrite) {
+  return { input, output, cacheRead, cacheWrite };
+}
+function aliasModel(alias) {
+  if (!/^(haiku|sonnet|opus|fable)$/.test(alias)) return void 0;
+  return KNOWN.find(([prefix]) => prefix.startsWith(`claude-${alias}-`))?.[0];
+}
+function knownModels() {
+  return KNOWN.map(([id, info]) => ({ id, info }));
+}
+function lookupModel(modelId) {
+  let best;
+  for (const [prefix, info] of KNOWN) {
+    if (modelId.startsWith(prefix) && prefix.length > (best?.prefix.length ?? 0)) {
+      best = { prefix, info };
+    }
+  }
+  return best?.info ?? { contextWindow: DEFAULT_CONTEXT_WINDOW };
+}
+var WEB_SEARCH_USD = 0.01;
+function costOf(usage, price, factor = 1) {
+  const prompt = usage.inputTokens + usage.cacheReadTokens + usage.cacheWriteTokens;
+  const at = price.over !== void 0 && prompt > price.over.tokens ? price.over.price : price;
+  return (usage.inputTokens * at.input + usage.outputTokens * at.output + usage.cacheReadTokens * at.cacheRead + usage.cacheWriteTokens * at.cacheWrite) / M * factor + (usage.webSearches ?? 0) * WEB_SEARCH_USD;
+}
+function responseCost(response, price) {
+  if (response.usageReported === false) return void 0;
+  return costOf(response.usage, price, response.priceFactor ?? 1);
+}
+function totalTokens(usage) {
+  return usage.inputTokens + usage.outputTokens + usage.cacheReadTokens + usage.cacheWriteTokens;
+}
+function contextSize(usage) {
+  return totalTokens(usage);
+}
+
+// src/session/redact.ts
+var REDACTED = "[REDACTED]";
+var PATTERNS = [
+  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/g,
+  /sk-ant-[A-Za-z0-9_-]{16,}/g,
+  /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
+  /\bAKIA[0-9A-Z]{16}\b/g,
+  /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g,
+  /\bgithub_pat_[A-Za-z0-9_]{30,}\b/g,
+  /\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
+  /\bAIza[0-9A-Za-z_-]{35}\b/g,
+  /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
+];
+var ASSIGNMENT = /\b([A-Za-z0-9_]*(?:api[_-]?key|secret|token|password|passwd)[A-Za-z0-9_]*)(["']?\s*[:=]\s*["']?)([^\s"'`,;]{8,})/gi;
+var OPAQUE_KEYS = /* @__PURE__ */ new Set(["encrypted_content", "encrypted_index", "signature"]);
+function looksLikeCode(name, value, next) {
+  if (/^[\d_.]+$/.test(value)) return !/pass|secret/i.test(name);
+  if (value.includes("(") || next === "(") return true;
+  return /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(value) && !/\d{4,}/.test(value);
+}
+var SECRET_ENV_NAME = /(KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL)/i;
+var movedSecrets = /* @__PURE__ */ new Map();
+function keepSecretForRedaction(name, value) {
+  movedSecrets.set(name, value);
+}
+var Redactor = class {
+  literals;
+  /**
+   * `env`: variables whose names look secret have their values removed wherever they appear.
+   * Default: this process's environment and the secrets moved out of it.
+   */
+  constructor(env = { ...process.env, ...Object.fromEntries(movedSecrets) }) {
+    this.literals = Object.entries(env).filter(
+      ([name, value]) => (SECRET_ENV_NAME.test(name) || value !== void 0 && movedSecrets.get(name) === value) && (value?.length ?? 0) >= 8
+    ).map(([, value]) => value).sort((a, b) => b.length - a.length);
+  }
+  text(input) {
+    let out = input;
+    for (const literal of this.literals) out = out.split(literal).join(REDACTED);
+    for (const pattern of PATTERNS) out = out.replace(pattern, REDACTED);
+    return out.replace(
+      ASSIGNMENT,
+      (all, name, sep, value, at) => looksLikeCode(name, value, out[at + all.length]) ? all : `${name}${sep}${REDACTED}`
+    );
+  }
+  /** A copy of `value` with every string redacted. */
+  value(value) {
+    return this.walk(value);
+  }
+  walk(value) {
+    if (typeof value === "string") return this.text(value);
+    if (Array.isArray(value)) return value.map((item) => this.walk(item));
+    if (value !== null && typeof value === "object") {
+      const redactedThinking = value.type === "redacted_thinking";
+      return Object.fromEntries(
+        Object.entries(value).map(([k, v]) => [
+          k,
+          (OPAQUE_KEYS.has(k) || redactedThinking && k === "data") && typeof v === "string" ? v : this.walk(v)
+        ])
+      );
+    }
+    return value;
+  }
+};
+
+export {
+  aliasModel,
+  knownModels,
+  lookupModel,
+  WEB_SEARCH_USD,
+  responseCost,
+  totalTokens,
+  contextSize,
+  REDACTED,
+  keepSecretForRedaction,
+  Redactor
+};
+//# sourceMappingURL=chunk-J4346IDH.js.map

package/dist/{chunk-NP6RIC25.js → chunk-JRVWH27M.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
-  keepSecretForRedaction,
   writeFileAtomic
-} from "./chunk-EIXUSVFX.js";
+} from "./chunk-U65DQZDB.js";
 import {
+  keepSecretForRedaction,
   lookupModel
-} from "./chunk-R7I2NBPX.js";
+} from "./chunk-J4346IDH.js";
 import {
   isLoopbackHost
 } from "./chunk-ATW7BNIG.js";
@@ -269,7 +269,7 @@ function resolveModel(spec, config = { providers: {}, models: {} }) {
     ...def.type === "anthropic" ? {
       async createBatch(env = process.env, options = {}) {
         const apiKey = providerKey(env, def.apiKeyEnv ?? "ANTHROPIC_API_KEY");
-        const { AnthropicBatchClient } = await import("./anthropic-NQDBCHJU.js");
+        const { AnthropicBatchClient } = await import("./anthropic-NQIZLD64.js");
         return new AnthropicBatchClient({ model, ...apiKey ? { apiKey } : {}, ...options });
       }
     } : {},
@@ -282,10 +282,10 @@ function resolveModel(spec, config = { providers: {}, models: {} }) {
       }
       if (def.type === "anthropic") {
         const key = providerKey(env, def.apiKeyEnv ?? "ANTHROPIC_API_KEY");
-        const { AnthropicClient } = await import("./anthropic-NQDBCHJU.js");
+        const { AnthropicClient } = await import("./anthropic-NQIZLD64.js");
         return new AnthropicClient({ model, ...key ? { apiKey: key } : {} });
       }
-      const { OpenAICompatibleClient } = await import("./openaiCompatible-CJWVJP5M.js");
+      const { OpenAICompatibleClient } = await import("./openaiCompatible-6TLDDW5U.js");
       return new OpenAICompatibleClient({
         provider,
         baseUrl: def.baseUrl,
@@ -328,4 +328,4 @@ export {
   keepProviderKeys,
   resolveModel
 };
-//# sourceMappingURL=chunk-NP6RIC25.js.map
+//# sourceMappingURL=chunk-JRVWH27M.js.map

package/dist/{chunk-HUIK3WXO.js → chunk-P6XWWIEK.js}

@@ -22,7 +22,9 @@ function ignoredProjectPolicy(root) {
   const file = join(root, POLICY_FILE);
   return existsSync(file) ? file : void 0;
 }
+var PROFILES = ["default", "strict"];
 var policySchema = z.strictObject({
+  profile: z.enum(PROFILES).optional(),
   disallowedCommands: z.array(z.string()).optional(),
   requireSandbox: z.boolean().optional(),
   denyPaths: z.array(z.string()).optional(),
@@ -37,7 +39,8 @@ var policySchema = z.strictObject({
   }).optional(),
   audit: z.strictObject({
     enabled: z.boolean().optional(),
-    level: z.enum(["all", "mutations", "denials"]).optional()
+    level: z.enum(["all", "mutations", "denials"]).optional(),
+    checkpoint: z.boolean().optional()
   }).optional()
 });
 function parsePolicy(json) {
@@ -47,6 +50,7 @@ function parsePolicy(json) {
   }
   const data = result.data;
   return {
+    ...data.profile === void 0 ? {} : { profile: data.profile },
     ...data.disallowedCommands === void 0 ? {} : { disallowedCommands: data.disallowedCommands },
     ...data.requireSandbox === void 0 ? {} : { requireSandbox: data.requireSandbox },
     ...data.denyPaths === void 0 ? {} : { denyPaths: data.denyPaths },
@@ -66,7 +70,8 @@ function parsePolicy(json) {
     ...data.audit === void 0 ? {} : {
       audit: {
         ...data.audit.enabled === void 0 ? {} : { enabled: data.audit.enabled },
-        ...data.audit.level === void 0 ? {} : { level: data.audit.level }
+        ...data.audit.level === void 0 ? {} : { level: data.audit.level },
+        ...data.audit.checkpoint === void 0 ? {} : { checkpoint: data.audit.checkpoint }
       }
     }
   };
@@ -106,7 +111,9 @@ function mergePolicies(user, managed) {
   const maxSteps = lower(user.limits?.maxSteps, managed.limits?.maxSteps);
   const tokenBudget = lower(user.limits?.tokenBudget, managed.limits?.tokenBudget);
   const audit = managed.audit ?? user.audit;
+  const profile = user.profile === void 0 && managed.profile === void 0 ? void 0 : user.profile === "strict" || managed.profile === "strict" ? "strict" : "default";
   return {
+    ...profile === void 0 ? {} : { profile },
     ...disallowedCommands === void 0 ? {} : { disallowedCommands },
     ...requireSandbox === void 0 ? {} : { requireSandbox },
     ...denyPaths === void 0 ? {} : { denyPaths },
@@ -156,6 +163,13 @@ function isCommandDisallowedByPolicy(policy, command) {
   }
   return { disallowed: false };
 }
+function isStrict(policy) {
+  return policy?.profile === "strict";
+}
+function withProfile(policy, projectProfile) {
+  if (!isStrict(policy) && projectProfile !== "strict") return policy;
+  return { ...policy, profile: "strict", requireSandbox: true };
+}
 function isSandboxRequiredByPolicy(policy, outsideSandbox) {
   if (policy.requireSandbox === true && outsideSandbox) {
     return {
@@ -221,14 +235,17 @@ export {
   POLICY_FILE,
   managedPolicyPath,
   ignoredProjectPolicy,
+  PROFILES,
   parsePolicy,
   mergePolicies,
   loadTeamPolicy,
   isCommandDisallowedByPolicy,
+  isStrict,
+  withProfile,
   isSandboxRequiredByPolicy,
   isPathDeniedByPolicy,
   isModelAllowedByPolicy,
   assertModelAllowedByPolicy,
   isHostBlockedByPolicy
 };
-//# sourceMappingURL=chunk-HUIK3WXO.js.map
+//# sourceMappingURL=chunk-P6XWWIEK.js.map

package/dist/{chunk-HE2K657U.js → chunk-TJIWD7R7.js}

@@ -4,11 +4,12 @@ import {
   pickChannel
 } from "./chunk-N4I6YS3E.js";
 import {
-  gateProjectSettings
-} from "./chunk-ULAJPMY7.js";
+  gateProjectSettings,
+  isCostIncomplete
+} from "./chunk-735BKABA.js";
 import {
   totalTokens
-} from "./chunk-R7I2NBPX.js";
+} from "./chunk-J4346IDH.js";
 import {
   TrustStore
 } from "./chunk-5DEWP3YX.js";
@@ -16,15 +17,16 @@ import {
   cleanArgs,
   commitJob,
   jobChanges,
+  outsideScope,
   prepareWorktree
-} from "./chunk-44QN5SWZ.js";
+} from "./chunk-55CFEEIN.js";
 import {
   defaultAgentEnv,
   removeAgent
-} from "./chunk-USCUXCAU.js";
+} from "./chunk-5B5HDTUR.js";
 import {
   jobReport
-} from "./chunk-YQTGMCU6.js";
+} from "./chunk-3MRQJKUO.js";
 import {
   jobVerdict,
   parseReview,
@@ -33,21 +35,24 @@ import {
   riskFlags,
   stackOf,
   testSummary
-} from "./chunk-OUCV3FCT.js";
+} from "./chunk-AOGFYUKG.js";
 import {
   JobGitError,
   git,
   hostCommand
-} from "./chunk-TUUEBHG2.js";
+} from "./chunk-6XHON3Q6.js";
 import {
   createExecutor,
   loadSettings
-} from "./chunk-GXZACJUI.js";
+} from "./chunk-B4SJY7KT.js";
 import {
   JOBS_DIR,
   loadJob,
   saveJob
-} from "./chunk-KKB5W47S.js";
+} from "./chunk-VTMD5IHD.js";
+import {
+  prepareWriteScope
+} from "./chunk-UIRJOQQS.js";
 import {
   parseRule
 } from "./chunk-3NJNVZTK.js";
@@ -93,6 +98,7 @@ async function proveJob(prepared, result, runtime, renderer, git2) {
   };
   if (job.review !== false && result.commit !== void 0) {
     renderer.info("Reviewing the diff (a principal engineer's review)\u2026");
+    const unreportedBefore = runtime.session?.unreportedTokens ?? 0;
     try {
       const diff = (await git(git2, job.root, ["diff", "--no-renames", job.base, job.branch], {
         check: false
@@ -118,8 +124,10 @@ async function proveJob(prepared, result, runtime, renderer, git2) {
     } catch (error) {
       proof.reviewError = error.message;
     }
+    if ((runtime.session?.unreportedTokens ?? 0) > unreportedBefore)
+      proof.reviewCostIncomplete = true;
   }
-  proof.verdict = jobVerdict(flags, proof.review?.verdict);
+  proof.verdict = jobVerdict(flags, proof.review?.verdict, proof.reviewError !== void 0);
   return proof;
 }
 async function prepareJob(mainRoot, id, at, renderer, git2 = createExecutor("host").executor, launchd = {}, trustHome) {
@@ -159,6 +167,15 @@ async function prepare(mainRoot, id, at, renderer, git2, trustHome) {
     renderer.error(`The job's worktree failed: ${error.message}`);
     return 1;
   }
+  if (job.writeScope !== void 0) {
+    const problem = prepareWriteScope(job.worktree, job.writeScope);
+    if (problem !== void 0) {
+      renderer.error(
+        `The job's write scope cannot be used: ${problem}. Fix "writeScope" in ${JOBS_DIR}/${id}.json.`
+      );
+      return 1;
+    }
+  }
   const gate = await gateProjectSettings({
     root: job.root,
     settings: await loadSettings(job.worktree),
@@ -172,6 +189,7 @@ async function prepare(mainRoot, id, at, renderer, git2, trustHome) {
     ...projectRest,
     ...job.network === void 0 ? {} : { network: { allow: job.network } },
     allow: [...project.allow, ...job.allow.map((rule) => parseRule(rule))],
+    ...job.writeScope === void 0 ? {} : { writeScope: job.writeScope },
     maxSteps: job.maxSteps,
     sandbox: {
       ...project.sandbox,
@@ -185,7 +203,8 @@ async function prepare(mainRoot, id, at, renderer, git2, trustHome) {
   renderer.info(
     `Job ${job.id}: ${job.title}
 Branch ${job.branch} \xB7 worktree ${job.worktree}
-Approved: ${job.allow.length === 0 ? "nothing beyond the sandbox" : job.allow.join(", ")}`
+Approved: ${job.allow.length === 0 ? "nothing beyond the sandbox" : job.allow.join(", ")}
+${job.writeScope === void 0 ? "Write scope: none. Commands may write anywhere in the worktree." : `Write scope: ${job.writeScope.length === 0 ? "nothing in the worktree" : job.writeScope.join(", ")} (the OS sandbox enforces it for commands).`}`
   );
   return { job, root: job.worktree, settings, denied: [], startedAt: Date.now() };
 }
@@ -224,8 +243,11 @@ function msUntil(hour, minute, now = /* @__PURE__ */ new Date()) {
   if (next.getTime() <= now.getTime()) next.setDate(next.getDate() + 1);
   return next.getTime() - now.getTime();
 }
+var ScopeViolation = class extends Error {
+};
 async function finishJob(prepared, outcome, runtime, renderer, git2 = createExecutor("host").executor, launchd = {}) {
   const { job } = prepared;
+  let scopeFailure;
   const hadAgent = job.launchd !== void 0 || launchd.fromLaunchd === true;
   delete job.launchd;
   const result = {
@@ -233,6 +255,7 @@ async function finishJob(prepared, outcome, runtime, renderer, git2 = createExec
     steps: outcome.kind === "done" ? outcome.result.steps : 0,
     tokens: runtime.session === void 0 ? 0 : totalTokens(runtime.session.usage),
     ...runtime.session?.costUsd === void 0 ? {} : { costUsd: runtime.session.costUsd },
+    ...runtime.session !== void 0 && isCostIncomplete(runtime.session) ? { costIncomplete: true } : {},
     durationMs: Date.now() - prepared.startedAt,
     ...runtime.session === void 0 ? {} : { sessionId: runtime.session.id },
     files: [],
@@ -249,6 +272,12 @@ async function finishJob(prepared, outcome, runtime, renderer, git2 = createExec
     ...outcome.kind === "error" ? { error: outcome.message } : {}
   };
   try {
+    const outside = job.writeScope === void 0 ? [] : await outsideScope(git2, job);
+    if (outside.length > 0) {
+      scopeFailure = `changes outside the approved write scope, so nothing was committed: ${outside.slice(0, 20).join(", ")}${outside.length > 20 ? ", \u2026" : ""}`;
+      result.error = [result.error, scopeFailure].filter(Boolean).join("; ");
+      throw new ScopeViolation();
+    }
     const commit = await commitJob(
       git2,
       job,
@@ -257,13 +286,15 @@ async function finishJob(prepared, outcome, runtime, renderer, git2 = createExec
     if (commit !== void 0) result.commit = commit;
     result.files = await jobChanges(git2, job);
   } catch (error) {
-    if (!(error instanceof JobGitError)) throw error;
-    result.error = [result.error, `commit: ${error.message}`].filter(Boolean).join("; ");
+    if (!(error instanceof ScopeViolation)) {
+      if (!(error instanceof JobGitError)) throw error;
+      result.error = [result.error, `commit: ${error.message}`].filter(Boolean).join("; ");
+    }
   }
   if (outcome.kind !== "interrupted") {
     result.proof = await proveJob(prepared, result, runtime, renderer, git2);
   }
-  job.status = outcome.kind === "error" ? "failed" : outcome.kind === "interrupted" ? "stopped" : "done";
+  job.status = outcome.kind === "error" || scopeFailure !== void 0 ? "failed" : outcome.kind === "interrupted" ? "stopped" : "done";
   job.endedAt = (/* @__PURE__ */ new Date()).toISOString();
   job.result = result;
   await saveJob(job);
@@ -319,4 +350,4 @@ export {
   msUntil,
   finishJob
 };
-//# sourceMappingURL=chunk-HE2K657U.js.map
+//# sourceMappingURL=chunk-TJIWD7R7.js.map

package/dist/chunk-U65DQZDB.js

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import {
+  knownModels
+} from "./chunk-J4346IDH.js";
+
+// src/model/catalog.ts
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { dirname, join } from "path";
+var CATALOG_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 1e4;
+var MAX_PAGES = 10;
+function catalogPath(home = homedir()) {
+  return join(home, ".garuda", "cache", "anthropic-models.json");
+}
+async function fetchCatalog(options) {
+  const fetcher = options.fetcher ?? fetch;
+  const base = (options.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");
+  const headers = { "anthropic-version": "2023-06-01" };
+  if (options.key !== void 0) headers["x-api-key"] = options.key;
+  const models = [];
+  let after;
+  try {
+    for (let page = 0; page < MAX_PAGES; page++) {
+      const url = `${base}/v1/models?limit=1000${after === void 0 ? "" : `&after_id=${encodeURIComponent(after)}`}`;
+      const response = await fetcher(url, {
+        headers,
+        redirect: "error",
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      });
+      if (!response.ok) {
+        await response.body?.cancel();
+        return { problem: `the Models API answered HTTP ${response.status}` };
+      }
+      const body = await response.json();
+      for (const m of body.data ?? []) {
+        if (typeof m.id !== "string" || !/^[A-Za-z0-9._:-]+$/.test(m.id)) continue;
+        models.push({
+          id: m.id,
+          ...typeof m.display_name === "string" ? { displayName: m.display_name } : {},
+          ...typeof m.max_input_tokens === "number" && m.max_input_tokens > 0 ? { contextWindow: m.max_input_tokens } : {}
+        });
+      }
+      if (body.has_more !== true || typeof body.last_id !== "string") break;
+      after = body.last_id;
+    }
+  } catch (error) {
+    return { problem: `Garuda could not read the Models API (${error.message})` };
+  }
+  return { catalog: { fetchedAt: (options.now ?? /* @__PURE__ */ new Date()).toISOString(), models } };
+}
+async function saveCatalog(catalog, home = homedir()) {
+  const path = catalogPath(home);
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await writeFile(path, `${JSON.stringify(catalog, null, 2)}
+`, { mode: 384 });
+}
+async function loadCatalog(home = homedir()) {
+  try {
+    const data = JSON.parse(await readFile(catalogPath(home), "utf8"));
+    if (typeof data.fetchedAt !== "string" || !Array.isArray(data.models)) return void 0;
+    return {
+      fetchedAt: data.fetchedAt,
+      models: data.models.filter((m) => typeof m?.id === "string")
+    };
+  } catch {
+    return void 0;
+  }
+}
+function mergedModels(catalog) {
+  const table = knownModels();
+  const exact = new Map(table.map((m) => [m.id, m.info]));
+  const out = [];
+  for (const m of catalog?.models ?? []) {
+    const info = exact.get(m.id) ?? prefixInfo(m.id);
+    if (info !== void 0) out.push({ id: m.id, info, known: true });
+    else out.push({ id: m.id, info: { contextWindow: m.contextWindow ?? 2e5 }, known: false });
+  }
+  for (const m of table) {
+    if (!out.some((o) => o.id === m.id)) out.push({ id: m.id, info: m.info, known: true });
+  }
+  return out;
+}
+function prefixInfo(id) {
+  let best;
+  for (const m of knownModels()) {
+    if (id.startsWith(`${m.id}-`) && /^\d{8}$/.test(id.slice(m.id.length + 1))) {
+      if (m.id.length > (best?.id.length ?? 0)) best = m;
+    }
+  }
+  return best?.info;
+}
+
+// src/tools/atomicWrite.ts
+import { randomBytes } from "crypto";
+import { chmod, link, realpath, rename, stat, unlink, writeFile as writeFile2 } from "fs/promises";
+import { basename, dirname as dirname2, join as join2 } from "path";
+async function writeFileAtomic(path, content, { createOnly }) {
+  const target = createOnly ? path : await realpath(path);
+  const temp = join2(
+    dirname2(target),
+    `.${basename(target)}.garuda-${randomBytes(4).toString("hex")}.tmp`
+  );
+  const mode = createOnly ? void 0 : (await stat(target)).mode & 4095;
+  await writeFile2(temp, content, { flag: "wx", ...mode === void 0 ? {} : { mode } });
+  try {
+    if (createOnly) {
+      try {
+        await link(temp, target);
+      } catch (error) {
+        const code = error.code;
+        if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV") throw error;
+        if (await exists(target)) throw Object.assign(new Error("EEXIST"), { code: "EEXIST" });
+        await rename(temp, target);
+        return;
+      }
+    } else {
+      await chmod(temp, mode ?? 420);
+      await rename(temp, target);
+      return;
+    }
+  } finally {
+    await unlink(temp).catch(() => {
+    });
+  }
+}
+async function exists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export {
+  writeFileAtomic,
+  fetchCatalog,
+  saveCatalog,
+  loadCatalog,
+  mergedModels
+};
+//# sourceMappingURL=chunk-U65DQZDB.js.map