@garuda-agent/garuda 0.16.1 → 0.18.0

package/dist/cli/index.js

@@ -15,7 +15,11 @@ import {
   runCommand,
   runTurnInTerminal,
   stopMessage
-} from "../chunk-BQTUOO4G.js";
+} from "../chunk-OQ26W5L4.js";
+import {
+  SwitchApprover,
+  TerminalApprover
+} from "../chunk-4JSUUDFQ.js";
 import {
   PlainRenderer
 } from "../chunk-FARS4R67.js";
@@ -23,43 +27,44 @@ import {
   AutoApprover
 } from "../chunk-NXJ4XLB5.js";
 import {
-  Notifier,
-  pickChannel
-} from "../chunk-N4I6YS3E.js";
-import {
-  SwitchApprover,
-  TerminalApprover
-} from "../chunk-4JSUUDFQ.js";
+  NO_MODEL,
+  chooseModel,
+  keepProviderKeys,
+  loadModelsConfig,
+  providerKeySource,
+  resolveModel
+} from "../chunk-2FIV2VZP.js";
 import {
   DEFAULT_MAX_TOKENS,
-  FileSessionStore,
   Runtime,
   ToolRegistry,
   auditDirFor,
-  closeOpenToolCalls,
-  createSession,
   defaultTools,
-  parseRecords,
-  popPoint,
-  pushPoint,
   rebuildState,
-  redoPoint,
   runAgent,
   signature
-} from "../chunk-TILFPYWO.js";
+} from "../chunk-NHWHG3SW.js";
+import {
+  loadCatalog
+} from "../chunk-65NUEOI7.js";
 import "../chunk-G2AX7MGS.js";
 import "../chunk-A2QAIRQL.js";
-import "../chunk-ULAJPMY7.js";
 import {
-  NO_MODEL,
-  chooseModel,
-  keepProviderKeys,
-  loadModelsConfig,
-  providerKeySource,
-  resolveModel
-} from "../chunk-NP6RIC25.js";
-import "../chunk-EIXUSVFX.js";
-import "../chunk-R7I2NBPX.js";
+  Notifier,
+  pickChannel
+} from "../chunk-N4I6YS3E.js";
+import {
+  FileSessionStore,
+  closeOpenToolCalls,
+  createSession,
+  isCostIncomplete,
+  parseRecords,
+  pendingChildTokens,
+  popPoint,
+  pushPoint,
+  redoPoint
+} from "../chunk-UKIE4AAM.js";
+import "../chunk-7KBOIPUT.js";
 import {
   loadSearchConfig
 } from "../chunk-B25VL4RU.js";
@@ -69,19 +74,20 @@ import {
 import "../chunk-EU7PA45O.js";
 import {
   VERSION
-} from "../chunk-VBZCNMUD.js";
+} from "../chunk-C57GHLKP.js";
 import "../chunk-5DEWP3YX.js";
-import "../chunk-ZAE25JM2.js";
-import "../chunk-ATW7BNIG.js";
 import "../chunk-PZS3V6P3.js";
-import "../chunk-OUCV3FCT.js";
+import "../chunk-QANRZW7W.js";
+import "../chunk-ATW7BNIG.js";
+import "../chunk-AOGFYUKG.js";
 import {
   JOB_DENIAL
-} from "../chunk-GXZACJUI.js";
-import "../chunk-WMOLXTBU.js";
-import "../chunk-3EQU2GUX.js";
-import "../chunk-HUIK3WXO.js";
-import "../chunk-KKB5W47S.js";
+} from "../chunk-B4SJY7KT.js";
+import "../chunk-BHZ6G65V.js";
+import "../chunk-P6XWWIEK.js";
+import "../chunk-VTMD5IHD.js";
+import "../chunk-UIRJOQQS.js";
+import "../chunk-4LFJFDCF.js";
 import "../chunk-3NJNVZTK.js";
 
 // src/cli/index.ts
@@ -254,9 +260,41 @@ var NO_PERMISSIONS = {
     throw new Error("Replay runs no commands.");
   },
   deniedByPolicy: () => true,
+  writeScopeDenial: async () => "replay: no writes",
   commandPolicyDenial: () => "Replay runs no commands."
 };
 
+// src/nodeFloor.ts
+var NODE_SECURITY = {
+  date: "2026-10-21",
+  advisory: "https://nodejs.org/en/blog/vulnerability/october-2026-security-releases",
+  lines: { 22: "22.23.4", 24: "24.22.1", 26: "26.12.1" }
+};
+function nodeProblem(version = process.versions.node) {
+  const [major = 0] = parse(version);
+  const lines = Object.keys(NODE_SECURITY.lines).map(Number);
+  const floor = NODE_SECURITY.lines[major];
+  const use = `Use Node ${lines.map((l) => NODE_SECURITY.lines[l]).join(", ")} or later.`;
+  if (floor === void 0) {
+    if (major > Math.max(...lines)) return void 0;
+    return `Node ${version} gets no security fixes (Garuda supports ${lines.join(", ")}). ${use}`;
+  }
+  if (compare(parse(version), parse(floor)) < 0) {
+    return `Node ${version} does not have the security fixes of ${NODE_SECURITY.date} (${NODE_SECURITY.advisory}). Update to ${floor} or later.`;
+  }
+  return void 0;
+}
+function parse(version) {
+  return version.replace(/^v/, "").split(/[.-]/).slice(0, 3).map((n) => Number.parseInt(n, 10) || 0);
+}
+function compare(a, b) {
+  for (let i = 0; i < 3; i++) {
+    const d = (a[i] ?? 0) - (b[i] ?? 0);
+    if (d !== 0) return d;
+  }
+  return 0;
+}
+
 // src/cli/banner.ts
 import { homedir } from "os";
 var WORDMARK = [
@@ -516,7 +554,8 @@ function assistantLine(response, model) {
       }),
       stop_reason: response.stopReason,
       stop_sequence: null,
-      usage: apiUsage(response.usage)
+      usage: apiUsage(response.usage),
+      ...response.usageReported === false ? { usage_is_estimated: true } : {}
     },
     parent_tool_use_id: null
   };
@@ -564,7 +603,12 @@ function resultLine(outcome, info) {
     ...subtype === "success" ? { result: info.lastText } : {},
     stop_reason: result?.modelStopReason ?? null,
     total_cost_usd: info.totalCostUsd,
+    ...info.totalCostUnknown === true ? { total_cost_is_unknown: true } : {},
+    ...info.totalCostIncomplete === true ? { total_cost_is_incomplete: true } : {},
     usage: apiUsage(usage),
+    ...(result?.unreportedTokens ?? 0) > 0 ? { usage_is_incomplete: true, unreported_budget_tokens: result?.unreportedTokens } : {},
+    ...info.runCostUsd === void 0 ? { cost_is_unknown: true } : {},
+    ...info.runCostUsd !== void 0 && info.runCostIncomplete === true ? { cost_is_incomplete: true } : {},
     modelUsage: {
       [info.model]: {
         inputTokens: usage.inputTokens,
@@ -729,6 +773,9 @@ function askTerminal(prompt, history, io, completer) {
 
 // src/cli/index.ts
 async function main() {
+  const nodeWarning = nodeProblem();
+  if (nodeWarning !== void 0) process.stderr.write(`Warning: ${nodeWarning}
+`);
   const program = new Command().enablePositionalOptions().name("garuda").description("A terminal coding agent. With no task, it starts a chat in the current folder.").version(VERSION).option("-p, --prompt <task>", "run one task and exit").option("-m, --model <id>", "model id (or set GARUDA_MODEL)").option(
     "--subagent-model <id>",
     "model of the explore subagent (or set GARUDA_SUBAGENT_MODEL); default: the main model"
@@ -737,10 +784,23 @@ async function main() {
   ).option("--verbose", "with json output: also show the tool activity on stderr").action(async (options) => {
     process.exitCode = await start(options, program);
   });
-  program.command("eval").description("run the eval tasks in scratch folders and report pass/fail, steps and cost").option("-m, --model <id>", "model id (or set GARUDA_MODEL)").option("-s, --suite <name>", "basic (default), hard, java, python, all or repo").option("-t, --task <ids...>", "run only these tasks (from any suite)").option("--max-steps <n>", "step limit per task", (v) => Number.parseInt(v, 10)).option(
+  const evalCommand = program.command("eval").description("run the eval tasks in scratch folders and report pass/fail, steps and cost").option("-m, --model <id>", "model id (or set GARUDA_MODEL)").option("-s, --suite <name>", "basic (default), hard, java, python, medium, all or repo").option(
+    "-t, --task <ids...>",
+    "run only these tasks (from any dev suite, or the held-out set with --split)"
+  ).option("--max-steps <n>", "step limit per task", (v) => Number.parseInt(v, 10)).option(
     "--repeat <n>",
     "run each task n times and show the mean",
     (v) => Number.parseInt(v, 10)
+  ).option("--agent <name>", "garuda (default) or claude-code: the baseline on the same tasks").option(
+    "--split <name>",
+    "dev (default), heldout or all: the held-out tasks run only on request"
+  ).option("--addendum <file>", "add this text (4000 characters at most) to the system prompt").option("--mcp <server>", "allow this one server from ~/.garuda/mcp.json (an MCP A/B)").option(
+    "--mcp-prepare <command>",
+    "with --mcp: run this in each scratch folder before the agent (e.g. graphify update .)"
+  ).option("--shuffle", "run the tasks and their repeats in a random order from --seed").option(
+    "--seed <n>",
+    "seed for --shuffle and the report's interval (default 1)",
+    (v) => Number(v)
   ).option("--index <mode>", "code index tools for the model: off (default), lookup or all").option("--executor <name>", "auto (default), os or host").option("--keep", "keep the scratch folders").option("--list", "list the tasks and exit").option("--subagents <mode>", "the explore subagent: off (default) or on, for A/B runs").option("--subagent-model <id>", "model of the explore subagent; default: the main model").option("--todo <mode>", "the todo_write tool: off (default) or on, for A/B runs").option("--lsp <mode>", "language server errors in edit results: off (default) or on").option(
     "--format <mode>",
     "the project's formatter after edits: off (default) or on, for A/B runs"
@@ -772,13 +832,33 @@ async function main() {
     "--test-command <cmd>",
     "with --from-git: the test command; {files} takes the test files (default: detected)"
   ).action(async (options) => {
-    const { runEvalCommand } = await import("../evalCommand-RGMZRYDR.js");
+    const { runEvalCommand } = await import("../evalCommand-SKJQ6CW2.js");
     process.exitCode = await runEvalCommand({
       ...options,
       model: options.model ?? process.env.GARUDA_MODEL,
       subagentModel: options.subagentModel ?? process.env.GARUDA_SUBAGENT_MODEL
     });
   });
+  evalCommand.command("tune").description(
+    "improve a prompt addendum: a proposer model edits it, an edit stays when the dev score improves, the held-out set is measured once"
+  ).requiredOption(
+    "--addendum <file>",
+    "the starting addendum (a missing file starts empty); never edited"
+  ).option("--proposer <model>", "the model that proposes edits (default claude-opus-5-5)").option("-m, --model <id>", "the agent's model (or set GARUDA_MODEL)").option("-s, --suite <names...>", "dev suites (default: basic hard medium)").option("--rounds <n>", "proposals (default 5)", (v) => Number(v)).option("--repeat <n>", "runs of each dev task per score (default 3)", (v) => Number(v)).option("--heldout-repeat <n>", "runs of each held-out task (default 5)", (v) => Number(v)).option("--margin <n>", "more passing runs that keep an edit (default 2)", (v) => Number(v)).option(
+    "--max-cost <usd>",
+    "stop before a round that would pass this (default 20)",
+    (v) => Number(v)
+  ).option("--seed <n>", "seed for the run order and the intervals (default 1)", (v) => Number(v)).option("--yes", "start without the question").option("--parallel <n>", "runs at the same time in each score (default 4)", (v) => Number(v)).action(async (options) => {
+    const { runEvalTune } = await import("../evalTune-CZRCPSZ3.js");
+    process.exitCode = await runEvalTune({
+      ...options,
+      model: options.model ?? process.env.GARUDA_MODEL
+    });
+  });
+  evalCommand.command("compare").description("compare two eval reports of the same tasks (pass rates with a paired interval)").argument("<a>", "report.json, or its run folder (.garuda/evals/<run-id>)").argument("<b>", "the second report").option("--seed <n>", "seed for the bootstrap (default 1)", (v) => Number(v)).action(async (a, b, options) => {
+    const { runEvalCompare } = await import("../evalCommand-SKJQ6CW2.js");
+    process.exitCode = await runEvalCompare(a, b, options);
+  });
   program.command("init").description(
     "set up this folder (AGENTS.md; commands, MCP servers and rules from Claude Code, OpenCode, Codex, Gemini CLI, Tabnine, Cursor, Copilot), then chat"
   ).option("-m, --model <id>", "model id (or set GARUDA_MODEL)").action(async (options) => {
@@ -794,30 +874,30 @@ async function main() {
   program.command("night").description(
     "run this project's night queue (jobs from /schedule), up to 3 at a time, then write one digest"
   ).option("--at <HH:MM>", "wait until this local time first (keep the terminal open)").option("--parallel <n>", "jobs at the same time (1 to 10, default 3)").addOption(new Option("--from-launchd").hideHelp()).action(async (options) => {
-    const { nightCommand } = await import("../nightCommand-65MUEV32.js");
+    const { nightCommand } = await import("../nightCommand-WJU6VZA6.js");
     process.exitCode = await nightCommand(options, new PlainRenderer());
   });
   program.command("setup").description(
     "choose a provider and model and store its key (~/.garuda/credentials, only you can read it); editors run it to sign in"
   ).option("--show", "show the model and where each key comes from (keys masked)").option("--forget [key-name]", "remove a stored key, or all of them").action(async (options) => {
-    const { setupCommand, terminalIO } = await import("../setupCommand-VA7D5MZK.js");
+    const { setupCommand, terminalIO } = await import("../setupCommand-YMF6I3MD.js");
     process.exitCode = await setupCommand(options, { io: await terminalIO() });
   });
   program.command("acp").description(
     "run as an agent for an editor over the Agent Client Protocol (VS Code with an extension, Zed, JetBrains, Neovim, Emacs); the editor starts it"
   ).argument("[action]", "setup: run garuda setup (the editor's sign-in, ACP Terminal Auth)").option("-m, --model <id>", "model id (or set GARUDA_MODEL)").action(async (action, options) => {
-    const { acpCommand } = await import("../acpCommand-OTAYW7BS.js");
+    const { acpCommand } = await import("../acpCommand-IUZPLPLI.js");
     process.exitCode = await acpCommand({
       ...options,
       ...action === void 0 ? {} : { action }
     });
   });
   const lsp = program.command("lsp").description("show the language servers for diagnostics (TS/JS, Python, Java)").action(async () => {
-    const { lspStatusCommand } = await import("../lspCommand-JRXKRSL7.js");
+    const { lspStatusCommand } = await import("../lspCommand-ZZ6R4PA2.js");
     process.exitCode = await lspStatusCommand();
   });
   lsp.command("install").description("install a pinned language server into ~/.garuda/lsp (needs the network)").argument("<language>", "typescript, python or java").action(async (language) => {
-    const { lspInstallCommand } = await import("../lspCommand-JRXKRSL7.js");
+    const { lspInstallCommand } = await import("../lspCommand-ZZ6R4PA2.js");
     process.exitCode = await lspInstallCommand(language);
   });
   await program.parseAsync();
@@ -829,7 +909,7 @@ async function start(options, program) {
   let job;
   let jobGuard;
   if (options.job !== void 0) {
-    const { prepareJob } = await import("../jobCommand-ACSGSBQ4.js");
+    const { prepareJob } = await import("../jobCommand-2ODQLHB3.js");
     const prepared = await prepareJob(
       mainRoot,
       options.job,
@@ -841,7 +921,7 @@ async function start(options, program) {
     );
     if (typeof prepared === "number") return prepared;
     job = prepared;
-    const { failJobSync } = await import("../job-3NYDMP2M.js");
+    const { failJobSync } = await import("../job-7JOI4YIQ.js");
     const preparedJob = prepared;
     jobGuard = () => {
       if (preparedJob.job.status === "running") {
@@ -883,13 +963,14 @@ async function start(options, program) {
     }
   }
   const searchConfig = await loadSearchConfig();
+  const catalog = await loadCatalog();
   const credentialsWarning = await keepProviderKeys([
     resolved.def.apiKeyEnv,
     sub?.def.apiKeyEnv,
     "ANTHROPIC_API_KEY"
   ]);
   const anthropicKey = providerKeySource("ANTHROPIC_API_KEY");
-  const { loadTeamPolicy } = await import("../policy-EJPLEEXP.js");
+  const { loadTeamPolicy } = await import("../policy-ZJ7RMOFN.js");
   let team;
   try {
     team = await loadTeamPolicy();
@@ -965,7 +1046,9 @@ async function start(options, program) {
           ...r.maxTokens === void 0 ? {} : { maxTokens: r.maxTokens }
         };
       },
-      configured: Object.keys(models.config.models)
+      configured: Object.keys(models.config.models),
+      // The account's model list from `garuda setup` (0.17); no network call here.
+      ...catalog === void 0 ? {} : { catalog }
     },
     ...options.resume === void 0 ? {} : { resume: options.resume },
     onEvent: (event) => events.event(event),
@@ -982,11 +1065,11 @@ async function start(options, program) {
       "A job needs the OS sandbox (Seatbelt or bubblewrap): without it, every command would need an approval, and nobody is there to give it."
     );
     await runtime.close();
-    const { saveJob } = await import("../job-3NYDMP2M.js");
+    const { saveJob } = await import("../job-7JOI4YIQ.js");
     job.job.status = "failed";
     await saveJob(job.job);
     if (options.fromLaunchd === true || job.job.launchd !== void 0) {
-      const { removeAgent, defaultAgentEnv } = await import("../launchd-SSX362VG.js");
+      const { removeAgent, defaultAgentEnv } = await import("../launchd-3A3ONEW5.js");
       await removeAgent(runtime.executor, job.job, defaultAgentEnv());
     }
     return 1;
@@ -1036,11 +1119,19 @@ async function start(options, program) {
     });
     if (output !== void 0) events = output;
     const costBefore = runtime.session?.costUsd ?? 0;
+    const unreportedBefore = runtime.session?.unreportedTokens ?? 0;
+    const incompleteBefore = runtime.session?.costIncomplete ?? false;
+    const pendingBefore = runtime.session === void 0 ? 0 : pendingChildTokens(runtime.session);
     const finish = (outcome2) => {
-      const cost = runtime.session?.costUsd;
+      const session2 = runtime.session;
+      const cost = session2?.costUsd;
+      const runIncomplete = session2 !== void 0 && (session2.unreportedTokens > unreportedBefore || pendingChildTokens(session2) > pendingBefore || session2.costIncomplete && !incompleteBefore);
       output?.finish(outcome2, {
         totalCostUsd: cost ?? 0,
+        ...cost === void 0 ? { totalCostUnknown: true } : {},
+        ...session2 !== void 0 && isCostIncomplete(session2) ? { totalCostIncomplete: true } : {},
         runCostUsd: cost === void 0 ? void 0 : cost - costBefore,
+        ...runIncomplete ? { runCostIncomplete: true } : {},
         contextWindow: runtime.limits.contextWindow,
         maxOutputTokens: resolved.maxTokens ?? DEFAULT_MAX_TOKENS,
         ...outcome2.kind === "done" ? { stopMessage: stopMessage(outcome2.result.stopReason, runtime.limits) } : {}
@@ -1057,7 +1148,7 @@ async function start(options, program) {
       if (resolved2.kind === "prompt") prompt = resolved2.prompt;
     }
     if (job !== void 0) {
-      const { testsBefore } = await import("../jobCommand-ACSGSBQ4.js");
+      const { testsBefore } = await import("../jobCommand-2ODQLHB3.js");
       await testsBefore(job, runtime, renderer);
     }
     const outcome = await runTurnInTerminal(
@@ -1070,7 +1161,7 @@ async function start(options, program) {
     await runtime.close();
     finish(outcome);
     if (job !== void 0) {
-      const { finishJob } = await import("../jobCommand-ACSGSBQ4.js");
+      const { finishJob } = await import("../jobCommand-2ODQLHB3.js");
       await finishJob(job, outcome, runtime, renderer, void 0, {
         fromLaunchd: options.fromLaunchd === true
       });
@@ -1083,7 +1174,7 @@ async function start(options, program) {
   const bannerInfo = {
     version: VERSION,
     model: modelId,
-    sandbox: runtime.executor.isolation === "none" ? "none: each command asks first" : `${runtime.executor.name} \xB7 no network`,
+    sandbox: runtime.executor.isolation === "none" ? "none: each command asks first, unless a rule allows it" : `${runtime.executor.name} \xB7 no network`,
     root,
     extras: runtime.extras(),
     subagents: runtime.subagentsSummary(),
@@ -1156,7 +1247,7 @@ function wantsInk() {
 }
 async function loadInk(renderer) {
   try {
-    return await import("../inkChat-WEDGQMCY.js");
+    return await import("../inkChat-WYYAFZXD.js");
   } catch (error) {
     renderer.info(`Plain chat (Ink is not available: ${error.message.split("\n")[0]}).`);
     return void 0;
@@ -1187,9 +1278,9 @@ function recordJobDenial(job, tool, target) {
   job.denied.push({ tool, target: shown });
 }
 async function jobBatchClient(job, resolved, renderer) {
-  const { DeadlineClient } = await import("../deadline-F5RJJ2QW.js");
-  const { nextTime } = await import("../launchd-SSX362VG.js");
-  const { DEFAULT_FINISH_BY, DEFAULT_STEP_LIMIT_MINUTES, SWITCH_BEFORE_MS } = await import("../create-VXIH2GUZ.js");
+  const { DeadlineClient } = await import("../deadline-TP7ZGLT2.js");
+  const { nextTime } = await import("../launchd-3A3ONEW5.js");
+  const { DEFAULT_FINISH_BY, DEFAULT_STEP_LIMIT_MINUTES, SWITCH_BEFORE_MS } = await import("../create-W6BV75QX.js");
   const finishBy = job.job.finishBy ?? DEFAULT_FINISH_BY;
   const stepLimit = job.job.stepLimitMinutes ?? DEFAULT_STEP_LIMIT_MINUTES;
   const switchAt = new Date(nextTime(finishBy).getTime() - SWITCH_BEFORE_MS);

package/dist/config-WV2H64TF.js

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+import {
+  MCP_FILE,
+  SERVER_NAME,
+  checkServerUrl,
+  commandLine,
+  defHash,
+  expandEnv,
+  isHttp,
+  loadMcpConfig
+} from "./chunk-QANRZW7W.js";
+import "./chunk-ATW7BNIG.js";
+export {
+  MCP_FILE,
+  SERVER_NAME,
+  checkServerUrl,
+  commandLine,
+  defHash,
+  expandEnv,
+  isHttp,
+  loadMcpConfig
+};
+//# sourceMappingURL=config-WV2H64TF.js.map

package/dist/{create-VXIH2GUZ.js → create-W6BV75QX.js}

@@ -3,7 +3,7 @@ import {
   jobBase,
   linkCandidates,
   worktreeDir
-} from "./chunk-44QN5SWZ.js";
+} from "./chunk-55CFEEIN.js";
 import {
   agentLabel,
   defaultAgentEnv,
@@ -12,18 +12,17 @@ import {
   nextTime,
   nightAgentTime,
   nightSpec
-} from "./chunk-USCUXCAU.js";
+} from "./chunk-5B5HDTUR.js";
 import {
   jobPrompt
-} from "./chunk-YQTGMCU6.js";
-import "./chunk-OUCV3FCT.js";
+} from "./chunk-3MRQJKUO.js";
+import "./chunk-AOGFYUKG.js";
 import {
   JobGitError
-} from "./chunk-TUUEBHG2.js";
-import "./chunk-GXZACJUI.js";
-import "./chunk-WMOLXTBU.js";
-import "./chunk-3EQU2GUX.js";
-import "./chunk-HUIK3WXO.js";
+} from "./chunk-6XHON3Q6.js";
+import "./chunk-B4SJY7KT.js";
+import "./chunk-BHZ6G65V.js";
+import "./chunk-P6XWWIEK.js";
 import {
   DEFAULT_JOB_MAX_STEPS,
   JOBS_DIR,
@@ -32,7 +31,11 @@ import {
   planPermissions,
   planTitle,
   saveJob
-} from "./chunk-KKB5W47S.js";
+} from "./chunk-VTMD5IHD.js";
+import {
+  proposeWriteScope
+} from "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
 import "./chunk-3NJNVZTK.js";
 
 // src/jobs/create.ts
@@ -62,6 +65,7 @@ async function createJob(options) {
     throw error;
   }
   const { rules, problems } = planPermissions(options.plan.plan);
+  const proposed = proposeWriteScope(rules, options.root);
   const id = newJobId(options.now);
   const links = linkCandidates(options.root);
   const job = {
@@ -77,6 +81,7 @@ async function createJob(options) {
     planSession: options.plan.sessionId,
     model: options.modelId,
     allow: rules,
+    ...proposed.scope === void 0 ? {} : { writeScope: proposed.scope },
     onUnapproved: "deny-and-continue",
     ...options.at === void 0 ? {} : { at: options.at },
     maxSteps: options.maxSteps ?? DEFAULT_JOB_MAX_STEPS,
@@ -98,6 +103,7 @@ async function createJob(options) {
     ...problems.length === 0 ? [] : ["", "Not rules, left out:", ...problems.map((p) => `  ${p}`)],
     "",
     "Any other call that would ask is denied at run time; the job goes on and reports it.",
+    proposed.scope === void 0 ? `Write scope: the whole worktree (${proposed.reason}). Commands may write anywhere in it.` : `Write scope: commands (also the test command) and edits may change only ${proposed.scope.length === 0 ? "nothing in the worktree" : proposed.scope.join(", ")} (plus temp folders, caches and the links). The OS sandbox enforces it for commands; no command runs outside the sandbox. A test that writes outside the scope fails.`,
     job.network === void 0 ? "Network: none for commands." : `Network: ${job.network.join(", ")}, through Garuda's proxy; other hosts are denied and reported.`,
     "",
     options.test === void 0 ? 'Proof of work: no test command found (set "test" in the job file); a principal-engineer review of the diff (one model call).' : `Proof of work: \`${options.test}\` runs in the sandbox before and after the job; a principal-engineer review of the diff (one model call).`,
@@ -144,7 +150,7 @@ async function createJob(options) {
   await saveJob(job);
   const lines = [
     `Created job ${id}: ${jobPath(options.root, id)}`,
-    'You can edit its approval list ("allow") in that file before the run.'
+    'You can edit its approval list ("allow") and its write scope ("writeScope") in that file before the run.'
   ];
   const platform = options.launchd?.platform ?? process.platform;
   if (options.launchd !== void 0 && options.at !== void 0 && platform === "darwin") {
@@ -221,4 +227,4 @@ export {
   createJob,
   switchTime
 };
-//# sourceMappingURL=create-VXIH2GUZ.js.map
+//# sourceMappingURL=create-W6BV75QX.js.map

package/dist/{deadline-F5RJJ2QW.js → deadline-TP7ZGLT2.js}

@@ -41,7 +41,8 @@ var DeadlineClient = class {
     try {
       const events = [];
       for await (const event of this.primary.stream(request, {
-        signal: AbortSignal.any(signals)
+        signal: AbortSignal.any(signals),
+        ...options?.meter === void 0 ? {} : { meter: options.meter }
       })) {
         events.push(event);
       }
@@ -49,6 +50,7 @@ var DeadlineClient = class {
       yield* events;
     } catch (error) {
       if (options?.signal?.aborted === true || !timer.signal.aborted) throw error;
+      options?.meter?.retry();
       if (stepOnly) {
         this.calls.slow++;
         this.fallbackClient ??= await this.fallback();
@@ -83,4 +85,4 @@ export {
   DeadlineReached,
   StepTooSlow
 };
-//# sourceMappingURL=deadline-F5RJJ2QW.js.map
+//# sourceMappingURL=deadline-TP7ZGLT2.js.map