@garuda-agent/garuda 0.16.1 → 0.18.0

package/dist/{openaiCompatible-CJWVJP5M.js → openaiCompatible-6TLDDW5U.js}

@@ -215,7 +215,11 @@ var OpenAICompatibleClient = class {
   fetch;
   delays;
   async *stream(request, options) {
-    const http = await this.post(toWireBody(this.options.model, request), options?.signal);
+    const http = await this.post(
+      toWireBody(this.options.model, request),
+      options?.signal,
+      options?.meter
+    );
     const mode = request.tools.length === 0 ? "off" : this.options.textToolCalls ?? "whole";
     const state = newStreamState();
     const hold = new StreamHold(mode);
@@ -241,7 +245,7 @@ var OpenAICompatibleClient = class {
     }
     yield { type: "response", response };
   }
-  async post(body, signal) {
+  async post(body, signal, meter) {
     const url = `${this.options.baseUrl.replace(/\/+$/, "")}/chat/completions`;
     const headers = {
       "content-type": "application/json",
@@ -262,6 +266,7 @@ var OpenAICompatibleClient = class {
         const cause = causeCode(error);
         if (attempt < this.delays.length && cause !== "ECONNREFUSED") {
           await sleep(this.delays[attempt] ?? 1e3, signal);
+          meter?.retry();
           continue;
         }
         throw new Error(
@@ -274,6 +279,7 @@ var OpenAICompatibleClient = class {
         const retryAfter = Number(response.headers.get("retry-after")) * 1e3;
         const wait = Number.isFinite(retryAfter) && retryAfter > 0 ? Math.min(retryAfter, MAX_RETRY_AFTER_MS) : this.delays[attempt] ?? 1e3;
         await sleep(wait, signal);
+        meter?.retry();
         continue;
       }
       throw new Error(
@@ -378,10 +384,12 @@ function finishResponse(state, request, mode = "whole") {
       input: parseArguments(call.args)
     });
   }
+  const reported = providerUsage(state.usage);
   return {
     content,
     stopReason: stopReason(state, content),
-    usage: usageOf(state, request, content)
+    usage: reported ?? estimatedUsage(request, content),
+    ...reported === void 0 ? { usageReported: false } : {}
   };
 }
 function toolNames(request) {
@@ -403,17 +411,23 @@ function stopReason(state, content) {
     return "end_turn";
   return "other";
 }
-function usageOf(state, request, content) {
-  const u = state.usage;
-  if (u?.prompt_tokens !== void 0) {
-    const cached = u.prompt_tokens_details?.cached_tokens ?? 0;
-    return {
-      inputTokens: Math.max(0, u.prompt_tokens - cached),
-      outputTokens: u.completion_tokens ?? 0,
-      cacheReadTokens: cached,
-      cacheWriteTokens: 0
-    };
-  }
+function providerUsage(u) {
+  const input = u?.prompt_tokens;
+  const output = u?.completion_tokens;
+  const cached = u?.prompt_tokens_details?.cached_tokens ?? 0;
+  if (!tokenCount(input) || !tokenCount(output) || !tokenCount(cached) || cached > input)
+    return void 0;
+  return {
+    inputTokens: input - cached,
+    outputTokens: output,
+    cacheReadTokens: cached,
+    cacheWriteTokens: 0
+  };
+}
+function tokenCount(value) {
+  return typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+}
+function estimatedUsage(request, content) {
   const chars = (value) => JSON.stringify(value).length;
   return {
     inputTokens: Math.ceil(
@@ -498,4 +512,4 @@ export {
   toWireMessages,
   toWireTools
 };
-//# sourceMappingURL=openaiCompatible-CJWVJP5M.js.map
+//# sourceMappingURL=openaiCompatible-6TLDDW5U.js.map

package/dist/{policy-EJPLEEXP.js → policy-ZJ7RMOFN.js}

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   POLICY_FILE,
+  PROFILES,
   assertModelAllowedByPolicy,
   ignoredProjectPolicy,
   isCommandDisallowedByPolicy,
@@ -8,14 +9,17 @@ import {
   isModelAllowedByPolicy,
   isPathDeniedByPolicy,
   isSandboxRequiredByPolicy,
+  isStrict,
   loadTeamPolicy,
   managedPolicyPath,
   mergePolicies,
-  parsePolicy
-} from "./chunk-HUIK3WXO.js";
+  parsePolicy,
+  withProfile
+} from "./chunk-P6XWWIEK.js";
 import "./chunk-3NJNVZTK.js";
 export {
   POLICY_FILE,
+  PROFILES,
   assertModelAllowedByPolicy,
   ignoredProjectPolicy,
   isCommandDisallowedByPolicy,
@@ -23,9 +27,11 @@ export {
   isModelAllowedByPolicy,
   isPathDeniedByPolicy,
   isSandboxRequiredByPolicy,
+  isStrict,
   loadTeamPolicy,
   managedPolicyPath,
   mergePolicies,
-  parsePolicy
+  parsePolicy,
+  withProfile
 };
-//# sourceMappingURL=policy-EJPLEEXP.js.map
+//# sourceMappingURL=policy-ZJ7RMOFN.js.map

package/dist/{remove-6GDSTAIO.js → remove-42WQNVPX.js}

@@ -1,15 +1,16 @@
 #!/usr/bin/env node
 import {
   git
-} from "./chunk-TUUEBHG2.js";
-import "./chunk-GXZACJUI.js";
-import "./chunk-WMOLXTBU.js";
-import "./chunk-3EQU2GUX.js";
-import "./chunk-HUIK3WXO.js";
+} from "./chunk-6XHON3Q6.js";
+import "./chunk-B4SJY7KT.js";
+import "./chunk-BHZ6G65V.js";
+import "./chunk-P6XWWIEK.js";
 import {
   JOBS_DIR,
   jobPath
-} from "./chunk-KKB5W47S.js";
+} from "./chunk-VTMD5IHD.js";
+import "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
 import "./chunk-3NJNVZTK.js";
 
 // src/jobs/remove.ts
@@ -57,4 +58,4 @@ export {
   jobLeftovers,
   removeJob
 };
-//# sourceMappingURL=remove-6GDSTAIO.js.map
+//# sourceMappingURL=remove-42WQNVPX.js.map

package/dist/{run-ML6GSPN4.js → run-PTMRQCIU.js}

@@ -1,4 +1,7 @@
 #!/usr/bin/env node
+import {
+  folderKind
+} from "./chunk-42DSA4EA.js";
 import {
   loadSearchConfig,
   providerLabel,
@@ -10,11 +13,8 @@ import {
 import {
   SERVER_NAME,
   checkServerUrl
-} from "./chunk-ZAE25JM2.js";
+} from "./chunk-QANRZW7W.js";
 import "./chunk-ATW7BNIG.js";
-import {
-  folderKind
-} from "./chunk-42DSA4EA.js";
 
 // src/init/run.ts
 import { existsSync as existsSync3 } from "fs";
@@ -885,4 +885,4 @@ export {
   initPrompt,
   runInit
 };
-//# sourceMappingURL=run-ML6GSPN4.js.map
+//# sourceMappingURL=run-PTMRQCIU.js.map

package/dist/{server-NGKVIQEV.js → server-VEYIJHEU.js}

@@ -467,7 +467,7 @@ function setupNeeded(message) {
   return Object.assign(new Error(message), { authRequired: true });
 }
 var MODES = {
-  build: { name: "Build", description: "Edits and commands, each one asks first." },
+  build: { name: "Build", description: "Edits ask first; commands run in the sandbox." },
   plan: {
     name: "Plan",
     description: "Reads and plans. No edits; commands cannot write the project."
@@ -695,4 +695,4 @@ export {
   canRunTerminalAuth,
   setupNeeded
 };
-//# sourceMappingURL=server-NGKVIQEV.js.map
+//# sourceMappingURL=server-VEYIJHEU.js.map

package/dist/{setupCommand-VA7D5MZK.js → setupCommand-YMF6I3MD.js}

@@ -11,13 +11,16 @@ import {
   resolveModel,
   setDefaultModel,
   writeCredentials
-} from "./chunk-NP6RIC25.js";
-import "./chunk-EIXUSVFX.js";
+} from "./chunk-2FIV2VZP.js";
 import {
-  knownModels
-} from "./chunk-R7I2NBPX.js";
+  fetchCatalog,
+  loadCatalog,
+  mergedModels,
+  saveCatalog
+} from "./chunk-65NUEOI7.js";
+import "./chunk-7KBOIPUT.js";
 import "./chunk-ATW7BNIG.js";
-import "./chunk-3EQU2GUX.js";
+import "./chunk-BHZ6G65V.js";
 
 // src/cli/setupCommand.ts
 import { homedir } from "os";
@@ -85,7 +88,9 @@ async function setup(io, config, home, env, fetcher) {
     }))
   );
   const def = providers[provider];
-  const model = await pickModel(io, provider, def, fetcher);
+  const anthropicKey = def.type === "anthropic" ? def.apiKeyEnv ?? "ANTHROPIC_API_KEY" : void 0;
+  const knownKey = anthropicKey === void 0 ? void 0 : (env[anthropicKey] ?? "") !== "" ? env[anthropicKey] : stored.keys[anthropicKey];
+  const model = await pickModel(io, provider, def, fetcher, { home, env, key: knownKey });
   const spec = provider === "anthropic" ? model : `${provider}/${model}`;
   try {
     resolveModel(spec, config);
@@ -111,7 +116,12 @@ async function setup(io, config, home, env, fetcher) {
         const key = fromEnv !== "" ? fromEnv : newKey ?? old;
         const result = await checkKey(provider, def, key, env, fetcher);
         io.print(result.message);
-        if (result.ok) break;
+        if (result.ok) {
+          if (def.type === "anthropic" && knownKey === void 0) {
+            await refreshCatalog(io, { home, env, key }, fetcher);
+          }
+          break;
+        }
         const next = await io.select("What now?", [
           ...fromEnv === "" ? [{ name: "Enter the key again", value: "again" }] : [],
           { name: "Store it anyway", value: "store" },
@@ -146,15 +156,17 @@ async function setup(io, config, home, env, fetcher) {
   io.print("Done. Start Garuda with: garuda");
   return 0;
 }
-async function pickModel(io, provider, def, fetcher) {
+async function pickModel(io, provider, def, fetcher, account) {
   let listed = [];
   const notes = /* @__PURE__ */ new Map();
   if (def.type === "anthropic") {
-    for (const { id, info } of knownModels()) {
+    let catalog = await loadCatalog(account.home);
+    if (account.key !== void 0) {
+      catalog = await refreshCatalog(io, account, fetcher) ?? catalog;
+    }
+    for (const { id, info, known } of mergedModels(catalog)) {
       listed.push(id);
-      if (info.price !== void 0) {
-        notes.set(id, `$${info.price.input} in, $${info.price.output} out per million tokens`);
-      }
+      notes.set(id, known && info.price !== void 0 ? priceNote(info.price) : UNKNOWN_PRICE);
     }
   } else if (def.local === true && def.baseUrl !== void 0) {
     listed = await localModels(def.baseUrl, fetcher);
@@ -177,6 +189,26 @@ async function pickModel(io, provider, def, fetcher) {
     io.print("Type a model name with no spaces.");
   }
 }
+var UNKNOWN_PRICE = "price unknown to this Garuda version: costs show as unknown (set model.price, or update Garuda)";
+function priceNote(price) {
+  const more = price.over === void 0 ? "" : ` (more for prompts over ${price.over.tokens / 1e3}k tokens)`;
+  return `$${price.input} in, $${price.output} out per million tokens${more}`;
+}
+async function refreshCatalog(io, account, fetcher) {
+  const base = account.env.ANTHROPIC_BASE_URL ?? "";
+  const result = await fetchCatalog({
+    key: account.key,
+    ...base === "" ? {} : { baseUrl: base },
+    fetcher
+  });
+  if ("problem" in result) {
+    io.print(`The list shows Garuda's own table: ${result.problem}.`);
+    return void 0;
+  }
+  await saveCatalog(result.catalog, account.home);
+  io.print(`Models of your account: ${result.catalog.models.length}.`);
+  return result.catalog;
+}
 async function localModels(baseUrl, fetcher) {
   try {
     const response = await fetcher(`${baseUrl.replace(/\/+$/, "")}/models`, {
@@ -300,4 +332,4 @@ export {
   setupCommand,
   terminalIO
 };
-//# sourceMappingURL=setupCommand-VA7D5MZK.js.map
+//# sourceMappingURL=setupCommand-YMF6I3MD.js.map

package/dist/text-LS35WSRL.js

@@ -0,0 +1,17 @@
+#!/usr/bin/env node
+import {
+  formatCost,
+  jobCost,
+  jobPrompt,
+  jobReport,
+  sumCosts
+} from "./chunk-3MRQJKUO.js";
+import "./chunk-AOGFYUKG.js";
+export {
+  formatCost,
+  jobCost,
+  jobPrompt,
+  jobReport,
+  sumCosts
+};
+//# sourceMappingURL=text-LS35WSRL.js.map

package/dist/tune-YVI2KWQF.js

@@ -0,0 +1,31 @@
+#!/usr/bin/env node
+import {
+  ADDENDUM_MAX_CHARS,
+  PROPOSER_SYSTEM,
+  decide,
+  parseProposal,
+  proposerInput,
+  readAddendum,
+  rejectReason,
+  tune
+} from "./chunk-FOPBOB7W.js";
+import "./chunk-DOCDCQVM.js";
+import "./chunk-C57GHLKP.js";
+import "./chunk-6XHON3Q6.js";
+import "./chunk-B4SJY7KT.js";
+import "./chunk-BHZ6G65V.js";
+import "./chunk-P6XWWIEK.js";
+import "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
+import "./chunk-3NJNVZTK.js";
+export {
+  ADDENDUM_MAX_CHARS,
+  PROPOSER_SYSTEM,
+  decide,
+  parseProposal,
+  proposerInput,
+  readAddendum,
+  rejectReason,
+  tune
+};
+//# sourceMappingURL=tune-YVI2KWQF.js.map

package/native/garuda-reap.c

@@ -0,0 +1,113 @@
+// garuda-reap (0.17, IPI-04): stop the processes that one sandboxed command left running on macOS.
+//
+// Seatbelt has no process namespace, so a process can leave the command's process group (setsid,
+// setpgid, posix_spawn with POSIX_SPAWN_SETSID or POSIX_SPAWN_SETPGROUP) and outlive the command.
+// It cannot leave its Seatbelt profile. Garuda puts two marker files in each command's profile:
+// reads of <markerA> are denied, reads of <markerB> are allowed. After the command, this helper
+// asks the kernel (sandbox_check) about every process of the current user and sends SIGKILL to
+// each one that has A denied and B allowed. Processes without a sandbox allow both; App Store
+// sandboxes deny both (the markers are outside their containers). So only the command's own
+// processes match. It repeats the scan until a scan finds none (at most 10 scans), so children
+// started during a scan are found in the next one.
+//
+//   garuda-reap <markerA> <markerB>          stop the matches; prints "killed <n>"
+//   garuda-reap --list <markerA> <markerB>   only list the matches (tests)
+//
+// Exit codes: 0 done, 2 usage, 3 a marker file is missing, 4 the process list failed.
+#include <errno.h>
+#include <libproc.h>
+#include <signal.h>
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <sys/proc_info.h>
+#include <sys/stat.h>
+#include <unistd.h>
+
+// From libsystem_sandbox (not in the public SDK headers).
+enum sandbox_filter_type { SANDBOX_FILTER_NONE, SANDBOX_FILTER_PATH };
+extern const enum sandbox_filter_type SANDBOX_CHECK_NO_REPORT;
+int sandbox_check(pid_t pid, const char *operation, enum sandbox_filter_type type, ...);
+
+#define MAX_SCANS 10
+#define MAX_KILLED 4096
+
+// Processes already sent SIGKILL: a killed process can show in the next scan until launchd reaps
+// it, so it is counted once and does not keep the loop going.
+static pid_t killed_pids[MAX_KILLED];
+static int killed_count = 0;
+
+static int already_killed(pid_t pid) {
+  for (int i = 0; i < killed_count; i++)
+    if (killed_pids[i] == pid) return 1;
+  return 0;
+}
+
+static int denied(pid_t pid, const char *path) {
+  return sandbox_check(pid, "file-read-data",
+                       (enum sandbox_filter_type)(SANDBOX_FILTER_PATH | SANDBOX_CHECK_NO_REPORT), path);
+}
+
+// One scan. Returns the number of new matches, or -1 when the process list failed.
+static int scan(const char *a, const char *b, int list_only) {
+  int n = proc_listallpids(NULL, 0);
+  if (n <= 0) return -1;
+  size_t cap = (size_t)n + 256;
+  pid_t *pids = calloc(cap, sizeof(pid_t));
+  if (pids == NULL) return -1;
+  n = proc_listallpids(pids, (int)(cap * sizeof(pid_t)));
+  if (n <= 0) {
+    free(pids);
+    return -1;
+  }
+  uid_t me = getuid();
+  pid_t self = getpid(), parent = getppid();
+  int matches = 0;
+  for (int i = 0; i < n; i++) {
+    pid_t pid = pids[i];
+    if (pid <= 1 || pid == self || pid == parent) continue;
+    struct proc_bsdinfo info;
+    if (proc_pidinfo(pid, PROC_PIDTBSDINFO, 0, &info, sizeof info) != (int)sizeof info) continue;
+    if (info.pbi_uid != me) continue;
+    if (denied(pid, a) == 1 && denied(pid, b) == 0) {
+      if (list_only) {
+        matches++;
+        printf("match %d %d %s\n", pid, info.pbi_ppid, info.pbi_comm);
+        continue;
+      }
+      kill(pid, SIGKILL);
+      if (already_killed(pid)) continue;
+      matches++;
+      if (killed_count < MAX_KILLED) killed_pids[killed_count++] = pid;
+    }
+  }
+  free(pids);
+  return matches;
+}
+
+int main(int argc, char **argv) {
+  int list_only = argc == 4 && strcmp(argv[1], "--list") == 0;
+  if (argc != 3 && !list_only) {
+    fprintf(stderr, "usage: garuda-reap [--list] <markerA> <markerB>\n");
+    return 2;
+  }
+  const char *a = argv[argc - 2], *b = argv[argc - 1];
+  struct stat st;
+  // A missing marker reads as denied for every process, so nothing would match: refuse instead.
+  if (stat(a, &st) != 0 || stat(b, &st) != 0) {
+    fprintf(stderr, "garuda-reap: a marker file is missing\n");
+    return 3;
+  }
+  if (list_only) return scan(a, b, 1) < 0 ? 4 : 0;
+  for (int i = 0; i < MAX_SCANS; i++) {
+    int found = scan(a, b, 0);
+    if (found < 0) {
+      fprintf(stderr, "garuda-reap: the process list failed (%s)\n", strerror(errno));
+      return 4;
+    }
+    if (found == 0) break;
+    usleep(10000);
+  }
+  printf("killed %d\n", killed_count);
+  return 0;
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@garuda-agent/garuda",
-  "version": "0.16.1",
+  "version": "0.18.0",
   "description": "Garuda: a terminal coding agent with an OS sandbox, approvals and an audit log.",
   "license": "Apache-2.0",
   "author": "Madhusudhan Vasanth Kumar",
@@ -17,7 +17,17 @@
     "sandbox",
     "anthropic",
     "claude",
-    "mcp"
+    "mcp",
+    "ai",
+    "ai-agent",
+    "agent",
+    "llm",
+    "ollama",
+    "openrouter",
+    "acp",
+    "agent-client-protocol",
+    "zed",
+    "code-assistant"
   ],
   "type": "module",
   "bin": {
@@ -29,33 +39,40 @@
     "NOTICE",
     "README.md",
     "SECURITY.md",
-    "CHANGELOG.md"
+    "CHANGELOG.md",
+    "native/garuda-reap.c",
+    "native/bin/garuda-reap"
   ],
   "engines": {
-    "node": ">=22"
+    "node": "^22.23.4 || ^24.22.1 || >=26.12.1"
   },
   "publishConfig": {
     "access": "public"
   },
   "scripts": {
-    "build": "tsup",
+    "build": "tsup && node scripts/build-native.mjs",
     "typecheck": "tsc --noEmit",
     "lint": "biome check .",
     "format": "biome format --write .",
-    "test": "vitest run",
+    "test": "node scripts/build-native.mjs && vitest run",
     "check": "pnpm typecheck && pnpm lint && pnpm test",
     "package": "tsup && node scripts/package.mjs",
     "startup": "node scripts/startup.mjs",
+    "models:check": "node scripts/check-models.mjs",
+    "ipi:mutations": "node scripts/check-ipi-mutations.mjs",
     "eval": "node dist/cli/index.js eval",
     "baseline:capture": "node scripts/capture-quality-baseline.mjs",
-    "prepack": "pnpm build"
+    "code-intelligence:validate": "vitest run test/lspReferenceSample.test.ts test/codeIntelligenceSample.test.ts --reporter=verbose",
+    "code-intelligence:capture": "node scripts/capture-reference-oracle.mjs",
+    "prepack": "pnpm build",
+    "build:native": "node scripts/build-native.mjs"
   },
   "packageManager": "pnpm@10.28.0",
   "dependencies": {
     "@agentclientprotocol/sdk": "1.7.0",
     "@anthropic-ai/sdk": "^0.128.0",
     "@inquirer/prompts": "^8.7.2",
-    "@modelcontextprotocol/client": "^2.1.0",
+    "@modelcontextprotocol/client": "^2.3.1",
     "commander": "^15.0.0",
     "diff": "^9.0.0",
     "globby": "^16.2.4",
@@ -65,23 +82,32 @@
     "react": "^19.3.0",
     "smol-toml": "^1.9.0",
     "ts6": "npm:typescript@^6.0.3",
-    "undici": "^7.30.0",
+    "undici": "^7.30.1",
     "vscode-jsonrpc": "^9.0.3",
-    "zod": "^4.6.5"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.14",
-    "@modelcontextprotocol/server": "^2.1.0",
+    "@modelcontextprotocol/server": "^2.3.1",
     "@types/node": "^22.20.4",
     "@types/react": "^19.3.0",
     "ink-testing-library": "^4.0.0",
     "tsup": "^8.5.1",
     "typescript": "^7.0.2",
-    "vitest": "^5.0.1"
+    "vite": "^8.3.5",
+    "vitest": "^5.0.5"
   },
   "pnpm": {
     "onlyBuiltDependencies": [
       "esbuild"
-    ]
+    ],
+    "overrides": {
+      "esbuild": "^0.28.2"
+    },
+    "auditConfig": {
+      "ignoreGhsas": [
+        "GHSA-vfj7-8cjw-p6xm"
+      ]
+    }
   }
 }