@garuda-agent/garuda 0.16.1 → 0.18.0

package/dist/chunk-EIXUSVFX.js

@@ -1,116 +0,0 @@
-#!/usr/bin/env node
-
-// src/session/redact.ts
-var REDACTED = "[REDACTED]";
-var PATTERNS = [
-  /-----BEGIN [A-Z0-9 ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z0-9 ]*PRIVATE KEY-----/g,
-  /sk-ant-[A-Za-z0-9_-]{16,}/g,
-  /\bsk-(?:proj-)?[A-Za-z0-9_-]{20,}/g,
-  /\bAKIA[0-9A-Z]{16}\b/g,
-  /\bgh[pousr]_[A-Za-z0-9]{30,}\b/g,
-  /\bgithub_pat_[A-Za-z0-9_]{30,}\b/g,
-  /\bxox[abprs]-[A-Za-z0-9-]{10,}/g,
-  /\bAIza[0-9A-Za-z_-]{35}\b/g,
-  /\beyJ[A-Za-z0-9_-]{10,}\.eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}/g
-];
-var ASSIGNMENT = /\b([A-Za-z0-9_]*(?:api[_-]?key|secret|token|password|passwd)[A-Za-z0-9_]*)(["']?\s*[:=]\s*["']?)([^\s"'`,;]{8,})/gi;
-var OPAQUE_KEYS = /* @__PURE__ */ new Set(["encrypted_content", "encrypted_index", "signature"]);
-function looksLikeCode(name, value, next) {
-  if (/^[\d_.]+$/.test(value)) return !/pass|secret/i.test(name);
-  if (value.includes("(") || next === "(") return true;
-  return /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)+$/.test(value) && !/\d{4,}/.test(value);
-}
-var SECRET_ENV_NAME = /(KEY|TOKEN|SECRET|PASSWORD|PASSWD|CREDENTIAL)/i;
-var movedSecrets = /* @__PURE__ */ new Map();
-function keepSecretForRedaction(name, value) {
-  movedSecrets.set(name, value);
-}
-var Redactor = class {
-  literals;
-  /**
-   * `env`: variables whose names look secret have their values removed wherever they appear.
-   * Default: this process's environment and the secrets moved out of it.
-   */
-  constructor(env = { ...process.env, ...Object.fromEntries(movedSecrets) }) {
-    this.literals = Object.entries(env).filter(
-      ([name, value]) => (SECRET_ENV_NAME.test(name) || value !== void 0 && movedSecrets.get(name) === value) && (value?.length ?? 0) >= 8
-    ).map(([, value]) => value).sort((a, b) => b.length - a.length);
-  }
-  text(input) {
-    let out = input;
-    for (const literal of this.literals) out = out.split(literal).join(REDACTED);
-    for (const pattern of PATTERNS) out = out.replace(pattern, REDACTED);
-    return out.replace(
-      ASSIGNMENT,
-      (all, name, sep, value, at) => looksLikeCode(name, value, out[at + all.length]) ? all : `${name}${sep}${REDACTED}`
-    );
-  }
-  /** A copy of `value` with every string redacted. */
-  value(value) {
-    return this.walk(value);
-  }
-  walk(value) {
-    if (typeof value === "string") return this.text(value);
-    if (Array.isArray(value)) return value.map((item) => this.walk(item));
-    if (value !== null && typeof value === "object") {
-      const redactedThinking = value.type === "redacted_thinking";
-      return Object.fromEntries(
-        Object.entries(value).map(([k, v]) => [
-          k,
-          (OPAQUE_KEYS.has(k) || redactedThinking && k === "data") && typeof v === "string" ? v : this.walk(v)
-        ])
-      );
-    }
-    return value;
-  }
-};
-
-// src/tools/atomicWrite.ts
-import { randomBytes } from "crypto";
-import { chmod, link, realpath, rename, stat, unlink, writeFile } from "fs/promises";
-import { basename, dirname, join } from "path";
-async function writeFileAtomic(path, content, { createOnly }) {
-  const target = createOnly ? path : await realpath(path);
-  const temp = join(
-    dirname(target),
-    `.${basename(target)}.garuda-${randomBytes(4).toString("hex")}.tmp`
-  );
-  const mode = createOnly ? void 0 : (await stat(target)).mode & 4095;
-  await writeFile(temp, content, { flag: "wx", ...mode === void 0 ? {} : { mode } });
-  try {
-    if (createOnly) {
-      try {
-        await link(temp, target);
-      } catch (error) {
-        const code = error.code;
-        if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV") throw error;
-        if (await exists(target)) throw Object.assign(new Error("EEXIST"), { code: "EEXIST" });
-        await rename(temp, target);
-        return;
-      }
-    } else {
-      await chmod(temp, mode ?? 420);
-      await rename(temp, target);
-      return;
-    }
-  } finally {
-    await unlink(temp).catch(() => {
-    });
-  }
-}
-async function exists(path) {
-  try {
-    await stat(path);
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-export {
-  REDACTED,
-  keepSecretForRedaction,
-  Redactor,
-  writeFileAtomic
-};
-//# sourceMappingURL=chunk-EIXUSVFX.js.map

package/dist/chunk-R7I2NBPX.js

@@ -1,71 +0,0 @@
-#!/usr/bin/env node
-import {
-  EFFORTS
-} from "./chunk-3EQU2GUX.js";
-
-// src/model/pricing.ts
-var DEFAULT_CONTEXT_WINDOW = 2e5;
-var M = 1e6;
-var ALWAYS = { mode: "always", efforts: EFFORTS };
-var OPTIONAL = { mode: "optional", efforts: EFFORTS };
-var OPTIONAL_46 = {
-  mode: "optional",
-  efforts: EFFORTS.filter((e) => e !== "xhigh")
-};
-var KNOWN = [
-  ["claude-fable-5-1", { price: p(10, 50, 0.25, 12.5), contextWindow: M, thinking: ALWAYS }],
-  ["claude-fable-5", { price: p(10, 50, 1, 12.5), contextWindow: M, thinking: ALWAYS }],
-  ["claude-opus-5-5", { price: p(4, 20, 0.2, 5), contextWindow: M, thinking: ALWAYS }],
-  ["claude-opus-5", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: ALWAYS }],
-  ["claude-opus-4-8", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: OPTIONAL }],
-  ["claude-opus-4-7", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: OPTIONAL }],
-  ["claude-opus-4-6", { price: p(5, 25, 0.5, 6.25), contextWindow: M, thinking: OPTIONAL_46 }],
-  ["claude-opus-4-5", { price: p(5, 25, 0.5, 6.25), contextWindow: 2e5 }],
-  ["claude-sonnet-5", { price: p(2, 10, 0.2, 2.5), contextWindow: M, thinking: ALWAYS }],
-  ["claude-sonnet-4-6", { price: p(3, 15, 0.3, 3.75), contextWindow: M, thinking: OPTIONAL_46 }],
-  ["claude-sonnet-4-5", { price: p(3, 15, 0.3, 3.75), contextWindow: 2e5 }],
-  ["claude-haiku-4-5", { price: p(1, 5, 0.1, 1.25), contextWindow: 2e5 }]
-];
-function p(input, output, cacheRead, cacheWrite) {
-  return { input, output, cacheRead, cacheWrite };
-}
-function aliasModel(alias) {
-  if (!/^(haiku|sonnet|opus|fable)$/.test(alias)) return void 0;
-  return KNOWN.find(([prefix]) => prefix.startsWith(`claude-${alias}-`))?.[0];
-}
-function knownModels() {
-  return KNOWN.map(([id, info]) => ({ id, info }));
-}
-function lookupModel(modelId) {
-  let best;
-  for (const [prefix, info] of KNOWN) {
-    if (modelId.startsWith(prefix) && prefix.length > (best?.prefix.length ?? 0)) {
-      best = { prefix, info };
-    }
-  }
-  return best?.info ?? { contextWindow: DEFAULT_CONTEXT_WINDOW };
-}
-var WEB_SEARCH_USD = 0.01;
-function costOf(usage, price, factor = 1) {
-  return (usage.inputTokens * price.input + usage.outputTokens * price.output + usage.cacheReadTokens * price.cacheRead + usage.cacheWriteTokens * price.cacheWrite) / M * factor + (usage.webSearches ?? 0) * WEB_SEARCH_USD;
-}
-function responseCost(response, price) {
-  return costOf(response.usage, price, response.priceFactor ?? 1);
-}
-function totalTokens(usage) {
-  return usage.inputTokens + usage.outputTokens + usage.cacheReadTokens + usage.cacheWriteTokens;
-}
-function contextSize(usage) {
-  return totalTokens(usage);
-}
-
-export {
-  aliasModel,
-  knownModels,
-  lookupModel,
-  WEB_SEARCH_USD,
-  responseCost,
-  totalTokens,
-  contextSize
-};
-//# sourceMappingURL=chunk-R7I2NBPX.js.map

package/dist/chunk-ULAJPMY7.js

@@ -1,107 +0,0 @@
-#!/usr/bin/env node
-import {
-  cleanLine
-} from "./chunk-PZS3V6P3.js";
-import {
-  formatRule
-} from "./chunk-3NJNVZTK.js";
-
-// src/permissions/projectSettings.ts
-import { createHash } from "crypto";
-function settingsRisk(settings) {
-  const risk = {
-    executorHost: settings.executor === "host",
-    allow: settings.allow.map(formatRule),
-    writePaths: [...settings.sandbox?.writePaths ?? []],
-    envAllow: [...settings.envAllow],
-    allowLocalhost: settings.web?.allowLocalhost === true
-  };
-  const formatterCommands = Object.entries(settings.formatters?.commands ?? {}).flatMap(
-    ([name, f]) => f === false ? [] : [`${name}: ${f.command.join(" ")}`]
-  );
-  if (formatterCommands.length > 0) risk.formatterCommands = formatterCommands;
-  const none = !risk.executorHost && risk.allow.length === 0 && risk.writePaths.length === 0 && risk.envAllow.length === 0 && !risk.allowLocalhost && risk.formatterCommands === void 0;
-  return none ? void 0 : risk;
-}
-function settingsRiskHash(risk) {
-  return createHash("sha256").update(JSON.stringify(risk)).digest("hex");
-}
-function settingsRiskLines(risk) {
-  const lines = [];
-  if (risk.executorHost) lines.push('executor: "host" (commands run with no OS sandbox)');
-  if (risk.allow.length > 0) {
-    lines.push(`permissions.allow (no question for these): ${risk.allow.join(", ")}`);
-  }
-  if (risk.writePaths.length > 0) {
-    lines.push(`sandbox.writePaths (commands may write there): ${risk.writePaths.join(", ")}`);
-  }
-  if (risk.envAllow.length > 0) {
-    lines.push(`env.allow (commands see these variables): ${risk.envAllow.join(", ")}`);
-  }
-  if (risk.allowLocalhost) lines.push("web.allowLocalhost (web_fetch may reach this machine)");
-  if (risk.formatterCommands !== void 0) {
-    lines.push(
-      `formatters.commands (run after each edit): ${risk.formatterCommands.map(cleanLine).join("; ")}`
-    );
-  }
-  return lines;
-}
-function withoutRisk(settings) {
-  const { sandbox, web, formatters, ...rest } = settings;
-  const { writePaths: _writePaths, ...sandboxRest } = sandbox ?? {};
-  const keptCommands = Object.fromEntries(
-    Object.entries(formatters?.commands ?? {}).filter(([, f]) => f === false)
-  );
-  return {
-    ...rest,
-    ...formatters === void 0 ? {} : { formatters: { ...formatters, commands: keptCommands } },
-    executor: settings.executor === "host" ? "auto" : settings.executor,
-    allow: [],
-    envAllow: [],
-    ...sandbox === void 0 ? {} : { sandbox: sandboxRest },
-    ...web === void 0 ? {} : { web: { ...web, allowLocalhost: false } }
-  };
-}
-async function gateProjectSettings(options) {
-  const risk = settingsRisk(options.settings);
-  if (risk === void 0) return { settings: options.settings };
-  const hash = settingsRiskHash(risk);
-  const known = options.trust?.settingsHash(options.root);
-  if (known === hash) return { settings: options.settings };
-  const lines = settingsRiskLines(risk);
-  if (options.ask !== void 0) {
-    const choice = await options.ask({
-      tool: "settings",
-      target: { kind: "input", json: "" },
-      title: "Project settings that loosen safety",
-      preview: [
-        `This project's .garuda/settings.json ${known === void 0 ? "asks for" : "changed and now asks for"}:`,
-        ...lines.map((line) => `  - ${line}`),
-        "A cloned repository can ship this file. Without your yes, Garuda uses safe defaults for these",
-        "parts; the rest of the file applies."
-      ].join("\n"),
-      isolation: options.isolation ?? "os",
-      question: "Use these project settings?",
-      choices: ["once", "session", "deny"],
-      labels: {
-        once: "Yes, for this run",
-        session: "Yes, and remember (asks again when they change)",
-        deny: "No, use safe defaults"
-      }
-    });
-    if (choice === "session") await options.trust?.setSettingsHash(options.root, hash);
-    if (choice !== "deny") return { settings: options.settings };
-  }
-  return {
-    settings: withoutRisk(options.settings),
-    notice: [
-      `Project settings not applied (not approved): ${lines.join("; ")}.`,
-      "Start the chat in a terminal and answer yes to use them."
-    ].join(" ")
-  };
-}
-
-export {
-  gateProjectSettings
-};
-//# sourceMappingURL=chunk-ULAJPMY7.js.map

package/dist/chunk-VBZCNMUD.js

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-
-// src/version.ts
-var VERSION = "0.16.1";
-
-export {
-  VERSION
-};
-//# sourceMappingURL=chunk-VBZCNMUD.js.map