@garuda-agent/garuda 0.16.1 → 0.18.0

package/SECURITY.md

@@ -6,9 +6,15 @@ Garuda runs commands and edits files for a model, so we take security reports se
 
 | Version | Supported |
 | --- | --- |
-| 0.14.x | Yes |
+| 0.18.x | Yes |
 | Older | No |
 
+## Node and dependencies
+
+Run Garuda on Node 22.23.4, 24.22.1 or 26.12.1, or a later release of the same line. Garuda warns
+at start on an older Node. CI, the release workflow and the dependency audit refuse a Node or a
+package with a known security fix missing. See [docs/security-deps.md](docs/security-deps.md).
+
 ## Report a vulnerability
 
 Do not open a public issue. Use GitHub's private vulnerability reporting: in this repository, open
@@ -28,5 +34,6 @@ In scope: the permission engine and the team policy, the OS sandbox (Seatbelt, b
 network allowlist and its proxy, secret redaction, the audit log, and the consent for project
 content (hooks, MCP servers, settings, commands, skills, agents).
 
-Known limits are listed in the README under the status table. A report about one of them is still
+Known limits are listed in [docs/guide/status.md](docs/guide/status.md) and the
+[issue register](docs/quality-baseline/issue-register.md). A report about one of them is still
 welcome when it shows a new way to reach the same effect.

package/dist/{acpCommand-OTAYW7BS.js → acpCommand-IUZPLPLI.js}

@@ -1,37 +1,39 @@
 #!/usr/bin/env node
-import {
-  FileSessionStore,
-  Runtime,
-  auditDirFor
-} from "./chunk-TILFPYWO.js";
-import "./chunk-G2AX7MGS.js";
-import "./chunk-A2QAIRQL.js";
-import "./chunk-ULAJPMY7.js";
 import {
   chooseModel,
   keepProviderKeys,
   loadModelsConfig,
   providerKeySource,
   resolveModel
-} from "./chunk-NP6RIC25.js";
-import "./chunk-EIXUSVFX.js";
-import "./chunk-R7I2NBPX.js";
+} from "./chunk-2FIV2VZP.js";
+import {
+  Runtime,
+  auditDirFor
+} from "./chunk-NHWHG3SW.js";
+import "./chunk-65NUEOI7.js";
+import "./chunk-G2AX7MGS.js";
+import "./chunk-A2QAIRQL.js";
+import {
+  FileSessionStore
+} from "./chunk-UKIE4AAM.js";
+import "./chunk-7KBOIPUT.js";
 import {
   loadSearchConfig
 } from "./chunk-B25VL4RU.js";
 import "./chunk-23FXBNBB.js";
 import {
   VERSION
-} from "./chunk-VBZCNMUD.js";
+} from "./chunk-C57GHLKP.js";
 import "./chunk-5DEWP3YX.js";
-import "./chunk-ZAE25JM2.js";
-import "./chunk-ATW7BNIG.js";
 import "./chunk-PZS3V6P3.js";
-import "./chunk-OUCV3FCT.js";
-import "./chunk-GXZACJUI.js";
-import "./chunk-WMOLXTBU.js";
-import "./chunk-3EQU2GUX.js";
-import "./chunk-HUIK3WXO.js";
+import "./chunk-QANRZW7W.js";
+import "./chunk-ATW7BNIG.js";
+import "./chunk-AOGFYUKG.js";
+import "./chunk-B4SJY7KT.js";
+import "./chunk-BHZ6G65V.js";
+import "./chunk-P6XWWIEK.js";
+import "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
 import "./chunk-3NJNVZTK.js";
 
 // src/cli/acpCommand.ts
@@ -45,12 +47,12 @@ async function acpCommand(options) {
 `);
       return 1;
     }
-    const { setupCommand, terminalIO } = await import("./setupCommand-VA7D5MZK.js");
+    const { setupCommand, terminalIO } = await import("./setupCommand-YMF6I3MD.js");
     return setupCommand({}, { io: await terminalIO() });
   }
   const output = protocolOutput(process.stdout, process.stderr);
   const input = Readable.toWeb(process.stdin);
-  const { acpServer, setupNeeded } = await import("./server-NGKVIQEV.js");
+  const { acpServer, setupNeeded } = await import("./server-VEYIJHEU.js");
   const server = acpServer({
     version: VERSION,
     // Not on native Windows: the setup there could not keep a key private (no 0600).
@@ -114,7 +116,7 @@ async function prepare(options, from = {}) {
     const why = credentialsWarning === void 0 ? "" : ` ${credentialsWarning}`;
     return fail(`Garuda has no key for ${resolved.spec} (${keyName}).${why} ${SETUP_HINT}`, true);
   }
-  const { loadTeamPolicy } = await import("./policy-EJPLEEXP.js");
+  const { loadTeamPolicy } = await import("./policy-ZJ7RMOFN.js");
   let team;
   try {
     team = await loadTeamPolicy("managed" in from ? { home, managed: from.managed } : { home });
@@ -188,4 +190,4 @@ export {
   prepare,
   protocolOutput
 };
-//# sourceMappingURL=acpCommand-OTAYW7BS.js.map
+//# sourceMappingURL=acpCommand-IUZPLPLI.js.map

package/dist/{anthropic-NQDBCHJU.js → anthropic-NQIZLD64.js}

@@ -14,10 +14,12 @@ var AnthropicClient = class {
     this.client = options.client ?? new Anthropic(clientOptions(options.apiKey));
   }
   async *stream(request, options) {
-    const stream = this.client.messages.stream(
-      toWireParams(this.model, request),
-      options?.signal === void 0 ? {} : { signal: options.signal }
-    );
+    const stream = this.client.messages.stream(toWireParams(this.model, request), {
+      ...options?.signal === void 0 ? {} : { signal: options.signal },
+      // Under the token budget (0.17) the SDK must not send the request again on its own: the loop
+      // retries, and each of its attempts reserves first.
+      ...options?.meter === void 0 ? {} : { maxRetries: 0 }
+    });
     for await (const event of stream) {
       if (event.type === "content_block_delta" && event.delta.type === "text_delta") {
         yield { type: "text_delta", text: event.delta.text };
@@ -238,7 +240,11 @@ var AnthropicBatchClient = class {
     );
     const batch = await this.client.messages.batches.create(
       { requests: [{ custom_id: "garuda", params }] },
-      signal === void 0 ? {} : { signal }
+      {
+        ...signal === void 0 ? {} : { signal },
+        // Batch submission is a generation attempt too. The loop, not the SDK, owns retries.
+        ...options?.meter === void 0 ? {} : { maxRetries: 0 }
+      }
     );
     const started = Date.now();
     this.onWait?.({ batchId: batch.id, waitedMs: 0, status: "created" });
@@ -324,4 +330,4 @@ export {
   toWireTools,
   withHiddenThinking
 };
-//# sourceMappingURL=anthropic-NQDBCHJU.js.map
+//# sourceMappingURL=anthropic-NQIZLD64.js.map

package/dist/{chunk-NP6RIC25.js → chunk-2FIV2VZP.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
-  keepSecretForRedaction,
   writeFileAtomic
-} from "./chunk-EIXUSVFX.js";
+} from "./chunk-65NUEOI7.js";
 import {
+  keepSecretForRedaction,
   lookupModel
-} from "./chunk-R7I2NBPX.js";
+} from "./chunk-7KBOIPUT.js";
 import {
   isLoopbackHost
 } from "./chunk-ATW7BNIG.js";
@@ -228,6 +228,9 @@ async function keepProviderKeys(names, home) {
   }
   return stored.warning;
 }
+function providerKeyValue(name) {
+  return providerKey(process.env, name);
+}
 function providerKey(env, name) {
   if (name === void 0) return void 0;
   return keptKeys.get(name)?.value ?? env[name];
@@ -269,7 +272,7 @@ function resolveModel(spec, config = { providers: {}, models: {} }) {
     ...def.type === "anthropic" ? {
       async createBatch(env = process.env, options = {}) {
         const apiKey = providerKey(env, def.apiKeyEnv ?? "ANTHROPIC_API_KEY");
-        const { AnthropicBatchClient } = await import("./anthropic-NQDBCHJU.js");
+        const { AnthropicBatchClient } = await import("./anthropic-NQIZLD64.js");
         return new AnthropicBatchClient({ model, ...apiKey ? { apiKey } : {}, ...options });
       }
     } : {},
@@ -282,10 +285,10 @@ function resolveModel(spec, config = { providers: {}, models: {} }) {
       }
       if (def.type === "anthropic") {
         const key = providerKey(env, def.apiKeyEnv ?? "ANTHROPIC_API_KEY");
-        const { AnthropicClient } = await import("./anthropic-NQDBCHJU.js");
+        const { AnthropicClient } = await import("./anthropic-NQIZLD64.js");
         return new AnthropicClient({ model, ...key ? { apiKey: key } : {} });
       }
-      const { OpenAICompatibleClient } = await import("./openaiCompatible-CJWVJP5M.js");
+      const { OpenAICompatibleClient } = await import("./openaiCompatible-6TLDDW5U.js");
       return new OpenAICompatibleClient({
         provider,
         baseUrl: def.baseUrl,
@@ -326,6 +329,7 @@ export {
   setDefaultModel,
   providerKeySource,
   keepProviderKeys,
+  providerKeyValue,
   resolveModel
 };
-//# sourceMappingURL=chunk-NP6RIC25.js.map
+//# sourceMappingURL=chunk-2FIV2VZP.js.map

package/dist/{chunk-YQTGMCU6.js → chunk-3MRQJKUO.js}

@@ -2,7 +2,7 @@
 import {
   passed,
   testSummary
-} from "./chunk-OUCV3FCT.js";
+} from "./chunk-AOGFYUKG.js";
 
 // src/jobs/text.ts
 function jobPrompt(request, plan) {
@@ -22,7 +22,28 @@ function jobPrompt(request, plan) {
     "</plan>"
   ].join("\n");
 }
-var cost = (usd) => usd === void 0 ? "unknown" : `$${usd.toFixed(4)}`;
+var cost = (usd, incomplete = false) => formatCost({ usd, incomplete });
+function formatCost(c) {
+  if (c.usd === void 0) return "unknown";
+  return c.incomplete ? `\u2265 $${c.usd.toFixed(4)} (incomplete)` : `$${c.usd.toFixed(4)}`;
+}
+function sumCosts(costs) {
+  let usd = 0;
+  let incomplete = false;
+  for (const c of costs) {
+    usd = usd === void 0 || c.usd === void 0 ? void 0 : usd + c.usd;
+    incomplete ||= c.incomplete;
+  }
+  return { usd, incomplete };
+}
+function jobCost(r) {
+  const run = { usd: r.costUsd, incomplete: r.costIncomplete === true };
+  const proof = r.proof;
+  const review = proof?.review;
+  const reviewIncomplete = proof?.reviewCostIncomplete === true;
+  if (review === void 0) return sumCosts([run, { usd: 0, incomplete: reviewIncomplete }]);
+  return sumCosts([run, { usd: review.costUsd, incomplete: reviewIncomplete }]);
+}
 function jobReport(job) {
   const r = job.result;
   const lines = [`# Garuda job ${job.id}: ${job.title}`, ""];
@@ -40,7 +61,7 @@ function jobReport(job) {
   if (job.startedAt !== void 0) lines.push(`- Started: ${job.startedAt}`);
   if (r === void 0) return lines.join("\n");
   lines.push(
-    `- Steps: ${r.steps} \xB7 tokens: ${Math.round(r.tokens / 100) / 10}k \xB7 cost: ${cost(r.costUsd)} \xB7 time: ${Math.round(r.durationMs / 1e3)} s`
+    `- Steps: ${r.steps} \xB7 tokens: ${Math.round(r.tokens / 100) / 10}k \xB7 cost: ${cost(r.costUsd, r.costIncomplete === true)} \xB7 time: ${Math.round(r.durationMs / 1e3)} s`
   );
   if (r.sessionId !== void 0) lines.push(`- Session: ${r.sessionId}`);
   if (r.modelCalls !== void 0) {
@@ -96,7 +117,7 @@ function proofLines(job, proof) {
   if (proof.flags.length === 0) out.push("None.");
   for (const f of proof.flags) out.push(`- ${f.level === "stop" ? "STOP" : "look"}: ${f.text}`);
   if (proof.review !== void 0) {
-    const cost2 = proof.review.costUsd === void 0 ? "" : ` (${`$${proof.review.costUsd.toFixed(4)}`})`;
+    const cost2 = proof.review.costUsd === void 0 ? "" : ` (${formatCost({ usd: proof.review.costUsd, incomplete: proof.reviewCostIncomplete === true })})`;
     out.push("", `## Review by a principal engineer${cost2}`, "", proof.review.text);
   } else if (proof.reviewError !== void 0) {
     out.push("", "## Review", "", `The review failed: ${proof.reviewError}`);
@@ -106,6 +127,9 @@ function proofLines(job, proof) {
 
 export {
   jobPrompt,
+  formatCost,
+  sumCosts,
+  jobCost,
   jobReport
 };
-//# sourceMappingURL=chunk-YQTGMCU6.js.map
+//# sourceMappingURL=chunk-3MRQJKUO.js.map

package/dist/{chunk-HE2K657U.js → chunk-4BVCYCQT.js}

@@ -4,11 +4,12 @@ import {
   pickChannel
 } from "./chunk-N4I6YS3E.js";
 import {
-  gateProjectSettings
-} from "./chunk-ULAJPMY7.js";
+  gateProjectSettings,
+  isCostIncomplete
+} from "./chunk-UKIE4AAM.js";
 import {
   totalTokens
-} from "./chunk-R7I2NBPX.js";
+} from "./chunk-7KBOIPUT.js";
 import {
   TrustStore
 } from "./chunk-5DEWP3YX.js";
@@ -16,15 +17,16 @@ import {
   cleanArgs,
   commitJob,
   jobChanges,
+  outsideScope,
   prepareWorktree
-} from "./chunk-44QN5SWZ.js";
+} from "./chunk-55CFEEIN.js";
 import {
   defaultAgentEnv,
   removeAgent
-} from "./chunk-USCUXCAU.js";
+} from "./chunk-5B5HDTUR.js";
 import {
   jobReport
-} from "./chunk-YQTGMCU6.js";
+} from "./chunk-3MRQJKUO.js";
 import {
   jobVerdict,
   parseReview,
@@ -33,21 +35,24 @@ import {
   riskFlags,
   stackOf,
   testSummary
-} from "./chunk-OUCV3FCT.js";
+} from "./chunk-AOGFYUKG.js";
 import {
   JobGitError,
   git,
   hostCommand
-} from "./chunk-TUUEBHG2.js";
+} from "./chunk-6XHON3Q6.js";
 import {
   createExecutor,
   loadSettings
-} from "./chunk-GXZACJUI.js";
+} from "./chunk-B4SJY7KT.js";
 import {
   JOBS_DIR,
   loadJob,
   saveJob
-} from "./chunk-KKB5W47S.js";
+} from "./chunk-VTMD5IHD.js";
+import {
+  prepareWriteScope
+} from "./chunk-UIRJOQQS.js";
 import {
   parseRule
 } from "./chunk-3NJNVZTK.js";
@@ -93,6 +98,7 @@ async function proveJob(prepared, result, runtime, renderer, git2) {
   };
   if (job.review !== false && result.commit !== void 0) {
     renderer.info("Reviewing the diff (a principal engineer's review)\u2026");
+    const unreportedBefore = runtime.session?.unreportedTokens ?? 0;
     try {
       const diff = (await git(git2, job.root, ["diff", "--no-renames", job.base, job.branch], {
         check: false
@@ -118,8 +124,10 @@ async function proveJob(prepared, result, runtime, renderer, git2) {
     } catch (error) {
       proof.reviewError = error.message;
     }
+    if ((runtime.session?.unreportedTokens ?? 0) > unreportedBefore)
+      proof.reviewCostIncomplete = true;
   }
-  proof.verdict = jobVerdict(flags, proof.review?.verdict);
+  proof.verdict = jobVerdict(flags, proof.review?.verdict, proof.reviewError !== void 0);
   return proof;
 }
 async function prepareJob(mainRoot, id, at, renderer, git2 = createExecutor("host").executor, launchd = {}, trustHome) {
@@ -159,6 +167,15 @@ async function prepare(mainRoot, id, at, renderer, git2, trustHome) {
     renderer.error(`The job's worktree failed: ${error.message}`);
     return 1;
   }
+  if (job.writeScope !== void 0) {
+    const problem = prepareWriteScope(job.worktree, job.writeScope);
+    if (problem !== void 0) {
+      renderer.error(
+        `The job's write scope cannot be used: ${problem}. Fix "writeScope" in ${JOBS_DIR}/${id}.json.`
+      );
+      return 1;
+    }
+  }
   const gate = await gateProjectSettings({
     root: job.root,
     settings: await loadSettings(job.worktree),
@@ -172,6 +189,7 @@ async function prepare(mainRoot, id, at, renderer, git2, trustHome) {
     ...projectRest,
     ...job.network === void 0 ? {} : { network: { allow: job.network } },
     allow: [...project.allow, ...job.allow.map((rule) => parseRule(rule))],
+    ...job.writeScope === void 0 ? {} : { writeScope: job.writeScope },
     maxSteps: job.maxSteps,
     sandbox: {
       ...project.sandbox,
@@ -185,7 +203,8 @@ async function prepare(mainRoot, id, at, renderer, git2, trustHome) {
   renderer.info(
     `Job ${job.id}: ${job.title}
 Branch ${job.branch} \xB7 worktree ${job.worktree}
-Approved: ${job.allow.length === 0 ? "nothing beyond the sandbox" : job.allow.join(", ")}`
+Approved: ${job.allow.length === 0 ? "nothing beyond the sandbox" : job.allow.join(", ")}
+${job.writeScope === void 0 ? "Write scope: none. Commands may write anywhere in the worktree." : `Write scope: ${job.writeScope.length === 0 ? "nothing in the worktree" : job.writeScope.join(", ")} (the OS sandbox enforces it for commands).`}`
   );
   return { job, root: job.worktree, settings, denied: [], startedAt: Date.now() };
 }
@@ -224,8 +243,11 @@ function msUntil(hour, minute, now = /* @__PURE__ */ new Date()) {
   if (next.getTime() <= now.getTime()) next.setDate(next.getDate() + 1);
   return next.getTime() - now.getTime();
 }
+var ScopeViolation = class extends Error {
+};
 async function finishJob(prepared, outcome, runtime, renderer, git2 = createExecutor("host").executor, launchd = {}) {
   const { job } = prepared;
+  let scopeFailure;
   const hadAgent = job.launchd !== void 0 || launchd.fromLaunchd === true;
   delete job.launchd;
   const result = {
@@ -233,6 +255,7 @@ async function finishJob(prepared, outcome, runtime, renderer, git2 = createExec
     steps: outcome.kind === "done" ? outcome.result.steps : 0,
     tokens: runtime.session === void 0 ? 0 : totalTokens(runtime.session.usage),
     ...runtime.session?.costUsd === void 0 ? {} : { costUsd: runtime.session.costUsd },
+    ...runtime.session !== void 0 && isCostIncomplete(runtime.session) ? { costIncomplete: true } : {},
     durationMs: Date.now() - prepared.startedAt,
     ...runtime.session === void 0 ? {} : { sessionId: runtime.session.id },
     files: [],
@@ -249,6 +272,12 @@ async function finishJob(prepared, outcome, runtime, renderer, git2 = createExec
     ...outcome.kind === "error" ? { error: outcome.message } : {}
   };
   try {
+    const outside = job.writeScope === void 0 ? [] : await outsideScope(git2, job);
+    if (outside.length > 0) {
+      scopeFailure = `changes outside the approved write scope, so nothing was committed: ${outside.slice(0, 20).join(", ")}${outside.length > 20 ? ", \u2026" : ""}`;
+      result.error = [result.error, scopeFailure].filter(Boolean).join("; ");
+      throw new ScopeViolation();
+    }
     const commit = await commitJob(
       git2,
       job,
@@ -257,13 +286,15 @@ async function finishJob(prepared, outcome, runtime, renderer, git2 = createExec
     if (commit !== void 0) result.commit = commit;
     result.files = await jobChanges(git2, job);
   } catch (error) {
-    if (!(error instanceof JobGitError)) throw error;
-    result.error = [result.error, `commit: ${error.message}`].filter(Boolean).join("; ");
+    if (!(error instanceof ScopeViolation)) {
+      if (!(error instanceof JobGitError)) throw error;
+      result.error = [result.error, `commit: ${error.message}`].filter(Boolean).join("; ");
+    }
   }
   if (outcome.kind !== "interrupted") {
     result.proof = await proveJob(prepared, result, runtime, renderer, git2);
   }
-  job.status = outcome.kind === "error" ? "failed" : outcome.kind === "interrupted" ? "stopped" : "done";
+  job.status = outcome.kind === "error" || scopeFailure !== void 0 ? "failed" : outcome.kind === "interrupted" ? "stopped" : "done";
   job.endedAt = (/* @__PURE__ */ new Date()).toISOString();
   job.result = result;
   await saveJob(job);
@@ -319,4 +350,4 @@ export {
   msUntil,
   finishJob
 };
-//# sourceMappingURL=chunk-HE2K657U.js.map
+//# sourceMappingURL=chunk-4BVCYCQT.js.map

package/dist/{chunk-WMOLXTBU.js → chunk-4LFJFDCF.js}

@@ -56,6 +56,7 @@ export {
   isInside,
   resolveInRoot,
   realRelative,
+  realpathOfNearestExisting,
   displayPath
 };
-//# sourceMappingURL=chunk-WMOLXTBU.js.map
+//# sourceMappingURL=chunk-4LFJFDCF.js.map

package/dist/{chunk-44QN5SWZ.js → chunk-55CFEEIN.js}

@@ -2,7 +2,10 @@
 import {
   JobGitError,
   git
-} from "./chunk-TUUEBHG2.js";
+} from "./chunk-6XHON3Q6.js";
+import {
+  inWriteScope
+} from "./chunk-UIRJOQQS.js";
 
 // src/jobs/worktree.ts
 import { createHash } from "crypto";
@@ -86,6 +89,22 @@ async function commitJob(executor, job, message) {
   await git(executor, job.worktree, ["commit", "--no-verify", "-q", "-m", message]);
   return (await git(executor, job.worktree, ["rev-parse", "HEAD"])).stdout.trim();
 }
+async function outsideScope(executor, job) {
+  if (job.writeScope === void 0) return [];
+  const exclude = [...NEVER_COMMIT, ...job.links].map((p) => `:(exclude)${p}`);
+  const status = await git(executor, job.worktree, [
+    "status",
+    "--porcelain=v1",
+    "-z",
+    "--untracked-files=all",
+    "--no-renames",
+    "--",
+    ".",
+    ...exclude
+  ]);
+  const scope = job.writeScope;
+  return status.stdout.split("\0").filter((entry) => entry.length > 3).map((entry) => entry.slice(3)).filter((path) => !inWriteScope(path, scope));
+}
 async function jobChanges(executor, job) {
   const range = [job.base, job.branch];
   const names = await git(executor, job.root, [
@@ -133,6 +152,7 @@ export {
   linkCandidates,
   prepareWorktree,
   commitJob,
+  outsideScope,
   jobChanges
 };
-//# sourceMappingURL=chunk-44QN5SWZ.js.map
+//# sourceMappingURL=chunk-55CFEEIN.js.map

package/dist/{chunk-USCUXCAU.js → chunk-5B5HDTUR.js}

@@ -2,10 +2,10 @@
 import {
   hostCommand,
   shellWord
-} from "./chunk-TUUEBHG2.js";
+} from "./chunk-6XHON3Q6.js";
 import {
   JOBS_DIR
-} from "./chunk-KKB5W47S.js";
+} from "./chunk-VTMD5IHD.js";
 
 // src/jobs/launchd.ts
 import { createHash } from "crypto";
@@ -154,4 +154,4 @@ export {
   nightAgentTime,
   removeAgent
 };
-//# sourceMappingURL=chunk-USCUXCAU.js.map
+//# sourceMappingURL=chunk-5B5HDTUR.js.map

package/dist/chunk-65NUEOI7.js

@@ -0,0 +1,143 @@
+#!/usr/bin/env node
+import {
+  knownModels
+} from "./chunk-7KBOIPUT.js";
+
+// src/model/catalog.ts
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { homedir } from "os";
+import { dirname, join } from "path";
+var CATALOG_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 1e4;
+var MAX_PAGES = 10;
+function catalogPath(home = homedir()) {
+  return join(home, ".garuda", "cache", "anthropic-models.json");
+}
+async function fetchCatalog(options) {
+  const fetcher = options.fetcher ?? fetch;
+  const base = (options.baseUrl ?? "https://api.anthropic.com").replace(/\/+$/, "");
+  const headers = { "anthropic-version": "2023-06-01" };
+  if (options.key !== void 0) headers["x-api-key"] = options.key;
+  const models = [];
+  let after;
+  try {
+    for (let page = 0; page < MAX_PAGES; page++) {
+      const url = `${base}/v1/models?limit=1000${after === void 0 ? "" : `&after_id=${encodeURIComponent(after)}`}`;
+      const response = await fetcher(url, {
+        headers,
+        redirect: "error",
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      });
+      if (!response.ok) {
+        await response.body?.cancel();
+        return { problem: `the Models API answered HTTP ${response.status}` };
+      }
+      const body = await response.json();
+      for (const m of body.data ?? []) {
+        if (typeof m.id !== "string" || !/^[A-Za-z0-9._:-]+$/.test(m.id)) continue;
+        models.push({
+          id: m.id,
+          ...typeof m.display_name === "string" ? { displayName: m.display_name } : {},
+          ...typeof m.max_input_tokens === "number" && m.max_input_tokens > 0 ? { contextWindow: m.max_input_tokens } : {}
+        });
+      }
+      if (body.has_more !== true || typeof body.last_id !== "string") break;
+      after = body.last_id;
+    }
+  } catch (error) {
+    return { problem: `Garuda could not read the Models API (${error.message})` };
+  }
+  return { catalog: { fetchedAt: (options.now ?? /* @__PURE__ */ new Date()).toISOString(), models } };
+}
+async function saveCatalog(catalog, home = homedir()) {
+  const path = catalogPath(home);
+  await mkdir(dirname(path), { recursive: true, mode: 448 });
+  await writeFile(path, `${JSON.stringify(catalog, null, 2)}
+`, { mode: 384 });
+}
+async function loadCatalog(home = homedir()) {
+  try {
+    const data = JSON.parse(await readFile(catalogPath(home), "utf8"));
+    if (typeof data.fetchedAt !== "string" || !Array.isArray(data.models)) return void 0;
+    return {
+      fetchedAt: data.fetchedAt,
+      models: data.models.filter((m) => typeof m?.id === "string")
+    };
+  } catch {
+    return void 0;
+  }
+}
+function mergedModels(catalog) {
+  const table = knownModels();
+  const exact = new Map(table.map((m) => [m.id, m.info]));
+  const out = [];
+  for (const m of catalog?.models ?? []) {
+    const info = exact.get(m.id) ?? prefixInfo(m.id);
+    if (info !== void 0) out.push({ id: m.id, info, known: true });
+    else out.push({ id: m.id, info: { contextWindow: m.contextWindow ?? 2e5 }, known: false });
+  }
+  for (const m of table) {
+    if (!out.some((o) => o.id === m.id)) out.push({ id: m.id, info: m.info, known: true });
+  }
+  return out;
+}
+function prefixInfo(id) {
+  let best;
+  for (const m of knownModels()) {
+    if (id.startsWith(`${m.id}-`) && /^\d{8}$/.test(id.slice(m.id.length + 1))) {
+      if (m.id.length > (best?.id.length ?? 0)) best = m;
+    }
+  }
+  return best?.info;
+}
+
+// src/tools/atomicWrite.ts
+import { randomBytes } from "crypto";
+import { chmod, link, realpath, rename, stat, unlink, writeFile as writeFile2 } from "fs/promises";
+import { basename, dirname as dirname2, join as join2 } from "path";
+async function writeFileAtomic(path, content, { createOnly }) {
+  const target = createOnly ? path : await realpath(path);
+  const temp = join2(
+    dirname2(target),
+    `.${basename(target)}.garuda-${randomBytes(4).toString("hex")}.tmp`
+  );
+  const mode = createOnly ? void 0 : (await stat(target)).mode & 4095;
+  await writeFile2(temp, content, { flag: "wx", ...mode === void 0 ? {} : { mode } });
+  try {
+    if (createOnly) {
+      try {
+        await link(temp, target);
+      } catch (error) {
+        const code = error.code;
+        if (code !== "EPERM" && code !== "ENOTSUP" && code !== "EXDEV") throw error;
+        if (await exists(target)) throw Object.assign(new Error("EEXIST"), { code: "EEXIST" });
+        await rename(temp, target);
+        return;
+      }
+    } else {
+      await chmod(temp, mode ?? 420);
+      await rename(temp, target);
+      return;
+    }
+  } finally {
+    await unlink(temp).catch(() => {
+    });
+  }
+}
+async function exists(path) {
+  try {
+    await stat(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export {
+  writeFileAtomic,
+  fetchCatalog,
+  saveCatalog,
+  loadCatalog,
+  mergedModels
+};
+//# sourceMappingURL=chunk-65NUEOI7.js.map

package/dist/{chunk-TUUEBHG2.js → chunk-6XHON3Q6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   DEFAULT_ENV_ALLOWLIST
-} from "./chunk-GXZACJUI.js";
+} from "./chunk-B4SJY7KT.js";
 
 // src/jobs/git.ts
 var GIT_TIMEOUT_MS = 12e4;
@@ -46,4 +46,4 @@ export {
   git,
   hostCommand
 };
-//# sourceMappingURL=chunk-TUUEBHG2.js.map
+//# sourceMappingURL=chunk-6XHON3Q6.js.map