@garuda-agent/garuda 0.16.1 → 0.18.0

package/dist/{chunk-BQTUOO4G.js → chunk-OQ26W5L4.js}

@@ -3,6 +3,7 @@ import {
   colorDiff
 } from "./chunk-4JSUUDFQ.js";
 import {
+  AuditDirError,
   SPECIALIST_SPECS,
   THINKING_WORDS,
   callersText,
@@ -16,12 +17,17 @@ import {
   referencesText,
   repoMapText,
   repoMapTool,
-  verifyAuditFile
-} from "./chunk-TILFPYWO.js";
+  verifyAuditDir
+} from "./chunk-NHWHG3SW.js";
+import {
+  budgetSpent,
+  isCostIncomplete,
+  pendingChildTokens
+} from "./chunk-UKIE4AAM.js";
 import {
   WEB_SEARCH_USD,
   totalTokens
-} from "./chunk-R7I2NBPX.js";
+} from "./chunk-7KBOIPUT.js";
 import {
   BUILTIN_COMMANDS
 } from "./chunk-23FXBNBB.js";
@@ -30,7 +36,7 @@ import {
 } from "./chunk-EU7PA45O.js";
 import {
   listJobs
-} from "./chunk-KKB5W47S.js";
+} from "./chunk-VTMD5IHD.js";
 
 // src/cli/errors.ts
 function describeError(error) {
@@ -76,20 +82,32 @@ function formatTokens(n) {
   if (n < 1e6) return `${(n / 1e3).toFixed(1)}k`;
   return `${(n / 1e6).toFixed(1)}M`;
 }
-function formatUsd(usd) {
+function formatUsd(usd, incomplete = false) {
   if (usd === void 0) return "cost unknown";
-  return usd < 0.01 ? `$${usd.toFixed(4)}` : `$${usd.toFixed(2)}`;
+  const amount = usd < 0.01 ? `$${usd.toFixed(4)}` : `$${usd.toFixed(2)}`;
+  return incomplete ? `\u2265 ${amount} (incomplete)` : amount;
+}
+function budgetNote(session) {
+  const unreported = session.unreportedTokens;
+  const children = pendingChildTokens(session);
+  if (unreported <= 0 && children <= 0) return void 0;
+  const parts = [
+    ...unreported > 0 ? [`${formatTokens(unreported)} reserved without reported usage`] : [],
+    ...children > 0 ? [`${formatTokens(children)} from subagents with no report`] : []
+  ];
+  return `budget ${formatTokens(budgetSpent(session))} tokens (${parts.join(", ")})`;
 }
-function usageLine(result, session, runCostUsd, contextWindow) {
+function usageLine(result, session, runCostUsd, contextWindow, runCostIncomplete = false) {
   const u = result.usage;
   const input = u.inputTokens + u.cacheReadTokens + u.cacheWriteTokens;
   const percent = Math.round(session.contextTokens / contextWindow * 100);
   return [
     `${result.stopReason} \xB7 ${result.steps} step(s)`,
-    `${formatTokens(input)} in (${formatTokens(u.cacheReadTokens)} cached) / ${formatTokens(u.outputTokens)} out`,
-    formatUsd(runCostUsd),
+    `${budgetNote(session) !== void 0 ? "reported " : ""}${formatTokens(input)} in (${formatTokens(u.cacheReadTokens)} cached) / ${formatTokens(u.outputTokens)} out`,
+    formatUsd(runCostUsd, runCostIncomplete),
     `context ${percent}% of ${formatTokens(contextWindow)}`,
-    `session ${formatTokens(totalTokens(session.usage))} tokens, ${formatUsd(session.costUsd)}`
+    `session ${formatTokens(totalTokens(session.usage))} tokens, ${formatUsd(session.costUsd, isCostIncomplete(session))}`,
+    ...budgetNote(session) === void 0 ? [] : [budgetNote(session)]
   ].join(" \xB7 ");
 }
 function stopMessage(reason, limits) {
@@ -131,13 +149,19 @@ async function runTurn(runtime, approver, renderer, prompt, exitNow) {
   process.on("SIGINT", stop);
   approver.onInterrupt = stop;
   const costBefore = runtime.session?.costUsd ?? 0;
+  const unreportedBefore = runtime.session?.unreportedTokens ?? 0;
+  const incompleteBefore = runtime.session?.costIncomplete ?? false;
+  const pendingBefore = runtime.session === void 0 ? 0 : pendingChildTokens(runtime.session);
   try {
     const result = await runtime.runTurn(prompt, controller.signal);
     const session = runtime.session;
     if (session !== void 0) {
       const runCost = session.costUsd === void 0 ? void 0 : session.costUsd - costBefore;
-      renderer.info(`
-[${usageLine(result, session, runCost, runtime.limits.contextWindow)}]`);
+      const runIncomplete = session.unreportedTokens > unreportedBefore || pendingChildTokens(session) > pendingBefore || session.costIncomplete && !incompleteBefore;
+      renderer.info(
+        `
+[${usageLine(result, session, runCost, runtime.limits.contextWindow, runIncomplete)}]`
+      );
     }
     const message = stopMessage(result.stopReason, runtime.limits);
     if (message !== void 0) renderer.warn(message);
@@ -200,7 +224,7 @@ var HELP = [
   "  /jobs      the scheduled jobs of this project; /jobs <id> shows one; /jobs cancel|delete <id>; /jobs cancel night",
   "  /where X   where symbol X is defined (code index, no model call)",
   "  /defs X    alias of /where X (definitions of X)",
-  "  /refs X    every use of symbol X (code index, no model call)",
+  "  /refs X    indexed uses of symbol X (approximate except JS/TS, no model call)",
   "  /callers X who calls symbol X (code index, no model call)",
   "  /impact X  blast radius and affected tests for file or symbol X",
   "  /map [dir] what each code file exports and imports",
@@ -388,7 +412,7 @@ async function sessionsCommand(runtime, renderer, arg, signal) {
     const facts = [
       s.id,
       `${s.turns} turn${s.turns === 1 ? "" : "s"}`,
-      ...s.costUsd === void 0 || s.costUsd === 0 ? [] : [`$${s.costUsd.toFixed(2)}`],
+      ...s.costUsd === void 0 || s.costUsd === 0 && !s.costIncomplete ? [] : [`${s.costIncomplete ? "\u2265 " : ""}$${s.costUsd.toFixed(2)}`],
       ...s.model === void 0 ? [] : [s.model]
     ].join(" \xB7 ");
     return [
@@ -467,7 +491,7 @@ async function diffCommand(runtime, renderer, arg, output) {
   );
 }
 async function jobsCommand(runtime, renderer, id) {
-  const { listJobs: listJobs2, loadJob, JOBS_DIR } = await import("./job-3NYDMP2M.js");
+  const { listJobs: listJobs2, loadJob, JOBS_DIR } = await import("./job-7JOI4YIQ.js");
   const cancel = /^cancel\s+(\S+)$/.exec(id);
   if (cancel !== null) {
     renderer.info(await runtime.cancelJob(cancel[1]));
@@ -481,7 +505,7 @@ async function jobsCommand(runtime, renderer, id) {
   if (id !== "") {
     try {
       const job = await loadJob(runtime.root, id);
-      const { jobReport } = await import("./text-J2GD647J.js");
+      const { jobReport } = await import("./text-LS35WSRL.js");
       renderer.info(jobReport(job));
     } catch (error) {
       renderer.warn(error.message);
@@ -489,7 +513,7 @@ async function jobsCommand(runtime, renderer, id) {
     return;
   }
   const jobs = await listJobs2(runtime.root);
-  const { defaultAgentEnv, nightAgentTime } = await import("./launchd-SSX362VG.js");
+  const { defaultAgentEnv, nightAgentTime } = await import("./launchd-3A3ONEW5.js");
   const night = nightAgentTime(runtime.root, defaultAgentEnv());
   const nightLine = night === void 0 ? [] : [
     `Night shift: launchd starts the queue at ${night.toTimeString().slice(0, 5)} on ${night.toDateString()} (/jobs cancel night removes it).`
@@ -527,7 +551,7 @@ async function exportCommand(runtime, renderer, file) {
     renderer.info("There is no conversation to export yet.");
     return;
   }
-  const { sessionMarkdown, writeExport } = await import("./export-HN3CT7AV.js");
+  const { sessionMarkdown, writeExport } = await import("./export-SJ3DUP6W.js");
   const result = await writeExport(runtime.root, id, sessionMarkdown(records, id), file);
   if ("problem" in result) renderer.warn(result.problem);
   else
@@ -628,7 +652,7 @@ async function lookup(runtime, renderer, command, arg) {
     } else {
       text = repoMapText(await repoMapTool.run({ path: arg }, context));
     }
-    renderer.info(text);
+    renderer.info(text.startsWith("Approximate:") ? `\u2248 ${text}` : text);
   } catch (error) {
     renderer.error(error.message);
   }
@@ -706,22 +730,46 @@ async function auditCommand(runtime, renderer, arg) {
     }
   }
   if (arg === "verify") {
-    const files = await runtime.audit.files();
     lines.push("", `Audit files: ${runtime.audit.dir}`);
-    if (files.length === 0) lines.push("  none yet");
+    let results;
+    try {
+      results = await verifyAuditDir(runtime.audit.dir);
+    } catch (error) {
+      if (!(error instanceof AuditDirError)) throw error;
+      lines.push(`  BROKEN  the audit folder: ${error.message}`);
+      renderer.info(lines.join("\n"));
+      return;
+    }
+    if (results.length === 0) lines.push("  none yet");
     let broken = 0;
-    for (const file of files) {
-      const result = await verifyAuditFile(file);
-      const name = file.slice(runtime.audit.dir.length + 1);
-      if (result.ok) {
-        lines.push(`  ok      ${name} (${result.lines} lines)`);
+    let unchecked = 0;
+    for (const result of results) {
+      if ("missing" in result) {
+        broken++;
+        lines.push(`  MISSING ${result.file}: the checkpoint names it, but the file is gone`);
+      } else if ("brokenCheckpoint" in result) {
+        broken++;
+        lines.push(`  BROKEN  ${result.file}: its checkpoint: ${result.brokenCheckpoint}`);
+      } else if (result.verdict.ok) {
+        if (!result.checkpoint) unchecked++;
+        lines.push(
+          `  ok      ${result.file} (${result.verdict.lines} lines${result.checkpoint ? ", checkpoint" : ""})`
+        );
       } else {
         broken++;
-        lines.push(`  BROKEN  ${name}: line ${result.line}: ${result.why}`);
+        lines.push(`  BROKEN  ${result.file}: line ${result.verdict.line}: ${result.verdict.why}`);
       }
     }
-    if (broken > 0) lines.push(`${broken} file(s) were changed after Garuda wrote them.`);
-    lines.push("This check cannot see lines cut from the end of a file, or a removed file.");
+    if (broken > 0)
+      lines.push(`${broken} file(s) were changed or removed after Garuda wrote them.`);
+    if (unchecked > 0) {
+      lines.push(
+        `${unchecked} file(s) have no checkpoint: this check cannot see lines cut from their end, or a removed file. The team policy can turn on "audit": { "checkpoint": true }.`
+      );
+    }
+    lines.push(
+      "Someone with your rights can rewrite a file and its checkpoint together; this check cannot see that."
+    );
     renderer.info(lines.join("\n"));
     return;
   }
@@ -767,11 +815,12 @@ function usageSummary(runtime) {
   const session = runtime.session;
   if (session === void 0) return "No session yet.";
   const u = session.usage;
-  const cost = session.costUsd === void 0 ? "cost unknown" : `$${session.costUsd.toFixed(4)}`;
+  const cost = session.costUsd === void 0 ? "cost unknown" : isCostIncomplete(session) ? `\u2265 $${session.costUsd.toFixed(4)} (incomplete)` : `$${session.costUsd.toFixed(4)}`;
   return [
-    `Session ${session.id}: ${formatTokens(totalTokens(u))} tokens, ${cost}`,
+    `Session ${session.id}: ${formatTokens(totalTokens(u))}${budgetNote(session) !== void 0 ? " reported" : ""} tokens, ${cost}`,
     `  input ${formatTokens(u.inputTokens)}, cache read ${formatTokens(u.cacheReadTokens)}, cache write ${formatTokens(u.cacheWriteTokens)}, output ${formatTokens(u.outputTokens)}`,
     `  context ${formatTokens(session.contextTokens)} of ${formatTokens(runtime.limits.contextWindow)}`,
+    ...budgetNote(session) === void 0 ? [] : [`  ${budgetNote(session)}`],
     ...u.webSearches === void 0 ? [] : [
       `  Claude web searches: ${u.webSearches} ($${(u.webSearches * WEB_SEARCH_USD).toFixed(2)})`
     ]
@@ -1244,4 +1293,4 @@ export {
   statusOf,
   CommandArgs
 };
-//# sourceMappingURL=chunk-BQTUOO4G.js.map
+//# sourceMappingURL=chunk-OQ26W5L4.js.map

package/dist/{chunk-HUIK3WXO.js → chunk-P6XWWIEK.js}

@@ -22,7 +22,9 @@ function ignoredProjectPolicy(root) {
   const file = join(root, POLICY_FILE);
   return existsSync(file) ? file : void 0;
 }
+var PROFILES = ["default", "strict"];
 var policySchema = z.strictObject({
+  profile: z.enum(PROFILES).optional(),
   disallowedCommands: z.array(z.string()).optional(),
   requireSandbox: z.boolean().optional(),
   denyPaths: z.array(z.string()).optional(),
@@ -37,7 +39,8 @@ var policySchema = z.strictObject({
   }).optional(),
   audit: z.strictObject({
     enabled: z.boolean().optional(),
-    level: z.enum(["all", "mutations", "denials"]).optional()
+    level: z.enum(["all", "mutations", "denials"]).optional(),
+    checkpoint: z.boolean().optional()
   }).optional()
 });
 function parsePolicy(json) {
@@ -47,6 +50,7 @@ function parsePolicy(json) {
   }
   const data = result.data;
   return {
+    ...data.profile === void 0 ? {} : { profile: data.profile },
     ...data.disallowedCommands === void 0 ? {} : { disallowedCommands: data.disallowedCommands },
     ...data.requireSandbox === void 0 ? {} : { requireSandbox: data.requireSandbox },
     ...data.denyPaths === void 0 ? {} : { denyPaths: data.denyPaths },
@@ -66,7 +70,8 @@ function parsePolicy(json) {
     ...data.audit === void 0 ? {} : {
       audit: {
         ...data.audit.enabled === void 0 ? {} : { enabled: data.audit.enabled },
-        ...data.audit.level === void 0 ? {} : { level: data.audit.level }
+        ...data.audit.level === void 0 ? {} : { level: data.audit.level },
+        ...data.audit.checkpoint === void 0 ? {} : { checkpoint: data.audit.checkpoint }
       }
     }
   };
@@ -106,7 +111,9 @@ function mergePolicies(user, managed) {
   const maxSteps = lower(user.limits?.maxSteps, managed.limits?.maxSteps);
   const tokenBudget = lower(user.limits?.tokenBudget, managed.limits?.tokenBudget);
   const audit = managed.audit ?? user.audit;
+  const profile = user.profile === void 0 && managed.profile === void 0 ? void 0 : user.profile === "strict" || managed.profile === "strict" ? "strict" : "default";
   return {
+    ...profile === void 0 ? {} : { profile },
     ...disallowedCommands === void 0 ? {} : { disallowedCommands },
     ...requireSandbox === void 0 ? {} : { requireSandbox },
     ...denyPaths === void 0 ? {} : { denyPaths },
@@ -156,6 +163,13 @@ function isCommandDisallowedByPolicy(policy, command) {
   }
   return { disallowed: false };
 }
+function isStrict(policy) {
+  return policy?.profile === "strict";
+}
+function withProfile(policy, projectProfile) {
+  if (!isStrict(policy) && projectProfile !== "strict") return policy;
+  return { ...policy, profile: "strict", requireSandbox: true };
+}
 function isSandboxRequiredByPolicy(policy, outsideSandbox) {
   if (policy.requireSandbox === true && outsideSandbox) {
     return {
@@ -221,14 +235,17 @@ export {
   POLICY_FILE,
   managedPolicyPath,
   ignoredProjectPolicy,
+  PROFILES,
   parsePolicy,
   mergePolicies,
   loadTeamPolicy,
   isCommandDisallowedByPolicy,
+  isStrict,
+  withProfile,
   isSandboxRequiredByPolicy,
   isPathDeniedByPolicy,
   isModelAllowedByPolicy,
   assertModelAllowedByPolicy,
   isHostBlockedByPolicy
 };
-//# sourceMappingURL=chunk-HUIK3WXO.js.map
+//# sourceMappingURL=chunk-P6XWWIEK.js.map