@garuda-agent/garuda 0.18.0 → 0.18.1

package/CHANGELOG.md

@@ -1,5 +1,111 @@
 # Changelog
 
+## 0.18.1 (2026-11-06)
+
+A security release. In 0.18.0 and earlier, a command in the OS sandbox could read your personal
+folders (Documents, Downloads, Pictures and the Photos library, Mail and the like), and on macOS it
+could reach denied paths through `/System/Volumes/Data`. Update to 0.18.1. It also has the UX work
+of docs/lld/ux.md (receipts, a network question, `/rewind`, word-level diffs, the morning brief,
+`/export --html`, `garuda advise` and more) and eval failure kinds.
+
+- Security: sandboxed commands can no longer read your personal folders: Desktop, Documents,
+  Downloads, Movies, Music, Pictures (with the Photos library), Public, and Mail, Messages, Safari,
+  Calendars, Contacts, iCloud Drive and other cloud folders in `~/Library`. A project inside one of
+  them stays readable, the rest of that folder does not. On macOS each read and write rule also
+  covers the same path under `/System/Volumes/Data`, where a command could reach it before. Found
+  in a live run: a model's `find /` in an eval made macOS ask the user to let iTerm into Downloads
+  and Photos.
+- Evals: a repo task now runs in a copy of the project with no history, not a git worktree, and
+  its commands cannot read the project's checkout (except `node_modules` and venvs) or the rest of
+  the home folder except hidden entries. In a live run, a model read the user's checkout, which
+  holds the commit that the task asks for. Repo results from before this change may have read the
+  answer; run them again.
+- UX, patch 7 (docs/lld/ux.md U11, U8): `/export --html [file]` writes the session as one page:
+  your requests, the answers, each tool call that opens to its output (an edit opens to its
+  change), and the receipts. Every text is escaped; the page has no script and no link, and its
+  own policy forbids them. `garuda advise` runs the repo suite (`garuda eval --from-git`) on two
+  models (default Haiku 5.5 and Sonnet 5.5, 2 runs a task, at most $2), compares them as
+  `eval compare` does, and advises: the model that passes clearly more, or on a tie the cheaper
+  one. It asks first with a cost guess, and writes `advice.txt` and `report.html`.
+- UX, patch 6 (docs/lld/ux.md U7, U9): the morning brief. The first chat after jobs ran shows them
+  once: each job's verdict, its tests ("tests 120 → 126" when the runner's summary gives counts)
+  and its branch, and the total cost. `.garuda/jobs/brief.seen` keeps the time of the last brief.
+  The first-run tour: the first chat in a project with code names its stack ("TypeScript with
+  vitest (pnpm)") and offers three first tasks; typing 1, 2 or 3 runs one. It shows once per
+  project (`~/.garuda/ui.json` keeps a hash of the folder, not its path).
+- UX, patch 5 (docs/lld/ux.md U5): diffs mark the changed words of a changed line (inverse video),
+  in approvals, in hunk review and in `/diff`. From 140 columns a diff is side by side, with the
+  line numbers of both files. An approval that can review hunks says so in its first line:
+  "3 hunks · h reviews them one by one". Syntax colours are not in this patch (decision D10).
+  Only a real diff (with a hunk header) gets the marks and the two columns; other previews, such
+  as the project-settings question, keep their simple colours (the first live run showed that
+  question twice, side by side).
+- UX, patch 4 (docs/lld/ux.md U6): `/rewind` lists the turns that undo can reach (files, cost, age).
+  `/rewind <n>` goes back to the start of turn n in one step, with one question; `/redo` brings the
+  turns back one at a time. `/rewind fork <n>` starts a new session with the conversation up to
+  turn n and the files as they were then; the old session does not change. A new `fork` record
+  starts such a session.
+- UX, patch 3 (docs/lld/ux.md U4): in the chat, calls of one read-only tool in a row become one
+  line, for example `● Read 5 files  docs/architecture.md, SECURITY.md, +3`; a lone call keeps its
+  line and its result. Edits, commands and failed calls always keep a line of their own. Ctrl-O
+  still shows the last call's output. The model's plan (`todo_write`) is drawn live above the
+  input during the turn and printed once at the end, instead of after every update.
+- The chat's wordmark has a drop shadow (a 3D look), drawn twice as large from 130 columns, with
+  the card as wide as the wordmark; a tall screen gets some space above it. A screen reader gets no
+  wordmark (the card says the name).
+- The chat starts on a clear screen, with the banner centred, and you type in a visible chat box
+  with a hint ("Type a task · / for commands · @ for files"). The old screen goes into the
+  scrollback, not away; `"ui": { "clearOnStart": false }` in settings keeps it on screen. Garuda
+  stays in the terminal's normal screen, so its scrollback, search and copy still work. The box's
+  border dims while a turn runs. With `GARUDA_SCREEN_READER=1`, or under 40 columns, there is no box
+  and the banner is not centred.
+- UX, patch 2 (docs/lld/ux.md U2): a chat with no network allowlist starts Garuda's proxy with no
+  host on it ("watch mode"). A command in the sandbox that needs a host now asks for it (once, this
+  session, or no) instead of failing with a DNS error; an empty list needs no consent. After "this
+  session", Garuda says which line in `network.allow` keeps it for the project (a preset such as
+  `npm` when the host belongs to one). The receipt names a blocked host. `-p`, jobs and evals keep
+  no network, as before.
+- The chat shows your requests with a bar (`▌`) on every line, and Garuda's answer starts with `✦`,
+  so requests and answers differ at a glance. With `GARUDA_SCREEN_READER=1` they read "You:" and
+  "Garuda:".
+- The chat warns at start when `dist/` is older than its checkout ("run pnpm build first"), as the
+  evals do. `garudaCommit` and `staleBuildNote` moved to `src/buildCheck.ts`.
+- Docs: `architecture.md`, `hld.md` and the docs index describe Garuda as it is now. The release
+  history in their prose (version lists, "since 0.x", test counts per release) is gone; the
+  CHANGELOG keeps it.
+- UX, patch 1 (docs/lld/ux.md): a receipt after each turn that changed files, ran tests, ran a command outside the sandbox, or had a host blocked: the
+  files with their lines (from the undo snapshots), the last test run with its count for vitest,
+  jest, node:test, pytest, Maven and `go test -v`, the commands in and outside the sandbox, blocked
+  hosts, what `/undo` puts back, and the session's cost per kept change. A turn that only answered
+  keeps the usage line, also when it ran read-only commands in the sandbox (the first live run: a
+  `find` gave a receipt with no news). The session records the receipt (`receipt`), `/export` shows it, and
+  `-p --json` has it as `receipt`. Under 60 columns, in a pipe and with `GARUDA_SCREEN_READER=1` it
+  is plain lines.
+- The chat asks how to go on after the step limit: go on for as many steps again, summarise what is
+  left, or stop. After the same tool call 3 times it says to type a hint, and no longer names
+  `--resume`.
+- The chat's footer shows the context as a bar and a number (yellow from 70%, red from 80%). The key
+  hints show in the first 5 chats; then the footer says `? keys`, and `?` on an empty line lists them.
+- Design: the UX note (docs/lld/ux.md), with mock-ups and no code yet. A receipt after each
+  turn (files, tests, sandbox, undo, cost per kept change), a blocked host as a one-key fix,
+  next steps after a stop, a live plan, better diffs, rewind and fork, a morning brief from the
+  night shift, `garuda advise` (which model for this repo), a first-run tour, a quieter footer,
+  HTML export, and reduced motion and screen-reader modes. Ten decisions for the user.
+- Blog: "Garuda against Claude Code, with intervals": the eval method, the Claude Code
+  baseline, the faults the live runs found in the tasks, the Graphify A/B, the tuned prompt, and
+  the limits.
+- The Homebrew formula in the repository names 0.18.0 and its tarball hash.
+- Failure kinds: the eval report gives one line, "Failures by kind", that counts the failed runs
+  as `check` (the check failed), `protected-files`, `step-limit`, `token-limit`,
+  `repeated-calls`, `refusal`, `timeout`, `error` or `setup` (the key, the connection or the MCP
+  server), and names up to three runs of each kind. A limit or a timeout wins over the check that
+  failed after it. `report.json` has the same in `evidence.failures`, with each failed run's
+  steps, tokens and time.
+- The reports of the runs in the blog post are in `docs/quality-baseline/evals/0.18/`, with a
+  README that maps each run to the post and gives the `eval compare` commands. Local paths are
+  removed. A test checks that the files hold no local path and that `compare` gives the post's
+  numbers. The post links to them. Biome and the docs site leave the folder out.
+
 ## 0.18.0 (2026-11-04)
 
 - Biome 2.6.2 (with @inquirer/prompts 8.7.4, react 19.3.1 and smol-toml 1.9.1, from Dependabot's

package/README.md

@@ -7,7 +7,7 @@ Website and docs: https://madhu-sv.github.io/garuda/
 Garuda is a coding agent for the terminal, and for editors over the Agent Client Protocol. It reads
 and edits your code, runs commands in an OS sandbox, and keeps an audit log of its permission
 decisions. It works with Claude and with OpenAI-compatible models, local ones too. This is version
-0.18.0. Release notes: [CHANGELOG.md](CHANGELOG.md).
+0.18.1. Release notes: [CHANGELOG.md](CHANGELOG.md).
 
 ## What Garuda does on your machine
 
@@ -15,7 +15,8 @@ decisions. It works with Claude and with OpenAI-compatible models, local ones to
 - `write_file` and `edit_file` show a diff first. You allow once, allow for this session, or deny.
 - Commands (`bash`) run in an OS sandbox when your machine has one: Seatbelt on macOS, bubblewrap
   on Linux. There they run with no question, but they can write only in the project, temp folders
-  and package caches, cannot read secrets in your home folder (such as `~/.ssh`), and have no
+  and package caches, cannot read secrets in your home folder (such as `~/.ssh`) or your personal folders (Documents,
+  Downloads, Pictures and the like, outside the project), and have no
   network unless you open an allowlist. So a command can change project files without a question;
   `/undo` restores the files in its snapshot (ignored files, such as build output, are not in it).
 - A command outside the sandbox asks first, unless one of your allow rules covers it. The strict

package/dist/{acpCommand-IUZPLPLI.js → acpCommand-JAYNMIMP.js}

@@ -1,35 +1,38 @@
 #!/usr/bin/env node
+import {
+  Runtime,
+  auditDirFor
+} from "./chunk-5UDYQ5MK.js";
+import "./chunk-G2AX7MGS.js";
+import "./chunk-ULAJPMY7.js";
+import "./chunk-JMH5W5DG.js";
 import {
   chooseModel,
   keepProviderKeys,
   loadModelsConfig,
   providerKeySource,
   resolveModel
-} from "./chunk-2FIV2VZP.js";
-import {
-  Runtime,
-  auditDirFor
-} from "./chunk-NHWHG3SW.js";
-import "./chunk-65NUEOI7.js";
-import "./chunk-G2AX7MGS.js";
+} from "./chunk-QLBCM2YQ.js";
+import "./chunk-NH72AELP.js";
+import "./chunk-4QRTTRVK.js";
 import "./chunk-A2QAIRQL.js";
 import {
   FileSessionStore
-} from "./chunk-UKIE4AAM.js";
+} from "./chunk-NLS7GMF7.js";
 import "./chunk-7KBOIPUT.js";
 import {
   loadSearchConfig
 } from "./chunk-B25VL4RU.js";
-import "./chunk-23FXBNBB.js";
+import "./chunk-MNE7HHX2.js";
 import {
   VERSION
-} from "./chunk-C57GHLKP.js";
+} from "./chunk-IYGJWX65.js";
 import "./chunk-5DEWP3YX.js";
 import "./chunk-PZS3V6P3.js";
 import "./chunk-QANRZW7W.js";
 import "./chunk-ATW7BNIG.js";
 import "./chunk-AOGFYUKG.js";
-import "./chunk-B4SJY7KT.js";
+import "./chunk-LMKGSYJC.js";
 import "./chunk-BHZ6G65V.js";
 import "./chunk-P6XWWIEK.js";
 import "./chunk-UIRJOQQS.js";
@@ -47,12 +50,12 @@ async function acpCommand(options) {
 `);
       return 1;
     }
-    const { setupCommand, terminalIO } = await import("./setupCommand-YMF6I3MD.js");
+    const { setupCommand, terminalIO } = await import("./setupCommand-OSOMFHDQ.js");
     return setupCommand({}, { io: await terminalIO() });
   }
   const output = protocolOutput(process.stdout, process.stderr);
   const input = Readable.toWeb(process.stdin);
-  const { acpServer, setupNeeded } = await import("./server-VEYIJHEU.js");
+  const { acpServer, setupNeeded } = await import("./server-ASM73QVY.js");
   const server = acpServer({
     version: VERSION,
     // Not on native Windows: the setup there could not keep a key private (no 0600).
@@ -190,4 +193,4 @@ export {
   prepare,
   protocolOutput
 };
-//# sourceMappingURL=acpCommand-IUZPLPLI.js.map
+//# sourceMappingURL=acpCommand-JAYNMIMP.js.map

package/dist/advise-HDKJGNBL.js

@@ -0,0 +1,195 @@
+#!/usr/bin/env node
+import {
+  compareReports,
+  costPerPass,
+  formatComparison,
+  loadReport,
+  repoEvalTasks
+} from "./chunk-CWVXOSAA.js";
+import {
+  escapeHtml
+} from "./chunk-TLA2PDGM.js";
+import {
+  loadModelsConfig,
+  resolveModel
+} from "./chunk-QLBCM2YQ.js";
+import "./chunk-NH72AELP.js";
+import "./chunk-DQSCCE77.js";
+import "./chunk-4QRTTRVK.js";
+import "./chunk-A2QAIRQL.js";
+import "./chunk-2OYTNNUJ.js";
+import {
+  newSessionId
+} from "./chunk-NLS7GMF7.js";
+import "./chunk-7KBOIPUT.js";
+import "./chunk-ATW7BNIG.js";
+import "./chunk-WK5NE6RY.js";
+import "./chunk-AOGFYUKG.js";
+import "./chunk-QXTHEFKP.js";
+import "./chunk-LMKGSYJC.js";
+import "./chunk-BHZ6G65V.js";
+import "./chunk-P6XWWIEK.js";
+import "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
+import "./chunk-3NJNVZTK.js";
+
+// src/cli/advise.ts
+import { mkdirSync, writeFileSync } from "fs";
+import { join } from "path";
+import { createInterface } from "readline/promises";
+var ADVISE_MODELS = ["claude-haiku-5-5", "claude-sonnet-5-5"];
+var ADVISE_REPEAT = 2;
+var ADVISE_MAX_COST = 2;
+var GUESS_INPUT_TOKENS = 6e4;
+var GUESS_OUTPUT_TOKENS = 1500;
+function estimateUsd(price, runs) {
+  if (price === void 0) return void 0;
+  return runs * (GUESS_INPUT_TOKENS * price.input + GUESS_OUTPUT_TOKENS * price.output) / 1e6;
+}
+function adviceText(a, b, c, tasks) {
+  const rough = tasks < 10 ? ` With ${tasks} task${tasks === 1 ? "" : "s"}, this is a rough guide.` : "";
+  if (c.verdict === "B passes more")
+    return `Advice: ${b} for this repo. It passes more often.${rough}`;
+  if (c.verdict === "B passes less")
+    return `Advice: ${a} for this repo. It passes more often.${rough}`;
+  const ratio = c.costRatio;
+  if (ratio === void 0) {
+    return `Advice: no clear difference in passes, and the cost could not be compared.${rough}`;
+  }
+  const times = (x) => `${x.toFixed(1)} times`;
+  if (ratio.verdict === "B costs less per accepted change") {
+    return `Advice: ${b} for this repo. It passes as often, and ${a} costs ${times(1 / ratio.value)} as much per accepted change.${rough}`;
+  }
+  if (ratio.verdict === "B costs more per accepted change") {
+    return `Advice: ${a} for this repo. It passes as often, and ${b} costs ${times(ratio.value)} as much per accepted change.${rough}`;
+  }
+  const cheaper = ratio.value <= 1 ? b : a;
+  return `Advice: either. No clear difference in passes or in cost; ${cheaper} was cheaper in these runs.${rough}`;
+}
+function adviceHtml(comparison, advice) {
+  return [
+    "<!doctype html>",
+    '<html lang="en"><head><meta charset="utf-8">',
+    `<meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'">`,
+    "<title>Garuda advise</title>",
+    "<style>body{font:15px/1.5 system-ui,sans-serif;max-width:900px;margin:32px auto;padding:0 16px}",
+    "pre{font:13px/1.45 ui-monospace,monospace;white-space:pre-wrap}.advice{font-weight:600}</style>",
+    "</head><body><h1>Which model for this repository</h1>",
+    `<p class="advice">${escapeHtml(advice)}</p>`,
+    `<pre>${escapeHtml(comparison)}</pre>`,
+    "</body></html>",
+    ""
+  ].join("\n");
+}
+async function runAdvise(options) {
+  const [a, b] = options.models ?? ADVISE_MODELS;
+  if (a === void 0 || b === void 0 || options.models?.length === 1 || (options.models?.length ?? 2) > 2) {
+    process.stderr.write("Give two models: --models <a>,<b>.\n");
+    return 1;
+  }
+  const repeat = options.repeat ?? ADVISE_REPEAT;
+  const maxCost = options.maxCost ?? ADVISE_MAX_COST;
+  const seed = options.seed ?? 1;
+  if (!Number.isInteger(repeat) || repeat < 1 || !(maxCost > 0)) {
+    process.stderr.write("--repeat must be a whole number of 1 or more, and --max-cost above 0.\n");
+    return 1;
+  }
+  const { repoSuite, runEvalCommand } = await import("./evalCommand-BLJJ4G76.js");
+  const suite = await repoSuite();
+  if (typeof suite === "string") {
+    process.stderr.write(`${suite}
+`);
+    return 1;
+  }
+  const tasks = repoEvalTasks(suite).length;
+  const models = await loadModelsConfig();
+  if (models.problem !== void 0) {
+    process.stderr.write(`${models.problem}
+`);
+    return 1;
+  }
+  let prices;
+  try {
+    prices = [resolveModel(a, models.config).info.price, resolveModel(b, models.config).info.price];
+  } catch (error) {
+    process.stderr.write(`${error.message}
+`);
+    return 1;
+  }
+  const runs = tasks * repeat;
+  const estimates = prices.map((p) => estimateUsd(p, runs));
+  const total = estimates[0] === void 0 || estimates[1] === void 0 ? void 0 : estimates[0] + estimates[1];
+  process.stderr.write(
+    [
+      `Your repo: ${tasks} task${tasks === 1 ? "" : "s"} from its history (tests that fail before the commit and pass after it).`,
+      `Models: ${a}, ${b} \xB7 ${repeat} run${repeat === 1 ? "" : "s"} a task \xB7 ${2 * runs} runs, ${total === void 0 ? "cost unknown" : `about $${total.toFixed(2)} (a guess)`}.`,
+      `Cap: --max-cost $${maxCost}; it stops before a model that would pass it.`,
+      ""
+    ].join("\n")
+  );
+  if (total !== void 0 && total > maxCost) {
+    process.stderr.write(`The guess passes the cap: raise --max-cost, or lower --repeat.
+`);
+    return 1;
+  }
+  if (options.yes !== true) {
+    if (!process.stdin.isTTY) {
+      process.stderr.write("Add --yes to start without a question.\n");
+      return 1;
+    }
+    const rl = createInterface({ input: process.stdin, output: process.stderr });
+    const answer = await rl.question("Start? (y/N) ");
+    rl.close();
+    if (!/^y(es)?$/i.test(answer.trim())) return 1;
+  }
+  const dir = join(process.cwd(), ".garuda", "evals", `advise-${newSessionId()}`);
+  mkdirSync(dir, { recursive: true });
+  const run = (model, label) => runEvalCommand({ model, suite: "repo", repeat, shuffle: true, seed, outDir: join(dir, label) });
+  await run(a, "a");
+  const first = await loadReport(join(dir, "a"));
+  const spent = costPerPass(first.results);
+  const spentA = spent.kind === "unknown" ? void 0 : spent.totalUsd;
+  const ratio = prices[0] === void 0 || prices[1] === void 0 ? void 0 : prices[1].input / prices[0].input;
+  if (spentA !== void 0 && ratio !== void 0 && spentA * (1 + ratio) > maxCost) {
+    process.stderr.write(
+      `Stopped before ${b}: ${a} cost $${spentA.toFixed(2)}, so ${b} would take the total past $${maxCost}.
+`
+    );
+    return 1;
+  }
+  await run(b, "b");
+  const second = await loadReport(join(dir, "b"));
+  const result = compareReports(first, second, { seed });
+  if ("problems" in result) {
+    process.stderr.write(`The two runs cannot be compared:
+${result.problems.join("\n")}
+`);
+    return 1;
+  }
+  const comparison = formatComparison(first, second, result.comparison);
+  const advice = adviceText(a, b, result.comparison, tasks);
+  writeFileSync(join(dir, "advice.txt"), `${advice}
+
+${comparison}
+`);
+  writeFileSync(join(dir, "report.html"), adviceHtml(comparison, advice));
+  process.stdout.write(`
+${comparison}
+
+${advice}
+Report: ${join(dir, "report.html")}
+`);
+  return 0;
+}
+export {
+  ADVISE_MAX_COST,
+  ADVISE_MODELS,
+  ADVISE_REPEAT,
+  GUESS_INPUT_TOKENS,
+  GUESS_OUTPUT_TOKENS,
+  adviceHtml,
+  adviceText,
+  estimateUsd,
+  runAdvise
+};
+//# sourceMappingURL=advise-HDKJGNBL.js.map

package/dist/brief-RWKESOPT.js

@@ -0,0 +1,91 @@
+#!/usr/bin/env node
+import {
+  parseTestCount
+} from "./chunk-4QRTTRVK.js";
+import {
+  formatCost,
+  jobCost,
+  sumCosts
+} from "./chunk-3MRQJKUO.js";
+import "./chunk-AOGFYUKG.js";
+import {
+  JOBS_DIR,
+  listJobs
+} from "./chunk-VTMD5IHD.js";
+import "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
+import "./chunk-3NJNVZTK.js";
+
+// src/jobs/brief.ts
+import { mkdir, readFile, writeFile } from "fs/promises";
+import { join } from "path";
+var BRIEF_FILE = "brief.seen";
+var FIRST_BRIEF_MS = 24 * 36e5;
+function testsText(job) {
+  const proof = job.result?.proof;
+  const after = proof?.after;
+  if (after === void 0) return "no tests";
+  const count = (tail) => tail === void 0 ? void 0 : parseTestCount(tail)?.total;
+  const before = count(proof?.before?.tail);
+  const now = count(after.tail);
+  const passed = after.exitCode === 0 && !after.timedOut;
+  if (before !== void 0 && now !== void 0 && passed) return `tests ${before} \u2192 ${now}`;
+  return passed ? "tests pass" : "tests fail after the change";
+}
+function jobLine(job, paint) {
+  const verdict = job.result?.proof?.verdict;
+  const ok = job.status === "done" && verdict === "ready";
+  const mark = ok ? paint("green", "\u2713") : paint("red", "\u2717");
+  const what = verdict === "ready" ? "ready to merge" : verdict === "needs-look" ? "needs a look" : job.status === "done" ? "done, no verdict" : job.status;
+  const title = job.title.length > 32 ? `${job.title.slice(0, 31)}\u2026` : job.title;
+  return `  ${mark} ${title.padEnd(32)}  ${what.padEnd(16)}  ${testsText(job).padEnd(26)}  ${paint("dim", job.branch)}`;
+}
+function briefText(jobs, paint) {
+  if (jobs.length === 0) return void 0;
+  const cost = sumCosts(jobs.flatMap((j) => j.result === void 0 ? [] : [jobCost(j.result)]));
+  return [
+    paint(
+      "bold",
+      `While you were away: ${jobs.length} job${jobs.length === 1 ? "" : "s"} ran (${formatCost(cost)})`
+    ),
+    ...jobs.map((j) => jobLine(j, paint)),
+    paint(
+      "dim",
+      "  /jobs <id> shows a job's report and review \xB7 git diff <base>...<branch> shows its change"
+    )
+  ].join("\n");
+}
+function endedSince(jobs, since) {
+  return jobs.filter((j) => j.endedAt !== void 0 && Date.parse(j.endedAt) > since).filter((j) => j.status === "done" || j.status === "stopped" || j.status === "failed").sort((a, b) => Date.parse(a.endedAt ?? "") - Date.parse(b.endedAt ?? ""));
+}
+async function morningBrief(root, paint, now = Date.now()) {
+  const dir = join(root, JOBS_DIR);
+  const file = join(dir, BRIEF_FILE);
+  let since = now - FIRST_BRIEF_MS;
+  try {
+    const data = JSON.parse(await readFile(file, "utf8"));
+    if (typeof data.seenAt === "string" && !Number.isNaN(Date.parse(data.seenAt))) {
+      since = Date.parse(data.seenAt);
+    }
+  } catch {
+  }
+  const jobs = endedSince(await listJobs(root), since);
+  if (jobs.length === 0) return void 0;
+  try {
+    await mkdir(dir, { recursive: true });
+    await writeFile(file, `${JSON.stringify({ seenAt: new Date(now).toISOString() })}
+`);
+  } catch {
+  }
+  return briefText(jobs, paint);
+}
+export {
+  BRIEF_FILE,
+  FIRST_BRIEF_MS,
+  briefText,
+  endedSince,
+  jobLine,
+  morningBrief,
+  testsText
+};
+//# sourceMappingURL=brief-RWKESOPT.js.map

package/dist/buildCheck-HB46NWLX.js

@@ -0,0 +1,19 @@
+#!/usr/bin/env node
+import {
+  CHAT_STALE,
+  garudaCommit,
+  staleBuildNote
+} from "./chunk-YAQ6QLKB.js";
+import "./chunk-QXTHEFKP.js";
+import "./chunk-LMKGSYJC.js";
+import "./chunk-BHZ6G65V.js";
+import "./chunk-P6XWWIEK.js";
+import "./chunk-UIRJOQQS.js";
+import "./chunk-4LFJFDCF.js";
+import "./chunk-3NJNVZTK.js";
+export {
+  CHAT_STALE,
+  garudaCommit,
+  staleBuildNote
+};
+//# sourceMappingURL=buildCheck-HB46NWLX.js.map

package/dist/buildInfo-K73FFI5S.js

@@ -0,0 +1,8 @@
+#!/usr/bin/env node
+import {
+  BUILD_COMMIT
+} from "./chunk-H7LIBGZT.js";
+export {
+  BUILD_COMMIT
+};
+//# sourceMappingURL=buildInfo-K73FFI5S.js.map