@garuda-agent/garuda 0.18.0 → 0.18.2

package/dist/{chunk-23FXBNBB.js → chunk-MNE7HHX2.js}

@@ -36,6 +36,7 @@ var BUILTIN_COMMANDS = [
   "search",
   "undo",
   "redo",
+  "rewind",
   "exit",
   "quit"
 ];
@@ -43,4 +44,4 @@ var BUILTIN_COMMANDS = [
 export {
   BUILTIN_COMMANDS
 };
-//# sourceMappingURL=chunk-23FXBNBB.js.map
+//# sourceMappingURL=chunk-MNE7HHX2.js.map

package/dist/{chunk-UKIE4AAM.js → chunk-NLS7GMF7.js}

@@ -4,17 +4,11 @@ import {
   contextSize,
   totalTokens
 } from "./chunk-7KBOIPUT.js";
-import {
-  cleanLine
-} from "./chunk-PZS3V6P3.js";
 import {
   ZERO_USAGE,
   addUsage,
   reportedUsage
 } from "./chunk-BHZ6G65V.js";
-import {
-  formatRule
-} from "./chunk-3NJNVZTK.js";
 
 // src/session/store.ts
 import { randomBytes } from "crypto";
@@ -227,7 +221,15 @@ function addSnapshot(session, tree, prompt, durationMs) {
   const messages = session.messages.length;
   pushPoint(session.undo, tree, messages, prompt);
   const point = session.undo.points.at(-1);
-  session.journal?.write({ type: "snapshot", tree, messages, prompt: point.prompt, durationMs });
+  point.at = Date.now();
+  session.journal?.write({
+    type: "snapshot",
+    tree,
+    messages,
+    prompt: point.prompt,
+    durationMs,
+    at: point.at
+  });
 }
 function undoTurn(session, after) {
   const point = popPoint(session.undo, session.messages, after);
@@ -343,101 +345,6 @@ function addSideUsage(session, purpose, response, costUsd) {
   });
 }
 
-// src/permissions/projectSettings.ts
-import { createHash as createHash2 } from "crypto";
-function settingsRisk(settings) {
-  const risk = {
-    executorHost: settings.executor === "host",
-    allow: settings.allow.map(formatRule),
-    writePaths: [...settings.sandbox?.writePaths ?? []],
-    envAllow: [...settings.envAllow],
-    allowLocalhost: settings.web?.allowLocalhost === true
-  };
-  const formatterCommands = Object.entries(settings.formatters?.commands ?? {}).flatMap(
-    ([name, f]) => f === false ? [] : [`${name}: ${f.command.join(" ")}`]
-  );
-  if (formatterCommands.length > 0) risk.formatterCommands = formatterCommands;
-  const none = !risk.executorHost && risk.allow.length === 0 && risk.writePaths.length === 0 && risk.envAllow.length === 0 && !risk.allowLocalhost && risk.formatterCommands === void 0;
-  return none ? void 0 : risk;
-}
-function settingsRiskHash(risk) {
-  return createHash2("sha256").update(JSON.stringify(risk)).digest("hex");
-}
-function settingsRiskLines(risk) {
-  const lines = [];
-  if (risk.executorHost) lines.push('executor: "host" (commands run with no OS sandbox)');
-  if (risk.allow.length > 0) {
-    lines.push(`permissions.allow (no question for these): ${risk.allow.join(", ")}`);
-  }
-  if (risk.writePaths.length > 0) {
-    lines.push(`sandbox.writePaths (commands may write there): ${risk.writePaths.join(", ")}`);
-  }
-  if (risk.envAllow.length > 0) {
-    lines.push(`env.allow (commands see these variables): ${risk.envAllow.join(", ")}`);
-  }
-  if (risk.allowLocalhost) lines.push("web.allowLocalhost (web_fetch may reach this machine)");
-  if (risk.formatterCommands !== void 0) {
-    lines.push(
-      `formatters.commands (run after each edit): ${risk.formatterCommands.map(cleanLine).join("; ")}`
-    );
-  }
-  return lines;
-}
-function withoutRisk(settings) {
-  const { sandbox, web, formatters, ...rest } = settings;
-  const { writePaths: _writePaths, ...sandboxRest } = sandbox ?? {};
-  const keptCommands = Object.fromEntries(
-    Object.entries(formatters?.commands ?? {}).filter(([, f]) => f === false)
-  );
-  return {
-    ...rest,
-    ...formatters === void 0 ? {} : { formatters: { ...formatters, commands: keptCommands } },
-    executor: settings.executor === "host" ? "auto" : settings.executor,
-    allow: [],
-    envAllow: [],
-    ...sandbox === void 0 ? {} : { sandbox: sandboxRest },
-    ...web === void 0 ? {} : { web: { ...web, allowLocalhost: false } }
-  };
-}
-async function gateProjectSettings(options) {
-  const risk = settingsRisk(options.settings);
-  if (risk === void 0) return { settings: options.settings };
-  const hash2 = settingsRiskHash(risk);
-  const known = options.trust?.settingsHash(options.root);
-  if (known === hash2) return { settings: options.settings };
-  const lines = settingsRiskLines(risk);
-  if (options.ask !== void 0) {
-    const choice = await options.ask({
-      tool: "settings",
-      target: { kind: "input", json: "" },
-      title: "Project settings that loosen safety",
-      preview: [
-        `This project's .garuda/settings.json ${known === void 0 ? "asks for" : "changed and now asks for"}:`,
-        ...lines.map((line) => `  - ${line}`),
-        "A cloned repository can ship this file. Without your yes, Garuda uses safe defaults for these",
-        "parts; the rest of the file applies."
-      ].join("\n"),
-      isolation: options.isolation ?? "os",
-      question: "Use these project settings?",
-      choices: ["once", "session", "deny"],
-      labels: {
-        once: "Yes, for this run",
-        session: "Yes, and remember (asks again when they change)",
-        deny: "No, use safe defaults"
-      }
-    });
-    if (choice === "session") await options.trust?.setSettingsHash(options.root, hash2);
-    if (choice !== "deny") return { settings: options.settings };
-  }
-  return {
-    settings: withoutRisk(options.settings),
-    notice: [
-      `Project settings not applied (not approved): ${lines.join("; ")}.`,
-      "Start the chat in a terminal and answer yes to use them."
-    ].join(" ")
-  };
-}
-
 export {
   FileTracker,
   FileSessionStore,
@@ -466,7 +373,6 @@ export {
   addChildDebit,
   addChildReport,
   settleChildDebits,
-  addSideUsage,
-  gateProjectSettings
+  addSideUsage
 };
-//# sourceMappingURL=chunk-UKIE4AAM.js.map
+//# sourceMappingURL=chunk-NLS7GMF7.js.map

package/dist/{chunk-6XHON3Q6.js → chunk-QXTHEFKP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   DEFAULT_ENV_ALLOWLIST
-} from "./chunk-B4SJY7KT.js";
+} from "./chunk-LMKGSYJC.js";
 
 // src/jobs/git.ts
 var GIT_TIMEOUT_MS = 12e4;
@@ -28,7 +28,7 @@ async function hostCommand(executor, cwd, argv, options = {}) {
   const command = argv.map(shellWord).join(" ");
   const result = await executor.run(command, policy, {
     ...options.signal === void 0 ? {} : { signal: options.signal },
-    env: { GIT_TERMINAL_PROMPT: "0" }
+    env: { ...options.env, GIT_TERMINAL_PROMPT: "0" }
   });
   if (result.aborted) throw options.signal?.reason ?? new Error("stopped");
   const out = { exitCode: result.exitCode, stdout: result.stdout.text, stderr: result.stderr.text };
@@ -46,4 +46,4 @@ export {
   git,
   hostCommand
 };
-//# sourceMappingURL=chunk-6XHON3Q6.js.map
+//# sourceMappingURL=chunk-QXTHEFKP.js.map

package/dist/{chunk-4BVCYCQT.js → chunk-R7RCW4BQ.js}

@@ -4,9 +4,11 @@ import {
   pickChannel
 } from "./chunk-N4I6YS3E.js";
 import {
-  gateProjectSettings,
+  gateProjectSettings
+} from "./chunk-ULAJPMY7.js";
+import {
   isCostIncomplete
-} from "./chunk-UKIE4AAM.js";
+} from "./chunk-NLS7GMF7.js";
 import {
   totalTokens
 } from "./chunk-7KBOIPUT.js";
@@ -19,11 +21,11 @@ import {
   jobChanges,
   outsideScope,
   prepareWorktree
-} from "./chunk-55CFEEIN.js";
+} from "./chunk-WK5NE6RY.js";
 import {
   defaultAgentEnv,
   removeAgent
-} from "./chunk-5B5HDTUR.js";
+} from "./chunk-TWQ7V2L6.js";
 import {
   jobReport
 } from "./chunk-3MRQJKUO.js";
@@ -40,11 +42,11 @@ import {
   JobGitError,
   git,
   hostCommand
-} from "./chunk-6XHON3Q6.js";
+} from "./chunk-QXTHEFKP.js";
 import {
   createExecutor,
   loadSettings
-} from "./chunk-B4SJY7KT.js";
+} from "./chunk-LMKGSYJC.js";
 import {
   JOBS_DIR,
   loadJob,
@@ -350,4 +352,4 @@ export {
   msUntil,
   finishJob
 };
-//# sourceMappingURL=chunk-4BVCYCQT.js.map
+//# sourceMappingURL=chunk-R7RCW4BQ.js.map