@iaforged/context-code 1.0.63 → 1.0.65

package/dist/src/utils/betas.js

@@ -1,332 +0,0 @@
-import { feature } from '../recovery/bunBundleShim.js';
-import memoize from 'lodash-es/memoize.js';
-import { checkStatsigFeatureGate_CACHED_MAY_BE_STALE, getFeatureValue_CACHED_MAY_BE_STALE, } from '../services/analytics/growthbook.js';
-import { getIsNonInteractiveSession, getSdkBetas } from '../bootstrap/state.js';
-import { BEDROCK_EXTRA_PARAMS_HEADERS, CLAUDE_CODE_20250219_BETA_HEADER, CLI_INTERNAL_BETA_HEADER, CONTEXT_1M_BETA_HEADER, CONTEXT_MANAGEMENT_BETA_HEADER, INTERLEAVED_THINKING_BETA_HEADER, PROMPT_CACHING_SCOPE_BETA_HEADER, REDACT_THINKING_BETA_HEADER, STRUCTURED_OUTPUTS_BETA_HEADER, SUMMARIZE_CONNECTOR_TEXT_BETA_HEADER, TOKEN_EFFICIENT_TOOLS_BETA_HEADER, TOOL_SEARCH_BETA_HEADER_1P, TOOL_SEARCH_BETA_HEADER_3P, WEB_SEARCH_BETA_HEADER, } from '../constants/betas.js';
-import { OAUTH_BETA_HEADER } from '../constants/oauth.js';
-import { isClaudeAISubscriber } from './auth.js';
-import { has1mContext } from './context.js';
-import { isEnvDefinedFalsy, isEnvTruthy } from './envUtils.js';
-import { getCanonicalName } from './model/model.js';
-import { get3PModelCapabilityOverride } from './model/modelSupportOverrides.js';
-import { getAPIProvider } from './model/providers.js';
-import { getInitialSettings } from './settings/settings.js';
-/**
- * SDK-provided betas that are allowed for API key users.
- * Only betas in this list can be passed via SDK options.
- */
-const ALLOWED_SDK_BETAS = [CONTEXT_1M_BETA_HEADER];
-/**
- * Filter betas to only include those in the allowlist.
- * Returns allowed and disallowed betas separately.
- */
-function partitionBetasByAllowlist(betas) {
-    const allowed = [];
-    const disallowed = [];
-    for (const beta of betas) {
-        if (ALLOWED_SDK_BETAS.includes(beta)) {
-            allowed.push(beta);
-        }
-        else {
-            disallowed.push(beta);
-        }
-    }
-    return { allowed, disallowed };
-}
-/**
- * Filter SDK betas to only include allowed ones.
- * Warns about disallowed betas and subscriber restrictions.
- * Returns undefined if no valid betas remain or if user is a subscriber.
- */
-export function filterAllowedSdkBetas(sdkBetas) {
-    if (!sdkBetas || sdkBetas.length === 0) {
-        return undefined;
-    }
-    if (isClaudeAISubscriber()) {
-        // biome-ignore lint/suspicious/noConsole: intentional warning
-        console.warn('Warning: Custom betas are only available for API key users. Ignoring provided betas.');
-        return undefined;
-    }
-    const { allowed, disallowed } = partitionBetasByAllowlist(sdkBetas);
-    for (const beta of disallowed) {
-        // biome-ignore lint/suspicious/noConsole: intentional warning
-        console.warn(`Warning: Beta header '${beta}' is not allowed. Only the following betas are supported: ${ALLOWED_SDK_BETAS.join(', ')}`);
-    }
-    return allowed.length > 0 ? allowed : undefined;
-}
-// Generally, foundry supports all 1P features;
-// however out of an abundance of caution, we do not enable any which are behind an experiment
-export function modelSupportsISP(model) {
-    const supported3P = get3PModelCapabilityOverride(model, 'interleaved_thinking');
-    if (supported3P !== undefined) {
-        return supported3P;
-    }
-    const canonical = getCanonicalName(model);
-    const provider = getAPIProvider();
-    // Foundry supports interleaved thinking for all models
-    if (provider === 'foundry') {
-        return true;
-    }
-    if (provider === 'firstParty') {
-        return !canonical.includes('claude-3-');
-    }
-    return (canonical.includes('claude-opus-4') || canonical.includes('claude-sonnet-4'));
-}
-function vertexModelSupportsWebSearch(model) {
-    const canonical = getCanonicalName(model);
-    // Web search only supported on Claude 4.0+ models on Vertex
-    return (canonical.includes('claude-opus-4') ||
-        canonical.includes('claude-sonnet-4') ||
-        canonical.includes('claude-haiku-4'));
-}
-// Context management is supported on Claude 4+ models
-export function modelSupportsContextManagement(model) {
-    const canonical = getCanonicalName(model);
-    const provider = getAPIProvider();
-    if (provider === 'foundry') {
-        return true;
-    }
-    if (provider === 'firstParty') {
-        return !canonical.includes('claude-3-');
-    }
-    return (canonical.includes('claude-opus-4') ||
-        canonical.includes('claude-sonnet-4') ||
-        canonical.includes('claude-haiku-4'));
-}
-// @[MODEL LAUNCH]: Add the new model ID to this list if it supports structured outputs.
-export function modelSupportsStructuredOutputs(model) {
-    const canonical = getCanonicalName(model);
-    const provider = getAPIProvider();
-    // Structured outputs only supported on firstParty and Foundry (not Bedrock/Vertex yet)
-    if (provider !== 'firstParty' && provider !== 'foundry') {
-        return false;
-    }
-    return (canonical.includes('claude-sonnet-4-6') ||
-        canonical.includes('claude-sonnet-4-5') ||
-        canonical.includes('claude-opus-4-1') ||
-        canonical.includes('claude-opus-4-5') ||
-        canonical.includes('claude-opus-4-6') ||
-        canonical.includes('claude-opus-4-7') ||
-        canonical.includes('claude-haiku-4-5'));
-}
-// @[MODEL LAUNCH]: Add the new model if it supports auto mode (specifically PI probes) — ask in #proj-claude-code-safety-research.
-export function modelSupportsAutoMode(model) {
-    if (feature('TRANSCRIPT_CLASSIFIER')) {
-        const m = getCanonicalName(model);
-        // External: firstParty-only at launch (PI probes not wired for
-        // Bedrock/Vertex/Foundry yet). Checked before allowModels so the GB
-        // override can't enable auto mode on unsupported providers.
-        if (process.env.USER_TYPE !== 'ant' && getAPIProvider() !== 'firstParty') {
-            return false;
-        }
-        // GrowthBook override: tengu_auto_mode_config.allowModels force-enables
-        // auto mode for listed models, bypassing the denylist/allowlist below.
-        // Exact model IDs (e.g. "claude-strudel-v6-p") match only that model;
-        // canonical names (e.g. "claude-strudel") match the whole family.
-        const config = getFeatureValue_CACHED_MAY_BE_STALE('tengu_auto_mode_config', {});
-        const rawLower = model.toLowerCase();
-        if (config?.allowModels?.some(am => am.toLowerCase() === rawLower || am.toLowerCase() === m)) {
-            return true;
-        }
-        if (process.env.USER_TYPE === 'ant') {
-            // Denylist: block known-unsupported claude models, allow everything else (ant-internal models etc.)
-            if (m.includes('claude-3-'))
-                return false;
-            // claude-*-4 not followed by -[6-9]: blocks bare -4, -4-YYYYMMDD, -4@, -4-0 thru -4-5
-            if (/claude-(opus|sonnet|haiku)-4(?!-[6-9])/.test(m))
-                return false;
-            return true;
-        }
-        // External allowlist (firstParty already checked above).
-        return /^claude-(opus|sonnet)-4-6/.test(m);
-    }
-    return false;
-}
-/**
- * Get the correct tool search beta header for the current API provider.
- * - Claude API / Foundry: advanced-tool-use-2025-11-20
- * - Vertex AI / Bedrock: tool-search-tool-2025-10-19
- */
-export function getToolSearchBetaHeader() {
-    const provider = getAPIProvider();
-    if (provider === 'vertex' || provider === 'bedrock') {
-        return TOOL_SEARCH_BETA_HEADER_3P;
-    }
-    return TOOL_SEARCH_BETA_HEADER_1P;
-}
-/**
- * Check if experimental betas should be included.
- * These are betas that are only available on firstParty provider
- * and may not be supported by proxies or other providers.
- */
-export function shouldIncludeFirstPartyOnlyBetas() {
-    return ((getAPIProvider() === 'firstParty' || getAPIProvider() === 'foundry') &&
-        !isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS));
-}
-/**
- * Global-scope prompt caching is firstParty only. Foundry is excluded because
- * GrowthBook never bucketed Foundry users into the rollout experiment — the
- * treatment data is firstParty-only.
- */
-export function shouldUseGlobalCacheScope() {
-    return (getAPIProvider() === 'firstParty' &&
-        !isEnvTruthy(process.env.CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS));
-}
-export const getAllModelBetas = memoize((model) => {
-    const betaHeaders = [];
-    const isHaiku = getCanonicalName(model).includes('haiku');
-    const provider = getAPIProvider();
-    const includeFirstPartyOnlyBetas = shouldIncludeFirstPartyOnlyBetas();
-    if (!isHaiku) {
-        betaHeaders.push(CLAUDE_CODE_20250219_BETA_HEADER);
-        if (process.env.USER_TYPE === 'ant' &&
-            process.env.CLAUDE_CODE_ENTRYPOINT === 'cli') {
-            if (CLI_INTERNAL_BETA_HEADER) {
-                betaHeaders.push(CLI_INTERNAL_BETA_HEADER);
-            }
-        }
-    }
-    if (isClaudeAISubscriber()) {
-        betaHeaders.push(OAUTH_BETA_HEADER);
-    }
-    if (has1mContext(model)) {
-        betaHeaders.push(CONTEXT_1M_BETA_HEADER);
-    }
-    if (!isEnvTruthy(process.env.DISABLE_INTERLEAVED_THINKING) &&
-        modelSupportsISP(model)) {
-        betaHeaders.push(INTERLEAVED_THINKING_BETA_HEADER);
-    }
-    // Skip the API-side Haiku thinking summarizer — the summary is only used
-    // for ctrl+o display, which interactive users rarely open. The API returns
-    // redacted_thinking blocks instead; AssistantRedactedThinkingMessage already
-    // renders those as a stub. SDK / print-mode keep summaries because callers
-    // may iterate over thinking content. Users can opt back in via settings.json
-    // showThinkingSummaries.
-    if (includeFirstPartyOnlyBetas &&
-        modelSupportsISP(model) &&
-        !getIsNonInteractiveSession() &&
-        getInitialSettings().showThinkingSummaries !== true) {
-        betaHeaders.push(REDACT_THINKING_BETA_HEADER);
-    }
-    // POC: server-side connector-text summarization (anti-distillation). The
-    // API buffers assistant text between tool calls, summarizes it, and returns
-    // the summary with a signature so the original can be restored on subsequent
-    // turns — same mechanism as thinking blocks. Ant-only while we measure
-    // TTFT/TTLT/capacity; betas already flow to tengu_api_success for splitting.
-    // Backend independently requires Capability.ANTHROPIC_INTERNAL_RESEARCH.
-    //
-    // USE_CONNECTOR_TEXT_SUMMARIZATION is tri-state: =1 forces on (opt-in even
-    // if GB is off), =0 forces off (opt-out of a GB rollout you were bucketed
-    // into), unset defers to GB.
-    if (SUMMARIZE_CONNECTOR_TEXT_BETA_HEADER &&
-        process.env.USER_TYPE === 'ant' &&
-        includeFirstPartyOnlyBetas &&
-        !isEnvDefinedFalsy(process.env.USE_CONNECTOR_TEXT_SUMMARIZATION) &&
-        (isEnvTruthy(process.env.USE_CONNECTOR_TEXT_SUMMARIZATION) ||
-            getFeatureValue_CACHED_MAY_BE_STALE('tengu_slate_prism', false))) {
-        betaHeaders.push(SUMMARIZE_CONNECTOR_TEXT_BETA_HEADER);
-    }
-    // Add context management beta for tool clearing (ant opt-in) or thinking preservation
-    const antOptedIntoToolClearing = isEnvTruthy(process.env.USE_API_CONTEXT_MANAGEMENT) &&
-        process.env.USER_TYPE === 'ant';
-    const thinkingPreservationEnabled = modelSupportsContextManagement(model);
-    if (shouldIncludeFirstPartyOnlyBetas() &&
-        (antOptedIntoToolClearing || thinkingPreservationEnabled)) {
-        betaHeaders.push(CONTEXT_MANAGEMENT_BETA_HEADER);
-    }
-    // Add strict tool use beta if experiment is enabled.
-    // Gate on includeFirstPartyOnlyBetas: CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS
-    // already strips schema.strict from tool bodies at api.ts's choke point, but
-    // this header was escaping that kill switch. Proxy gateways that look like
-    // firstParty but forward to Vertex reject this header with 400.
-    // github.com/deshaw/anthropic-issues/issues/5
-    const strictToolsEnabled = checkStatsigFeatureGate_CACHED_MAY_BE_STALE('tengu_tool_pear');
-    // 3P default: false. API rejects strict + token-efficient-tools together
-    // (tool_use.py:139), so these are mutually exclusive — strict wins.
-    const tokenEfficientToolsEnabled = !strictToolsEnabled &&
-        getFeatureValue_CACHED_MAY_BE_STALE('tengu_amber_json_tools', false);
-    if (includeFirstPartyOnlyBetas &&
-        modelSupportsStructuredOutputs(model) &&
-        strictToolsEnabled) {
-        betaHeaders.push(STRUCTURED_OUTPUTS_BETA_HEADER);
-    }
-    // JSON tool_use format (FC v3) — ~4.5% output token reduction vs ANTML.
-    // Sends the v2 header (2026-03-28) added in anthropics/anthropic#337072 to
-    // isolate the CC A/B cohort from ~9.2M/week existing v1 senders. Ant-only
-    // while the restored JsonToolUseOutputParser soaks.
-    if (process.env.USER_TYPE === 'ant' &&
-        includeFirstPartyOnlyBetas &&
-        tokenEfficientToolsEnabled) {
-        betaHeaders.push(TOKEN_EFFICIENT_TOOLS_BETA_HEADER);
-    }
-    // Add web search beta for Vertex Claude 4.0+ models only
-    if (provider === 'vertex' && vertexModelSupportsWebSearch(model)) {
-        betaHeaders.push(WEB_SEARCH_BETA_HEADER);
-    }
-    // Foundry only ships models that already support Web Search
-    if (provider === 'foundry') {
-        betaHeaders.push(WEB_SEARCH_BETA_HEADER);
-    }
-    // Always send the beta header for 1P. The header is a no-op without a scope field.
-    if (includeFirstPartyOnlyBetas) {
-        betaHeaders.push(PROMPT_CACHING_SCOPE_BETA_HEADER);
-    }
-    // If ANTHROPIC_BETAS is set, split it by commas and add to betaHeaders.
-    // This is an explicit user opt-in, so honor it regardless of model.
-    if (process.env.ANTHROPIC_BETAS) {
-        betaHeaders.push(...process.env.ANTHROPIC_BETAS.split(',')
-            .map(_ => _.trim())
-            .filter(Boolean));
-    }
-    return betaHeaders;
-});
-export const getModelBetas = memoize((model) => {
-    const modelBetas = getAllModelBetas(model);
-    if (getAPIProvider() === 'bedrock') {
-        return modelBetas.filter(b => !BEDROCK_EXTRA_PARAMS_HEADERS.has(b));
-    }
-    return modelBetas;
-});
-export const getBedrockExtraBodyParamsBetas = memoize((model) => {
-    const modelBetas = getAllModelBetas(model);
-    return modelBetas.filter(b => BEDROCK_EXTRA_PARAMS_HEADERS.has(b));
-});
-/**
- * Merge SDK-provided betas with auto-detected model betas.
- * SDK betas are read from global state (set via setSdkBetas in main.tsx).
- * The betas are pre-filtered by filterAllowedSdkBetas which handles
- * subscriber checks and allowlist validation with warnings.
- *
- * @param options.isAgenticQuery - When true, ensures the beta headers needed
- *   for agentic queries are present. For non-Haiku models these are already
- *   included by getAllModelBetas(); for Haiku they're excluded since
- *   non-agentic calls (compaction, classifiers, token estimation) don't need them.
- */
-export function getMergedBetas(model, options) {
-    const baseBetas = [...getModelBetas(model)];
-    // Agentic queries always need claude-code and cli-internal beta headers.
-    // For non-Haiku models these are already in baseBetas; for Haiku they're
-    // excluded by getAllModelBetas() since non-agentic Haiku calls don't need them.
-    if (options?.isAgenticQuery) {
-        if (!baseBetas.includes(CLAUDE_CODE_20250219_BETA_HEADER)) {
-            baseBetas.push(CLAUDE_CODE_20250219_BETA_HEADER);
-        }
-        if (process.env.USER_TYPE === 'ant' &&
-            process.env.CLAUDE_CODE_ENTRYPOINT === 'cli' &&
-            CLI_INTERNAL_BETA_HEADER &&
-            !baseBetas.includes(CLI_INTERNAL_BETA_HEADER)) {
-            baseBetas.push(CLI_INTERNAL_BETA_HEADER);
-        }
-    }
-    const sdkBetas = getSdkBetas();
-    if (!sdkBetas || sdkBetas.length === 0) {
-        return baseBetas;
-    }
-    // Merge SDK betas without duplicates (already filtered by filterAllowedSdkBetas)
-    return [...baseBetas, ...sdkBetas.filter(b => !baseBetas.includes(b))];
-}
-export function clearBetasCaches() {
-    getAllModelBetas.cache?.clear?.();
-    getModelBetas.cache?.clear?.();
-    getBedrockExtraBodyParamsBetas.cache?.clear?.();
-}

package/dist/src/utils/billing.js

@@ -1,54 +0,0 @@
-import { getAnthropicApiKey, getAuthTokenSource, getSubscriptionType, isClaudeAISubscriber, } from './auth.js';
-import { getGlobalConfig } from './config.js';
-import { isEnvTruthy } from './envUtils.js';
-export function hasConsoleBillingAccess() {
-    // Check if cost reporting is disabled via environment variable
-    if (isEnvTruthy(process.env.DISABLE_COST_WARNINGS)) {
-        return false;
-    }
-    const isSubscriber = isClaudeAISubscriber();
-    // This might be wrong if user is signed into Max but also using an API key, but
-    // we already show a warning on launch in that case
-    if (isSubscriber)
-        return false;
-    // Check if user has any form of authentication
-    const authSource = getAuthTokenSource();
-    const hasApiKey = getAnthropicApiKey() !== null;
-    // If user has no authentication at all (logged out), don't show costs
-    if (!authSource.hasToken && !hasApiKey) {
-        return false;
-    }
-    const config = getGlobalConfig();
-    const orgRole = config.oauthAccount?.organizationRole;
-    const workspaceRole = config.oauthAccount?.workspaceRole;
-    if (!orgRole || !workspaceRole) {
-        return false; // hide cost for grandfathered users who have not re-authed since we've added roles
-    }
-    // Users have billing access if they are admins or billing roles at either workspace or organization level
-    return (['admin', 'billing'].includes(orgRole) ||
-        ['workspace_admin', 'workspace_billing'].includes(workspaceRole));
-}
-// Mock billing access for /mock-limits testing (set by mockRateLimits.ts)
-let mockBillingAccessOverride = null;
-export function setMockBillingAccessOverride(value) {
-    mockBillingAccessOverride = value;
-}
-export function hasClaudeAiBillingAccess() {
-    // Check for mock billing access first (for /mock-limits testing)
-    if (mockBillingAccessOverride !== null) {
-        return mockBillingAccessOverride;
-    }
-    if (!isClaudeAISubscriber()) {
-        return false;
-    }
-    const subscriptionType = getSubscriptionType();
-    // Consumer plans (Max/Pro) - individual users always have billing access
-    if (subscriptionType === 'max' || subscriptionType === 'pro') {
-        return true;
-    }
-    // Team/Enterprise - check for admin or billing roles
-    const config = getGlobalConfig();
-    const orgRole = config.oauthAccount?.organizationRole;
-    return (!!orgRole &&
-        ['admin', 'billing', 'owner', 'primary_owner'].includes(orgRole));
-}

package/dist/src/utils/binaryCheck.js

@@ -1,40 +0,0 @@
-import { logForDebugging } from './debug.js';
-import { which } from './which.js';
-// Session cache to avoid repeated checks
-const binaryCache = new Map();
-/**
- * Check if a binary/command is installed and available on the system.
- * Uses 'which' on Unix systems (macOS, Linux, WSL) and 'where' on Windows.
- *
- * @param command - The command name to check (e.g., 'gopls', 'rust-analyzer')
- * @returns Promise<boolean> - true if the command exists, false otherwise
- */
-export async function isBinaryInstalled(command) {
-    // Edge case: empty or whitespace-only command
-    if (!command || !command.trim()) {
-        logForDebugging('[binaryCheck] Empty command provided, returning false');
-        return false;
-    }
-    // Trim the command to handle whitespace
-    const trimmedCommand = command.trim();
-    // Check cache first
-    const cached = binaryCache.get(trimmedCommand);
-    if (cached !== undefined) {
-        logForDebugging(`[binaryCheck] Cache hit for '${trimmedCommand}': ${cached}`);
-        return cached;
-    }
-    let exists = false;
-    if (await which(trimmedCommand).catch(() => null)) {
-        exists = true;
-    }
-    // Cache the result
-    binaryCache.set(trimmedCommand, exists);
-    logForDebugging(`[binaryCheck] Binary '${trimmedCommand}' ${exists ? 'found' : 'not found'}`);
-    return exists;
-}
-/**
- * Clear the binary check cache (useful for testing)
- */
-export function clearBinaryCache() {
-    binaryCache.clear();
-}

package/dist/src/utils/browser.js

@@ -1,58 +0,0 @@
-import { execFileNoThrow } from './execFileNoThrow.js';
-function validateUrl(url) {
-    let parsedUrl;
-    try {
-        parsedUrl = new URL(url);
-    }
-    catch (_error) {
-        throw new Error(`Invalid URL format: ${url}`);
-    }
-    // Validate URL protocol for security
-    if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
-        throw new Error(`Invalid URL protocol: must use http:// or https://, got ${parsedUrl.protocol}`);
-    }
-}
-/**
- * Open a file or folder path using the system's default handler.
- * Uses `open` on macOS, `explorer` on Windows, `xdg-open` on Linux.
- */
-export async function openPath(path) {
-    try {
-        const platform = process.platform;
-        if (platform === 'win32') {
-            const { code } = await execFileNoThrow('explorer', [path]);
-            return code === 0;
-        }
-        const command = platform === 'darwin' ? 'open' : 'xdg-open';
-        const { code } = await execFileNoThrow(command, [path]);
-        return code === 0;
-    }
-    catch (_) {
-        return false;
-    }
-}
-export async function openBrowser(url) {
-    try {
-        // Parse and validate the URL
-        validateUrl(url);
-        const browserEnv = process.env.BROWSER;
-        const platform = process.platform;
-        if (platform === 'win32') {
-            if (browserEnv) {
-                // browsers require shell, else they will treat this as a file:/// handle
-                const { code } = await execFileNoThrow(browserEnv, [`"${url}"`]);
-                return code === 0;
-            }
-            const { code } = await execFileNoThrow('rundll32', ['url,OpenURL', url], {});
-            return code === 0;
-        }
-        else {
-            const command = browserEnv || (platform === 'darwin' ? 'open' : 'xdg-open');
-            const { code } = await execFileNoThrow(command, [url]);
-            return code === 0;
-        }
-    }
-    catch (_) {
-        return false;
-    }
-}

package/dist/src/utils/bufferedWriter.js

@@ -1,77 +0,0 @@
-export function createBufferedWriter({ writeFn, flushIntervalMs = 1000, maxBufferSize = 100, maxBufferBytes = Infinity, immediateMode = false, }) {
-    let buffer = [];
-    let bufferBytes = 0;
-    let flushTimer = null;
-    // Batch detached by overflow that hasn't been written yet. Tracked so
-    // flush()/dispose() can drain it synchronously if the process exits
-    // before the setImmediate fires.
-    let pendingOverflow = null;
-    function clearTimer() {
-        if (flushTimer) {
-            clearTimeout(flushTimer);
-            flushTimer = null;
-        }
-    }
-    function flush() {
-        if (pendingOverflow) {
-            writeFn(pendingOverflow.join(''));
-            pendingOverflow = null;
-        }
-        if (buffer.length === 0)
-            return;
-        writeFn(buffer.join(''));
-        buffer = [];
-        bufferBytes = 0;
-        clearTimer();
-    }
-    function scheduleFlush() {
-        if (!flushTimer) {
-            flushTimer = setTimeout(flush, flushIntervalMs);
-        }
-    }
-    // Detach the buffer synchronously so the caller never waits on writeFn.
-    // writeFn may block (e.g. errorLogSink.ts appendFileSync) — if overflow fires
-    // mid-render or mid-keystroke, deferring the write keeps the current tick
-    // short. Timer-based flushes already run outside user code paths so they
-    // stay synchronous.
-    function flushDeferred() {
-        if (pendingOverflow) {
-            // A previous overflow write is still queued. Coalesce into it to
-            // preserve ordering — writes land in a single setImmediate-ordered batch.
-            pendingOverflow.push(...buffer);
-            buffer = [];
-            bufferBytes = 0;
-            clearTimer();
-            return;
-        }
-        const detached = buffer;
-        buffer = [];
-        bufferBytes = 0;
-        clearTimer();
-        pendingOverflow = detached;
-        setImmediate(() => {
-            const toWrite = pendingOverflow;
-            pendingOverflow = null;
-            if (toWrite)
-                writeFn(toWrite.join(''));
-        });
-    }
-    return {
-        write(content) {
-            if (immediateMode) {
-                writeFn(content);
-                return;
-            }
-            buffer.push(content);
-            bufferBytes += content.length;
-            scheduleFlush();
-            if (buffer.length >= maxBufferSize || bufferBytes >= maxBufferBytes) {
-                flushDeferred();
-            }
-        },
-        flush,
-        dispose() {
-            flush();
-        },
-    };
-}

package/dist/src/utils/bundledMode.js

@@ -1,19 +0,0 @@
-/**
- * Detects if the current runtime is Bun.
- * Returns true when:
- * - Running a JS file via the `bun` command
- * - Running a Bun-compiled standalone executable
- */
-export function isRunningWithBun() {
-    // https://bun.com/guides/util/detect-bun
-    return process.versions.bun !== undefined;
-}
-/**
- * Detects if running as a Bun-compiled standalone executable.
- * This checks for embedded files which are present in compiled binaries.
- */
-export function isInBundledMode() {
-    return (typeof Bun !== 'undefined' &&
-        Array.isArray(Bun.embeddedFiles) &&
-        Bun.embeddedFiles.length > 0);
-}

package/dist/src/utils/caCerts.js

@@ -1,93 +0,0 @@
-import { createRequire } from 'module';
-const require = createRequire(import.meta.url);
-import memoize from 'lodash-es/memoize.js';
-import { logForDebugging } from './debug.js';
-import { hasNodeOption } from './envUtils.js';
-import { getFsImplementation } from './fsOperations.js';
-/**
- * Load CA certificates for TLS connections.
- *
- * Since setting `ca` on an HTTPS agent replaces the default certificate store,
- * we must always include base CAs (either system or bundled Mozilla) when returning.
- *
- * Returns undefined when no custom CA configuration is needed, allowing the
- * runtime's default certificate handling to apply.
- *
- * Behavior:
- * - Neither NODE_EXTRA_CA_CERTS nor --use-system-ca/--use-openssl-ca set: undefined (runtime defaults)
- * - NODE_EXTRA_CA_CERTS only: bundled Mozilla CAs + extra cert file contents
- * - --use-system-ca or --use-openssl-ca only: system CAs
- * - --use-system-ca + NODE_EXTRA_CA_CERTS: system CAs + extra cert file contents
- *
- * Memoized for performance. Call clearCACertsCache() to invalidate after
- * environment variable changes (e.g., after trust dialog applies settings.json).
- *
- * Reads ONLY `process.env.NODE_EXTRA_CA_CERTS`. `caCertsConfig.ts` populates
- * that env var from settings.json at CLI init; this module stays config-free
- * so `proxy.ts`/`mtls.ts` don't transitively pull in the command registry.
- */
-export const getCACertificates = memoize(() => {
-    const useSystemCA = hasNodeOption('--use-system-ca') || hasNodeOption('--use-openssl-ca');
-    const extraCertsPath = process.env.NODE_EXTRA_CA_CERTS;
-    logForDebugging(`CA certs: useSystemCA=${useSystemCA}, extraCertsPath=${extraCertsPath}`);
-    // If neither is set, return undefined (use runtime defaults, no override)
-    if (!useSystemCA && !extraCertsPath) {
-        return undefined;
-    }
-    // Deferred load: Bun's node:tls module eagerly materializes ~150 Mozilla
-    // root certificates (~750KB heap) on import, even if tls.rootCertificates
-    // is never accessed. Most users hit the early return above, so we only
-    // pay this cost when custom CA handling is actually needed.
-    /* eslint-disable @typescript-eslint/no-require-imports */
-    const tls = require('tls');
-    /* eslint-enable @typescript-eslint/no-require-imports */
-    const certs = [];
-    if (useSystemCA) {
-        // Load system CA store (Bun API)
-        const getCACerts = tls.getCACertificates;
-        const systemCAs = getCACerts?.('system');
-        if (systemCAs && systemCAs.length > 0) {
-            certs.push(...systemCAs);
-            logForDebugging(`CA certs: Loaded ${certs.length} system CA certificates (--use-system-ca)`);
-        }
-        else if (!getCACerts && !extraCertsPath) {
-            // Under Node.js where getCACertificates doesn't exist and no extra certs,
-            // return undefined to let Node.js handle --use-system-ca natively.
-            logForDebugging('CA certs: --use-system-ca set but system CA API unavailable, deferring to runtime');
-            return undefined;
-        }
-        else {
-            // System CA API returned empty or unavailable; fall back to bundled root certs
-            certs.push(...tls.rootCertificates);
-            logForDebugging(`CA certs: Loaded ${certs.length} bundled root certificates as base (--use-system-ca fallback)`);
-        }
-    }
-    else {
-        // Must include bundled Mozilla CAs as base since ca replaces defaults
-        certs.push(...tls.rootCertificates);
-        logForDebugging(`CA certs: Loaded ${certs.length} bundled root certificates as base`);
-    }
-    // Append extra certs from file
-    if (extraCertsPath) {
-        try {
-            const extraCert = getFsImplementation().readFileSync(extraCertsPath, {
-                encoding: 'utf8',
-            });
-            certs.push(extraCert);
-            logForDebugging(`CA certs: Appended extra certificates from NODE_EXTRA_CA_CERTS (${extraCertsPath})`);
-        }
-        catch (error) {
-            logForDebugging(`CA certs: Failed to read NODE_EXTRA_CA_CERTS file (${extraCertsPath}): ${error}`, { level: 'error' });
-        }
-    }
-    return certs.length > 0 ? certs : undefined;
-});
-/**
- * Clear the CA certificates cache.
- * Call this when environment variables that affect CA certs may have changed
- * (e.g., NODE_EXTRA_CA_CERTS, NODE_OPTIONS).
- */
-export function clearCACertsCache() {
-    getCACertificates.cache.clear?.();
-    logForDebugging('Cleared CA certificates cache');
-}