@pretense/cli 0.6.2 → 0.6.4

package/dist/index.js

@@ -15862,6 +15862,30 @@ function extractDeltas(line, provider) {
         delta[prop] = v;
       }
     });
+  } else if (provider === "google") {
+    const candidates = json["candidates"];
+    if (!Array.isArray(candidates)) return null;
+    for (let ci = 0; ci < candidates.length; ci++) {
+      const cand = candidates[ci];
+      const candIndex = typeof cand["index"] === "number" ? cand["index"] : ci;
+      const content = cand["content"];
+      if (!content) continue;
+      const parts = content["parts"];
+      if (!Array.isArray(parts)) continue;
+      for (const part of parts) {
+        if (typeof part["text"] !== "string") continue;
+        const isThought = part["thought"] === true;
+        refs.push({
+          key: `g:${candIndex}:${isThought ? "thought" : "text"}`,
+          index: candIndex,
+          kind: isThought ? "google_thought" : "google_text",
+          text: part["text"],
+          set: (v) => {
+            part["text"] = v;
+          }
+        });
+      }
+    }
   } else {
     const choices = json["choices"];
     if (!Array.isArray(choices) || choices.length === 0) return null;
@@ -15907,6 +15931,14 @@ function toJsonStringContextMap(map) {
   }
   return out;
 }
+function classifyStreamProvider(upstream) {
+  const u = upstream.toLowerCase();
+  if (u.includes("anthropic")) return "anthropic";
+  if (u.includes("generativelanguage") || u.includes("googleapis") || u.includes("gemini")) {
+    return "google";
+  }
+  return "openai";
+}
 async function streamWithRollingBuffer(upstreamResp, map, provider, requestId) {
   const buffers = /* @__PURE__ */ new Map();
   const bufferMeta = /* @__PURE__ */ new Map();
@@ -16021,6 +16053,12 @@ function buildFlushEvent(text, provider, kind, index) {
     const delta2 = kind === "input_json" ? { type: "input_json_delta", partial_json: text } : kind === "thinking" ? { type: "thinking_delta", thinking: text } : { type: "text_delta", text };
     return "data: " + JSON.stringify({ type: "content_block_delta", index, delta: delta2 });
   }
+  if (provider === "google") {
+    const part = kind === "google_thought" ? { text, thought: true } : { text };
+    return "data: " + JSON.stringify({
+      candidates: [{ content: { parts: [part], role: "model" }, index }]
+    });
+  }
   const delta = kind === "openai_tool_args" ? { tool_calls: [{ index, function: { arguments: text } }] } : { content: text };
   return "data: " + JSON.stringify({
     id: "pretense-flush",
@@ -16276,7 +16314,7 @@ function tokenizeBodyDeep(body, scanText) {
   };
 }
 async function handleStreaming(upstreamResp, map, requestId, upstream) {
-  const provider = upstream.includes("anthropic") ? "anthropic" : "openai";
+  const provider = classifyStreamProvider(upstream);
   return streamWithRollingBuffer(upstreamResp, map, provider, requestId);
 }
 function createProxy(opts = {}) {
@@ -16750,7 +16788,10 @@ Upgrade to ${_upgradeTier === "enterprise" ? "Enterprise" : "Pro"} for ${_upgrad
     for (const [orig, syn] of globalMap.entries()) {
       if (!secretMap.has(syn)) reverseMap.set(orig, syn);
     }
-    if (body["stream"] === true) {
+    const upstreamIsSse = (upstreamResp.headers.get("content-type") ?? "").includes(
+      "text/event-stream"
+    );
+    if (body["stream"] === true || upstreamIsSse) {
       return handleStreaming(upstreamResp, reverseMap, requestId, upstream);
     }
     let respBody;
@@ -17567,8 +17608,12 @@ function logsCommand() {
       entries = store.getRecentEntries(limit);
       store.close();
     } catch {
-      console.log(chalk6.dim("\n  No audit data available. The audit database has not been initialized yet."));
-      console.log(chalk6.dim("  Run " + chalk6.cyan("pretense start") + " and make some requests first.\n"));
+      if (opts.json) {
+        console.log("[]");
+        return;
+      }
+      console.error(chalk6.dim("\n  No audit data available. The audit database has not been initialized yet."));
+      console.error(chalk6.dim("  Run " + chalk6.cyan("pretense start") + " and make some requests first.\n"));
       return;
     }
     if (opts.json) {
@@ -18962,15 +19007,26 @@ async function collectMutationFindings(content, file, level) {
 }
 async function runMutate(file, opts = {}) {
   const level = resolveMutateLevel(opts);
-  let content;
+  let raw2;
   try {
-    content = readFileSync14(file, "utf-8");
+    raw2 = readFileSync14(file);
   } catch {
     console.error(chalk13.red(`
   x Cannot read file: ${file}
 `));
     return 1;
   }
+  const content = raw2.toString("utf-8");
+  if (!Buffer.from(content, "utf-8").equals(raw2)) {
+    console.error(
+      chalk13.red(`
+  x Not valid UTF-8: ${file}`) + chalk13.dim(`
+  Mutating would replace the undecodable bytes with U+FFFD and the`) + chalk13.dim(`
+  original content could not be restored. File left untouched.
+`)
+    );
+    return 1;
+  }
   const findings = await collectMutationFindings(content, file, level);
   if (findings.length === 0) {
     console.error(chalk13.dim(`  No secrets found in ${file} \u2014 nothing to mutate.`));
@@ -18978,15 +19034,6 @@ async function runMutate(file, opts = {}) {
     return 0;
   }
   const result = mutateSecrets(content, findings);
-  if (opts.inPlace) {
-    writeFileSync9(file, result.content);
-    console.error(chalk13.green(`  \u2713 Mutated ${result.mutations.length} secrets in ${file} (in-place)`));
-  } else if (opts.output) {
-    writeFileSync9(opts.output, result.content);
-    console.error(chalk13.green(`  \u2713 Mutated ${result.mutations.length} secrets \u2192 ${opts.output}`));
-  } else {
-    process.stdout.write(result.content);
-  }
   if (opts.map) {
     const absFile = resolve4(file);
     const projectKey = getOrCreateProjectKey(findProjectRoot(absFile), opts.keysDir);
@@ -19001,7 +19048,18 @@ async function runMutate(file, opts = {}) {
         type: m.type
       }))
     };
-    writeFileSync9(opts.map, JSON.stringify(mapFile, null, 2), { mode: 384 });
+    try {
+      writeFileSync9(opts.map, JSON.stringify(mapFile, null, 2), { mode: 384 });
+    } catch (e) {
+      console.error(
+        chalk13.red(`
+  x Cannot write reversal map: ${opts.map}`) + chalk13.dim(`
+    ${e.message}`) + chalk13.dim(`
+  Nothing was mutated \u2014 without a map the original could not be restored.
+`)
+      );
+      return 1;
+    }
     try {
       chmodSync6(opts.map, 384);
     } catch {
@@ -19010,6 +19068,25 @@ async function runMutate(file, opts = {}) {
       chalk13.green(`  \u2713 Wrote encrypted reversal map \u2192 ${opts.map}`) + chalk13.dim(" (AES-256-GCM, mode 0600)")
     );
   }
+  try {
+    if (opts.inPlace) {
+      writeFileSync9(file, result.content);
+      console.error(chalk13.green(`  \u2713 Mutated ${result.mutations.length} secrets in ${file} (in-place)`));
+    } else if (opts.output) {
+      writeFileSync9(opts.output, result.content);
+      console.error(chalk13.green(`  \u2713 Mutated ${result.mutations.length} secrets \u2192 ${opts.output}`));
+    } else {
+      process.stdout.write(result.content);
+    }
+  } catch (e) {
+    console.error(
+      chalk13.red(`
+  x Cannot write mutated content: ${opts.output ?? file}`) + chalk13.dim(`
+    ${e.message}
+`)
+    );
+    return 1;
+  }
   if (opts.showMap) {
     console.error(JSON.stringify(result.mutations, null, 2));
   }
@@ -19527,7 +19604,7 @@ function findClosestCommand(input, knownCommands) {
   return bestDist <= 3 ? best : null;
 }
 var program = new Command20();
-program.name("pretense").description(chalk19.bold("AI firewall") + " \u2014 mutates proprietary code before LLM API calls").version("0.6.2", "-v, --version").addHelpText("after", `
+program.name("pretense").description(chalk19.bold("AI firewall") + " \u2014 mutates proprietary code before LLM API calls").version("0.6.4", "-v, --version").addHelpText("after", `
 ${chalk19.bold("Quick start:")}
   ${chalk19.cyan("pretense scan")} ${chalk19.dim("<file|dir>")}        Scan for secrets and PII
   ${chalk19.cyan("pretense mutate")} ${chalk19.dim("<file>")}           Preview code mutations

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pretense/cli",
-  "version": "0.6.2",
+  "version": "0.6.4",
   "description": "Local-first AI firewall that mutates proprietary code before sending to LLM APIs",
   "type": "module",
   "bin": {