@pugi/cli 0.1.0-beta.99 → 1.0.0-alpha.10

package/dist/core/repl/kill-ring.js

@@ -1,138 +0,0 @@
-/**
- * Kill ring for the REPL input - Sprint .
- *
- * Tiny LIFO buffer that backs the readline-style kill commands:
- *
- *  Ctrl+U - kill from cursor to line start
- *  Ctrl+K - kill from cursor to line end
- *  Ctrl+W - kill word backwards (whitespace + punctuation delimiter)
- *  Ctrl+Y - yank the most recent kill at the cursor
- *
- * The ring is bounded (MAX_RING_ENTRIES = 10) so the operator's
- * recent kills are reachable without leaking memory across long
- * sessions. We do NOT implement Meta+Y (cycle yanks) at this layer -
- * sticking to the most-recent-yank keeps the input box logic small
- * and matches the bash default for new operators.
- *
- * The module is pure functional: every operation returns a NEW ring,
- * so the input box can stash one in `useState` without mutation
- * worries. Empty slices are no-ops (we do not push empty strings) so
- * Ctrl+U at column 0 does not pollute the ring with `""`.
- */
-export const MAX_RING_ENTRIES = 10;
-export const EMPTY_KILL_RING = { entries: [] };
-/**
- * Push a slice into the ring. Returns a new ring with the slice at
- * the front; older entries shift right and the tail is dropped if
- * the cap is exceeded. Empty / whitespace-only slices are a no-op so
- * the ring stays meaningful.
- */
-export function push(ring, slice) {
-    if (slice.length === 0)
-        return ring;
-    const next = [slice, ...ring.entries];
-    return { entries: next.slice(0, MAX_RING_ENTRIES) };
-}
-/**
- * Read the most-recent entry without mutating the ring. Returns
- * `null` when the ring is empty so the caller can decide whether to
- * beep, no-op, or fall through to plain insert.
- */
-export function yank(ring) {
-    return ring.entries.length > 0 ? ring.entries[0] : null;
-}
-/**
- * Word delimiter used by Ctrl+W. Whitespace + ASCII punctuation,
- * matching the readline default. We treat `_` and `-` as part of the
- * word so kebab-case and snake_case identifiers behave as one token
- * (the brief frequently mentions filenames + symbols).
- */
-const WORD_DELIMITERS = new Set([
-    ' ', '\t', '\n',
-    '.', ',', ';', ':',
-    '/', '\\',
-    '!', '?', '@', '#', '$', '%', '^', '&', '*',
-    '(', ')', '[', ']', '{', '}', '<', '>',
-    '"', "'", '`',
-    '=', '+', '|', '~',
-]);
-/**
- * Compute the start of the previous word given a cursor position.
- * Walks LEFT from `cursor - 1`, skipping any delimiters that
- * immediately precede the cursor (so Ctrl+W at the end of `foo `
- * still kills `foo`), then continues left until it hits the next
- * delimiter or the start of the line.
- *
- * Returns the offset BEFORE which the kill should start (i.e. the
- * slice to remove is `line.slice(start, cursor)`).
- */
-export function previousWordStart(line, cursor) {
-    let i = Math.min(cursor, line.length) - 1;
-    // Skip trailing delimiters.
-    while (i >= 0 && WORD_DELIMITERS.has(line[i]))
-        i -= 1;
-    // Walk through the word.
-    while (i >= 0 && !WORD_DELIMITERS.has(line[i]))
-        i -= 1;
-    return i + 1;
-}
-/**
- * Apply a Ctrl+U kill: from cursor to line start. Returns the new
- * line + cursor + ring. No-op when cursor is already at column 0.
- */
-export function killToLineStart(line, cursor, ring) {
-    if (cursor === 0)
-        return { line, cursor, ring };
-    const slice = line.slice(0, cursor);
-    return {
-        line: line.slice(cursor),
-        cursor: 0,
-        ring: push(ring, slice),
-    };
-}
-/**
- * Apply a Ctrl+K kill: from cursor to line end. Returns the new
- * line + cursor + ring. No-op when cursor is already past the last
- * character.
- */
-export function killToLineEnd(line, cursor, ring) {
-    if (cursor >= line.length)
-        return { line, cursor, ring };
-    const slice = line.slice(cursor);
-    return {
-        line: line.slice(0, cursor),
-        cursor,
-        ring: push(ring, slice),
-    };
-}
-/**
- * Apply a Ctrl+W kill: from cursor back to the start of the previous
- * word. Returns the new line + cursor + ring. No-op when cursor is
- * at column 0.
- */
-export function killWordBackward(line, cursor, ring) {
-    if (cursor === 0)
-        return { line, cursor, ring };
-    const start = previousWordStart(line, cursor);
-    const slice = line.slice(start, cursor);
-    return {
-        line: line.slice(0, start) + line.slice(cursor),
-        cursor: start,
-        ring: push(ring, slice),
-    };
-}
-/**
- * Apply a Ctrl+Y yank: insert the most-recent entry at the cursor.
- * Returns the new line + cursor unchanged when the ring is empty
- * (the caller decides whether to surface a visual cue).
- */
-export function yankAtCursor(line, cursor, ring) {
-    const entry = yank(ring);
-    if (entry === null)
-        return { line, cursor };
-    return {
-        line: line.slice(0, cursor) + entry + line.slice(cursor),
-        cursor: cursor + entry.length,
-    };
-}
-//# sourceMappingURL=kill-ring.js.map

package/dist/core/repl/model-pricing.js

@@ -1,135 +0,0 @@
-/**
- * Static price ladder keyed by exact model slug.
- *
- * Source: provider list-price pages as of. Keep prefix lookup
- * (`priceForModel`) for forward compat — a `claude-opus-4-8` from a future
- * model-router rebind falls back onto the `claude-opus-` family entry.
- */
-const PRICE_LADDER = new Map([
-    // Anthropic Claude family
-    ['claude-opus-4-7', { inputUsdPerM: 15.0, outputUsdPerM: 75.0 }],
-    ['claude-opus-4-6', { inputUsdPerM: 15.0, outputUsdPerM: 75.0 }],
-    ['claude-sonnet-4-6', { inputUsdPerM: 3.0, outputUsdPerM: 15.0 }],
-    ['claude-sonnet-4-5', { inputUsdPerM: 3.0, outputUsdPerM: 15.0 }],
-    ['claude-haiku-4-5', { inputUsdPerM: 0.8, outputUsdPerM: 4.0 }],
-    // OpenAI family — sentinel entries so a `pugi config set` override lands clean.
-    ['gpt-4o', { inputUsdPerM: 2.5, outputUsdPerM: 10.0 }],
-    ['gpt-4o-mini', { inputUsdPerM: 0.15, outputUsdPerM: 0.6 }],
-    ['o3', { inputUsdPerM: 10.0, outputUsdPerM: 40.0 }],
-    ['o3-mini', { inputUsdPerM: 1.1, outputUsdPerM: 4.4 }],
-    // Mistral
-    ['mistral-large', { inputUsdPerM: 2.0, outputUsdPerM: 6.0 }],
-    ['mistral-small', { inputUsdPerM: 0.2, outputUsdPerM: 0.6 }],
-    // Embeddings — input-only; output is zero so the meter shows a
-    // flat per-call cost without inflating the "output" column.
-    ['voyage-3', { inputUsdPerM: 0.12, outputUsdPerM: 0 }],
-    ['voyage-3-large', { inputUsdPerM: 0.18, outputUsdPerM: 0 }],
-]);
-/**
- * Family-prefix fallback. Used when an unknown slug starts with a
- * known family stem (e.g. `claude-sonnet-4-7`).
- */
-const FAMILY_PREFIX = [
-    ['claude-opus-', { inputUsdPerM: 15.0, outputUsdPerM: 75.0 }],
-    ['claude-sonnet-', { inputUsdPerM: 3.0, outputUsdPerM: 15.0 }],
-    ['claude-haiku-', { inputUsdPerM: 0.8, outputUsdPerM: 4.0 }],
-    ['gpt-4o', { inputUsdPerM: 2.5, outputUsdPerM: 10.0 }],
-    ['o3', { inputUsdPerM: 10.0, outputUsdPerM: 40.0 }],
-    ['mistral-', { inputUsdPerM: 2.0, outputUsdPerM: 6.0 }],
-    ['voyage-', { inputUsdPerM: 0.12, outputUsdPerM: 0 }],
-];
-/**
- * Default ladder when no model slug is known (e.g. the older admin-api
- * still on the pre- event shape that does not carry `model`). Pinned
- * to Sonnet-tier so the meter is "honestly conservative" — close to the
- * default dispatch lane for `reason` + `codegen` tags.
- */
-const DEFAULT_PRICE = { inputUsdPerM: 3.0, outputUsdPerM: 15.0 };
-/**
- * Look up the price for a model slug. Resolution order:
- *  1. Exact match in `PRICE_LADDER`.
- *  2. Family-prefix match (`startsWith`).
- *  3. Default Sonnet-tier rate.
- *
- * Pure — never throws. The cost meter calls this on every `agent.tokens`
- * frame so it must stay branch-cheap.
- */
-export function priceForModel(model) {
-    if (!model || typeof model !== 'string')
-        return DEFAULT_PRICE;
-    const exact = PRICE_LADDER.get(model);
-    if (exact)
-        return exact;
-    for (const [prefix, price] of FAMILY_PREFIX) {
-        if (model.startsWith(prefix))
-            return price;
-    }
-    return DEFAULT_PRICE;
-}
-/**
- * Compute the USD cost for a single (input, output, model) triple.
- * Returns a finite number, never NaN/Infinity, capped at zero floor so
- * a buggy upstream that emits negative deltas (theoretically impossible
- * via Anvil but we stay defensive) does not credit the operator's meter.
- *
- * Pure, deterministic, branch-cheap — called on every `agent.tokens`
- * event so the hot path keeps the math inline.
- */
-export function computeCostUsd(tokensIn, tokensOut, model) {
-    const price = priceForModel(model);
-    const safeIn = Number.isFinite(tokensIn) && tokensIn > 0 ? tokensIn : 0;
-    const safeOut = Number.isFinite(tokensOut) && tokensOut > 0 ? tokensOut : 0;
-    const usd = (safeIn * price.inputUsdPerM + safeOut * price.outputUsdPerM) / 1_000_000;
-    return Number.isFinite(usd) && usd > 0 ? usd : 0;
-}
-/**
- * Format a token count for the status row. Spec (CEO):
- *  - `<1000` → raw integer (e.g. `42`)
- *  - `≥1000` → one-decimal `k` (e.g. `1.2k`)
- *  - `≥1_000_000` → one-decimal `m` (e.g. `1.0m`)
- *
- * Negative / NaN inputs render as `0`.
- */
-export function formatTokens(value) {
-    if (!Number.isFinite(value) || value <= 0)
-        return '0';
-    if (value < 1_000)
-        return Math.floor(value).toString();
-    if (value < 1_000_000)
-        return `${(value / 1_000).toFixed(1)}k`;
-    return `${(value / 1_000_000).toFixed(1)}m`;
-}
-/**
- * Format USD cost for the status row. Spec (CEO):
- *  - `≥ $0.01` → `$X.XX` (two decimals)
- *  - `< $0.01` (but > 0) → `$X.XXX` (three decimals, shows fractions
- *    of a cent honestly instead of rounding to `$0.00`)
- *  - `0` / NaN → `$0.00`
- */
-export function formatCostUsd(usd) {
-    if (!Number.isFinite(usd) || usd <= 0)
-        return '$0.00';
-    if (usd >= 0.01)
-        return `$${usd.toFixed(2)}`;
-    return `$${usd.toFixed(3)}`;
-}
-/**
- * Format an elapsed-ms duration as `1m2s` / `45s` / `2h3m`. Used by the
- * status row's session-duration slot. Floors aggressively — we don't
- * want sub-second decimals stealing column width.
- */
-export function formatDuration(elapsedMs) {
-    if (!Number.isFinite(elapsedMs) || elapsedMs <= 0)
-        return '0s';
-    const totalSec = Math.floor(elapsedMs / 1000);
-    if (totalSec < 60)
-        return `${totalSec}s`;
-    const min = Math.floor(totalSec / 60);
-    const sec = totalSec % 60;
-    if (min < 60)
-        return `${min}m${sec.toString().padStart(2, '0')}s`;
-    const hr = Math.floor(min / 60);
-    const restMin = min % 60;
-    return `${hr}h${restMin.toString().padStart(2, '0')}m`;
-}
-//# sourceMappingURL=model-pricing.js.map

package/dist/core/repl/privacy-banner.js

@@ -1,71 +0,0 @@
-/**
- * Privacy mode REPL surface - alpha 6.13 (Phase 1).
- *
- * Two surfaces:
- *
- *  1. `renderPrivacyBanner(mode)` - one-line banner shown on REPL
- *     bootstrap (mirrors `apps/admin-api/src/privacy/privacy-mode.ts`
- *     `PRIVACY_MODE_BANNER` verbatim - keep in sync, the unit spec
- *     asserts they match).
- *
- *  2. `renderPrivacyContractDoc(mode)` - multi-line contract doc the
- *     `/privacy` slash command prints. Shows the active mode header
- *     + the full 3-mode contract so the operator can compare their
- *     current posture to the alternatives without leaving the REPL.
- *
- * The strings are pinned client-side so the contract doc is
- * available even when the operator is offline / has not authenticated
- * yet. The mode value itself is server-side authoritative (resolved
- * via /api/admin/privacy/mode); the banner falls back to "(unknown)"
- * when the round-trip fails.
- *
- * Brand voice: ASCII hyphens only, no em-dashes, no emoji decoration.
- */
-export const PRIVACY_MODES = ['strict', 'balanced', 'permissive'];
-export function isPrivacyMode(value) {
-    return (typeof value === 'string' && PRIVACY_MODES.includes(value));
-}
-/**
- * One-line banner. Mirrors `PRIVACY_MODE_BANNER` on the server.
- */
-const BANNERS = Object.freeze({
-    strict: 'Privacy: strict (no upstream LLM, no external tool egress)',
-    balanced: 'Privacy: balanced (PII scrubbed before upstream LLM)',
-    permissive: 'Privacy: permissive (raw prompts forwarded upstream)',
-});
-export function renderPrivacyBanner(mode) {
-    if (!mode || !isPrivacyMode(mode)) {
-        return 'Privacy: (unknown - mode lookup pending)';
-    }
-    return BANNERS[mode];
-}
-/**
- * Full mode contract doc. Printed by the `/privacy` slash command.
- * Keep in sync with `PRIVACY_MODE_CONTRACT_DOC` on the server.
- */
-const CONTRACT_DOC = `
-Pugi privacy mode contract (alpha 6.13):
-
- strict     Maximum privacy. Nothing leaves tenant infra.
-             - Upstream LLM calls REFUSED (use self-hosted Ollama / llama.cpp).
-             - External tool calls require per-call confirm.
-             - Session.db, blobs, transcripts stay on operator disk.
-             - No telemetry. No error reporting.
-
- balanced   Default. PII-scrubbed content goes to the upstream LLM.
-             - 3-layer PII scrubber runs before egress (regex + NER + LLM).
-             - Tool calls to external services allowed (logged).
-             - Anonymized telemetry only (counts + error categories).
-
- permissive Verbatim. Power-user mode.
-             - Raw prompts forwarded to upstream provider (no scrubbing).
-             - Tool calls to external services allowed.
-             - Full error reporting (may include prompt fragments).
-             - Accepts the upstream provider's data retention policy.
-
-Switch with: pugi config set privacy=strict|balanced|permissive
-`.trim();
-export function renderPrivacyContractDoc(currentMode) {
-    return `${renderPrivacyBanner(currentMode)}\n\n${CONTRACT_DOC}`;
-}
-//# sourceMappingURL=privacy-banner.js.map