@rely-ai/caliber 1.30.3 → 1.30.5

package/dist/bin.js

@@ -67,13 +67,13 @@ function resolveFromEnv() {
   if (process.env.CALIBER_USE_CURSOR_SEAT === "1" || process.env.CALIBER_USE_CURSOR_SEAT === "true") {
     return {
       provider: "cursor",
-      model: DEFAULT_MODELS.cursor
+      model: process.env.CALIBER_MODEL || DEFAULT_MODELS.cursor
     };
   }
   if (process.env.CALIBER_USE_CLAUDE_CLI === "1" || process.env.CALIBER_USE_CLAUDE_CLI === "true") {
     return {
       provider: "claude-cli",
-      model: DEFAULT_MODELS["claude-cli"]
+      model: process.env.CALIBER_MODEL || DEFAULT_MODELS["claude-cli"]
     };
   }
   return null;
@@ -803,6 +803,47 @@ function readExistingConfigs(dir) {
 import fs3 from "fs";
 import path4 from "path";
 import { execSync as execSync3 } from "child_process";
+
+// src/lib/sanitize.ts
+var KNOWN_PREFIX_PATTERNS = [
+  // Anthropic (before generic sk- pattern)
+  [/sk-ant-[A-Za-z0-9_-]{20,}/g, "[REDACTED]"],
+  // AWS access key IDs
+  [/AKIA[0-9A-Z]{16}/g, "[REDACTED]"],
+  // AWS secret keys in assignments
+  [/(?:aws)?_?secret_?(?:access)?_?key\s*[:=]\s*['"]?[A-Za-z0-9/+=]{40}['"]?/gi, "[REDACTED]"],
+  // GitHub tokens (PAT, OAuth, server, app install, fine-grained)
+  [/gh[pousr]_[A-Za-z0-9_]{36,}/g, "[REDACTED]"],
+  [/github_pat_[A-Za-z0-9_]{22,}/g, "[REDACTED]"],
+  // Stripe keys
+  [/[sr]k_(live|test)_[A-Za-z0-9]{20,}/g, "[REDACTED]"],
+  // Slack tokens
+  [/xox[bpsar]-[A-Za-z0-9-]{10,}/g, "[REDACTED]"],
+  // JWTs (3-segment base64url)
+  [/eyJ[A-Za-z0-9_-]{20,}\.eyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g, "[REDACTED]"],
+  // OpenAI keys (after sk-ant- to avoid false match)
+  [/sk-[A-Za-z0-9-]{20,}/g, "[REDACTED]"],
+  // Google API keys
+  [/AIza[A-Za-z0-9_-]{35}/g, "[REDACTED]"],
+  // Bearer tokens
+  [/[Bb]earer\s+[A-Za-z0-9_\-.]{20,}/g, "[REDACTED]"],
+  // PEM private keys
+  [/-----BEGIN[A-Z ]+KEY-----[\s\S]+?-----END[A-Z ]+KEY-----/g, "[REDACTED]"]
+];
+var SENSITIVE_ASSIGNMENT = /(?:api[_-]?key|secret[_-]?key|password|token|credential|auth[_-]?token|private[_-]?key)\s*[:=]\s*['"]?([^\s'"]{8,500})['"]?/gi;
+function sanitizeSecrets(text) {
+  let result = text;
+  for (const [pattern, replacement] of KNOWN_PREFIX_PATTERNS) {
+    result = result.replace(pattern, replacement);
+  }
+  result = result.replace(
+    SENSITIVE_ASSIGNMENT,
+    (match, value) => match.replace(value, "[REDACTED]")
+  );
+  return result;
+}
+
+// src/fingerprint/code-analysis.ts
 var IGNORE_DIRS2 = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -878,7 +919,6 @@ var TEXT_EXTENSIONS = /* @__PURE__ */ new Set([
   ".toml",
   ".ini",
   ".cfg",
-  ".env",
   ".xml",
   ".plist",
   ".md",
@@ -908,7 +948,8 @@ var SKIP_PATTERNS = [
   /\.map$/,
   /\.d\.ts$/,
   /\.generated\./,
-  /\.snap$/
+  /\.snap$/,
+  /^\.env($|\.)/
 ];
 var COMMENT_LINE = {
   "c": /^\s*\/\//,
@@ -949,7 +990,6 @@ var EXT_COMMENT = {
   ".toml": "h",
   ".ini": "h",
   ".cfg": "h",
-  ".env": "h",
   ".html": "x",
   ".xml": "x",
   ".vue": "x",
@@ -1223,7 +1263,7 @@ function analyzeCode(dir) {
     const repFP = structuralFingerprint(rep.compressed, rep.ext);
     const similar = group.slice(1).filter((f) => structuralFingerprint(f.compressed, f.ext) === repFP);
     const unique = group.slice(1).filter((f) => structuralFingerprint(f.compressed, f.ext) !== repFP);
-    const repEntry = { path: rep.path, content: rep.compressed, size: rep.compressed.length, priority: rep.score };
+    const repEntry = { path: rep.path, content: sanitizeSecrets(rep.compressed), size: rep.compressed.length, priority: rep.score };
     const repSize = rep.path.length + rep.compressed.length + 10;
     if (includedChars + repSize <= CHAR_BUDGET) {
       result.push(repEntry);
@@ -1242,7 +1282,7 @@ function analyzeCode(dir) {
     for (const f of unique) {
       const skeletonSize = f.path.length + f.skeleton.length + 10;
       if (includedChars + skeletonSize <= CHAR_BUDGET) {
-        result.push({ path: f.path, content: f.skeleton, size: f.skeleton.length, priority: f.score });
+        result.push({ path: f.path, content: sanitizeSecrets(f.skeleton), size: f.skeleton.length, priority: f.score });
         includedChars += skeletonSize;
       }
     }
@@ -1252,7 +1292,7 @@ function analyzeCode(dir) {
     if (includedPaths.has(f.path)) continue;
     const skeletonSize = f.path.length + f.skeleton.length + 10;
     if (includedChars + skeletonSize > CHAR_BUDGET) continue;
-    result.push({ path: f.path, content: f.skeleton, size: f.skeleton.length, priority: f.score });
+    result.push({ path: f.path, content: sanitizeSecrets(f.skeleton), size: f.skeleton.length, priority: f.score });
     includedChars += skeletonSize;
   }
   return {
@@ -1311,7 +1351,7 @@ function filePriority(filePath) {
     "lib.rs"
   ]);
   if (entryPoints.has(base)) return 40;
-  if (/\.(json|ya?ml|toml|ini|cfg|env)$|config\.|Makefile|Dockerfile/i.test(filePath)) return 35;
+  if (/\.(json|ya?ml|toml|ini|cfg)$|config\.|Makefile|Dockerfile/i.test(filePath)) return 35;
   if (/(route|api|controller|endpoint|handler)/i.test(filePath)) return 30;
   if (/(types|schema|models|entities|migration)/i.test(filePath)) return 25;
   if (/(service|lib|utils|helper|middleware)/i.test(filePath)) return 20;
@@ -1606,6 +1646,7 @@ init_resolve_caliber();
 var ERROR_PATTERNS = [
   { pattern: /not logged in|not authenticated|login required|unauthorized/i, message: "Authentication required. Run the login command for your provider to re-authenticate." },
   { pattern: /rate limit|too many requests|429/i, message: "Rate limit exceeded. Retrying..." },
+  { pattern: /usage limit|out of usage|budget.*limit|limit.*reached/i, message: () => `Usage limit reached. Run \`${resolveCaliber()} config\` to switch models (e.g. auto or composer-1.5).` },
   { pattern: /model.*not found|invalid model|model.*unavailable/i, message: () => `The requested model is not available. Run \`${resolveCaliber()} config\` to select a different model.` }
 ];
 function parseSeatBasedError(stderr, exitCode) {
@@ -1675,7 +1716,7 @@ var CursorAcpProvider = class {
   }
   buildArgs(model, streaming) {
     const args = ["--print", "--trust", "--workspace", os3.tmpdir()];
-    if (model && model !== "auto" && model !== "default") {
+    if (model && model !== "default") {
       args.push("--model", model);
     }
     if (streaming) {
@@ -2109,7 +2150,7 @@ var KNOWN_MODELS = {
     "gpt-4o-mini",
     "o3-mini"
   ],
-  cursor: [],
+  cursor: ["auto", "composer-1.5"],
   "claude-cli": []
 };
 function isModelNotAvailableError(error) {
@@ -2120,6 +2161,7 @@ function isModelNotAvailableError(error) {
   if (msg.includes("model") && msg.includes("not available")) return true;
   if (msg.includes("model") && msg.includes("does not exist")) return true;
   if (msg.includes("publisher model")) return true;
+  if (msg.includes("usage limit") || msg.includes("out of usage")) return true;
   return false;
 }
 function filterRelevantModels(models, provider) {
@@ -2131,6 +2173,9 @@ function filterRelevantModels(models, provider) {
       return models.filter(
         (m) => m.startsWith("gpt-4") || m.startsWith("gpt-3.5") || m.startsWith("o1") || m.startsWith("o3")
       );
+    case "cursor":
+    case "claude-cli":
+      return models;
     default:
       return models;
   }
@@ -5145,7 +5190,6 @@ async function runInteractiveProviderSetup(options) {
       break;
     }
     case "cursor": {
-      config.model = DEFAULT_MODELS.cursor;
       if (!isCursorAgentAvailable()) {
         console.log(chalk3.yellow("\n  Cursor Agent CLI not found."));
         console.log(chalk3.dim("  Install it: ") + chalk3.hex("#83D1EB")("curl https://cursor.com/install -fsS | bash"));
@@ -5158,6 +5202,7 @@ async function runInteractiveProviderSetup(options) {
         const proceed = await confirm({ message: "Continue anyway?" });
         if (!proceed) throw new Error("__exit__");
       }
+      config.model = await promptInput(`Model (default: ${DEFAULT_MODELS.cursor}):`) || DEFAULT_MODELS.cursor;
       break;
     }
     case "anthropic": {
@@ -10735,45 +10780,6 @@ function releaseFinalizeLock() {
   }
 }
 
-// src/lib/sanitize.ts
-var KNOWN_PREFIX_PATTERNS = [
-  // Anthropic (before generic sk- pattern)
-  [/sk-ant-[A-Za-z0-9_-]{20,}/g, "[REDACTED]"],
-  // AWS access key IDs
-  [/AKIA[0-9A-Z]{16}/g, "[REDACTED]"],
-  // AWS secret keys in assignments
-  [/(?:aws)?_?secret_?(?:access)?_?key\s*[:=]\s*['"]?[A-Za-z0-9/+=]{40}['"]?/gi, "[REDACTED]"],
-  // GitHub tokens (PAT, OAuth, server, app install, fine-grained)
-  [/gh[pousr]_[A-Za-z0-9_]{36,}/g, "[REDACTED]"],
-  [/github_pat_[A-Za-z0-9_]{22,}/g, "[REDACTED]"],
-  // Stripe keys
-  [/[sr]k_(live|test)_[A-Za-z0-9]{20,}/g, "[REDACTED]"],
-  // Slack tokens
-  [/xox[bpsar]-[A-Za-z0-9-]{10,}/g, "[REDACTED]"],
-  // JWTs (3-segment base64url)
-  [/eyJ[A-Za-z0-9_-]{20,}\.eyJ[A-Za-z0-9_-]{20,}\.[A-Za-z0-9_-]{20,}/g, "[REDACTED]"],
-  // OpenAI keys (after sk-ant- to avoid false match)
-  [/sk-[A-Za-z0-9-]{20,}/g, "[REDACTED]"],
-  // Google API keys
-  [/AIza[A-Za-z0-9_-]{35}/g, "[REDACTED]"],
-  // Bearer tokens
-  [/[Bb]earer\s+[A-Za-z0-9_\-.]{20,}/g, "[REDACTED]"],
-  // PEM private keys
-  [/-----BEGIN[A-Z ]+KEY-----[\s\S]+?-----END[A-Z ]+KEY-----/g, "[REDACTED]"]
-];
-var SENSITIVE_ASSIGNMENT = /(?:api[_-]?key|secret[_-]?key|password|token|credential|auth[_-]?token|private[_-]?key)\s*[:=]\s*['"]?([^\s'"]{8,500})['"]?/gi;
-function sanitizeSecrets(text) {
-  let result = text;
-  for (const [pattern, replacement] of KNOWN_PREFIX_PATTERNS) {
-    result = result.replace(pattern, replacement);
-  }
-  result = result.replace(
-    SENSITIVE_ASSIGNMENT,
-    (match, value) => match.replace(value, "[REDACTED]")
-  );
-  return result;
-}
-
 // src/lib/notifications.ts
 import fs42 from "fs";
 import path33 from "path";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rely-ai/caliber",
-  "version": "1.30.3",
+  "version": "1.30.5",
   "description": "AI context infrastructure for coding agents — keeps CLAUDE.md, Cursor rules, and skills in sync as your codebase evolves",
   "type": "module",
   "bin": {