@kitman-sh/cli 0.10.52 → 0.10.54

package/dist/{chunk-wh1pa2aa.js → chunk-m32wb6t0.js}

@@ -38,7 +38,7 @@ import {
   assignProperty,
   PipeInspectableProto,
   withFiber,
-  make15,
+  make14,
   strictEqual,
   Tuple,
   Number2,
@@ -58,7 +58,7 @@ import {
   Service2,
   makeUnsafe4,
   empty3,
-  make16,
+  make15,
   add,
   getOrUndefined2,
   getOrUndefinedUnsafe,
@@ -91,7 +91,7 @@ import {
   fail4,
   isSuccess2,
   makeUnsafe5,
-  make17,
+  make16,
   _await,
   fail5,
   isDone,
@@ -198,12 +198,11 @@ import {
   omit,
   map9,
   declare,
-  is,
   decodeUnknownEffect2,
   decodeEffect,
   decodeUnknownOption,
   decodeOption,
-  make18,
+  make17,
   isSchema,
   optionalKey,
   optional,
@@ -249,7 +248,7 @@ import {
   decodeJsonStringOption,
   encodeJsonStringSync,
   encodePrettyJsonString
-} from "./chunk-mbctzx7e.js";
+} from "./chunk-61k67vxh.js";
 import {
   map,
   makeEquivalence,
@@ -316,7 +315,19 @@ import {
   String2,
   optionalEnv,
   harnessesUnsupportedInSrt2
-} from "./chunk-11p4wf6n.js";
+} from "./chunk-xgwjcq4z.js";
+import {
+  isDateTime,
+  Numeric,
+  isWholeNumber,
+  guard,
+  Id,
+  Timestamp,
+  ActorType,
+  SecretName,
+  SecretScope,
+  SecretHosts
+} from "./chunk-4kssrezn.js";
 import {
   toJsonValue,
   isOneOf,
@@ -330,33 +341,21 @@ import {
   isSymbol,
   isUndefined,
   kindOf
-} from "./chunk-arvwar2c.js";
-import {
-  isDateTime,
-  Numeric,
-  isWholeNumber,
-  guard,
-  Id,
-  Timestamp,
-  ActorType,
-  SecretName,
-  SecretScope,
-  SecretHosts
-} from "./chunk-pp1p3g6e.js";
+} from "./chunk-7evwar6b.js";
 import {
   isRedacted,
-  make5,
+  make,
   value,
   ExitCode,
   ProcessId,
   makeHandle,
-  make6,
+  make2,
   ChildProcessSpawner,
   display,
-  make7,
+  make3,
   parseFdName,
   fdName
-} from "./chunk-3bj7sc3v.js";
+} from "./chunk-mmetyep8.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Tuple.js
 var makeEquivalence3 = Tuple;
@@ -519,7 +518,7 @@ var makeUnsafe6 = (input) => {
 var hasZone = (input) => /Z|GMT|[+-]\d{2}$|[+-]\d{2}:?\d{2}$|\]$/.test(input) || /z$|gmt$/i.test(input);
 var minEpochMillis = -8640000000000000 + 12 * 60 * 60 * 1000;
 var maxEpochMillis = 8640000000000000 - 14 * 60 * 60 * 1000;
-var make = /* @__PURE__ */ liftThrowable(makeUnsafe6);
+var make4 = /* @__PURE__ */ liftThrowable(makeUnsafe6);
 var now = /* @__PURE__ */ map7(currentTimeMillis, makeUtc);
 var nowUnsafe = () => makeUtc(Date.now());
 var toDateUtc = (self) => new Date(self.epochMilliseconds);
@@ -909,7 +908,7 @@ var toNumber = (b) => {
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/DateTime.js
 var makeUnsafe = makeUnsafe6;
-var make14 = make;
+var make18 = make4;
 var now2 = now;
 var nowUnsafe2 = nowUnsafe;
 var toDateUtc2 = toDateUtc;
@@ -1688,7 +1687,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
           const sourceStream = unwrap(succeed6(getSourceStream(handles[handles.length - 1], options.from)));
           const toOption = options.to ?? "stdin";
           if (toOption === "stdin") {
-            handles.push(yield* spawnCommand(make7(command.command, command.args, {
+            handles.push(yield* spawnCommand(make3(command.command, command.args, {
               ...command.options,
               stdin: {
                 ...stdinConfig,
@@ -1708,7 +1707,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
                 type: "input",
                 stream: sourceStream
               };
-              handles.push(yield* spawnCommand(make7(command.command, command.args, {
+              handles.push(yield* spawnCommand(make3(command.command, command.args, {
                 ...command.options,
                 additionalFds: {
                   ...existingFds,
@@ -1716,7 +1715,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
                 }
               })));
             } else {
-              handles.push(yield* spawnCommand(make7(command.command, command.args, {
+              handles.push(yield* spawnCommand(make3(command.command, command.args, {
                 ...command.options,
                 stdin: {
                   ...stdinConfig,
@@ -1755,7 +1754,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
       }
     }
   });
-  return make6(spawnCommand);
+  return make2(spawnCommand);
 });
 var layer3 = /* @__PURE__ */ effect(ChildProcessSpawner, make19);
 var flattenCommand = (command) => {
@@ -2831,12 +2830,12 @@ var redact2 = /* @__PURE__ */ dual(2, (self, key) => {
     if (typeof key === "string") {
       const k = key.toLowerCase();
       if (k in self) {
-        out[k] = make5(self[k]);
+        out[k] = make(self[k]);
       }
     } else {
       for (const name in self) {
         if (name.search(key) !== -1) {
-          out[name] = make5(self[name]);
+          out[name] = make(self[name]);
         }
       }
     }
@@ -2943,7 +2942,7 @@ var fromInputNested = (input) => {
   return out;
 };
 var coerce = (value) => isRedacted(value) ? value : String(value);
-var Equivalence3 = /* @__PURE__ */ make15((a, b) => arrayEquivalence(a.params, b.params));
+var Equivalence3 = /* @__PURE__ */ make14((a, b) => arrayEquivalence(a.params, b.params));
 var arrayEquivalence = /* @__PURE__ */ makeEquivalence2(/* @__PURE__ */ makeEquivalence3([/* @__PURE__ */ strictEqual(), /* @__PURE__ */ asEquivalence()]));
 var empty4 = /* @__PURE__ */ make23([]);
 var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
@@ -2961,7 +2960,7 @@ var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
 });
 var redact3 = /* @__PURE__ */ dual(2, (self, key) => {
   const patterns = Array.isArray(key) ? key : [key];
-  return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName2(name, patterns) ? make5(value) : value]);
+  return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName2(name, patterns) ? make(value) : value]);
 });
 var isRedactedName2 = isRedactedName;
 var redactUrl = (url, redactedNames = currentRedactedNames()) => {
@@ -3192,7 +3191,7 @@ function toDate(input) {
   return toDateUtc2(makeUnsafe(input));
 }
 function parseDate(input) {
-  return getOrUndefined(map4(make14(input), toDateUtc2));
+  return getOrUndefined(map4(make18(input), toDateUtc2));
 }
 function toIso(input) {
   return formatIso(makeUnsafe(input));
@@ -5378,7 +5377,7 @@ function rotateRight(value, amount) {
 }
 
 // packages/core/src/loop-layers.ts
-var LoopLayers = ["team", "workspace", "shipped"];
+var LoopLayers = ["team", "workspace"];
 var AgentEfforts = ["low", "medium", "high", "xhigh"];
 var AgentCapabilities = ["web", "subagents", "artifacts", "browser"];
 
@@ -5606,7 +5605,6 @@ var LoopForbiddenContentRegExp = new RegExp(LoopReferenceAndUrlForbiddenContentP
 var LoopSafeReferenceString = String4.check(isMinLength(1), isMaxLength(240), isPattern(new RegExp(LoopSafeReferencePattern, "u")));
 var LoopSafeInternalReferenceString = String4.check(isMinLength(1), isMaxLength(240), isPattern(new RegExp(LoopSafeInternalReferencePattern, "u")));
 var LoopSafeText = String4.check(isMaxLength(4000), isPattern(new RegExp(`^(?![\\s\\S]*(?:${LoopCredentialContentPattern}|[A-Za-z][A-Za-z0-9+.-]*://(?:[^\\s/?#]*@|[^\\s?#]*\\?)))[\\s\\S]*$`, "u")));
-var recommendedDefault = (recommended) => recommended !== undefined && is(LoopSafeText)(recommended) ? recommended : undefined;
 var QuestionText = String4;
 var LoopSafeOutputDataString = String4.check(isMaxLength(4000), isPattern(new RegExp(LoopSafeInternalReferencePattern, "u")));
 var LoopSafePackageName = String4.check(isMinLength(1), isMaxLength(200), isPattern(new RegExp(LoopSafeReferencePattern, "u")));
@@ -5999,7 +5997,7 @@ var Run = Struct({
   trigger: RunTrigger,
   state: RunState,
   loopDigest: optionalKey(BundleDigest),
-  loopLayer: optionalKey(Literals(["team", "workspace", "shipped"])),
+  loopLayer: optionalKey(Literals(["team", "workspace"])),
   loopVersion: optionalKey(String4),
   parentRunId: optionalKey(Id),
   continuesRunId: optionalKey(Id),
@@ -6382,7 +6380,7 @@ var ProgramLoop = Struct({
   id: String4,
   title: String4,
   version: optionalKey(LoopVersion),
-  layer: Literals(["team", "workspace", "shipped"]),
+  layer: Literals(["team", "workspace"]),
   digest: String4,
   outcome: optionalKey(String4),
   offers: ArraySchema(Struct({
@@ -6411,7 +6409,7 @@ var AgentFallback = Struct({
 });
 var ProgramAgent = Struct({
   id: String4,
-  layer: Literals(["team", "workspace", "shipped"]),
+  layer: Literals(["team", "workspace"]),
   kit: String4,
   extends: optionalKey(String4),
   instructions: optionalKey(String4),
@@ -9494,13 +9492,13 @@ function makeWith(method, url, urlParams, hash, headers, body) {
   return self;
 }
 var empty6 = /* @__PURE__ */ makeWith("GET", "", empty4, /* @__PURE__ */ none(), empty, empty5);
-var make2 = (method) => (url, options) => modify(empty6, {
+var make5 = (method) => (url, options) => modify(empty6, {
   method,
   url,
   ...options ?? undefined
 });
-var get = /* @__PURE__ */ make2("GET");
-var put = /* @__PURE__ */ make2("PUT");
+var get = /* @__PURE__ */ make5("GET");
+var put = /* @__PURE__ */ make5("PUT");
 var modify = /* @__PURE__ */ dual(2, (self, options) => {
   let result = self;
   if (options.method) {
@@ -9799,7 +9797,7 @@ var Proto7 = {
     };
   },
   .../* @__PURE__ */ Object.fromEntries(/* @__PURE__ */ allShort.map(([fullMethod, method]) => [method, function(url, options) {
-    return this.execute(make2(fullMethod)(url, options));
+    return this.execute(make5(fullMethod)(url, options));
   }]))
 };
 var make27 = (f) => makeWith2((effect) => flatMap3(effect, (request) => withFiber2((fiber) => {
@@ -10887,6 +10885,145 @@ var listedSummary = (summary) => {
   const line = summary.replace(/\s+/g, " ").trim();
   return line.length <= summaryLimit ? line : `${Array.from(line).slice(0, summaryLimit).join("").trimEnd()}\u2026`;
 };
+// packages/core/src/kit.ts
+var KitName = String4.check(isMinLength(1), isMaxLength(214), isPattern(new RegExp("^(@[a-z0-9-~][a-z0-9-._~]*/)?[a-z0-9-~][a-z0-9-._~]*$", "u")));
+var KitDigest = String4.check(isPattern(new RegExp("^[a-f0-9]{64}$", "u")));
+var KitLayer = Union([Literal("team"), Literal("workspace")]);
+var KitProvenance = Struct({
+  repository: optionalKey(String4),
+  commit: optionalKey(String4),
+  clean: Boolean2
+});
+var KitBundleUpload = Struct({ bundle: String4.check(isMinLength(1)) });
+var kitBuild = {
+  name: KitName,
+  teamId: optionalKey(Id),
+  digest: KitDigest,
+  declarations: Record(String4, Unknown),
+  protocolVersion: Int.check(isGreaterThanOrEqualTo(1)),
+  provenance: KitProvenance
+};
+var KitPlanRequest = Struct(kitBuild);
+var KitDeployRequest = Struct({
+  ...kitBuild,
+  expectedVersion: Union([Int.check(isGreaterThanOrEqualTo(1)), Null])
+});
+var { name: _name, teamId: _teamId, ...devBuild } = kitBuild;
+var KitDevRequest = Struct(devBuild);
+var KitDevVersion = Struct({ id: Id, digest: KitDigest, loops: ArraySchema(String4) });
+var KitChanges = Struct({
+  created: ArraySchema(String4),
+  changed: ArraySchema(String4),
+  removed: ArraySchema(String4)
+});
+var KitPlanConflict = Union([
+  Struct({
+    kind: Literal("id_taken"),
+    resource: Union([Literal("loop"), Literal("agent")]),
+    id: String4,
+    kit: String4
+  }),
+  Struct({ kind: Literal("not_for_team"), declaration: String4 }),
+  Struct({
+    kind: Literal("schedule_team"),
+    key: String4,
+    problem: Union([Literal("missing"), Literal("not_allowed"), Literal("unknown")])
+  }),
+  Struct({
+    kind: Literal("loop_unresolved"),
+    record: Literal("schedule"),
+    key: String4,
+    loop: String4
+  })
+]);
+var OwnedRecordKind = Literal("schedule");
+var KitRecordChanges = Struct({
+  created: ArraySchema(String4),
+  changed: ArraySchema(String4),
+  removed: ArraySchema(String4),
+  adopted: ArraySchema(Struct({ key: String4, id: String4 }))
+});
+var KitDrift = Struct({
+  kind: OwnedRecordKind,
+  key: String4,
+  field: String4,
+  declared: Unknown,
+  live: Unknown,
+  changedBy: optionalKey(Struct({ actorType: String4, actorId: String4 })),
+  changedAt: optionalKey(Timestamp)
+});
+var KitPlanWarning = Struct({
+  kind: Literal("still_named"),
+  resource: Union([Literal("loop"), Literal("agent")]),
+  id: String4,
+  record: String4
+});
+var KitPlanResult = Struct({
+  name: KitName,
+  layer: KitLayer,
+  currentVersion: Union([Int.check(isGreaterThanOrEqualTo(1)), Null]),
+  currentCommit: optionalKey(String4),
+  loops: KitChanges,
+  agents: KitChanges,
+  schedules: KitRecordChanges,
+  drift: ArraySchema(KitDrift),
+  conflicts: ArraySchema(KitPlanConflict),
+  warnings: ArraySchema(KitPlanWarning),
+  secretsWithoutValue: ArraySchema(String4)
+});
+var KitVersionSummary = Struct({
+  number: Int.check(isGreaterThanOrEqualTo(1)),
+  digest: KitDigest,
+  protocolVersion: Int.check(isGreaterThanOrEqualTo(1)),
+  provenance: KitProvenance,
+  deployedByActorType: ActorType,
+  deployedByActorId: String4,
+  deployBindingId: optionalKey(Id),
+  carried: optionalKey(ArraySchema(Struct({ name: KitName, version: String4, setup: KitDigest }))),
+  deployedAt: Timestamp,
+  status: Union([
+    Literal("current"),
+    Literal("superseded"),
+    Literal("dev"),
+    Literal("removed")
+  ])
+});
+var kitFields = {
+  name: KitName,
+  layer: KitLayer,
+  teamId: optionalKey(Id),
+  current: optionalKey(KitVersionSummary),
+  loops: ArraySchema(String4),
+  agents: ArraySchema(String4)
+};
+var KitSummary = Struct(kitFields);
+var KitList = Struct({ items: ArraySchema(KitSummary) });
+var KitDetail = Struct({
+  ...kitFields,
+  versions: ArraySchema(KitVersionSummary),
+  schedules: ArraySchema(Struct({ key: String4, id: Id, name: optionalKey(String4) })),
+  drift: ArraySchema(KitDrift)
+});
+var KitScopeQuery = Struct({ teamId: optionalKey(Id) });
+var DeployBinding = Struct({
+  id: Id,
+  repoBindingId: Id,
+  repository: String4,
+  branch: String4.check(isMinLength(1), isMaxLength(255)),
+  kitName: KitName,
+  layer: KitLayer,
+  teamId: optionalKey(Id),
+  createdByUserId: String4,
+  createdAt: Timestamp
+});
+var DeployBindingCreate = Struct({
+  repoBindingId: Id,
+  branch: String4.check(isMinLength(1), isMaxLength(255)),
+  kitName: KitName,
+  teamId: optionalKey(Id)
+});
+var DeployBindingList = Struct({ items: ArraySchema(DeployBinding) });
+var defaultKitName = "@kitman-sh/software-engineering";
 // packages/core/src/kit-setup.ts
 var KitSetup = Struct({
   ...AgentEnvironmentFragment.fields,
@@ -13153,7 +13290,7 @@ function getStreamSchemas(schema) {
 }
 var schema = /* @__PURE__ */ declare(isStream);
 function Stream(success, error) {
-  return make18(schema.ast, {
+  return make17(schema.ast, {
     [StreamSchemaTypeId]: StreamSchemaTypeId,
     success,
     error
@@ -13252,7 +13389,7 @@ var makeProto = (options) => {
   Rpc.key = `effect/rpc/Rpc/${options._tag}`;
   return Rpc;
 };
-var make3 = (tag, options) => {
+var make6 = (tag, options) => {
   const successSchema = options?.success ?? Void;
   const errorSchema = options?.error ?? Never;
   const defectSchema = options?.defect ?? Defect();
@@ -13463,7 +13600,7 @@ var RpcGroupProto = {
     });
   },
   annotateRpcs(service, value) {
-    return this.annotateRpcsMerge(make16(service, value));
+    return this.annotateRpcsMerge(make15(service, value));
   },
   annotateMerge(context) {
     return makeProto2({
@@ -13486,7 +13623,7 @@ var makeProto2 = (options) => Object.assign(function() {}, RpcGroupProto, {
   requests: options.requests,
   annotations: options.annotations
 });
-var make4 = (...rpcs) => makeProto2({
+var make7 = (...rpcs) => makeProto2({
   requests: new Map(rpcs.map((rpc) => [rpc._tag, rpc])),
   annotations: empty3()
 });
@@ -13593,96 +13730,96 @@ var ProgramOutcome = Union([
   Struct({ status: Literal("failed"), failureSummary: String4 })
 ]);
 
-class RunnerReplicaRpcs extends make4(make3("Claim", {
+class RunnerReplicaRpcs extends make7(make6("Claim", {
   payload: WorkUnitClaimInput,
   success: WorkUnitClaimResult,
   error: RunnerRpcError
-}), make3("Heartbeat", {
+}), make6("Heartbeat", {
   payload: WorkUnitHeartbeatInput,
   success: WorkUnitHeartbeatResult,
   error: RunnerRpcError
-}), make3("Complete", {
+}), make6("Complete", {
   payload: WorkUnitCompletion,
   error: RunnerRpcError
-}), make3("Release", {
+}), make6("Release", {
   payload: WorkUnitReleaseInput,
   error: RunnerRpcError
-}), make3("Signals", {
+}), make6("Signals", {
   payload: { runnerReplicaId: String4 },
   success: RunnerSignal,
   error: RunnerRpcError,
   stream: true
-}), make3("ReportSteer", {
+}), make6("ReportSteer", {
   payload: { workUnitId: String4, messageId: String4, delivered: Boolean2 },
   success: Void,
   error: RunnerRpcError
-}), make3("AppendTranscript", {
+}), make6("AppendTranscript", {
   payload: { workUnitId: String4, entries: ArraySchema(TranscriptAppendEntry).check(isMaxLength(100)) },
   success: Void,
   error: RunnerRpcError
-}), make3("CreateCheckpointFile", {
+}), make6("CreateCheckpointFile", {
   payload: { lease: ProgramLease, byteSize: Int, sha256: String4 },
   success: Struct({ file: RunFileRecord, upload: optional(RunFileUpload) }),
   error: Union([RunnerRpcError, RunFileRefused])
-}), make3("CheckpointFileParts", {
+}), make6("CheckpointFileParts", {
   payload: { lease: ProgramLease, fileId: String4, partNumbers: ArraySchema(Int) },
   success: Struct({ parts: ArraySchema(RunFilePartUrl) }),
   error: RunnerRpcError
-}), make3("CompleteCheckpointFile", {
+}), make6("CompleteCheckpointFile", {
   payload: { lease: ProgramLease, fileId: String4, parts: optional(ArraySchema(UploadedRunFilePart)) },
   success: RunFileRecord,
   error: RunnerRpcError
-}), make3("SaveCheckpoint", {
+}), make6("SaveCheckpoint", {
   payload: { lease: ProgramLease, checkpoint: StepCheckpoint },
   success: Void,
   error: RunnerRpcError
-}), make3("ResumeCheckpoint", {
+}), make6("ResumeCheckpoint", {
   payload: { lease: ProgramLease },
   success: UndefinedOr(ResumedCheckpoint),
   error: RunnerRpcError
-}), make3("SettledCheckpoints", {
+}), make6("SettledCheckpoints", {
   success: ArraySchema(Struct({
     stepAttemptId: String4,
     ref: optionalKey(String4),
     repoBinding: optionalKey(WorkUnitRepoBinding)
   })),
   error: RunnerRpcError
-}), make3("ForgetCheckpoints", {
+}), make6("ForgetCheckpoints", {
   payload: { stepAttemptIds: ArraySchema(String4) },
   success: Void,
   error: RunnerRpcError
-}), make3("GitCredential", {
+}), make6("GitCredential", {
   payload: { repoBindingId: String4 },
   success: UndefinedOr(Struct({ username: String4, password: String4 })),
   error: RunnerRpcError
-}), make3("Bundle", {
+}), make6("Bundle", {
   payload: { digest: String4 },
   success: Struct({ bundle: String4 }),
   error: RunnerRpcError
-}), make3("SettledRuns", {
+}), make6("SettledRuns", {
   payload: { runIds: ArraySchema(String4) },
   success: ArraySchema(String4),
   error: RunnerRpcError
-}), make3("KnownEvidence", {
+}), make6("KnownEvidence", {
   payload: { lease: ProgramLease, trees: ArraySchema(String4) },
   success: ArraySchema(Struct({ tree: String4, name: String4, command: String4 })),
   error: RunnerRpcError
 })).middleware(RunnerAuthentication) {
 }
 
-class RunnerJournalRpcs extends make4(make3("RecordActivity", {
+class RunnerJournalRpcs extends make7(make6("RecordActivity", {
   payload: { lease: ProgramLease, name: String4, attempt: Int, exit: Json },
   error: RunnerRpcError
-}), make3("DeferredDone", {
+}), make6("DeferredDone", {
   payload: { lease: ProgramLease, name: String4, exit: Json },
   error: RunnerRpcError
-}), make3("ScheduleClock", {
+}), make6("ScheduleClock", {
   payload: { lease: ProgramLease, name: String4, deferredName: String4, durationMillis: Int },
   error: RunnerRpcError
-}), make3("Suspend", { payload: { lease: ProgramLease }, error: RunnerRpcError }), make3("FinishProgram", { payload: { lease: ProgramLease, outcome: ProgramOutcome }, error: RunnerRpcError })).middleware(RunnerAuthentication) {
+}), make6("Suspend", { payload: { lease: ProgramLease }, error: RunnerRpcError }), make6("FinishProgram", { payload: { lease: ProgramLease, outcome: ProgramOutcome }, error: RunnerRpcError })).middleware(RunnerAuthentication) {
 }
 
-class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
+class RunnerCapabilityRpcs extends make7(make6("PutQuestion", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13699,7 +13836,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ questionId: String4 }),
   error: RunnerRpcError
-}), make3("StartAgentStep", {
+}), make6("StartAgentStep", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13715,7 +13852,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ stepAttemptId: String4 }),
   error: RunnerRpcError
-}), make3("StartVerification", {
+}), make6("StartVerification", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13732,7 +13869,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ verificationId: String4 }),
   error: RunnerRpcError
-}), make3("AwaitEvent", {
+}), make6("AwaitEvent", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13748,7 +13885,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     })))
   },
   error: RunnerRpcError
-}), make3("ClaimResource", {
+}), make6("ClaimResource", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13757,7 +13894,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     action: Literals(["claim", "take_over", "let_go"])
   },
   error: RunnerRpcError
-}), make3("AdmitChild", {
+}), make6("AdmitChild", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13767,7 +13904,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ runId: String4 }),
   error: RunnerRpcError
-}), make3("StoreArtifact", {
+}), make6("StoreArtifact", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13779,7 +13916,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ artifactId: String4 }),
   error: RunnerRpcError
-}), make3("RecordNote", {
+}), make6("RecordNote", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13787,7 +13924,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     artifactId: optional(String4)
   },
   error: RunnerRpcError
-}), make3("PerformHostEffect", {
+}), make6("PerformHostEffect", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13815,7 +13952,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: UndefinedOr(Struct({ id: String4, number: String4, url: String4 })),
   error: RunnerRpcError
-}), make3("AlertTask", {
+}), make6("AlertTask", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13832,7 +13969,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     joined: optionalKey(Struct({ kind: Literals(["run", "recent"]), runId: String4 }))
   }),
   error: RunnerRpcError
-}), make3("ReadTranscripts", {
+}), make6("ReadTranscripts", {
   payload: { lease: ProgramLease, step: String4, days: Int },
   success: Struct({
     runs: ArraySchema(Struct({
@@ -13851,7 +13988,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make3("PipelineStatus", {
+}), make6("PipelineStatus", {
   payload: { lease: ProgramLease, step: String4, changeRequestId: String4 },
   success: Struct({
     head: String4,
@@ -13867,11 +14004,11 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     runnerChecks: optionalKey(ArraySchema(String4))
   }),
   error: RunnerRpcError
-}), make3("ReportPipeline", {
+}), make6("ReportPipeline", {
   payload: { lease: ProgramLease, step: String4, changeRequestId: String4, verification: String4 },
   success: Struct({ head: String4, status: Literals(["success", "failed"]) }),
   error: RunnerRpcError
-}), make3("ReviewThreads", {
+}), make6("ReviewThreads", {
   payload: { lease: ProgramLease, step: String4, changeRequestId: String4 },
   success: Struct({
     threads: ArraySchema(Struct({
@@ -13883,7 +14020,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make3("OpenChangeRequests", {
+}), make6("OpenChangeRequests", {
   payload: { lease: ProgramLease, step: String4, authors: NonEmptyArray(String4) },
   success: Struct({
     changeRequests: ArraySchema(Struct({
@@ -13897,7 +14034,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make3("OwnChangeRequests", {
+}), make6("OwnChangeRequests", {
   payload: { lease: ProgramLease, step: String4 },
   success: Struct({
     changeRequests: ArraySchema(Struct({
@@ -13910,7 +14047,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make3("Propose", {
+}), make6("Propose", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13937,7 +14074,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     matched: optionalKey(Boolean2)
   }),
   error: RunnerRpcError
-}), make3("ReadProject", {
+}), make6("ReadProject", {
   payload: { lease: ProgramLease, step: String4, projectId: String4 },
   success: Struct({
     project: Struct({ id: String4, name: String4 }),
@@ -13960,7 +14097,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     taskChanges: ArraySchema(Struct({ taskKey: String4, title: String4, change: String4, at: String4 }))
   }),
   error: RunnerRpcError
-}), make3("DraftUpdate", {
+}), make6("DraftUpdate", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13975,7 +14112,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ id: String4 }),
   error: RunnerRpcError
-}), make3("CreatePlanTasks", {
+}), make6("CreatePlanTasks", {
   payload: {
     lease: ProgramLease,
     projectId: optionalKey(String4),
@@ -13990,11 +14127,11 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: ArraySchema(Struct({ key: String4, taskId: String4 })),
   error: RunnerRpcError
-}), make3("IntegrationBranch", {
+}), make6("IntegrationBranch", {
   payload: { lease: ProgramLease, repoBindingId: optionalKey(String4) },
   success: Struct({ repoBindingId: String4, branch: String4, revision: String4 }),
   error: RunnerRpcError
-}), make3("MergeChangeRequest", {
+}), make6("MergeChangeRequest", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14007,7 +14144,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     Struct({ status: Literal("moved"), head: String4 })
   ]),
   error: RunnerRpcError
-}), make3("ApproveChangeRequest", {
+}), make6("ApproveChangeRequest", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14022,7 +14159,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
     Struct({ approved: Literal(false), reason: String4 })
   ]),
   error: RunnerRpcError
-}), make3("CloseChangeRequest", {
+}), make6("CloseChangeRequest", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14032,7 +14169,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ closed: Boolean2, head: optionalKey(String4) }),
   error: RunnerRpcError
-}), make3("RerunPipeline", {
+}), make6("RerunPipeline", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14042,7 +14179,7 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ head: String4, pipelines: Int }),
   error: RunnerRpcError
-}), make3("PublishRelease", {
+}), make6("PublishRelease", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14053,14 +14190,14 @@ class RunnerCapabilityRpcs extends make4(make3("PutQuestion", {
   },
   success: Struct({ tag: String4, revision: String4, url: String4 }),
   error: RunnerRpcError
-}), make3("ProgramSecrets", {
+}), make6("ProgramSecrets", {
   payload: { lease: ProgramLease },
   success: Record(String4, String4),
   error: RunnerRpcError
 })).middleware(RunnerAuthentication) {
 }
 
-class RunnerRunFileRpcs extends make4(make3("CreateRunFile", {
+class RunnerRunFileRpcs extends make7(make6("CreateRunFile", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14072,11 +14209,11 @@ class RunnerRunFileRpcs extends make4(make3("CreateRunFile", {
   },
   success: Struct({ file: RunFileRecord, upload: optional(RunFileUpload) }),
   error: Union([RunnerRpcError, RunFileRefused])
-}), make3("RunFileParts", {
+}), make6("RunFileParts", {
   payload: { lease: ProgramLease, fileId: String4, partNumbers: ArraySchema(Int) },
   success: Struct({ parts: ArraySchema(RunFilePartUrl) }),
   error: RunnerRpcError
-}), make3("CompleteRunFile", {
+}), make6("CompleteRunFile", {
   payload: { lease: ProgramLease, fileId: String4, parts: optional(ArraySchema(UploadedRunFilePart)) },
   success: RunFileRecord,
   error: RunnerRpcError
@@ -14165,7 +14302,7 @@ function toStoredSession(token, existingRefreshToken) {
 }
 function startLoopbackServer(input) {
   return gen(function* () {
-    const code = yield* make17();
+    const code = yield* make16();
     const context2 = yield* context();
     const runSyncExit = runSyncExitWith(context2);
     const server = yield* acquireRelease(sync2(() => Bun.serve({
@@ -14705,7 +14842,7 @@ var openConnection = (transport) => gen(function* () {
   let lastId = 0;
   let lost = false;
   const notifications = yield* unbounded2();
-  const ended = yield* make17();
+  const ended = yield* make16();
   const settle = (line) => match(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Response2)), {
     onNone: () => match(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Notification)), {
       onNone: () => void_3,
@@ -14732,7 +14869,7 @@ var openConnection = (transport) => gen(function* () {
     if (lost)
       return yield* new HerdrCoreConnectionLost2({ method });
     const id = ++lastId;
-    const deferred = yield* make17();
+    const deferred = yield* make16();
     pending.set(id, { method, deferred });
     yield* pipe.write(encodeJsonStringSync({ jsonrpc: "2.0", id, method, params }));
     return yield* _await(deferred);
@@ -14813,7 +14950,7 @@ var spawnedTransport = (env) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const input = yield* unbounded2();
   const encoder = new TextEncoder;
-  const handle = yield* spawner.spawn(make7("herdr-core", ["connect"], {
+  const handle = yield* spawner.spawn(make3("herdr-core", ["connect"], {
     extendEnv: false,
     env,
     stdin: fromQueue(input),
@@ -14844,7 +14981,7 @@ var updateHerdrCore2 = (options) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const env = coreEnv(options);
   const run = (args) => gen(function* () {
-    const handle = yield* spawner.spawn(make7("herdr-core", args, { extendEnv: false, env, stdin: "ignore" }));
+    const handle = yield* spawner.spawn(make3("herdr-core", args, { extendEnv: false, env, stdin: "ignore" }));
     const [stdout, stderr, exitCode] = yield* all3([
       mkString(decodeText(handle.stdout)),
       mkString(decodeText(handle.stderr)),
@@ -14870,7 +15007,7 @@ class CommandFailed2 extends TaggedError("CommandFailed") {
 }
 var runCommand2 = (command, args, options = {}) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
-  const handle = yield* spawner.spawn(make7(command, args, {
+  const handle = yield* spawner.spawn(make3(command, args, {
     stdin: "ignore",
     ...options.cwd === undefined ? undefined : { cwd: options.cwd },
     ...options.env === undefined ? undefined : { extendEnv: true, env: options.env }
@@ -14896,7 +15033,7 @@ var shellOutputTailChars2 = 64 * 1024;
 var runProcess2 = (argv, options) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const [command, ...args] = argv;
-  const handle = yield* spawner.spawn(make7(command, args, {
+  const handle = yield* spawner.spawn(make3(command, args, {
     stdin: options.stdin === undefined ? "ignore" : make11(new TextEncoder().encode(options.stdin)),
     ...options.cwd === undefined ? undefined : { cwd: options.cwd },
     env: options.extendEnv === false ? { ...options.env } : { ...withoutPreloads2(), ...options.env }
@@ -15319,4 +15456,4 @@ function checkServices(declaration) {
   return isSome(decoded) ? [...new Set(decoded.value.services)] : undefined;
 }
 
-export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, Stdio, Terminal, layer, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, recommendedDefault, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, ProgramWorkUnit, CheckName, MeasurePlan, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, ClaimResult, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make2, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer2, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make3, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make4, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };
+export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, Stdio, Terminal, layer, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer2, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };