@kitman-sh/cli 0.10.58 → 0.10.59

package/dist/{chunk-ac19vqmc.js → chunk-d8awdfdj.js}

@@ -5,46 +5,7 @@ import {
   isObject,
   isJsonObject,
   isString
-} from "./chunk-76y7v9rj.js";
-import {
-  join,
-  interrupt,
-  unbounded,
-  publishUnsafe,
-  unbounded2,
-  offer,
-  makeUnsafe3,
-  make9,
-  fromQueue,
-  fromPubSub,
-  map2,
-  filter,
-  decodeText,
-  encodeText,
-  splitLines,
-  run,
-  runHead,
-  runForEach,
-  FileSystem,
-  Path,
-  embeddedFile,
-  extractEmbeddedFile,
-  optionalEnv,
-  harnessesUnsupportedInSrt2,
-  compiled2,
-  pinnedSrtCommand2,
-  pinnedSrtStepCommand2,
-  runSrtCli2,
-  kitmanCacheDirectory2,
-  srtSettings2,
-  srtCacheEnvironment2,
-  srtInheritedEnv2,
-  inheritedEnvironment2,
-  withOnlyEnvironment2,
-  writeSrtSettings2,
-  srtStepArgv2,
-  srtArgv2
-} from "./chunk-kvv9vzzr.js";
+} from "./chunk-v01c0k6j.js";
 import {
   pipeArguments,
   dual,
@@ -81,7 +42,7 @@ import {
   isFailure2,
   hasInterrupts,
   makeUnsafe5,
-  make14,
+  make16,
   _await,
   fail5,
   isDoneUnsafe,
@@ -141,6 +102,7 @@ import {
   timeoutOption,
   timeoutOrElse,
   sleep,
+  raceAllFirst,
   raceFirst,
   filter2,
   matchEffect2,
@@ -194,11 +156,11 @@ import {
   encodePrettyJsonString,
   decodeJsonStringSync,
   encodeUnknownJsonStringSync
-} from "./chunk-nk5h4cvx.js";
+} from "./chunk-d3ksv8y1.js";
 import {
   Id,
   secretReference
-} from "./chunk-8y8ax1bt.js";
+} from "./chunk-rrnee9mk.js";
 import {
   currentTimeMillis,
   SecureRandom,
@@ -263,7 +225,46 @@ import {
   installCommand,
   checkServicesFile,
   checkServices
-} from "./chunk-qmmer308.js";
+} from "./chunk-sdpjvc1r.js";
+import {
+  join,
+  interrupt,
+  unbounded,
+  publishUnsafe,
+  unbounded2,
+  offer,
+  makeUnsafe3,
+  make11,
+  fromQueue,
+  fromPubSub,
+  map2,
+  filter,
+  decodeText,
+  encodeText,
+  splitLines,
+  run,
+  runHead,
+  runForEach,
+  FileSystem,
+  Path,
+  embeddedFile,
+  extractEmbeddedFile,
+  optionalEnv,
+  harnessesUnsupportedInSrt2,
+  compiled2,
+  pinnedSrtCommand2,
+  pinnedSrtStepCommand2,
+  runSrtCli2,
+  kitmanCacheDirectory2,
+  srtSettings2,
+  srtCacheEnvironment2,
+  srtInheritedEnv2,
+  inheritedEnvironment2,
+  withOnlyEnvironment2,
+  writeSrtSettings2,
+  srtStepArgv2,
+  srtArgv2
+} from "./chunk-0fdgam8v.js";
 import {
   writeAgentEnvironmentConfigFile2,
   readManifestSkillPaths2,
@@ -279,8 +280,8 @@ import {
   applyAgentEnvironmentMaterialization2,
   isPathWithin2,
   skillIdentity2
-} from "./chunk-mfhmj6r6.js";
-import"./chunk-4jbn6hma.js";
+} from "./chunk-z0z56a72.js";
+import"./chunk-a4798jzf.js";
 import {
   sliceBytes2,
   maxLineBytes2,
@@ -288,28 +289,28 @@ import {
   decodedOption2,
   decoded2,
   readOpencode2
-} from "./chunk-qbyxcjy1.js";
+} from "./chunk-09jf8588.js";
 import {
   writeSecretRegistry,
   secretRefusalLog,
   parseSecretRefusals
-} from "./chunk-ec5df6ea.js";
+} from "./chunk-1w81w56v.js";
 import {
   uploadRunFile,
   programLease,
   rpcRunFiles,
   programHostsEnv,
   undeclaredHostsEnv
-} from "./chunk-59n1m39j.js";
-import"./chunk-hegberew.js";
+} from "./chunk-phmma642.js";
+import"./chunk-hxkk42cg.js";
 import {
   nextInt
-} from "./chunk-jd8xhqgm.js";
+} from "./chunk-q3c7vmby.js";
 import {
   ChildProcessSpawner,
-  make2
-} from "./chunk-tr80mjnp.js";
-import"./chunk-zc214v7k.js";
+  make3
+} from "./chunk-eawcprsb.js";
+import"./chunk-e3tv8mv2.js";
 
 // packages/core/src/sync-kit.ts
 import { createHash } from "crypto";
@@ -3080,20 +3081,24 @@ var removeRunnerTerminals = (connection, runnerId, teardownDelayMs = 250) => fla
 }));
 var until = (seen, done) => changes(seen).pipe(filter(done), runHead, flatMap3((head) => match(head, { onNone: () => never, onSome: succeed6 })));
 var stirredSince = (turn) => (last) => last.end !== undefined || last.status === "working" || last.status === "blocked" || last.turn > turn;
-var lastingBlock = (seen, graceMs) => gen(function* () {
+var lastingStatus = (seen, status, graceMs) => gen(function* () {
   while (true) {
-    const blocked = yield* until(seen, (last) => last.status === "blocked");
-    const left = yield* until(seen, (last) => last.status !== "blocked").pipe(timeoutOption(graceMs));
+    const entered = yield* until(seen, (last) => last.status === status);
+    const left = yield* until(seen, (last) => last.status !== status).pipe(timeoutOption(graceMs));
     if (isNone(left))
-      return blocked;
+      return entered;
   }
 });
 var lastingStop = (input) => gen(function* () {
   let reminders = idleReminders;
   let remindedTurn = -1;
   while (true) {
-    const stopped = yield* raceFirst(until(input.seen, (last) => last.end !== undefined || last.turn > input.promptTurn && last.status !== "blocked" && last.status !== "working"), lastingBlock(input.seen, input.blockedGraceMs));
-    if (stopped.end !== undefined || stopped.status === "blocked" || (yield* input.outputSubmitted))
+    const stopped = yield* raceAllFirst([
+      until(input.seen, (last) => last.end !== undefined || last.turn > input.promptTurn && !["blocked", "working", "error"].includes(last.status ?? "")),
+      lastingStatus(input.seen, "blocked", input.blockedGraceMs),
+      lastingStatus(input.seen, "error", input.idleGraceMs)
+    ]);
+    if (stopped.end !== undefined || stopped.status === "blocked" || stopped.status === "error" || (yield* input.outputSubmitted))
       return stopped;
     const stirred = stirredSince(stopped.turn);
     const waited = yield* until(input.seen, stirred).pipe(timeoutOption(input.idleGraceMs));
@@ -3328,10 +3333,14 @@ var runAttempt = (request, options) => gen(function* () {
       case "finished":
         return failed("output_missing", "The agent finished without submitting its Output.");
       case undefined: {
-        if (last.status !== "blocked")
+        if (last.status !== "blocked" && last.status !== "error")
           return failed("output_missing", "The agent finished without submitting its Output.");
         const screen = yield* option2(call((connection) => connection.read(address)));
         const shown = isSome(screen) ? redactCredentials(screen.value).trim() : "";
+        if (last.status === "error") {
+          yield* logWarning("agent_errored", { attempt: attempt.id, address, screen: shown });
+          return failed("harness_error", `The Harness stopped in its error state before it submitted its Output.${shown === "" ? "" : ` Its screen ended: ${shown.slice(-blockedScreenChars)}`}`);
+        }
         yield* logWarning("agent_blocked", { attempt: attempt.id, address, screen: shown });
         if (loginRefused(shown))
           return failed("harness_login_lost", `The Harness's login was refused before it submitted its Output. Its screen ended: ${shown.slice(-blockedScreenChars)}`);
@@ -4141,6 +4150,87 @@ var claudeOutOfQuota = (line) => {
   return { summary: bounded(text || "Usage limit reached"), ...resetTime(resetsAt) };
 };
 var claudeLoginLost = (line) => isJsonObject(line) && line.type === "assistant" && line.isApiErrorMessage === true && line.error === "authentication_failed" ? bounded((isJsonObject(line.message) ? textOf(line.message.content) : "") || "Authentication failed") : undefined;
+var quotaError = /usage limit|quota|insufficient_quota|resource_exhausted|credit balance|billing|(daily|weekly|monthly) limit/i;
+var loginError = /\b401\b|unauthori[sz]ed|authentication|invalid.{0,20}(api[ _-]?key|token|credentials)|no api key|(token|credentials?) (has |have )?(expired|been revoked)|(api[ _-]?key|token|credentials?) (is |are )?not valid|log ?in again|re-?authenticate/i;
+var rateLimitError = /rate.?limit|too many requests|\b429\b/i;
+var passingLimit = /per minute|retry in \d+(\.\d+)?\s*s/i;
+var claudeProviderRefusal = (line) => {
+  const spent = claudeOutOfQuota(line);
+  if (spent !== undefined)
+    return { ...spent, kind: "out_of_quota" };
+  if (!isJsonObject(line) || line.type !== "assistant" || line.isApiErrorMessage !== true)
+    return;
+  const said = bounded(isJsonObject(line.message) ? textOf(line.message.content) : "");
+  if (line.error === "rate_limit")
+    return { summary: said || "Rate limit reached", kind: "rate_limited" };
+  return line.error === "billing_error" ? { summary: said || "Billing error", kind: "out_of_quota" } : undefined;
+};
+var codexQuotaErrors = new Set([
+  "usage_limit_exceeded",
+  "organization_usage_limit_exceeded",
+  "organization_spend_limit_exceeded"
+]);
+var codexProviderRefusal = (line) => {
+  const event = isJsonObject(line) && line.type === "event_msg" ? line.payload : undefined;
+  const error = !isJsonObject(event) ? undefined : event.type === "task_complete" ? event.error : event.type === "error" ? event : undefined;
+  if (!isJsonObject(error))
+    return;
+  const info = error.codex_error_info;
+  const tag = isString(info) ? info : isJsonObject(info) ? Object.keys(info)[0] : undefined;
+  const detail = isJsonObject(info) && tag !== undefined ? info[tag] : undefined;
+  const status = isJsonObject(detail) ? detail.http_status_code : undefined;
+  const summary = bounded(isString(error.message) ? error.message : tag ?? "");
+  if (codexQuotaErrors.has(tag))
+    return { summary, kind: "out_of_quota" };
+  if (tag === "unauthorized" || status === 401)
+    return { summary, kind: "login_refused" };
+  return tag === "rate_limit_exceeded" || status === 429 ? { summary, kind: "rate_limited" } : undefined;
+};
+var opencodeQuotaErrors = /^provider\.(quota|free-limit|go-limit|budget-limit|model-budget-limit|chatgpt-limit)$/;
+var opencodeProviderRefusal = (error) => {
+  if (!isJsonObject(error))
+    return;
+  if (isString(error.type)) {
+    const summary = bounded(isString(error.message) ? error.message : error.type);
+    if (opencodeQuotaErrors.test(error.type))
+      return { summary, kind: "out_of_quota" };
+    if (error.type === "provider.auth")
+      return { summary, kind: "login_refused" };
+    return error.type === "provider.rate-limit" ? { summary, kind: "rate_limited" } : undefined;
+  }
+  const data = isJsonObject(error.data) ? error.data : {};
+  const said = isString(data.message) ? data.message : isString(error.name) ? error.name : "";
+  const summary = bounded(said);
+  if (error.name === "ProviderAuthError")
+    return { summary, kind: "login_refused" };
+  if (error.name !== "APIError")
+    return;
+  if (quotaError.test(said) || isString(data.responseBody) && quotaError.test(data.responseBody))
+    return { summary, kind: "out_of_quota" };
+  if (data.statusCode === 401)
+    return { summary, kind: "login_refused" };
+  return data.statusCode === 429 ? { summary, kind: "rate_limited" } : undefined;
+};
+var piProviderRefusal = (line) => {
+  const message = isJsonObject(line) && line.type === "message" ? line.message : undefined;
+  if (!isJsonObject(message) || message.role !== "assistant" || message.stopReason !== "error")
+    return;
+  const said = isString(message.errorMessage) ? message.errorMessage : "";
+  const summary = bounded(said);
+  if (passingLimit.test(said))
+    return { summary, kind: "rate_limited", retried: true };
+  if (quotaError.test(said))
+    return { summary, kind: "out_of_quota" };
+  if (loginError.test(said))
+    return { summary, kind: "login_refused" };
+  return rateLimitError.test(said) ? { summary, kind: "rate_limited", retried: true } : undefined;
+};
+var piReplied = (line) => isJsonObject(line) && line.type === "message" && isJsonObject(line.message) && line.message.role === "assistant";
+var sessionRefusals = new Map([
+  ["claude", claudeProviderRefusal],
+  ["codex", codexProviderRefusal],
+  ["pi", piProviderRefusal]
+]);
 var sessionNormalizer = (harness) => {
   const asks = new Set;
   const called = (fullCallId, name, args) => {
@@ -4323,8 +4413,13 @@ var transcriptRelay = (input) => {
   let progressAt;
   let lastSeen;
   const asking = new Set;
-  let outOfQuota;
   let loginLost;
+  let refusal;
+  let errorReadAt;
+  const heard = (said) => {
+    if (refusal === undefined || refusal.retried === true)
+      refusal = said;
+  };
   const backedUp = () => unsentChars >= maxUnsentChars;
   const sawSession = (extent) => gen(function* () {
     if (extent !== lastSeen)
@@ -4407,10 +4502,11 @@ var transcriptRelay = (input) => {
     while (queued.length > 0) {
       yield* suspend3(() => record(queued.splice(0, linesPerTurn2).flatMap((line) => {
         const value = decoded2(line);
-        if (input.harness === "claude") {
-          outOfQuota = claudeOutOfQuota(value) ?? outOfQuota;
+        if (input.harness === "claude")
           loginLost = claudeLoginLost(value) ?? loginLost;
-        }
+        const refused = sessionRefusals.get(input.harness)?.(value);
+        if (refused !== undefined || input.harness === "pi" && piReplied(value))
+          heard(refused);
         return normalize(value).slice(0, maxEventsPerLine);
       }))).pipe(uninterruptible);
       yield* yieldNow;
@@ -4526,15 +4622,19 @@ var transcriptRelay = (input) => {
     record,
     stalledFor: (millis) => map8(currentTimeMillis, (now) => asking.size === 0 && progressAt !== undefined && now - progressAt >= millis),
     asking: sync2(() => asking.size > 0),
-    outOfQuota: sync2(() => outOfQuota),
     loginLost: sync2(() => loginLost),
+    refusal: sync2(() => refusal),
     read: (source) => gen(function* () {
       if (source.kind === "opencode_v2") {
-        yield* sawSession(yield* readOpencode2(source, "extent", {}));
+        const extent = yield* readOpencode2(source, "extent", {});
+        yield* sawSession(extent);
         while (!backedUp() && (yield* takeMessages(source))) {
           yield* flush;
           yield* yieldNow;
         }
+        if (extent !== errorReadAt)
+          heard(opencodeProviderRefusal(yield* readOpencode2(source, "lastError", { v2: true })));
+        errorReadAt = extent;
         return;
       }
       if (source.kind === "opencode") {
@@ -4545,6 +4645,7 @@ var transcriptRelay = (input) => {
           yield* flush;
           yield* yieldNow;
         }
+        heard(opencodeProviderRefusal(yield* readOpencode2(source, "lastError", { v2: false })));
         return;
       }
       yield* drain;
@@ -5044,19 +5145,21 @@ var stepAttempt = (input, resending) => (work) => gen(function* () {
         };
     }
   });
-  const outOfQuota = relay === undefined ? never : gen(function* () {
+  const refusalHold = (refusal) => ({
+    reason: refusal.kind,
+    ...refusal.until === undefined ? undefined : { until: refusal.until },
+    ...backend === "docker" ? { scope: "step" } : undefined
+  });
+  const outputSubmitted = input.heartbeat(work).pipe(option2, map8((state) => isSome(state) && state.value.outputSubmitted === true));
+  const providerRefused = relay === undefined ? never : gen(function* () {
     for (;; ) {
       yield* sleep("1 second");
-      const spent = yield* relay.outOfQuota;
-      if (spent !== undefined)
-        return {
-          status: "failed",
-          summary: spent.summary,
-          harnessHold: {
-            reason: "out_of_quota",
-            ...spent.until === undefined ? undefined : { until: spent.until }
-          }
-        };
+      const refusal = yield* relay.refusal;
+      if (refusal === undefined || refusal.retried === true)
+        continue;
+      if (yield* outputSubmitted)
+        return { status: "finished" };
+      return { status: "failed", summary: refusal.summary, harnessHold: refusalHold(refusal) };
     }
   });
   const loginLost = relay === undefined ? never : gen(function* () {
@@ -5065,8 +5168,7 @@ var stepAttempt = (input, resending) => (work) => gen(function* () {
       const said = yield* relay.loginLost;
       if (said === undefined)
         continue;
-      const state = yield* input.heartbeat(work).pipe(option2);
-      if (isSome(state) && state.value.outputSubmitted === true)
+      if (yield* outputSubmitted)
         return { status: "finished" };
       return { status: "failed", summary: said, restart: { reason: "login_revoked" } };
     }
@@ -5090,7 +5192,7 @@ var stepAttempt = (input, resending) => (work) => gen(function* () {
       host: refusal.host.slice(0, 300),
       reason: refusal.reason.slice(0, 500)
     }
-  ])).pipe(raceFirst(stalled), raceFirst(parked), raceFirst(outOfQuota), raceFirst(loginLost), onExit((exit) => gen(function* () {
+  ])).pipe(raceFirst(stalled), raceFirst(parked), raceFirst(providerRefused), raceFirst(loginLost), onExit((exit) => gen(function* () {
     if (relay === undefined || relaying === undefined)
       return;
     yield* interrupt(relaying);
@@ -5106,8 +5208,22 @@ var stepAttempt = (input, resending) => (work) => gen(function* () {
     yield* interrupt(checkpointing);
   if (ran.status === "parked")
     return { status: "deferred" };
-  if (ran.status !== "finished") {
+  const refused = ran.status === "failed" && !("harnessHold" in ran) && relay !== undefined ? yield* relay.refusal : undefined;
+  const deliversOutput = refused !== undefined && (yield* outputSubmitted);
+  if (ran.status !== "finished" && !deliversOutput) {
     yield* uninterruptible(checkpoint).pipe(catch_((error) => logWarning("runner_last_checkpoint_failed", error.message)));
+    if (refused !== undefined)
+      return {
+        status: "failed",
+        failureSummary: refused.summary,
+        harnessHold: refusalHold(refused)
+      };
+    if (backend === "docker" && "restart" in ran && ran.restart !== undefined)
+      return {
+        status: "failed",
+        failureSummary: ran.summary,
+        harnessHold: refusalHold({ summary: ran.summary, kind: "login_refused" })
+      };
     return {
       status: ran.status,
       failureSummary: ran.summary,
@@ -5711,7 +5827,7 @@ var codexAppServer = (binary = "codex") => (env) => gen(function* () {
   const input = yield* unbounded2();
   const pending = new Map;
   let lastId = 0;
-  const handle = yield* spawner.spawn(make2(binary, ["app-server"], {
+  const handle = yield* spawner.spawn(make3(binary, ["app-server"], {
     cwd: env.home,
     extendEnv: true,
     env: { HOME: env.home, CODEX_HOME: env.codexHome },
@@ -5734,7 +5850,7 @@ var codexAppServer = (binary = "codex") => (env) => gen(function* () {
   return {
     request: (method, params) => gen(function* () {
       const id = ++lastId;
-      const deferred = yield* make14();
+      const deferred = yield* make16();
       pending.set(id, deferred);
       yield* send({ id, method, params });
       return yield* _await(deferred).pipe(mapError2((error) => new CodexAppServerFailed({ reason: `${method}: ${error.message}` })));
@@ -5874,10 +5990,10 @@ var handshake = [
 `).join("");
 var kitmanMcpPreflight = (mcp) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
-  const server = yield* spawner.spawn(make2(mcp.command, [...mcp.args], {
+  const server = yield* spawner.spawn(make3(mcp.command, [...mcp.args], {
     extendEnv: true,
     env: mcp.env,
-    stdin: { stream: make9(new TextEncoder().encode(handshake)), endOnDone: false },
+    stdin: { stream: make11(new TextEncoder().encode(handshake)), endOnDone: false },
     stderr: "ignore"
   }));
   const reply = yield* server.stdout.pipe(decodeText, splitLines, map2((line) => getOrUndefined(decodeJsonStringOption(line))), filter((message) => isJsonObject(message) && message.id === 2), runHead);
@@ -5950,8 +6066,8 @@ var programProcessExecutor = (input) => (work) => gen(function* () {
   };
   const exitCode = sandbox === undefined ? yield* gen(function* () {
     const spawner = yield* ChildProcessSpawner;
-    const handle = yield* spawner.spawn(make2(input.bun ?? process.execPath, [file], {
-      stdin: make9(new TextEncoder().encode(stdin)),
+    const handle = yield* spawner.spawn(make3(input.bun ?? process.execPath, [file], {
+      stdin: make11(new TextEncoder().encode(stdin)),
       stdout: "inherit",
       stderr: "inherit",
       extendEnv: false,

package/dist/{chunk-zc214v7k.js → chunk-e3tv8mv2.js}

@@ -12,7 +12,7 @@ import {
   add,
   getOrUndefinedUnsafe,
   getUnsafe,
-  get3,
+  get4,
   Reference,
   toMillis,
   isSuccess,
@@ -96,7 +96,7 @@ import {
   Defect,
   Exit,
   toCodecJson
-} from "./chunk-nk5h4cvx.js";
+} from "./chunk-d3ksv8y1.js";
 import {
   interrupt,
   getCurrent,
@@ -108,7 +108,7 @@ import {
   shutdownUnsafe,
   fromQueue,
   unwrap
-} from "./chunk-kvv9vzzr.js";
+} from "./chunk-0fdgam8v.js";
 import {
   Clock,
   empty,
@@ -123,7 +123,7 @@ import {
   ParseOptions,
   RpcClientDefect,
   RpcClientError
-} from "./chunk-qmmer308.js";
+} from "./chunk-sdpjvc1r.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/workers/Transferable.js
 class Collector extends (/* @__PURE__ */ Service2()("effect/workers/Transferable/Collector")) {
@@ -237,7 +237,7 @@ var makeNoSerialization = /* @__PURE__ */ fnUntraced(function* (group, options)
   const disableTracing = options?.disableTracing ?? false;
   const generateRequestId = options?.generateRequestId ?? (() => requestIdCounter++);
   const services = yield* context();
-  const scope = get3(services, Scope);
+  const scope = get4(services, Scope);
   const entries = new Map;
   let isShutdown = false;
   yield* addFinalizer(scope, withFiber2((parent) => {
@@ -483,7 +483,7 @@ var makeNoSerialization = /* @__PURE__ */ fnUntraced(function* (group, options)
   };
 });
 var clientIdCounter = 0;
-var make3 = /* @__PURE__ */ fnUntraced(function* (group, options) {
+var make4 = /* @__PURE__ */ fnUntraced(function* (group, options) {
   const clientId = clientIdCounter++;
   const {
     codecFor,
@@ -643,7 +643,7 @@ var makeRpcSchemas = (codecFor) => {
       return entry;
     }
     const streamSchemas = getStreamSchemas(rpc.successSchema);
-    const parseOptions = get3(rpc.annotations, ParseOptions);
+    const parseOptions = get4(rpc.annotations, ParseOptions);
     const exitSchema2 = exitSchema(rpc);
     let decodeDiscardExit;
     entry = {
@@ -829,4 +829,4 @@ var layerProtocolSocket = (options) => effect(Protocol)(makeProtocolSocket(optio
 class ConnectionHooks extends (/* @__PURE__ */ Service2()("effect/rpc/RpcClient/ConnectionHooks")) {
 }
 
-export { layerJson, make3, withHeaders, layerProtocolSocket, ConnectionHooks };
+export { layerJson, make4, withHeaders, layerProtocolSocket, ConnectionHooks };

package/dist/{chunk-tr80mjnp.js → chunk-eawcprsb.js}

@@ -1,6 +1,13 @@
 // @bun
 import {
+  isString2,
+  hasProperty,
+  symbol,
+  hash,
+  symbol2,
+  equals,
   BaseProto,
+  PipeInspectableProto,
   Prototype,
   some,
   Service2,
@@ -14,11 +21,8 @@ import {
   andThen2,
   map8,
   raceFirst,
-  scoped,
-  isRedacted,
-  make15,
-  value
-} from "./chunk-nk5h4cvx.js";
+  scoped
+} from "./chunk-d3ksv8y1.js";
 import {
   unwrap,
   drainFork,
@@ -27,7 +31,49 @@ import {
   runCollect,
   runDrain,
   mkString
-} from "./chunk-kvv9vzzr.js";
+} from "./chunk-0fdgam8v.js";
+
+// node_modules/.bun/effect@4.1.2/node_modules/effect/dist/internal/redacted.js
+var redactedRegistry = /* @__PURE__ */ new WeakMap;
+var value2 = (self) => {
+  if (redactedRegistry.has(self)) {
+    return redactedRegistry.get(self);
+  } else {
+    throw new Error("Unable to get redacted value" + (self.label ? ` with label: "${self.label}"` : ""));
+  }
+};
+
+// node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Redacted.js
+var TypeId = "~effect/Redacted";
+var isRedacted = (u) => hasProperty(u, TypeId);
+var make = (value, options) => {
+  const self = Object.create(Proto);
+  if (options?.label) {
+    self.label = options.label;
+  }
+  redactedRegistry.set(self, value);
+  return self;
+};
+var Proto = {
+  [TypeId]: {
+    _A: (_) => _
+  },
+  label: undefined,
+  ...PipeInspectableProto,
+  toJSON() {
+    return this.toString();
+  },
+  toString() {
+    return `<redacted${isString2(this.label) ? ":" + this.label : ""}>`;
+  },
+  [symbol]() {
+    return hash(redactedRegistry.get(this));
+  },
+  [symbol2](that) {
+    return isRedacted(that) && equals(redactedRegistry.get(this), redactedRegistry.get(that));
+  }
+};
+var value = value2;
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Brand.js
 function nominal() {
@@ -55,7 +101,7 @@ var HandleProto = {
 var makeHandle = (params) => Object.setPrototypeOf({
   ...params
 }, HandleProto);
-var make = (spawn) => {
+var make2 = (spawn) => {
   const streamString = (command, options) => spawn(command).pipe(map8((handle) => decodeText(options?.includeStderr === true ? handle.all : drainFork(handle.stdout, handle.stderr))), unwrap);
   const streamLines = (command, options) => splitLines(streamString(command, options));
   return ChildProcessSpawner.of({
@@ -176,7 +222,7 @@ var parseTemplate = (texts, values) => {
     if (word.length === 0)
       return;
     const value = word.map(unwrap2).join("");
-    words.push(word.length === 1 && isRedacted(word[0]) ? word[0] : word.some(isRedacted) ? make15(value) : value);
+    words.push(word.length === 1 && isRedacted(word[0]) ? word[0] : word.some(isRedacted) ? make(value) : value);
     word = [];
     plain = true;
     braceDepth = 0;
@@ -266,23 +312,23 @@ var parseTemplate = (texts, values) => {
 };
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/process/ChildProcess.js
-var TypeId = "~effect/process/ChildProcess";
-var Proto = {
+var TypeId2 = "~effect/process/ChildProcess";
+var Proto2 = {
   .../* @__PURE__ */ Prototype({
     label: "Command",
     evaluate(fiber) {
       return getUnsafe(fiber.context, ChildProcessSpawner).spawn(this);
     }
   }),
-  [TypeId]: TypeId
+  [TypeId2]: TypeId2
 };
-var makeStandardCommand = (command, args, options) => Object.assign(Object.create(Proto), {
+var makeStandardCommand = (command, args, options) => Object.assign(Object.create(Proto2), {
   _tag: "StandardCommand",
   command,
   args,
   options
 });
-var make2 = function make(...args) {
+var make3 = function make(...args) {
   if (isTemplateString(args[0])) {
     const [templates, ...expressions] = args;
     const [command, cmdArgs] = parseTemplate2(templates, expressions);
@@ -340,4 +386,4 @@ var shellScript = (templates, expressions) => {
   }
   return script;
 };
-export { ExitCode, ProcessId, makeHandle, make, ChildProcessSpawner, display, make2, parseFdName, fdName };
+export { isRedacted, make, value, ExitCode, ProcessId, makeHandle, make2, ChildProcessSpawner, display, make3, parseFdName, fdName };