@kitman-sh/cli 0.10.69 → 0.10.71

package/dist/{chunk-n0pm4rtm.js → chunk-9e452fhe.js}

@@ -38,7 +38,7 @@ import {
   assignProperty,
   PipeInspectableProto,
   withFiber,
-  make13,
+  make14,
   strictEqual,
   Tuple,
   Number2,
@@ -58,7 +58,7 @@ import {
   Service2,
   makeUnsafe4,
   empty3,
-  make14,
+  make15,
   add,
   getOrUndefined2,
   getOrUndefinedUnsafe,
@@ -91,7 +91,7 @@ import {
   fail4,
   isSuccess2,
   makeUnsafe5,
-  make15,
+  make16,
   _await,
   fail5,
   isDone,
@@ -194,9 +194,6 @@ import {
   logError,
   effectify,
   decode,
-  isRedacted,
-  make16,
-  value,
   defaultParseOptions,
   omit,
   map9,
@@ -251,7 +248,7 @@ import {
   decodeJsonStringOption,
   encodeJsonStringSync,
   encodePrettyJsonString
-} from "./chunk-677etczq.js";
+} from "./chunk-d3ksv8y1.js";
 import {
   map,
   makeEquivalence,
@@ -260,8 +257,8 @@ import {
   systemError,
   badArgument,
   makeUnsafe2,
-  make7,
   make8,
+  make9,
   sliding,
   unbounded2,
   offer,
@@ -277,13 +274,13 @@ import {
   isSink,
   fromChannel,
   drain,
-  make9,
+  make10,
   get3,
   isStream,
   fromChannel2,
   callback,
   empty2,
-  make10,
+  make11,
   suspend,
   fail2,
   fromQueue,
@@ -309,16 +306,16 @@ import {
   mkArrayBuffer,
   toReadableStreamEffect,
   FileSystem,
-  make11,
+  make12,
   FileTypeId,
   WatchBackend,
   Path,
-  make12,
+  make13,
   option,
   String2,
   optionalEnv,
   harnessesUnsupportedInSrt2
-} from "./chunk-qdyqc4nz.js";
+} from "./chunk-dk0ftqwg.js";
 import {
   isDateTime,
   Numeric,
@@ -330,7 +327,7 @@ import {
   SecretName,
   SecretScope,
   SecretHosts
-} from "./chunk-wnwyp9qn.js";
+} from "./chunk-rrnee9mk.js";
 import {
   toJsonValue,
   isOneOf,
@@ -344,18 +341,21 @@ import {
   isSymbol,
   isUndefined,
   kindOf
-} from "./chunk-h6360r1c.js";
+} from "./chunk-v01c0k6j.js";
 import {
+  isRedacted,
+  make,
+  value,
   ExitCode,
   ProcessId,
   makeHandle,
-  make,
+  make2,
   ChildProcessSpawner,
   display,
-  make2,
+  make3,
   parseFdName,
   fdName
-} from "./chunk-tf5yxkpy.js";
+} from "./chunk-1rry0tsn.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Tuple.js
 var makeEquivalence3 = Tuple;
@@ -518,7 +518,7 @@ var makeUnsafe6 = (input) => {
 var hasZone = (input) => /Z|GMT|[+-]\d{2}$|[+-]\d{2}:?\d{2}$|\]$/.test(input) || /z$|gmt$/i.test(input);
 var minEpochMillis = -8640000000000000 + 12 * 60 * 60 * 1000;
 var maxEpochMillis = 8640000000000000 - 14 * 60 * 60 * 1000;
-var make3 = /* @__PURE__ */ liftThrowable(makeUnsafe6);
+var make4 = /* @__PURE__ */ liftThrowable(makeUnsafe6);
 var now = /* @__PURE__ */ map7(currentTimeMillis, makeUtc);
 var nowUnsafe = () => makeUtc(Date.now());
 var toDateUtc = (self) => new Date(self.epochMilliseconds);
@@ -908,7 +908,7 @@ var toNumber = (b) => {
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/DateTime.js
 var makeUnsafe = makeUnsafe6;
-var make18 = make3;
+var make18 = make4;
 var now2 = now;
 var nowUnsafe2 = nowUnsafe;
 var toDateUtc2 = toDateUtc;
@@ -1123,7 +1123,7 @@ var readableToPullUnsafe = (options) => {
   const readable = options.readable;
   const chunkSize = options.chunkSize ?? 4096;
   const closeOnDone = options.closeOnDone ?? true;
-  const exit = options.exit ?? make7(undefined);
+  const exit = options.exit ?? make8(undefined);
   const latch = options.latch ?? makeUnsafe2(false);
   function onReadable() {
     latch.openUnsafe();
@@ -1687,7 +1687,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
           const sourceStream = unwrap(succeed6(getSourceStream(handles[handles.length - 1], options.from)));
           const toOption = options.to ?? "stdin";
           if (toOption === "stdin") {
-            handles.push(yield* spawnCommand(make2(command.command, command.args, {
+            handles.push(yield* spawnCommand(make3(command.command, command.args, {
               ...command.options,
               stdin: {
                 ...stdinConfig,
@@ -1707,7 +1707,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
                 type: "input",
                 stream: sourceStream
               };
-              handles.push(yield* spawnCommand(make2(command.command, command.args, {
+              handles.push(yield* spawnCommand(make3(command.command, command.args, {
                 ...command.options,
                 additionalFds: {
                   ...existingFds,
@@ -1715,7 +1715,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
                 }
               })));
             } else {
-              handles.push(yield* spawnCommand(make2(command.command, command.args, {
+              handles.push(yield* spawnCommand(make3(command.command, command.args, {
                 ...command.options,
                 stdin: {
                   ...stdinConfig,
@@ -1754,7 +1754,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
       }
     }
   });
-  return make(spawnCommand);
+  return make2(spawnCommand);
 });
 var layer5 = /* @__PURE__ */ effect(ChildProcessSpawner, make19);
 var flattenCommand = (command) => {
@@ -2240,7 +2240,7 @@ var writeFile2 = (path, data, options) => callback3((resume, signal) => {
     resume(fail7(handleBadArgument("writeFile")(err)));
   }
 });
-var makeFileSystem = /* @__PURE__ */ map8(/* @__PURE__ */ serviceOption(WatchBackend), (backend) => make11({
+var makeFileSystem = /* @__PURE__ */ map8(/* @__PURE__ */ serviceOption(WatchBackend), (backend) => make12({
   access: access2,
   chmod: chmod2,
   chown: chown2,
@@ -2300,15 +2300,15 @@ var fileUrlOps = (windows) => ({
     })
   })
 });
-var layerPosix = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make12({
+var layerPosix = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
   ...NodePath.posix,
   .../* @__PURE__ */ fileUrlOps(false)
 }));
-var layerWin32 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make12({
+var layerWin32 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
   ...NodePath.win32,
   .../* @__PURE__ */ fileUrlOps(true)
 }));
-var layer7 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make12({
+var layer7 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
   ...NodePath,
   .../* @__PURE__ */ fileUrlOps(undefined)
 }));
@@ -2830,12 +2830,12 @@ var redact2 = /* @__PURE__ */ dual(2, (self, key) => {
     if (typeof key === "string") {
       const k = key.toLowerCase();
       if (k in self) {
-        out[k] = make16(self[k]);
+        out[k] = make(self[k]);
       }
     } else {
       for (const name in self) {
         if (name.search(key) !== -1) {
-          out[name] = make16(self[name]);
+          out[name] = make(self[name]);
         }
       }
     }
@@ -2942,7 +2942,7 @@ var fromInputNested = (input) => {
   return out;
 };
 var coerce = (value) => isRedacted(value) ? value : String(value);
-var Equivalence3 = /* @__PURE__ */ make13((a, b) => arrayEquivalence(a.params, b.params));
+var Equivalence3 = /* @__PURE__ */ make14((a, b) => arrayEquivalence(a.params, b.params));
 var arrayEquivalence = /* @__PURE__ */ makeEquivalence2(/* @__PURE__ */ makeEquivalence3([/* @__PURE__ */ strictEqual(), /* @__PURE__ */ asEquivalence()]));
 var empty4 = /* @__PURE__ */ make23([]);
 var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
@@ -2960,7 +2960,7 @@ var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
 });
 var redact3 = /* @__PURE__ */ dual(2, (self, key) => {
   const patterns = Array.isArray(key) ? key : [key];
-  return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName2(name, patterns) ? make16(value) : value]);
+  return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName2(name, patterns) ? make(value) : value]);
 });
 var isRedactedName2 = isRedactedName;
 var redactUrl = (url, redactedNames = currentRedactedNames()) => {
@@ -3036,7 +3036,7 @@ import * as readline from "readline";
 var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQuit) {
   const stdin = process.stdin;
   const stdout = process.stdout;
-  const lines = yield* make8();
+  const lines = yield* make9();
   let inputEnded = stdin.readableEnded;
   let readlineActive = false;
   const onStdinEnd = () => {
@@ -3047,7 +3047,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
   };
   stdin.once("end", onStdinEnd);
   yield* addFinalizer2(() => sync2(() => stdin.off("end", onStdinEnd)));
-  const rlRef = yield* make9({
+  const rlRef = yield* make10({
     acquire: acquireRelease(sync2(() => {
       const rl = readline.createInterface({
         input: stdin,
@@ -3086,7 +3086,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
     if (stdin.isTTY)
       stdin.setRawMode(enabled);
   });
-  const rawModeRef = yield* make9({
+  const rawModeRef = yield* make10({
     acquire: acquireRelease(setRawMode(true), () => setRawMode(false)),
     idleTimeToLive: "10 millis"
   });
@@ -3107,7 +3107,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
     return queue;
   });
   const readInput = gen(function* () {
-    const queue = yield* make8();
+    const queue = yield* make9();
     const handleKeypress = (s, k) => {
       const userInput = {
         input: fromUndefinedOr(s),
@@ -5915,6 +5915,12 @@ var RunWaiting = Union([
     name: String4.check(isMinLength(1)),
     verificationId: Id
   }),
+  Struct({
+    kind: Literal("claim"),
+    name: String4.check(isMinLength(1)),
+    resource: String4.check(isMinLength(1)),
+    holder: optionalKey(Struct({ runId: Id, loopId: String4 }))
+  }),
   Struct({
     kind: Literal("queue"),
     name: String4.check(isMinLength(1)),
@@ -5936,6 +5942,8 @@ var RunEvidence = Struct({
   durationMs: Int.check(isGreaterThanOrEqualTo(0)),
   outputTail: String4,
   fileIds: optionalKey(ArraySchema(String4)),
+  skippedSinceBaseline: optionalKey(ArraySchema(String4)),
+  newNotRun: optionalKey(ArraySchema(String4)),
   recordedAt: Timestamp
 });
 var ApprovedVerification = Struct({
@@ -6487,6 +6495,74 @@ var NetworkHostQuery = Struct({
   repoBindingId: optionalKey(Id)
 });
 
+// packages/core/src/test-report.ts
+var isTestReportName = (name) => /junit.*\.xml$/iu.test(name);
+var maxSkippedTests = 1e4;
+var maxRanDigests = 1e5;
+var TestId = String4.check(isMinLength(1), isMaxLength(1000));
+var CheckTests = Struct({
+  reports: Int.check(isGreaterThanOrEqualTo(0)),
+  passed: Int.check(isGreaterThanOrEqualTo(0)),
+  failed: Int.check(isGreaterThanOrEqualTo(0)),
+  skipped: Int.check(isGreaterThanOrEqualTo(0)),
+  skippedTests: ArraySchema(TestId).check(isMaxLength(maxSkippedTests)),
+  ranDigests: ArraySchema(String4.check(isMaxLength(16))).check(isMaxLength(maxRanDigests))
+});
+var entities = new Map([
+  ["amp", "&"],
+  ["lt", "<"],
+  ["gt", ">"],
+  ["quot", '"'],
+  ["apos", "'"]
+]);
+var codePoint = (whole, value) => value <= 1114111 ? String.fromCodePoint(value) : whole;
+var decoded = (text) => text.replaceAll(/&(#x[\da-f]+|#\d+|\w+);/giu, (whole, entity) => {
+  if (entity.startsWith("#x") || entity.startsWith("#X"))
+    return codePoint(whole, Number.parseInt(entity.slice(2), 16));
+  if (entity.startsWith("#"))
+    return codePoint(whole, Number(entity.slice(1)));
+  return entities.get(entity) ?? whole;
+});
+var attribute = (attributes, name) => {
+  const found = new RegExp(`(?:^|\\s)${name}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`, "u").exec(attributes);
+  return found === null ? undefined : decoded(found[1] ?? found[2] ?? "");
+};
+var junitTestCases = (xml) => [...xml.matchAll(/<testcase\b([^>]*?)(?:\/>|>([\s\S]*?)<\/testcase>)/gu)].map(([, attributes = "", body = ""]) => {
+  const id = [attribute(attributes, "file"), attribute(attributes, "classname"), attribute(attributes, "name")].filter((part) => part !== undefined && part !== "").join(" > ");
+  return {
+    id: id.slice(0, 1000) || "(unnamed test)",
+    status: /<(?:failure|error)\b/u.test(body) ? "failed" : /<skipped\b/u.test(body) ? "skipped" : "passed"
+  };
+});
+var fnv1a = (text, seed) => {
+  let hash = seed;
+  for (let index = 0;index < text.length; index++) {
+    hash ^= text.charCodeAt(index);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+};
+var testDigest = (id) => `${fnv1a(id, 2166136261)}${fnv1a(id, 84696351)}`;
+var checkTests = (reports) => {
+  const rank = { passed: 0, skipped: 1, failed: 2 };
+  const tests = new Map;
+  for (const found of reports.flatMap(junitTestCases)) {
+    const before = tests.get(found.id);
+    if (before === undefined || rank[found.status] > rank[before])
+      tests.set(found.id, found.status);
+  }
+  const of = (status) => [...tests].flatMap(([id, is]) => is === status ? [id] : []);
+  const skipped = of("skipped").sort();
+  return {
+    reports: reports.length,
+    passed: of("passed").length,
+    failed: of("failed").length,
+    skipped: skipped.length,
+    skippedTests: skipped.slice(0, maxSkippedTests),
+    ranDigests: [...of("passed"), ...of("failed")].map(testDigest).sort().slice(0, maxRanDigests)
+  };
+};
+
 // packages/core/src/work-unit.ts
 var WorkUnitLease = Struct({
   leaseOwnerId: Id,
@@ -6671,7 +6747,8 @@ var CheckEvidence = Struct({
   exitCode: optionalKey(Int),
   durationMs: Int.check(isGreaterThanOrEqualTo(0)),
   outputTail: String4.check(isMaxLength(8000)),
-  fileIds: optionalKey(ArraySchema(String4).check(isMaxLength(51)))
+  fileIds: optionalKey(ArraySchema(String4).check(isMaxLength(51))),
+  tests: optionalKey(CheckTests)
 });
 var TreeEvidence = Struct({
   revision: String4.check(isMinLength(1), isMaxLength(240)),
@@ -9496,13 +9573,13 @@ function makeWith(method, url, urlParams, hash, headers, body) {
   return self;
 }
 var empty6 = /* @__PURE__ */ makeWith("GET", "", empty4, /* @__PURE__ */ none(), empty, empty5);
-var make4 = (method) => (url, options) => modify(empty6, {
+var make5 = (method) => (url, options) => modify(empty6, {
   method,
   url,
   ...options ?? undefined
 });
-var get = /* @__PURE__ */ make4("GET");
-var put = /* @__PURE__ */ make4("PUT");
+var get = /* @__PURE__ */ make5("GET");
+var put = /* @__PURE__ */ make5("PUT");
 var modify = /* @__PURE__ */ dual(2, (self, options) => {
   let result = self;
   if (options.method) {
@@ -9801,7 +9878,7 @@ var Proto7 = {
     };
   },
   .../* @__PURE__ */ Object.fromEntries(/* @__PURE__ */ allShort.map(([fullMethod, method]) => [method, function(url, options) {
-    return this.execute(make4(fullMethod)(url, options));
+    return this.execute(make5(fullMethod)(url, options));
   }]))
 };
 var make27 = (f) => makeWith2((effect) => flatMap3(effect, (request) => withFiber2((fiber) => {
@@ -13393,7 +13470,7 @@ var makeProto = (options) => {
   Rpc.key = `effect/rpc/Rpc/${options._tag}`;
   return Rpc;
 };
-var make5 = (tag, options) => {
+var make6 = (tag, options) => {
   const successSchema = options?.success ?? Void;
   const errorSchema = options?.error ?? Never;
   const defectSchema = options?.defect ?? Defect();
@@ -13604,7 +13681,7 @@ var RpcGroupProto = {
     });
   },
   annotateRpcs(service, value) {
-    return this.annotateRpcsMerge(make14(service, value));
+    return this.annotateRpcsMerge(make15(service, value));
   },
   annotateMerge(context) {
     return makeProto2({
@@ -13627,7 +13704,7 @@ var makeProto2 = (options) => Object.assign(function() {}, RpcGroupProto, {
   requests: options.requests,
   annotations: options.annotations
 });
-var make6 = (...rpcs) => makeProto2({
+var make7 = (...rpcs) => makeProto2({
   requests: new Map(rpcs.map((rpc) => [rpc._tag, rpc])),
   annotations: empty3()
 });
@@ -13734,96 +13811,96 @@ var ProgramOutcome = Union([
   Struct({ status: Literal("failed"), failureSummary: String4 })
 ]);
 
-class RunnerReplicaRpcs extends make6(make5("Claim", {
+class RunnerReplicaRpcs extends make7(make6("Claim", {
   payload: WorkUnitClaimInput,
   success: WorkUnitClaimResult,
   error: RunnerRpcError
-}), make5("Heartbeat", {
+}), make6("Heartbeat", {
   payload: WorkUnitHeartbeatInput,
   success: WorkUnitHeartbeatResult,
   error: RunnerRpcError
-}), make5("Complete", {
+}), make6("Complete", {
   payload: WorkUnitCompletion,
   error: RunnerRpcError
-}), make5("Release", {
+}), make6("Release", {
   payload: WorkUnitReleaseInput,
   error: RunnerRpcError
-}), make5("Signals", {
+}), make6("Signals", {
   payload: { runnerReplicaId: String4 },
   success: RunnerSignal,
   error: RunnerRpcError,
   stream: true
-}), make5("ReportSteer", {
+}), make6("ReportSteer", {
   payload: { workUnitId: String4, messageId: String4, delivered: Boolean2 },
   success: Void,
   error: RunnerRpcError
-}), make5("AppendTranscript", {
+}), make6("AppendTranscript", {
   payload: { workUnitId: String4, entries: ArraySchema(TranscriptAppendEntry).check(isMaxLength(100)) },
   success: Void,
   error: RunnerRpcError
-}), make5("CreateCheckpointFile", {
+}), make6("CreateCheckpointFile", {
   payload: { lease: ProgramLease, byteSize: Int, sha256: String4 },
   success: Struct({ file: RunFileRecord, upload: optional(RunFileUpload) }),
   error: Union([RunnerRpcError, RunFileRefused])
-}), make5("CheckpointFileParts", {
+}), make6("CheckpointFileParts", {
   payload: { lease: ProgramLease, fileId: String4, partNumbers: ArraySchema(Int) },
   success: Struct({ parts: ArraySchema(RunFilePartUrl) }),
   error: RunnerRpcError
-}), make5("CompleteCheckpointFile", {
+}), make6("CompleteCheckpointFile", {
   payload: { lease: ProgramLease, fileId: String4, parts: optional(ArraySchema(UploadedRunFilePart)) },
   success: RunFileRecord,
   error: RunnerRpcError
-}), make5("SaveCheckpoint", {
+}), make6("SaveCheckpoint", {
   payload: { lease: ProgramLease, checkpoint: StepCheckpoint },
   success: Void,
   error: RunnerRpcError
-}), make5("ResumeCheckpoint", {
+}), make6("ResumeCheckpoint", {
   payload: { lease: ProgramLease },
   success: UndefinedOr(ResumedCheckpoint),
   error: RunnerRpcError
-}), make5("SettledCheckpoints", {
+}), make6("SettledCheckpoints", {
   success: ArraySchema(Struct({
     stepAttemptId: String4,
     ref: optionalKey(String4),
     repoBinding: optionalKey(WorkUnitRepoBinding)
   })),
   error: RunnerRpcError
-}), make5("ForgetCheckpoints", {
+}), make6("ForgetCheckpoints", {
   payload: { stepAttemptIds: ArraySchema(String4) },
   success: Void,
   error: RunnerRpcError
-}), make5("GitCredential", {
+}), make6("GitCredential", {
   payload: { repoBindingId: String4 },
   success: UndefinedOr(Struct({ username: String4, password: String4 })),
   error: RunnerRpcError
-}), make5("Bundle", {
+}), make6("Bundle", {
   payload: { digest: String4 },
   success: Struct({ bundle: String4 }),
   error: RunnerRpcError
-}), make5("SettledRuns", {
+}), make6("SettledRuns", {
   payload: { runIds: ArraySchema(String4) },
   success: ArraySchema(String4),
   error: RunnerRpcError
-}), make5("KnownEvidence", {
+}), make6("KnownEvidence", {
   payload: { lease: ProgramLease, trees: ArraySchema(String4) },
   success: ArraySchema(Struct({ tree: String4, name: String4, command: String4 })),
   error: RunnerRpcError
 })).middleware(RunnerAuthentication) {
 }
 
-class RunnerJournalRpcs extends make6(make5("RecordActivity", {
+class RunnerJournalRpcs extends make7(make6("RecordActivity", {
   payload: { lease: ProgramLease, name: String4, attempt: Int, exit: Json },
   error: RunnerRpcError
-}), make5("DeferredDone", {
+}), make6("DeferredDone", {
   payload: { lease: ProgramLease, name: String4, exit: Json },
   error: RunnerRpcError
-}), make5("ScheduleClock", {
+}), make6("ScheduleClock", {
   payload: { lease: ProgramLease, name: String4, deferredName: String4, durationMillis: Int },
   error: RunnerRpcError
-}), make5("Suspend", { payload: { lease: ProgramLease }, error: RunnerRpcError }), make5("FinishProgram", { payload: { lease: ProgramLease, outcome: ProgramOutcome }, error: RunnerRpcError })).middleware(RunnerAuthentication) {
+}), make6("Suspend", { payload: { lease: ProgramLease }, error: RunnerRpcError }), make6("FinishProgram", { payload: { lease: ProgramLease, outcome: ProgramOutcome }, error: RunnerRpcError })).middleware(RunnerAuthentication) {
 }
 
-class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
+class RunnerCapabilityRpcs extends make7(make6("PutQuestion", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13841,7 +13918,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ questionId: String4 }),
   error: RunnerRpcError
-}), make5("StartAgentStep", {
+}), make6("StartAgentStep", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13857,7 +13934,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ stepAttemptId: String4 }),
   error: RunnerRpcError
-}), make5("StartVerification", {
+}), make6("StartVerification", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13875,7 +13952,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ verificationId: String4 }),
   error: RunnerRpcError
-}), make5("AwaitEvent", {
+}), make6("AwaitEvent", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13891,7 +13968,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     })))
   },
   error: RunnerRpcError
-}), make5("ClaimResource", {
+}), make6("ClaimResource", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13900,7 +13977,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     action: Literals(["claim", "take_over", "let_go"])
   },
   error: RunnerRpcError
-}), make5("AdmitChild", {
+}), make6("AdmitChild", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13910,7 +13987,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ runId: String4 }),
   error: RunnerRpcError
-}), make5("StoreArtifact", {
+}), make6("StoreArtifact", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13922,7 +13999,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ artifactId: String4 }),
   error: RunnerRpcError
-}), make5("RecordNote", {
+}), make6("RecordNote", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13930,7 +14007,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     artifactId: optional(String4)
   },
   error: RunnerRpcError
-}), make5("PerformHostEffect", {
+}), make6("PerformHostEffect", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13958,7 +14035,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: UndefinedOr(Struct({ id: String4, number: String4, url: String4 })),
   error: RunnerRpcError
-}), make5("AlertTask", {
+}), make6("AlertTask", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -13975,7 +14052,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     joined: optionalKey(Struct({ kind: Literals(["run", "recent"]), runId: String4 }))
   }),
   error: RunnerRpcError
-}), make5("ReadTranscripts", {
+}), make6("ReadTranscripts", {
   payload: { lease: ProgramLease, step: String4, days: Int },
   success: Struct({
     runs: ArraySchema(Struct({
@@ -13994,7 +14071,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make5("PipelineStatus", {
+}), make6("PipelineStatus", {
   payload: { lease: ProgramLease, step: String4, changeRequestId: String4 },
   success: Struct({
     head: String4,
@@ -14007,14 +14084,26 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
       logTail: optionalKey(String4)
     })),
     readAt: optionalKey(String4),
-    runnerChecks: optionalKey(ArraySchema(String4))
+    runnerChecks: optionalKey(ArraySchema(String4)),
+    approved: optionalKey(String4),
+    repository: optionalKey(String4),
+    target: optionalKey(Struct({
+      branch: String4,
+      head: String4,
+      jobs: ArraySchema(Struct({
+        name: String4,
+        status: Literals(["running", "success", "failed", "skipped"]),
+        url: optionalKey(String4),
+        logTail: optionalKey(String4)
+      }))
+    }))
   }),
   error: RunnerRpcError
-}), make5("ReportPipeline", {
+}), make6("ReportPipeline", {
   payload: { lease: ProgramLease, step: String4, changeRequestId: String4, verification: String4 },
   success: Struct({ head: String4, status: Literals(["success", "failed"]) }),
   error: RunnerRpcError
-}), make5("ReviewThreads", {
+}), make6("ReviewThreads", {
   payload: { lease: ProgramLease, step: String4, changeRequestId: String4 },
   success: Struct({
     threads: ArraySchema(Struct({
@@ -14026,7 +14115,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make5("OpenChangeRequests", {
+}), make6("OpenChangeRequests", {
   payload: { lease: ProgramLease, step: String4, authors: NonEmptyArray(String4) },
   success: Struct({
     changeRequests: ArraySchema(Struct({
@@ -14040,7 +14129,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make5("OwnChangeRequests", {
+}), make6("OwnChangeRequests", {
   payload: { lease: ProgramLease, step: String4 },
   success: Struct({
     changeRequests: ArraySchema(Struct({
@@ -14053,7 +14142,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     }))
   }),
   error: RunnerRpcError
-}), make5("Propose", {
+}), make6("Propose", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14080,7 +14169,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     matched: optionalKey(Boolean2)
   }),
   error: RunnerRpcError
-}), make5("ReadProject", {
+}), make6("ReadProject", {
   payload: { lease: ProgramLease, step: String4, projectId: String4 },
   success: Struct({
     project: Struct({ id: String4, name: String4 }),
@@ -14103,7 +14192,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     taskChanges: ArraySchema(Struct({ taskKey: String4, title: String4, change: String4, at: String4 }))
   }),
   error: RunnerRpcError
-}), make5("DraftUpdate", {
+}), make6("DraftUpdate", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14118,7 +14207,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ id: String4 }),
   error: RunnerRpcError
-}), make5("CreatePlanTasks", {
+}), make6("CreatePlanTasks", {
   payload: {
     lease: ProgramLease,
     projectId: optionalKey(String4),
@@ -14133,11 +14222,11 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: ArraySchema(Struct({ key: String4, taskId: String4 })),
   error: RunnerRpcError
-}), make5("IntegrationBranch", {
+}), make6("IntegrationBranch", {
   payload: { lease: ProgramLease, repoBindingId: optionalKey(String4) },
   success: Struct({ repoBindingId: String4, branch: String4, revision: String4 }),
   error: RunnerRpcError
-}), make5("MergeChangeRequest", {
+}), make6("MergeChangeRequest", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14150,7 +14239,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     Struct({ status: Literal("moved"), head: String4 })
   ]),
   error: RunnerRpcError
-}), make5("ApproveChangeRequest", {
+}), make6("ApproveChangeRequest", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14165,7 +14254,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
     Struct({ approved: Literal(false), reason: String4 })
   ]),
   error: RunnerRpcError
-}), make5("CloseChangeRequest", {
+}), make6("CloseChangeRequest", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14175,7 +14264,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ closed: Boolean2, head: optionalKey(String4) }),
   error: RunnerRpcError
-}), make5("RerunPipeline", {
+}), make6("RerunPipeline", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14185,7 +14274,7 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ head: String4, pipelines: Int }),
   error: RunnerRpcError
-}), make5("PublishRelease", {
+}), make6("PublishRelease", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14196,14 +14285,14 @@ class RunnerCapabilityRpcs extends make6(make5("PutQuestion", {
   },
   success: Struct({ tag: String4, revision: String4, url: String4 }),
   error: RunnerRpcError
-}), make5("ProgramSecrets", {
+}), make6("ProgramSecrets", {
   payload: { lease: ProgramLease },
   success: Record(String4, String4),
   error: RunnerRpcError
 })).middleware(RunnerAuthentication) {
 }
 
-class RunnerRunFileRpcs extends make6(make5("CreateRunFile", {
+class RunnerRunFileRpcs extends make7(make6("CreateRunFile", {
   payload: {
     lease: ProgramLease,
     step: String4,
@@ -14215,11 +14304,11 @@ class RunnerRunFileRpcs extends make6(make5("CreateRunFile", {
   },
   success: Struct({ file: RunFileRecord, upload: optional(RunFileUpload) }),
   error: Union([RunnerRpcError, RunFileRefused])
-}), make5("RunFileParts", {
+}), make6("RunFileParts", {
   payload: { lease: ProgramLease, fileId: String4, partNumbers: ArraySchema(Int) },
   success: Struct({ parts: ArraySchema(RunFilePartUrl) }),
   error: RunnerRpcError
-}), make5("CompleteRunFile", {
+}), make6("CompleteRunFile", {
   payload: { lease: ProgramLease, fileId: String4, parts: optional(ArraySchema(UploadedRunFilePart)) },
   success: RunFileRecord,
   error: RunnerRpcError
@@ -14308,7 +14397,7 @@ function toStoredSession(token, existingRefreshToken) {
 }
 function startLoopbackServer(input) {
   return gen(function* () {
-    const code = yield* make15();
+    const code = yield* make16();
     const context2 = yield* context();
     const runSyncExit = runSyncExitWith(context2);
     const server = yield* acquireRelease(sync2(() => Bun.serve({
@@ -14848,7 +14937,7 @@ var openConnection = (transport) => gen(function* () {
   let lastId = 0;
   let lost = false;
   const notifications = yield* unbounded2();
-  const ended = yield* make15();
+  const ended = yield* make16();
   const settle = (line) => match(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Response2)), {
     onNone: () => match(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Notification)), {
       onNone: () => void_3,
@@ -14875,7 +14964,7 @@ var openConnection = (transport) => gen(function* () {
     if (lost)
       return yield* new HerdrCoreConnectionLost2({ method });
     const id = ++lastId;
-    const deferred = yield* make15();
+    const deferred = yield* make16();
     pending.set(id, { method, deferred });
     yield* pipe.write(encodeJsonStringSync({ jsonrpc: "2.0", id, method, params }));
     return yield* _await(deferred);
@@ -14949,14 +15038,14 @@ var herdrCoreOver = (transport) => ({
       return { type: "event", terminal: event.value.terminal, kind: event.value.type, data: event.value.data };
     };
     const snapshot = { type: "snapshot", terminals: subscribed.terminals };
-    return concat(make10(snapshot), fromQueue(notifications).pipe(map2(toEvent), filter((event) => event !== undefined)));
+    return concat(make11(snapshot), fromQueue(notifications).pipe(map2(toEvent), filter((event) => event !== undefined)));
   }))
 });
 var spawnedTransport = (env) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const input = yield* unbounded2();
   const encoder = new TextEncoder;
-  const handle = yield* spawner.spawn(make2("herdr-core", ["connect"], {
+  const handle = yield* spawner.spawn(make3("herdr-core", ["connect"], {
     extendEnv: false,
     env,
     stdin: fromQueue(input),
@@ -14987,7 +15076,7 @@ var updateHerdrCore2 = (options) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const env = coreEnv(options);
   const run = (args) => gen(function* () {
-    const handle = yield* spawner.spawn(make2("herdr-core", args, { extendEnv: false, env, stdin: "ignore" }));
+    const handle = yield* spawner.spawn(make3("herdr-core", args, { extendEnv: false, env, stdin: "ignore" }));
     const [stdout, stderr, exitCode] = yield* all3([
       mkString(decodeText(handle.stdout)),
       mkString(decodeText(handle.stderr)),
@@ -15013,7 +15102,7 @@ class CommandFailed2 extends TaggedError("CommandFailed") {
 }
 var runCommand2 = (command, args, options = {}) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
-  const handle = yield* spawner.spawn(make2(command, args, {
+  const handle = yield* spawner.spawn(make3(command, args, {
     stdin: "ignore",
     ...options.cwd === undefined ? undefined : { cwd: options.cwd },
     ...options.env === undefined ? undefined : { extendEnv: true, env: options.env }
@@ -15039,8 +15128,8 @@ var shellOutputTailChars2 = 64 * 1024;
 var runProcess2 = (argv, options) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const [command, ...args] = argv;
-  const handle = yield* spawner.spawn(make2(command, args, {
-    stdin: options.stdin === undefined ? "ignore" : make10(new TextEncoder().encode(options.stdin)),
+  const handle = yield* spawner.spawn(make3(command, args, {
+    stdin: options.stdin === undefined ? "ignore" : make11(new TextEncoder().encode(options.stdin)),
     ...options.cwd === undefined ? undefined : { cwd: options.cwd },
     env: options.extendEnv === false ? { ...options.env } : { ...withoutPreloads2(), ...options.env }
   }));
@@ -15462,4 +15551,4 @@ function checkServices(declaration) {
   return isSome(decoded) ? [...new Set(decoded.value.services)] : undefined;
 }
 
-export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make4, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make5, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make6, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };
+export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };