@kitman-sh/cli 0.10.70 → 0.10.71

package/dist/{chunk-2wkdq54x.js → chunk-4wqjxfbv.js}

@@ -37,10 +37,10 @@ import {
   AgentHarnessIds,
   sha2562,
   runCommand2
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 import {
   NpmRegistry
-} from "./chunk-pq9bkyj6.js";
+} from "./chunk-hr9vd6dj.js";
 
 // packages/agent-runtime/src/config-convergence.ts
 var writeAgentEnvironmentConfigFile2 = fnUntraced(function* (file, content, keep = {}) {

package/dist/{chunk-h0sw8tks.js → chunk-5n121vsj.js}

@@ -19,13 +19,13 @@ import {
   RunnerReplicaRpcs,
   RunnerRunFileRpcs,
   ProgramRpcs
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 import {
   layerJson,
   make4,
   withHeaders,
   layerProtocolSocket
-} from "./chunk-fgecj3t0.js";
+} from "./chunk-cmatdpfy.js";
 
 // packages/live/src/rpc/runner-client.ts
 var proxiedWebSocket = (proxy) => succeed5(WebSocketConstructor)((target) => {

package/dist/{chunk-x7g0rzqj.js → chunk-9e452fhe.js}

@@ -5942,6 +5942,8 @@ var RunEvidence = Struct({
   durationMs: Int.check(isGreaterThanOrEqualTo(0)),
   outputTail: String4,
   fileIds: optionalKey(ArraySchema(String4)),
+  skippedSinceBaseline: optionalKey(ArraySchema(String4)),
+  newNotRun: optionalKey(ArraySchema(String4)),
   recordedAt: Timestamp
 });
 var ApprovedVerification = Struct({
@@ -6493,6 +6495,74 @@ var NetworkHostQuery = Struct({
   repoBindingId: optionalKey(Id)
 });
 
+// packages/core/src/test-report.ts
+var isTestReportName = (name) => /junit.*\.xml$/iu.test(name);
+var maxSkippedTests = 1e4;
+var maxRanDigests = 1e5;
+var TestId = String4.check(isMinLength(1), isMaxLength(1000));
+var CheckTests = Struct({
+  reports: Int.check(isGreaterThanOrEqualTo(0)),
+  passed: Int.check(isGreaterThanOrEqualTo(0)),
+  failed: Int.check(isGreaterThanOrEqualTo(0)),
+  skipped: Int.check(isGreaterThanOrEqualTo(0)),
+  skippedTests: ArraySchema(TestId).check(isMaxLength(maxSkippedTests)),
+  ranDigests: ArraySchema(String4.check(isMaxLength(16))).check(isMaxLength(maxRanDigests))
+});
+var entities = new Map([
+  ["amp", "&"],
+  ["lt", "<"],
+  ["gt", ">"],
+  ["quot", '"'],
+  ["apos", "'"]
+]);
+var codePoint = (whole, value) => value <= 1114111 ? String.fromCodePoint(value) : whole;
+var decoded = (text) => text.replaceAll(/&(#x[\da-f]+|#\d+|\w+);/giu, (whole, entity) => {
+  if (entity.startsWith("#x") || entity.startsWith("#X"))
+    return codePoint(whole, Number.parseInt(entity.slice(2), 16));
+  if (entity.startsWith("#"))
+    return codePoint(whole, Number(entity.slice(1)));
+  return entities.get(entity) ?? whole;
+});
+var attribute = (attributes, name) => {
+  const found = new RegExp(`(?:^|\\s)${name}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`, "u").exec(attributes);
+  return found === null ? undefined : decoded(found[1] ?? found[2] ?? "");
+};
+var junitTestCases = (xml) => [...xml.matchAll(/<testcase\b([^>]*?)(?:\/>|>([\s\S]*?)<\/testcase>)/gu)].map(([, attributes = "", body = ""]) => {
+  const id = [attribute(attributes, "file"), attribute(attributes, "classname"), attribute(attributes, "name")].filter((part) => part !== undefined && part !== "").join(" > ");
+  return {
+    id: id.slice(0, 1000) || "(unnamed test)",
+    status: /<(?:failure|error)\b/u.test(body) ? "failed" : /<skipped\b/u.test(body) ? "skipped" : "passed"
+  };
+});
+var fnv1a = (text, seed) => {
+  let hash = seed;
+  for (let index = 0;index < text.length; index++) {
+    hash ^= text.charCodeAt(index);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+};
+var testDigest = (id) => `${fnv1a(id, 2166136261)}${fnv1a(id, 84696351)}`;
+var checkTests = (reports) => {
+  const rank = { passed: 0, skipped: 1, failed: 2 };
+  const tests = new Map;
+  for (const found of reports.flatMap(junitTestCases)) {
+    const before = tests.get(found.id);
+    if (before === undefined || rank[found.status] > rank[before])
+      tests.set(found.id, found.status);
+  }
+  const of = (status) => [...tests].flatMap(([id, is]) => is === status ? [id] : []);
+  const skipped = of("skipped").sort();
+  return {
+    reports: reports.length,
+    passed: of("passed").length,
+    failed: of("failed").length,
+    skipped: skipped.length,
+    skippedTests: skipped.slice(0, maxSkippedTests),
+    ranDigests: [...of("passed"), ...of("failed")].map(testDigest).sort().slice(0, maxRanDigests)
+  };
+};
+
 // packages/core/src/work-unit.ts
 var WorkUnitLease = Struct({
   leaseOwnerId: Id,
@@ -6677,7 +6747,8 @@ var CheckEvidence = Struct({
   exitCode: optionalKey(Int),
   durationMs: Int.check(isGreaterThanOrEqualTo(0)),
   outputTail: String4.check(isMaxLength(8000)),
-  fileIds: optionalKey(ArraySchema(String4).check(isMaxLength(51)))
+  fileIds: optionalKey(ArraySchema(String4).check(isMaxLength(51))),
+  tests: optionalKey(CheckTests)
 });
 var TreeEvidence = Struct({
   revision: String4.check(isMinLength(1), isMaxLength(240)),
@@ -15480,4 +15551,4 @@ function checkServices(declaration) {
   return isSome(decoded) ? [...new Set(decoded.value.services)] : undefined;
 }
 
-export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };
+export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };

package/dist/{chunk-fgecj3t0.js → chunk-cmatdpfy.js}

@@ -123,7 +123,7 @@ import {
   ParseOptions,
   RpcClientDefect,
   RpcClientError
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/workers/Transferable.js
 class Collector extends (/* @__PURE__ */ Service2()("effect/workers/Transferable/Collector")) {

package/dist/{chunk-e5dq8dbz.js → chunk-g4xsa9ks.js}

@@ -182,6 +182,8 @@ import {
   verificationNetworkAllowlist,
   programNetworkHosts,
   canonicalSha256,
+  isTestReportName,
+  checkTests,
   MeasureSample,
   catchUpPathLimit,
   createId,
@@ -225,7 +227,7 @@ import {
   installCommand,
   checkServicesFile,
   checkServices
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 import {
   join,
   interrupt,
@@ -281,8 +283,8 @@ import {
   applyAgentEnvironmentMaterialization2,
   isPathWithin2,
   skillIdentity2
-} from "./chunk-2wkdq54x.js";
-import"./chunk-pq9bkyj6.js";
+} from "./chunk-4wqjxfbv.js";
+import"./chunk-hr9vd6dj.js";
 import {
   sliceBytes2,
   maxLineBytes2,
@@ -302,8 +304,8 @@ import {
   rpcRunFiles,
   programHostsEnv,
   undeclaredHostsEnv
-} from "./chunk-1j1jh211.js";
-import"./chunk-h0sw8tks.js";
+} from "./chunk-x1zqfxve.js";
+import"./chunk-5n121vsj.js";
 import {
   nextInt
 } from "./chunk-q3c7vmby.js";
@@ -311,7 +313,7 @@ import {
   ChildProcessSpawner,
   make3
 } from "./chunk-1rry0tsn.js";
-import"./chunk-fgecj3t0.js";
+import"./chunk-cmatdpfy.js";
 
 // packages/core/src/sync-kit.ts
 import { createHash } from "crypto";
@@ -6363,6 +6365,13 @@ var checkFileKeeper = (work, runFiles, storage) => {
     return kept.flat();
   }).pipe(catch_((error) => as(logWarning("check_run_files_not_kept", `${input.check}: ${error.message}`), [])));
 };
+var reportedTests = (filesDir) => gen(function* () {
+  const fs = yield* FileSystem;
+  const path = yield* Path;
+  const names = (yield* regularFiles(filesDir)).filter(isTestReportName);
+  const reports = yield* forEach(names, (name) => fs.readFileString(path.join(filesDir, name)).pipe(map8((text) => [text]), orElseSucceed(() => [])));
+  return checkTests(reports.flat());
+}).pipe(orElseSucceed(() => checkTests([])));
 
 class ServicesUnavailable extends TaggedError("ServicesUnavailable") {
   get message() {
@@ -6577,6 +6586,7 @@ var runChecks = (worktree, checks, tree, known, run, keeper, services) => gen(fu
       ...sink === undefined ? undefined : { onOutput: (chunk) => sink.writeAll(chunk) }
     });
     const durationMs = (yield* currentTimeMillis) - startedAt;
+    const tests = yield* reportedTests(filesDir);
     const fileIds = keeper === undefined ? undefined : yield* keeper.keep({ check: check.name, prefix: keeper.prefix, output, filesDir });
     return {
       name: check.name,
@@ -6585,7 +6595,8 @@ var runChecks = (worktree, checks, tree, known, run, keeper, services) => gen(fu
       ...ran.exitCode === undefined ? undefined : { exitCode: ran.exitCode },
       durationMs,
       outputTail: redactedOutputTail(ran.output),
-      ...fileIds === undefined ? undefined : { fileIds }
+      ...fileIds === undefined ? undefined : { fileIds },
+      tests
     };
   }).pipe(scoped));
 });

package/dist/{chunk-9hr71e7c.js → chunk-gxnpdpjz.js}

@@ -4,9 +4,9 @@ import {
   runnerRpcUrl2,
   makeRunnerRpcClient2,
   makeProgramRpcClient2
-} from "./chunk-h0sw8tks.js";
-import"./chunk-fgecj3t0.js";
-import"./chunk-x7g0rzqj.js";
+} from "./chunk-5n121vsj.js";
+import"./chunk-cmatdpfy.js";
+import"./chunk-9e452fhe.js";
 import"./chunk-rrnee9mk.js";
 import"./chunk-v01c0k6j.js";
 import"./chunk-dk0ftqwg.js";

package/dist/{chunk-f8qqmcgy.js → chunk-h89p59p6.js}

@@ -26,15 +26,15 @@ import {
   tomlKeyPath2,
   kitmanSkillEntry,
   isPathWithin2
-} from "./chunk-2wkdq54x.js";
+} from "./chunk-4wqjxfbv.js";
 import {
   instructionsStart,
   instructionsEnd,
   renderMcpServer,
   materializeKitSetup,
   tomlInline
-} from "./chunk-x7g0rzqj.js";
-import"./chunk-pq9bkyj6.js";
+} from "./chunk-9e452fhe.js";
+import"./chunk-hr9vd6dj.js";
 import"./chunk-1rry0tsn.js";
 
 // packages/agent-runtime/src/kit-setup-sync.ts

package/dist/{chunk-pq9bkyj6.js → chunk-hr9vd6dj.js}

@@ -38,7 +38,7 @@ import {
   get2,
   layer4,
   KitDigest
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 
 // packages/core/src/npm-registry.ts
 var KitManifest = Struct({

package/dist/{chunk-8w7d269h.js → chunk-tkmp48ha.js}

@@ -12,7 +12,7 @@ import {
   herdrCoreLayer2,
   herdrCoreTransportLayer2,
   updateHerdrCore2
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 import"./chunk-dk0ftqwg.js";
 import"./chunk-d3ksv8y1.js";
 export {

package/dist/{chunk-7jh6atr0.js → chunk-vs10kwdr.js}

@@ -35,14 +35,6 @@ import {
 } from "./chunk-d3ksv8y1.js";
 import"./chunk-rrnee9mk.js";
 import"./chunk-v01c0k6j.js";
-import {
-  decodeText,
-  mkString,
-  FileSystem,
-  Path,
-  withDefault,
-  String2
-} from "./chunk-dk0ftqwg.js";
 import {
   SecureRandom,
   layerWebCrypto,
@@ -54,23 +46,31 @@ import {
   layer4,
   kitmanMcpServer,
   RunnerRpcProtocolVersion
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
+import {
+  decodeText,
+  mkString,
+  FileSystem,
+  Path,
+  withDefault,
+  String2
+} from "./chunk-dk0ftqwg.js";
 import {
   Packument,
   tarballMatches
-} from "./chunk-pq9bkyj6.js";
-import"./chunk-h0sw8tks.js";
+} from "./chunk-hr9vd6dj.js";
+import"./chunk-5n121vsj.js";
 import {
   AgentDeclaration,
   KitDeclarations,
   describeFlag,
   Described
-} from "./chunk-1j1jh211.js";
+} from "./chunk-x1zqfxve.js";
 import {
   ChildProcessSpawner,
   make3
 } from "./chunk-1rry0tsn.js";
-import"./chunk-fgecj3t0.js";
+import"./chunk-cmatdpfy.js";
 
 // packages/sdk/src/build/index.ts
 class DependencyInstallFailed extends TaggedError2()("DependencyInstallFailed", {

package/dist/{chunk-1j1jh211.js → chunk-x1zqfxve.js}

@@ -105,7 +105,7 @@ import {
   KitDigest,
   KitSetup,
   RunnerRpcError
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 import {
   runForEach,
   FileSystem
@@ -493,7 +493,9 @@ var EvidenceCheck = Struct({
   durationMs: Finite,
   evidenceId: String4,
   outputTail: optionalKey(String4),
-  suggested: optionalKey(Boolean2)
+  suggested: optionalKey(Boolean2),
+  skippedSinceBaseline: optionalKey(ArraySchema(String4)),
+  newNotRun: optionalKey(ArraySchema(String4))
 });
 var VerifyResult = Struct({
   revision: String4,

package/dist/{chunk-dena9bpd.js → chunk-y7p921rs.js}

@@ -197,7 +197,7 @@ import {
   harnessNames,
   herdrRunnerCapabilities2,
   declaredChecks
-} from "./chunk-x7g0rzqj.js";
+} from "./chunk-9e452fhe.js";
 import {
   Id
 } from "./chunk-rrnee9mk.js";
@@ -504,10 +504,10 @@ var checkDockerImageSetting = pinnedImage;
 var checkRegistryImageSetting = pinnedImage;
 var herdrCoreSession = (runnerId, personal) => personal ? undefined : `kitman-${sha2562(runnerId).slice(0, 16)}`;
 var OpenHerdrCore = Reference("kitman/cli/OpenHerdrCore", {
-  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-8w7d269h.js")), ({ HerdrCore, herdrCoreLayer }) => provide3(service(HerdrCore), herdrCoreLayer(options)))
+  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-tkmp48ha.js")), ({ HerdrCore, herdrCoreLayer }) => provide3(service(HerdrCore), herdrCoreLayer(options)))
 });
 var UpdateHerdrCore = Reference("kitman/cli/UpdateHerdrCore", {
-  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-8w7d269h.js")), (module) => module.updateHerdrCore(options))
+  defaultValue: () => (options) => flatMap3(promise(() => import("./chunk-tkmp48ha.js")), (module) => module.updateHerdrCore(options))
 });
 var herdrCoreMissing = (error) => {
   if (isTagged(error, "HerdrCoreMissing"))
@@ -733,7 +733,7 @@ var syncTargets = (harness) => gen(function* () {
 });
 var syncKits = (input) => gen(function* () {
   const fs = yield* FileSystem;
-  const { syncKitSetup } = yield* promise(() => import("./chunk-f8qqmcgy.js"));
+  const { syncKitSetup } = yield* promise(() => import("./chunk-h89p59p6.js"));
   const harnesses = yield* syncTargets(input.harness);
   const chain = yield* input.client.getKitChain(input.workspaceId);
   for (const { name, problem } of chain.skipped)
@@ -1651,7 +1651,7 @@ var package_default = {
 };
 
 // apps/cli/src/scaffold.ts
-var cliVersion = "0.10.70";
+var cliVersion = "0.10.71";
 var packageJson = (name, scaffold) => `${JSON.stringify({
   name,
   private: true,
@@ -1901,7 +1901,7 @@ var Usage = [
   "Every run, loop, agent, verify, constraint, secret, claim, deploy, dev and kit command takes --json."
 ].join(`
 `);
-var agentRuntime = promise(() => import("./chunk-e5dq8dbz.js"));
+var agentRuntime = promise(() => import("./chunk-g4xsa9ks.js"));
 var TuiLauncher = Reference("kitman/cli/TuiLauncher", {
   defaultValue: () => gen(function* () {
     const tui = yield* tryPromise({
@@ -2756,7 +2756,7 @@ var SandboxHostProbe = Reference("kitman/cli/SandboxHostProbe", {
 });
 var OpenRunnerRpc = Reference("kitman/cli/OpenRunnerRpc", {
   defaultValue: () => (options) => gen(function* () {
-    const { makeRunnerRpcClient, runnerRpcUrl, runnerWebSocketProtocol } = yield* promise(() => import("./chunk-9hr71e7c.js"));
+    const { makeRunnerRpcClient, runnerRpcUrl, runnerWebSocketProtocol } = yield* promise(() => import("./chunk-gxnpdpjz.js"));
     return yield* makeRunnerRpcClient({
       runnerId: options.runnerId,
       bearer: options.bearer,
@@ -3140,7 +3140,7 @@ function mcpCommand(args) {
     if (command.action === "run") {
       if (command.args.length > 0)
         return yield* new CliError({ message: `Unknown command: ${args.join(" ")}` });
-      const { runMcpServerCommand } = yield* promise(() => import("./chunk-8ttdzwa3.js"));
+      const { runMcpServerCommand } = yield* promise(() => import("./chunk-zwec6t49.js"));
       return yield* runMcpServerCommand({ flags: command.flags });
     }
     if (command.action !== "setup")
@@ -3728,7 +3728,16 @@ var answerInTerminal = (client, runId, questions) => forEach(questions, (questio
   yield* client.answerRun(runId, { value: reply.answer, question: question.id, idempotencyKey: key }).pipe(andThen2(log(`Answered ${question.stepKey}: ${reply.answer}`)), catchIf((error) => error instanceof KitmanClientError && error.code === "question_not_open", (error) => log(`Not answered: ${question.stepKey} was settled while it waited here. ${error.responseMessage ?? error.message}`)));
 }), { discard: true });
 var claimLines = (step) => step.output === undefined ? [] : isJsonObject(toJsonValue(step.output)) ? Object.entries(toJsonObject(step.output)).map(([field, value]) => `  Claim ${field}: ${isString(value) ? value : encodeJsonStringSync(value)}`) : [`  Claim: ${encodeJsonStringSync(toJsonValue(step.output))}`];
-var evidenceLines = (evidence) => evidence.map((entry) => `Evidence ${entry.step} ${entry.name}: ${entry.status}${entry.preExisting ? " (pre-existing)" : ""} at tree ${entry.tree} (${entry.revision}, ${entry.durationMs}ms)`);
+var evidenceLines = (evidence) => evidence.flatMap((entry) => {
+  const neverRan = [
+    ...(entry.newNotRun ?? []).map((test) => `  Never ran: ${test} (new)`),
+    ...(entry.skippedSinceBaseline ?? []).map((test) => `  Never ran: ${test} (ran on the base branch)`)
+  ];
+  return [
+    `Evidence ${entry.step} ${entry.name}: ${entry.status}${entry.preExisting ? " (pre-existing)" : ""}${neverRan.length === 0 ? "" : `, ${neverRan.length} test${neverRan.length === 1 ? "" : "s"} never ran`} at tree ${entry.tree} (${entry.revision}, ${entry.durationMs}ms)`,
+    ...neverRan
+  ];
+});
 var steerOutcome = (client, runId, sent) => gen(function* () {
   for (let tries = 0;tries < 20; tries++) {
     const steer = (yield* client.showRun(runId)).steers.find((entry) => entry.id === sent.id);
@@ -4342,9 +4351,9 @@ function claimCommand(args) {
     }
   });
 }
-var KitWriter = map8(promise(() => import("./chunk-7jh6atr0.js")), (build) => build.writeKit);
+var KitWriter = map8(promise(() => import("./chunk-vs10kwdr.js")), (build) => build.writeKit);
 var KitBuilder = Reference("kitman/cli/KitBuilder", {
-  defaultValue: () => (directory) => flatMap3(promise(() => import("./chunk-7jh6atr0.js")), (build) => build.buildKit(directory))
+  defaultValue: () => (directory) => flatMap3(promise(() => import("./chunk-vs10kwdr.js")), (build) => build.buildKit(directory))
 });
 var uploadKit = (client, workspaceId, built) => gen(function* () {
   yield* client.uploadKitBundle(workspaceId, built.digest, { bundle: encode2(built.bundle) });