@kitman-sh/cli 0.10.70 → 0.10.72

package/dist/{chunk-x7g0rzqj.js → chunk-030xsst1.js}

@@ -38,7 +38,7 @@ import {
   assignProperty,
   PipeInspectableProto,
   withFiber,
-  make14,
+  make13,
   strictEqual,
   Tuple,
   Number2,
@@ -58,13 +58,15 @@ import {
   Service2,
   makeUnsafe4,
   empty3,
-  make15,
+  make14,
   add,
   getOrUndefined2,
   getOrUndefinedUnsafe,
-  get4,
+  get3,
   merge3,
   Reference,
+  fromInputUnsafe,
+  isFinite,
   millis,
   seconds,
   toMillis,
@@ -89,9 +91,11 @@ import {
   ConsoleRef,
   succeed3,
   fail4,
+  void_2,
   isSuccess2,
+  isFailure2,
   makeUnsafe5,
-  make16,
+  make15,
   _await,
   fail5,
   isDone,
@@ -99,8 +103,12 @@ import {
   succeed4,
   doneUnsafe,
   TracerTimingEnabled,
+  Scope,
+  makeUnsafe6,
   provide,
+  addFinalizerExit,
   addFinalizer,
+  close,
   succeed5,
   effect,
   effectContext,
@@ -152,6 +160,7 @@ import {
   tapCause,
   retry,
   ignore,
+  ignoreCause,
   orElseSucceed,
   timeout,
   timeoutOrElse,
@@ -163,6 +172,7 @@ import {
   context,
   contextWith,
   provide3,
+  provideContext2,
   serviceOption,
   updateContext,
   provideService,
@@ -173,6 +183,7 @@ import {
   addFinalizer2,
   ensuring2,
   onError,
+  onExit,
   cached,
   interrupt3,
   interruptible,
@@ -184,6 +195,7 @@ import {
   withParentSpan,
   forkScoped,
   runFork,
+  runForkWith,
   runPromise,
   runPromiseWith,
   runSync,
@@ -202,7 +214,7 @@ import {
   decodeEffect,
   decodeUnknownOption,
   decodeOption,
-  make17,
+  make16,
   isSchema,
   optionalKey,
   optional,
@@ -248,11 +260,15 @@ import {
   decodeJsonStringOption,
   encodeJsonStringSync,
   encodePrettyJsonString
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   map,
   makeEquivalence,
   bytes,
+  join,
+  interrupt,
+  getCurrent,
+  runIn,
   BadArgument,
   systemError,
   badArgument,
@@ -274,13 +290,11 @@ import {
   isSink,
   fromChannel,
   drain,
-  make10,
-  get3,
   isStream,
   fromChannel2,
   callback,
   empty2,
-  make11,
+  make10,
   suspend,
   fail2,
   fromQueue,
@@ -306,16 +320,16 @@ import {
   mkArrayBuffer,
   toReadableStreamEffect,
   FileSystem,
-  make12,
+  make11,
   FileTypeId,
   WatchBackend,
   Path,
-  make13,
+  make12,
   option,
   String2,
   optionalEnv,
   harnessesUnsupportedInSrt2
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 import {
   isDateTime,
   Numeric,
@@ -327,7 +341,7 @@ import {
   SecretName,
   SecretScope,
   SecretHosts
-} from "./chunk-rrnee9mk.js";
+} from "./chunk-se79jbha.js";
 import {
   toJsonValue,
   isOneOf,
@@ -341,7 +355,7 @@ import {
   isSymbol,
   isUndefined,
   kindOf
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-nhd7dh79.js";
 import {
   isRedacted,
   make,
@@ -355,8 +369,7 @@ import {
   make3,
   parseFdName,
   fdName
-} from "./chunk-1rry0tsn.js";
-
+} from "./chunk-pyt2zrwc.js";
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Tuple.js
 var makeEquivalence3 = Tuple;
 
@@ -498,7 +511,7 @@ var fromDateUnsafe = (date) => {
   }
   return makeUtc(epochMillis);
 };
-var makeUnsafe6 = (input) => {
+var makeUnsafe7 = (input) => {
   if (isDateTime2(input)) {
     return input;
   } else if (input instanceof Date) {
@@ -518,7 +531,7 @@ var makeUnsafe6 = (input) => {
 var hasZone = (input) => /Z|GMT|[+-]\d{2}$|[+-]\d{2}:?\d{2}$|\]$/.test(input) || /z$|gmt$/i.test(input);
 var minEpochMillis = -8640000000000000 + 12 * 60 * 60 * 1000;
 var maxEpochMillis = 8640000000000000 - 14 * 60 * 60 * 1000;
-var make4 = /* @__PURE__ */ liftThrowable(makeUnsafe6);
+var make4 = /* @__PURE__ */ liftThrowable(makeUnsafe7);
 var now = /* @__PURE__ */ map7(currentTimeMillis, makeUtc);
 var nowUnsafe = () => makeUtc(Date.now());
 var toDateUtc = (self) => new Date(self.epochMilliseconds);
@@ -625,7 +638,7 @@ class Metric$ {
   }
   hook(context) {
     const key = this.key(context);
-    const registry = get4(context, MetricRegistry);
+    const registry = get3(context, MetricRegistry);
     let metadata = registry.get(key);
     if (isUndefined2(metadata)) {
       metadata = this.metadata(this.createHooks());
@@ -634,11 +647,11 @@ class Metric$ {
     return metadata.hooks;
   }
   removeUnsafe(context) {
-    get4(context, MetricRegistry).delete(this.key(context));
+    get3(context, MetricRegistry).delete(this.key(context));
   }
   registerUnsafe(context, hooks) {
     const key = this.key(context);
-    const registry = get4(context, MetricRegistry);
+    const registry = get3(context, MetricRegistry);
     const metadata = this.metadata({
       get: hooks.get,
       update: constVoid,
@@ -654,7 +667,7 @@ class Metric$ {
     };
   }
   key(context) {
-    const extraAttributes = get4(context, CurrentMetricAttributes);
+    const extraAttributes = get3(context, CurrentMetricAttributes);
     if (extraAttributes !== this.#extraAttributes) {
       this.#extraAttributes = extraAttributes;
       const merged = mergeAttributes(this.attributes, extraAttributes);
@@ -906,9 +919,151 @@ var toNumber = (b) => {
   return some(Number(b));
 };
 
+// node_modules/.bun/effect@4.1.2/node_modules/effect/dist/internal/rcRef.js
+var TypeId3 = "~effect/RcRef";
+var stateEmpty = {
+  _tag: "Empty"
+};
+var stateClosed = {
+  _tag: "Closed"
+};
+var variance = {
+  _A: identity,
+  _E: identity
+};
+
+class RcRefImpl {
+  [TypeId3] = variance;
+  pipe() {
+    return pipeArguments(this, arguments);
+  }
+  state = stateEmpty;
+  acquire;
+  context;
+  scope;
+  idleTimeToLive;
+  constructor(acquire, context, scope, idleTimeToLive) {
+    this.acquire = acquire;
+    this.context = context;
+    this.scope = scope;
+    this.idleTimeToLive = idleTimeToLive;
+  }
+}
+var make17 = (options) => withFiber2((fiber) => {
+  const context = fiber.context;
+  const scope = get3(context, Scope);
+  const ref = new RcRefImpl(options.acquire, context, scope, options.idleTimeToLive !== undefined ? fromInputUnsafe(options.idleTimeToLive) : undefined);
+  return as(addFinalizerExit(scope, () => {
+    const state = ref.state;
+    ref.state = stateClosed;
+    if (state._tag === "Acquired")
+      return close(state.scope, void_2);
+    if (state._tag === "Acquiring")
+      return interrupt(state.fiber);
+    return void_3;
+  }), ref);
+});
+var getState = (self, restore) => {
+  switch (self.state._tag) {
+    case "Closed": {
+      return interrupt3;
+    }
+    case "Acquired": {
+      const state = self.state;
+      state.refCount++;
+      return state.fiber ? as(interrupt(state.fiber), state) : succeed6(state);
+    }
+    case "Acquiring": {
+      const state = self.state;
+      state.awaiters++;
+      return awaitAcquiring(self, state, restore);
+    }
+    case "Empty": {
+      const acquiring = {
+        _tag: "Acquiring",
+        fiber: undefined,
+        awaiters: 1,
+        acquired: undefined
+      };
+      self.state = acquiring;
+      const scope = makeUnsafe6();
+      const acquire = provideContext2(self.acquire, add(self.context, Scope, scope)).pipe(flatMap3((value) => {
+        if (self.state !== acquiring) {
+          return interrupt3;
+        }
+        const state = {
+          _tag: "Acquired",
+          value,
+          scope,
+          fiber: undefined,
+          refCount: acquiring.awaiters,
+          invalidated: false
+        };
+        self.state = state;
+        acquiring.acquired = state;
+        return succeed6(state);
+      }), onExit((exit) => {
+        if (isSuccess2(exit))
+          return void_3;
+        if (self.state === acquiring)
+          self.state = stateEmpty;
+        return close(scope, exit);
+      }));
+      acquiring.fiber = runForkWith(getCurrent().context)(acquire);
+      return awaitAcquiring(self, acquiring, restore);
+    }
+  }
+};
+var awaitAcquiring = (self, acquiring, restore) => onExit(restore(join(acquiring.fiber)), (exit) => {
+  const acquired = acquiring.acquired;
+  if (acquired !== undefined) {
+    return isFailure2(exit) ? release(self, acquired) : void_3;
+  }
+  if (--acquiring.awaiters > 0 || self.state !== acquiring)
+    return void_3;
+  self.state = stateEmpty;
+  return interrupt(acquiring.fiber);
+});
+var get4 = (self_) => {
+  const self = self_;
+  return uninterruptibleMask2((restore) => flatMap3(scope2, (scope) => flatMap3(getState(self, restore), (state) => as(addFinalizerExit(scope, () => release(self, state)), state.value))));
+};
+var release = (self, state) => {
+  state.refCount--;
+  if (state.refCount > 0) {
+    return void_3;
+  }
+  const idleTimeToLive = self.idleTimeToLive;
+  if (idleTimeToLive === undefined || state.invalidated) {
+    if (self.state === state) {
+      self.state = stateEmpty;
+    }
+    return close(state.scope, void_2);
+  } else if (!isFinite(idleTimeToLive)) {
+    return void_3;
+  }
+  state.fiber = uninterruptibleMask2((restore) => flatMap3(restore(sleep(idleTimeToLive)), () => {
+    if (self.state === state && state.refCount === 0) {
+      self.state = stateEmpty;
+      return ignoreCause(close(state.scope, void_2), {
+        log: "Unhandled",
+        message: "Unhandled error in RcRef finalizer"
+      });
+    }
+    return void_3;
+  })).pipe(ensuring2(sync2(() => {
+    state.fiber = undefined;
+  })), runForkWith(self.context), runIn(self.scope));
+  return void_3;
+};
+
+// node_modules/.bun/effect@4.1.2/node_modules/effect/dist/RcRef.js
+var make18 = make17;
+var get5 = get4;
+
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/DateTime.js
-var makeUnsafe = makeUnsafe6;
-var make18 = make4;
+var makeUnsafe = makeUnsafe7;
+var make19 = make4;
 var now2 = now;
 var nowUnsafe2 = nowUnsafe;
 var toDateUtc2 = toDateUtc;
@@ -1227,7 +1382,7 @@ var taskkill = (childProcess, onExit = () => {}) => {
     windowsHide: true
   }, onExit);
 };
-var make19 = /* @__PURE__ */ gen(function* () {
+var make20 = /* @__PURE__ */ gen(function* () {
   const fs = yield* FileSystem;
   const path = yield* Path;
   const resolveWorkingDirectory = fnUntraced(function* (options) {
@@ -1756,7 +1911,7 @@ var make19 = /* @__PURE__ */ gen(function* () {
   });
   return make2(spawnCommand);
 });
-var layer5 = /* @__PURE__ */ effect(ChildProcessSpawner, make19);
+var layer5 = /* @__PURE__ */ effect(ChildProcessSpawner, make20);
 var flattenCommand = (command) => {
   const commands = [];
   const pipeOptions = [];
@@ -2240,7 +2395,7 @@ var writeFile2 = (path, data, options) => callback3((resume, signal) => {
     resume(fail7(handleBadArgument("writeFile")(err)));
   }
 });
-var makeFileSystem = /* @__PURE__ */ map8(/* @__PURE__ */ serviceOption(WatchBackend), (backend) => make12({
+var makeFileSystem = /* @__PURE__ */ map8(/* @__PURE__ */ serviceOption(WatchBackend), (backend) => make11({
   access: access2,
   chmod: chmod2,
   chown: chown2,
@@ -2300,15 +2455,15 @@ var fileUrlOps = (windows) => ({
     })
   })
 });
-var layerPosix = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
+var layerPosix = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make12({
   ...NodePath.posix,
   .../* @__PURE__ */ fileUrlOps(false)
 }));
-var layerWin32 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
+var layerWin32 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make12({
   ...NodePath.win32,
   .../* @__PURE__ */ fileUrlOps(true)
 }));
-var layer7 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
+var layer7 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make12({
   ...NodePath,
   .../* @__PURE__ */ fileUrlOps(undefined)
 }));
@@ -2317,10 +2472,10 @@ var layer7 = /* @__PURE__ */ succeed5(Path)(/* @__PURE__ */ make13({
 var layer2 = layer7;
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Stdio.js
-var TypeId3 = "~effect/Stdio";
-var Stdio = /* @__PURE__ */ Service2(TypeId3);
-var make20 = (options) => ({
-  [TypeId3]: TypeId3,
+var TypeId4 = "~effect/Stdio";
+var Stdio = /* @__PURE__ */ Service2(TypeId4);
+var make21 = (options) => ({
+  [TypeId4]: TypeId4,
   stdinIsTerminal: succeed6(false),
   stdoutIsTerminal: succeed6(false),
   stderrIsTerminal: succeed6(false),
@@ -2328,7 +2483,7 @@ var make20 = (options) => ({
 });
 
 // node_modules/.bun/@effect+platform-node-shared@4.1.2+edf248c88a527e3e/node_modules/@effect/platform-node-shared/dist/NodeStdio.js
-var layer8 = /* @__PURE__ */ succeed5(Stdio, /* @__PURE__ */ make20({
+var layer8 = /* @__PURE__ */ succeed5(Stdio, /* @__PURE__ */ make21({
   args: /* @__PURE__ */ sync2(() => process.argv.slice(2)),
   stdinIsTerminal: /* @__PURE__ */ sync2(() => process.stdin.isTTY === true),
   stdoutIsTerminal: /* @__PURE__ */ sync2(() => process.stdout.isTTY === true),
@@ -2528,7 +2683,7 @@ var makeUuid = (bytes, randomBytes, format) => {
   const uuid = bytes(randomBytes(16));
   return format === "bytes" ? uuid : stringify(uuid);
 };
-var make21 = (randomBytes) => {
+var make22 = (randomBytes) => {
   const randomBytesChecked = (size) => {
     checkSize(size);
     return randomBytes(size);
@@ -2562,13 +2717,13 @@ var fillRandom = (crypto2, size) => {
   }
   return bytes;
 };
-var layerWebCrypto = /* @__PURE__ */ effect(SecureRandom, /* @__PURE__ */ WebCrypto.use((crypto2) => succeed6(make21((size) => fillRandom(crypto2, size)))));
+var layerWebCrypto = /* @__PURE__ */ effect(SecureRandom, /* @__PURE__ */ WebCrypto.use((crypto2) => succeed6(make22((size) => fillRandom(crypto2, size)))));
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/Cookies.js
-var TypeId4 = "~effect/http/Cookies";
+var TypeId5 = "~effect/http/Cookies";
 var CookieTypeId = "~effect/http/Cookies/Cookie";
 var Proto2 = {
-  [TypeId4]: TypeId4,
+  [TypeId5]: TypeId5,
   ...BaseProto,
   toJSON() {
     return {
@@ -2747,14 +2902,14 @@ var tryDecodeURIComponent = (str) => {
 };
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/Headers.js
-var TypeId5 = /* @__PURE__ */ Symbol.for("~effect/http/Headers");
+var TypeId6 = /* @__PURE__ */ Symbol.for("~effect/http/Headers");
 var Proto3 = /* @__PURE__ */ Object.defineProperties(/* @__PURE__ */ Object.create(null), {
-  [TypeId5]: {
-    value: TypeId5
+  [TypeId6]: {
+    value: TypeId6
   },
   [symbolRedactable]: {
     value(context) {
-      return redact2(this, get4(context, CurrentRedactedNames));
+      return redact2(this, get3(context, CurrentRedactedNames));
     }
   },
   toJSON: {
@@ -2779,7 +2934,7 @@ var Proto3 = /* @__PURE__ */ Object.defineProperties(/* @__PURE__ */ Object.crea
     value: BaseProto[NodeInspectSymbol]
   }
 });
-var make22 = (input) => Object.assign(Object.create(Proto3), input);
+var make23 = (input) => Object.assign(Object.create(Proto3), input);
 var Equivalence2 = /* @__PURE__ */ makeEquivalence(/* @__PURE__ */ strictEqual());
 var empty = /* @__PURE__ */ Object.create(Proto3);
 var fromInput = (input) => {
@@ -2804,21 +2959,21 @@ var fromInput = (input) => {
 };
 var fromRecordUnsafe = (input) => Object.setPrototypeOf(input, Proto3);
 var set = /* @__PURE__ */ dual(3, (self, key, value) => {
-  const out = make22(self);
+  const out = make23(self);
   out[key.toLowerCase()] = value;
   return out;
 });
-var setAll = /* @__PURE__ */ dual(2, (self, headers) => make22({
+var setAll = /* @__PURE__ */ dual(2, (self, headers) => make23({
   ...self,
   ...fromInput(headers)
 }));
 var merge = /* @__PURE__ */ dual(2, (self, headers) => {
-  const out = make22(self);
+  const out = make23(self);
   Object.assign(out, headers);
   return out;
 });
 var remove2 = /* @__PURE__ */ dual(2, (self, key) => {
-  const out = make22(self);
+  const out = make23(self);
   delete out[key.toLowerCase()];
   return out;
 });
@@ -2875,18 +3030,18 @@ var bodyDecoder = /* @__PURE__ */ new TextDecoder("utf-8", {
 var fromBody = (bytes) => new URLSearchParams(bodyDecoder.decode(bytes).replace(/^\?/, "%3F"));
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/UrlParams.js
-var TypeId6 = "~effect/http/UrlParams";
-var isUrlParams = (u) => hasProperty(u, TypeId6);
+var TypeId7 = "~effect/http/UrlParams";
+var isUrlParams = (u) => hasProperty(u, TypeId7);
 var Proto4 = {
   ...PipeInspectableProto,
-  [TypeId6]: TypeId6,
+  [TypeId7]: TypeId7,
   [Symbol.iterator]() {
     return this.params[Symbol.iterator]();
   },
   [symbolRedactable](context) {
     return {
       _id: "UrlParams",
-      params: Object.fromEntries(redact3(this, get4(context, CurrentRedactedNames2)))
+      params: Object.fromEntries(redact3(this, get3(context, CurrentRedactedNames2)))
     };
   },
   toJSON() {
@@ -2899,7 +3054,7 @@ var Proto4 = {
     return array(this.params.flat());
   }
 };
-var make23 = (params) => {
+var make24 = (params) => {
   const self = Object.create(Proto4);
   self.params = params;
   return self;
@@ -2918,7 +3073,7 @@ var fromInput2 = (input) => {
       out.push(parsed[i]);
     }
   }
-  return make23(out);
+  return make24(out);
 };
 var fromInputNested = (input) => {
   const entries = typeof input[Symbol.iterator] === "function" ? fromIterable(input) : Object.entries(input);
@@ -2942,9 +3097,9 @@ var fromInputNested = (input) => {
   return out;
 };
 var coerce = (value) => isRedacted(value) ? value : String(value);
-var Equivalence3 = /* @__PURE__ */ make14((a, b) => arrayEquivalence(a.params, b.params));
+var Equivalence3 = /* @__PURE__ */ make13((a, b) => arrayEquivalence(a.params, b.params));
 var arrayEquivalence = /* @__PURE__ */ makeEquivalence2(/* @__PURE__ */ makeEquivalence3([/* @__PURE__ */ strictEqual(), /* @__PURE__ */ asEquivalence()]));
-var empty4 = /* @__PURE__ */ make23([]);
+var empty4 = /* @__PURE__ */ make24([]);
 var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
   const params = fromInput2(input).params.slice();
   const keys = new Set;
@@ -2956,7 +3111,7 @@ var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
       continue;
     params.push(self.params[i]);
   }
-  return make23(params);
+  return make24(params);
 });
 var redact3 = /* @__PURE__ */ dual(2, (self, key) => {
   const patterns = Array.isArray(key) ? key : [key];
@@ -3011,13 +3166,13 @@ var decodeQueryKey = (key) => {
     return key;
   }
 };
-var currentRedactedNames = () => get4(globalThis[currentFiberTypeId]?.context ?? empty3(), CurrentRedactedNames2);
+var currentRedactedNames = () => get3(globalThis[currentFiberTypeId]?.context ?? empty3(), CurrentRedactedNames2);
 var CurrentRedactedNames2 = /* @__PURE__ */ Reference("effect/http/UrlParams/CurrentRedactedNames", {
   defaultValue: () => ["X-Amz-Signature", "X-Amz-Credential", "X-Amz-Security-Token", "AWSAccessKeyId", "Signature", "sig", "X-Goog-Signature"]
 });
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Terminal.js
-var TypeId7 = "~effect/Terminal";
+var TypeId8 = "~effect/Terminal";
 var QuitErrorTypeId = "~effect/Terminal/QuitError";
 
 class QuitError extends (/* @__PURE__ */ Error3("QuitError")({
@@ -3026,14 +3181,14 @@ class QuitError extends (/* @__PURE__ */ Error3("QuitError")({
   [QuitErrorTypeId] = QuitErrorTypeId;
 }
 var Terminal = /* @__PURE__ */ Service2("effect/Terminal");
-var make24 = (impl) => Terminal.of({
+var make25 = (impl) => Terminal.of({
   ...impl,
-  [TypeId7]: TypeId7
+  [TypeId8]: TypeId8
 });
 
 // node_modules/.bun/@effect+platform-node-shared@4.1.2+edf248c88a527e3e/node_modules/@effect/platform-node-shared/dist/NodeTerminal.js
 import * as readline from "readline";
-var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQuit) {
+var make26 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQuit) {
   const stdin = process.stdin;
   const stdout = process.stdout;
   const lines = yield* make9();
@@ -3047,7 +3202,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
   };
   stdin.once("end", onStdinEnd);
   yield* addFinalizer2(() => sync2(() => stdin.off("end", onStdinEnd)));
-  const rlRef = yield* make10({
+  const rlRef = yield* make18({
     acquire: acquireRelease(sync2(() => {
       const rl = readline.createInterface({
         input: stdin,
@@ -3086,7 +3241,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
     if (stdin.isTTY)
       stdin.setRawMode(enabled);
   });
-  const rawModeRef = yield* make10({
+  const rawModeRef = yield* make18({
     acquire: acquireRelease(setRawMode(true), () => setRawMode(false)),
     idleTimeToLive: "10 millis"
   });
@@ -3137,14 +3292,14 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
     if (inputEnded) {
       handleEnd();
     } else {
-      yield* get3(rlRef);
-      yield* get3(rawModeRef);
+      yield* get5(rlRef);
+      yield* get5(rawModeRef);
       stdin.once("end", handleEnd);
     }
     return queue;
   });
   const readLine = suspend3(() => poll(lines).pipe(flatMap3(match({
-    onNone: () => scoped(andThen2(get3(rlRef), take(lines))),
+    onNone: () => scoped(andThen2(get5(rlRef), take(lines))),
     onSome: succeed6
   })), mapError2(() => new QuitError({}))));
   const display = (prompt) => uninterruptible(callback3((resume) => {
@@ -3155,7 +3310,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
       cause: err
     }))));
   }));
-  return make24({
+  return make25({
     columns,
     rows,
     size,
@@ -3164,7 +3319,7 @@ var make25 = /* @__PURE__ */ fnUntraced(function* (shouldQuit = defaultShouldQui
     display
   });
 });
-var layer10 = /* @__PURE__ */ effect(Terminal, /* @__PURE__ */ make25(defaultShouldQuit));
+var layer10 = /* @__PURE__ */ effect(Terminal, /* @__PURE__ */ make26(defaultShouldQuit));
 function defaultShouldQuit(input) {
   const key = input.key;
   return key.name === "escape" || key.ctrl && (key.name === "c" || key.name === "d");
@@ -3191,7 +3346,7 @@ function toDate(input) {
   return toDateUtc2(makeUnsafe(input));
 }
 function parseDate(input) {
-  return getOrUndefined(map4(make18(input), toDateUtc2));
+  return getOrUndefined(map4(make19(input), toDateUtc2));
 }
 function toIso(input) {
   return formatIso(makeUnsafe(input));
@@ -5942,6 +6097,8 @@ var RunEvidence = Struct({
   durationMs: Int.check(isGreaterThanOrEqualTo(0)),
   outputTail: String4,
   fileIds: optionalKey(ArraySchema(String4)),
+  skippedSinceBaseline: optionalKey(ArraySchema(String4)),
+  newNotRun: optionalKey(ArraySchema(String4)),
   recordedAt: Timestamp
 });
 var ApprovedVerification = Struct({
@@ -6493,6 +6650,74 @@ var NetworkHostQuery = Struct({
   repoBindingId: optionalKey(Id)
 });
 
+// packages/core/src/test-report.ts
+var isTestReportName = (name) => /junit.*\.xml$/iu.test(name);
+var maxSkippedTests = 1e4;
+var maxRanDigests = 1e5;
+var TestId = String4.check(isMinLength(1), isMaxLength(1000));
+var CheckTests = Struct({
+  reports: Int.check(isGreaterThanOrEqualTo(0)),
+  passed: Int.check(isGreaterThanOrEqualTo(0)),
+  failed: Int.check(isGreaterThanOrEqualTo(0)),
+  skipped: Int.check(isGreaterThanOrEqualTo(0)),
+  skippedTests: ArraySchema(TestId).check(isMaxLength(maxSkippedTests)),
+  ranDigests: ArraySchema(String4.check(isMaxLength(16))).check(isMaxLength(maxRanDigests))
+});
+var entities = new Map([
+  ["amp", "&"],
+  ["lt", "<"],
+  ["gt", ">"],
+  ["quot", '"'],
+  ["apos", "'"]
+]);
+var codePoint = (whole, value) => value <= 1114111 ? String.fromCodePoint(value) : whole;
+var decoded = (text) => text.replaceAll(/&(#x[\da-f]+|#\d+|\w+);/giu, (whole, entity) => {
+  if (entity.startsWith("#x") || entity.startsWith("#X"))
+    return codePoint(whole, Number.parseInt(entity.slice(2), 16));
+  if (entity.startsWith("#"))
+    return codePoint(whole, Number(entity.slice(1)));
+  return entities.get(entity) ?? whole;
+});
+var attribute = (attributes, name) => {
+  const found = new RegExp(`(?:^|\\s)${name}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`, "u").exec(attributes);
+  return found === null ? undefined : decoded(found[1] ?? found[2] ?? "");
+};
+var junitTestCases = (xml) => [...xml.matchAll(/<testcase\b([^>]*?)(?:\/>|>([\s\S]*?)<\/testcase>)/gu)].map(([, attributes = "", body = ""]) => {
+  const id = [attribute(attributes, "file"), attribute(attributes, "classname"), attribute(attributes, "name")].filter((part) => part !== undefined && part !== "").join(" > ");
+  return {
+    id: id.slice(0, 1000) || "(unnamed test)",
+    status: /<(?:failure|error)\b/u.test(body) ? "failed" : /<skipped\b/u.test(body) ? "skipped" : "passed"
+  };
+});
+var fnv1a = (text, seed) => {
+  let hash = seed;
+  for (let index = 0;index < text.length; index++) {
+    hash ^= text.charCodeAt(index);
+    hash = Math.imul(hash, 16777619) >>> 0;
+  }
+  return hash.toString(16).padStart(8, "0");
+};
+var testDigest = (id) => `${fnv1a(id, 2166136261)}${fnv1a(id, 84696351)}`;
+var checkTests = (reports) => {
+  const rank = { passed: 0, skipped: 1, failed: 2 };
+  const tests = new Map;
+  for (const found of reports.flatMap(junitTestCases)) {
+    const before = tests.get(found.id);
+    if (before === undefined || rank[found.status] > rank[before])
+      tests.set(found.id, found.status);
+  }
+  const of = (status) => [...tests].flatMap(([id, is]) => is === status ? [id] : []);
+  const skipped = of("skipped").sort();
+  return {
+    reports: reports.length,
+    passed: of("passed").length,
+    failed: of("failed").length,
+    skipped: skipped.length,
+    skippedTests: skipped.slice(0, maxSkippedTests),
+    ranDigests: [...of("passed"), ...of("failed")].map(testDigest).sort().slice(0, maxRanDigests)
+  };
+};
+
 // packages/core/src/work-unit.ts
 var WorkUnitLease = Struct({
   leaseOwnerId: Id,
@@ -6677,7 +6902,8 @@ var CheckEvidence = Struct({
   exitCode: optionalKey(Int),
   durationMs: Int.check(isGreaterThanOrEqualTo(0)),
   outputTail: String4.check(isMaxLength(8000)),
-  fileIds: optionalKey(ArraySchema(String4).check(isMaxLength(51)))
+  fileIds: optionalKey(ArraySchema(String4).check(isMaxLength(51))),
+  tests: optionalKey(CheckTests)
 });
 var TreeEvidence = Struct({
   revision: String4.check(isMinLength(1), isMaxLength(240)),
@@ -9208,11 +9434,11 @@ var TranscriptSearchResult = Struct({
   total: Int
 });
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpBody.js
-var TypeId8 = "~effect/http/HttpBody";
+var TypeId9 = "~effect/http/HttpBody";
 class Proto5 {
-  [TypeId8];
+  [TypeId9];
   constructor() {
-    this[TypeId8] = TypeId8;
+    this[TypeId9] = TypeId9;
   }
   [NodeInspectSymbol]() {
     return this.toJSON();
@@ -9291,7 +9517,7 @@ var buffer = globalThis.Buffer;
 var encodeText = buffer !== undefined ? (body) => buffer.from(body, "utf8") : (body) => encoder.encode(body);
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpClientError.js
-var TypeId9 = "~effect/http/HttpClientError";
+var TypeId10 = "~effect/http/HttpClientError";
 class HttpClientError extends (/* @__PURE__ */ TaggedError("HttpClientError")) {
   constructor(props) {
     if ("cause" in props.reason) {
@@ -9303,7 +9529,7 @@ class HttpClientError extends (/* @__PURE__ */ TaggedError("HttpClientError")) {
       super(props);
     }
   }
-  [TypeId9] = TypeId9;
+  [TypeId10] = TypeId10;
   get request() {
     return this.reason.request;
   }
@@ -9407,7 +9633,7 @@ class EmptyBodyError extends (/* @__PURE__ */ TaggedError("EmptyBodyError")) {
   }
 }
 
-class HttpClientErrorSchema extends (/* @__PURE__ */ Error3(TypeId9)({
+class HttpClientErrorSchema extends (/* @__PURE__ */ Error3(TypeId10)({
   _tag: /* @__PURE__ */ tag("HttpError"),
   kind: /* @__PURE__ */ Literals(["EncodeError", "DecodeError", "TransportError", "InvalidUrlError", "StatusCodeError", "EmptyBodyError"]),
   cause: /* @__PURE__ */ optional(/* @__PURE__ */ Defect())
@@ -9440,7 +9666,7 @@ var updateContentLength = (headers, body) => {
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/Url.js
 class UrlError extends (/* @__PURE__ */ TaggedError("UrlError")) {
 }
-var make26 = (url, params, hash) => try_({
+var make27 = (url, params, hash) => try_({
   try: () => {
     const urlInstance = new URL(url, baseUrl());
     for (let i = 0;i < params.params.length; i++) {
@@ -9471,10 +9697,10 @@ var baseUrl = () => {
 };
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpClientRequest.js
-var TypeId10 = "~effect/http/HttpClientRequest";
-var isHttpClientRequest = (u) => hasProperty(u, TypeId10);
+var TypeId11 = "~effect/http/HttpClientRequest";
+var isHttpClientRequest = (u) => hasProperty(u, TypeId11);
 var Proto6 = {
-  [TypeId10]: TypeId10,
+  [TypeId11]: TypeId11,
   ...BaseProto,
   toJSON() {
     return {
@@ -9560,7 +9786,7 @@ var setBody = /* @__PURE__ */ dual(2, (self, body) => {
 });
 var bodyUint8Array = /* @__PURE__ */ dual((args) => isHttpClientRequest(args[0]), (self, body, contentType) => setBody(self, uint8Array(body, contentType)));
 function toUrl(self) {
-  const r = make26(self.url, self.urlParams, getOrUndefined(self.hash));
+  const r = make27(self.url, self.urlParams, getOrUndefined(self.hash));
   if (isSuccess(r)) {
     return some(r.success);
   }
@@ -9568,7 +9794,7 @@ function toUrl(self) {
 }
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpIncomingMessage.js
-var TypeId11 = "~effect/http/HttpIncomingMessage";
+var TypeId12 = "~effect/http/HttpIncomingMessage";
 var schemaBodyJson = (schema, options) => {
   const decode = decodeEffect(toCodecJson(schema));
   const decodeJson = options?.reviver === undefined ? undefined : decodeEffect(fromJsonString(toCodecJson(schema), options));
@@ -9587,7 +9813,7 @@ var WebSourceSymbol = "~effect/http/HttpClientResponse/WebSource";
 var getWebSource = (self) => self[WebSourceSymbol]?.();
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpClientResponse.js
-var TypeId12 = "~effect/http/HttpClientResponse";
+var TypeId13 = "~effect/http/HttpClientResponse";
 var fromWeb = (request, source) => new WebHttpClientResponse(request, source);
 var filterStatusOk = (self) => self.status >= 200 && self.status < 300 ? succeed6(self) : fail7(new HttpClientError({
   reason: new StatusCodeError({
@@ -9598,16 +9824,16 @@ var filterStatusOk = (self) => self.status >= 200 && self.status < 300 ? succeed
 }));
 
 class WebHttpClientResponse extends Class {
-  [TypeId11];
   [TypeId12];
+  [TypeId13];
   request;
   source;
   constructor(request, source) {
     super();
     this.request = request;
     this.source = source;
-    this[TypeId11] = TypeId11;
     this[TypeId12] = TypeId12;
+    this[TypeId13] = TypeId13;
   }
   toJSON() {
     return inspect(this, {
@@ -9779,7 +10005,7 @@ var addHeaderAttributes = (span, phase, headers, filter, redactedNames) => {
 };
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpClient.js
-var TypeId13 = "~effect/http/HttpClient";
+var TypeId14 = "~effect/http/HttpClient";
 var HttpClient = /* @__PURE__ */ Service2("effect/HttpClient");
 var accessor = (method) => (...args) => flatMap3(HttpClient, (client) => client[method](...args));
 var execute = /* @__PURE__ */ accessor("execute");
@@ -9796,7 +10022,7 @@ var makeWith2 = (postprocess, preprocess) => {
   return self;
 };
 var Proto7 = {
-  [TypeId13]: TypeId13,
+  [TypeId14]: TypeId14,
   pipe() {
     return pipeArguments(this, arguments);
   },
@@ -9810,10 +10036,10 @@ var Proto7 = {
     return this.execute(make5(fullMethod)(url, options));
   }]))
 };
-var make27 = (f) => makeWith2((effect) => flatMap3(effect, (request) => withFiber2((fiber) => {
+var make28 = (f) => makeWith2((effect) => flatMap3(effect, (request) => withFiber2((fiber) => {
   const scopedController = scopedRequests.get(request);
   const controller = scopedController ?? new AbortController;
-  const urlResult = make26(request.url, request.urlParams, getOrUndefined(request.hash));
+  const urlResult = make27(request.url, request.urlParams, getOrUndefined(request.hash));
   if (isFailure(urlResult)) {
     return fail7(new HttpClientError({
       reason: new InvalidUrlError({
@@ -9947,8 +10173,8 @@ class InterruptibleResponse {
     this.original = original;
     this.controller = controller;
   }
+  [TypeId13] = TypeId13;
   [TypeId12] = TypeId12;
-  [TypeId11] = TypeId11;
   applyInterrupt(effect) {
     return suspend3(() => {
       responseRegistry.unregister(this.original);
@@ -10046,7 +10272,7 @@ var detectStreamBodySupport = () => {
     return false;
   }
 };
-var fetch2 = /* @__PURE__ */ make27((request, url, signal, fiber) => {
+var fetch2 = /* @__PURE__ */ make28((request, url, signal, fiber) => {
   if (request.headers.upgrade !== undefined) {
     return fail7(new HttpClientError({
       reason: new TransportError({
@@ -10137,10 +10363,10 @@ var fetch2 = /* @__PURE__ */ make27((request, url, signal, fiber) => {
 });
 var layer4 = /* @__PURE__ */ layerMergedContext(/* @__PURE__ */ succeed6(fetch2));
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/socket/Socket.js
-var TypeId14 = "~effect/socket/Socket";
+var TypeId15 = "~effect/socket/Socket";
 var Socket = /* @__PURE__ */ Service2("effect/socket/Socket");
-var make28 = (options) => Socket.of({
-  [TypeId14]: TypeId14,
+var make29 = (options) => Socket.of({
+  [TypeId15]: TypeId15,
   reader: options.reader,
   writer: options.writer
 });
@@ -10463,7 +10689,7 @@ var fromWebSocket = (acquire, options) => withFiber2((fiber) => {
     write,
     writeAll
   });
-  return succeed6(make28({
+  return succeed6(make29({
     reader,
     writer
   }));
@@ -13300,7 +13526,7 @@ function getStreamSchemas(schema) {
 }
 var schema = /* @__PURE__ */ declare(isStream);
 function Stream(success, error) {
-  return make17(schema.ast, {
+  return make16(schema.ast, {
     [StreamSchemaTypeId]: StreamSchemaTypeId,
     success,
     error
@@ -13308,9 +13534,9 @@ function Stream(success, error) {
 }
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/rpc/Rpc.js
-var TypeId15 = "~effect/rpc/Rpc";
+var TypeId16 = "~effect/rpc/Rpc";
 var Proto8 = {
-  [TypeId15]: TypeId15,
+  [TypeId16]: TypeId16,
   pipe() {
     return pipeArguments(this, arguments);
   },
@@ -13477,7 +13703,7 @@ class WorkerUnknownError extends (/* @__PURE__ */ Error3("effect/workers/WorkerE
 var WorkerErrorReason = /* @__PURE__ */ Union([WorkerSpawnError, WorkerSendError, WorkerReceiveError, WorkerUnknownError]);
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/rpc/RpcClientError.js
-var TypeId16 = "~effect/rpc/RpcClientError";
+var TypeId17 = "~effect/rpc/RpcClientError";
 
 class RpcClientDefect extends (/* @__PURE__ */ Error3("effect/rpc/RpcClientError/RpcClientDefect")({
   _tag: /* @__PURE__ */ tag("RpcClientDefect"),
@@ -13486,11 +13712,11 @@ class RpcClientDefect extends (/* @__PURE__ */ Error3("effect/rpc/RpcClientError
 })) {
 }
 
-class RpcClientError extends (/* @__PURE__ */ Error3(TypeId16)({
+class RpcClientError extends (/* @__PURE__ */ Error3(TypeId17)({
   _tag: /* @__PURE__ */ tag("RpcClientError"),
   reason: /* @__PURE__ */ Union([WorkerErrorReason, SocketErrorReason, HttpClientErrorSchema, RpcClientDefect])
 })) {
-  [TypeId16] = TypeId16;
+  [TypeId17] = TypeId17;
   get message() {
     return `${this.reason._tag}: ${this.reason.message}`;
   }
@@ -13610,7 +13836,7 @@ var RpcGroupProto = {
     });
   },
   annotateRpcs(service, value) {
-    return this.annotateRpcsMerge(make15(service, value));
+    return this.annotateRpcsMerge(make14(service, value));
   },
   annotateMerge(context) {
     return makeProto2({
@@ -13638,7 +13864,7 @@ var make7 = (...rpcs) => makeProto2({
   annotations: empty3()
 });
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/rpc/RpcMiddleware.js
-var TypeId17 = "~effect/rpc/RpcMiddleware";
+var TypeId18 = "~effect/rpc/RpcMiddleware";
 var Service = () => (id, options) => {
   const limit = getStackTraceLimit();
   let creationError;
@@ -13656,7 +13882,7 @@ var Service = () => (id, options) => {
       return creationError?.stack;
     }
   });
-  ServiceClass_[TypeId17] = TypeId17;
+  ServiceClass_[TypeId18] = TypeId18;
   ServiceClass_.error = options?.error ?? Never;
   ServiceClass_.requiredForClient = options?.requiredForClient ?? false;
   return ServiceClass;
@@ -14247,7 +14473,7 @@ var ProgramRpcs = RunnerJournalRpcs.merge(RunnerCapabilityRpcs, RunnerRunFileRpc
 var RunnerRpcs = RunnerReplicaRpcs.merge(RunnerJournalRpcs, RunnerCapabilityRpcs, RunnerRunFileRpcs);
 
 // apps/cli/src/oauth.ts
-var Scope = "openid profile email offline_access kitman:cli";
+var Scope2 = "openid profile email offline_access kitman:cli";
 var CallbackPath = "/auth/callback";
 
 class OAuthCallbackTimeout extends TaggedError("OAuthCallbackTimeout") {
@@ -14266,7 +14492,7 @@ function buildAuthorizeUrl(input) {
   url.searchParams.set("response_type", "code");
   url.searchParams.set("client_id", input.clientId);
   url.searchParams.set("redirect_uri", input.redirectUri);
-  url.searchParams.set("scope", Scope);
+  url.searchParams.set("scope", Scope2);
   url.searchParams.set("code_challenge", input.codeChallenge);
   url.searchParams.set("code_challenge_method", "S256");
   url.searchParams.set("state", input.state);
@@ -14326,7 +14552,7 @@ function toStoredSession(token, existingRefreshToken) {
 }
 function startLoopbackServer(input) {
   return gen(function* () {
-    const code = yield* make16();
+    const code = yield* make15();
     const context2 = yield* context();
     const runSyncExit = runSyncExitWith(context2);
     const server = yield* acquireRelease(sync2(() => Bun.serve({
@@ -14866,7 +15092,7 @@ var openConnection = (transport) => gen(function* () {
   let lastId = 0;
   let lost = false;
   const notifications = yield* unbounded2();
-  const ended = yield* make16();
+  const ended = yield* make15();
   const settle = (line) => match(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Response2)), {
     onNone: () => match(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Notification)), {
       onNone: () => void_3,
@@ -14893,7 +15119,7 @@ var openConnection = (transport) => gen(function* () {
     if (lost)
       return yield* new HerdrCoreConnectionLost2({ method });
     const id = ++lastId;
-    const deferred = yield* make16();
+    const deferred = yield* make15();
     pending.set(id, { method, deferred });
     yield* pipe.write(encodeJsonStringSync({ jsonrpc: "2.0", id, method, params }));
     return yield* _await(deferred);
@@ -14967,7 +15193,7 @@ var herdrCoreOver = (transport) => ({
       return { type: "event", terminal: event.value.terminal, kind: event.value.type, data: event.value.data };
     };
     const snapshot = { type: "snapshot", terminals: subscribed.terminals };
-    return concat(make11(snapshot), fromQueue(notifications).pipe(map2(toEvent), filter((event) => event !== undefined)));
+    return concat(make10(snapshot), fromQueue(notifications).pipe(map2(toEvent), filter((event) => event !== undefined)));
   }))
 });
 var spawnedTransport = (env) => gen(function* () {
@@ -15058,7 +15284,7 @@ var runProcess2 = (argv, options) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const [command, ...args] = argv;
   const handle = yield* spawner.spawn(make3(command, args, {
-    stdin: options.stdin === undefined ? "ignore" : make11(new TextEncoder().encode(options.stdin)),
+    stdin: options.stdin === undefined ? "ignore" : make10(new TextEncoder().encode(options.stdin)),
     ...options.cwd === undefined ? undefined : { cwd: options.cwd },
     env: options.extendEnv === false ? { ...options.env } : { ...withoutPreloads2(), ...options.env }
   }));
@@ -15480,4 +15706,4 @@ function checkServices(declaration) {
   return isSome(decoded) ? [...new Set(decoded.value.services)] : undefined;
 }
 
-export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };
+export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };