@kitman-sh/cli 0.10.71 → 0.10.72

package/dist/{chunk-g4xsa9ks.js → chunk-7g4e5fsj.js}

@@ -5,7 +5,7 @@ import {
   isObject,
   isJsonObject,
   isString
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-nhd7dh79.js";
 import {
   pipeArguments,
   dual,
@@ -42,7 +42,7 @@ import {
   isFailure2,
   hasInterrupts,
   makeUnsafe5,
-  make16,
+  make15,
   _await,
   fail5,
   isDoneUnsafe,
@@ -156,11 +156,11 @@ import {
   encodePrettyJsonString,
   decodeJsonStringSync,
   encodeUnknownJsonStringSync
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   Id,
   secretReference
-} from "./chunk-rrnee9mk.js";
+} from "./chunk-se79jbha.js";
 import {
   currentTimeMillis,
   SecureRandom,
@@ -227,7 +227,7 @@ import {
   installCommand,
   checkServicesFile,
   checkServices
-} from "./chunk-9e452fhe.js";
+} from "./chunk-030xsst1.js";
 import {
   join,
   interrupt,
@@ -236,7 +236,7 @@ import {
   unbounded2,
   offer,
   makeUnsafe3,
-  make11,
+  make10,
   fromQueue,
   fromPubSub,
   map2,
@@ -267,7 +267,7 @@ import {
   writeSrtSettings2,
   srtStepArgv2,
   srtArgv2
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 import {
   writeAgentEnvironmentConfigFile2,
   readManifestSkillPaths2,
@@ -283,8 +283,18 @@ import {
   applyAgentEnvironmentMaterialization2,
   isPathWithin2,
   skillIdentity2
-} from "./chunk-4wqjxfbv.js";
-import"./chunk-hr9vd6dj.js";
+} from "./chunk-hxm3bvpn.js";
+import"./chunk-290se4bt.js";
+import {
+  egressAllowed,
+  writeSecretRegistry,
+  secretRefusalLog,
+  appendSecretRefusals,
+  parseSecretRefusals,
+  secretFilter2,
+  opaqueTunnelRefusal2,
+  isOpaqueConnectReason2
+} from "./chunk-gngg8j56.js";
 import {
   sliceBytes2,
   maxLineBytes2,
@@ -292,28 +302,23 @@ import {
   decodedOption2,
   decoded2,
   readOpencode2
-} from "./chunk-csbf77zs.js";
-import {
-  writeSecretRegistry,
-  secretRefusalLog,
-  parseSecretRefusals
-} from "./chunk-1w81w56v.js";
+} from "./chunk-7sm45hhc.js";
 import {
   uploadRunFile,
   programLease,
   rpcRunFiles,
   programHostsEnv,
   undeclaredHostsEnv
-} from "./chunk-x1zqfxve.js";
-import"./chunk-5n121vsj.js";
+} from "./chunk-7wenq6ew.js";
+import"./chunk-cefprsjj.js";
 import {
   nextInt
-} from "./chunk-q3c7vmby.js";
+} from "./chunk-b63rssdn.js";
 import {
   ChildProcessSpawner,
   make3
-} from "./chunk-1rry0tsn.js";
-import"./chunk-cmatdpfy.js";
+} from "./chunk-pyt2zrwc.js";
+import"./chunk-cj3ef3pv.js";
 
 // packages/core/src/sync-kit.ts
 import { createHash } from "crypto";
@@ -2594,6 +2599,82 @@ var prepareDockerHome = (input) => gen(function* () {
   }
 });
 
+// packages/agent-runtime/src/docker-secret-proxy.ts
+import { createHttpProxyServer } from "@anthropic-ai/sandbox-runtime/dist/sandbox/http-proxy.js";
+import { isLoopbackName } from "@anthropic-ai/sandbox-runtime/dist/sandbox/address.js";
+import { createMitmCA, disposeMitmCA } from "@anthropic-ai/sandbox-runtime/dist/sandbox/mitm-ca.js";
+import { canonicalizeHost } from "@anthropic-ai/sandbox-runtime/dist/sandbox/parent-proxy.js";
+import {
+  createResolvedAddressGuard
+} from "@anthropic-ai/sandbox-runtime/dist/sandbox/resolved-address-guard.js";
+import { chmodSync } from "fs";
+import { isIP } from "net";
+import { networkInterfaces } from "os";
+class SecretProxyUnavailable extends TaggedError("SecretProxyUnavailable") {
+}
+var dockerSecretProxySocket = (registryDirectory) => `${registryDirectory}/proxy.sock`;
+var anyName = "kitman-target.invalid";
+var dockerBridge = (name) => name === "docker0" || name === "docker_gwbridge" || name.startsWith("br-");
+var dockerNetworkSubnets = (interfaces = networkInterfaces()) => Object.entries(interfaces).flatMap(([name, addresses]) => dockerBridge(name) ? (addresses ?? []).flatMap(({ cidr }) => cidr === null ? [] : [cidr]) : []);
+var runnerAddresses = (interfaces) => {
+  let current;
+  try {
+    current = interfaces();
+  } catch {
+    return [];
+  }
+  const own = Object.values(current).flatMap((addresses) => (addresses ?? []).map(({ address }) => address));
+  return [...own, ...dockerNetworkSubnets(current)];
+};
+var runnerAddressGuard = (options = {}, interfaces = networkInterfaces) => createResolvedAddressGuard({ ...options, localAddresses: () => runnerAddresses(interfaces) });
+var namesRunner = (guard, host, port) => {
+  const canonical = canonicalizeHost(host) ?? host;
+  if (isLoopbackName(canonical))
+    return !guard.permits(anyName, "127.0.0.1", port);
+  return isIP(canonical) !== 0 && !guard.permits(anyName, canonical, port);
+};
+var startDockerSecretProxy = (input) => gen(function* () {
+  const ca = yield* acquireRelease(try_2({ try: () => createMitmCA({}), catch: (cause) => new SecretProxyUnavailable({ cause }) }), (ca) => ignore(tryPromise(() => disposeMitmCA(ca))));
+  const { network, registryFile } = input;
+  const guard = runnerAddressGuard(input.addressGuard);
+  const server = createHttpProxyServer({
+    filter: (port, host, _socket, _command, explain) => {
+      if (namesRunner(guard, host, port)) {
+        explain?.("the Runner's own address or one of its docker networks");
+        return false;
+      }
+      if (network === "open" || egressAllowed(network.hosts, host, port))
+        return true;
+      explain?.("host not allowed");
+      return false;
+    },
+    lookupFor: (port) => guard.lookupFor(port),
+    mitmCA: ca,
+    filterRequest: secretFilter2(registryFile),
+    refuseOpaqueTunnels: true,
+    onFilterRequestDenied: ({ method, url, reason }) => {
+      if (method !== "CONNECT" || !isOpaqueConnectReason2(reason))
+        return;
+      try {
+        appendSecretRefusals(registryFile, [{ host: url, reason: opaqueTunnelRefusal2 }]);
+      } catch {}
+    },
+    ...input.upstreamCA === undefined ? undefined : { tlsTerminateUpstreamCA: input.upstreamCA }
+  });
+  yield* acquireRelease(callback3((resume) => {
+    server.once("error", (cause) => resume(fail7(new SecretProxyUnavailable({ cause }))));
+    server.listen(input.socket, () => resume(void_3));
+  }), () => sync2(() => server.close()));
+  yield* try_2({
+    try: () => chmodSync(input.socket, 438),
+    catch: (cause) => new SecretProxyUnavailable({ cause })
+  });
+  return { socket: input.socket, trustBundle: ca.trustBundlePath };
+});
+
+// packages/agent-runtime/src/docker-sandbox.ts
+import { CA_TRUST_VARS } from "@anthropic-ai/sandbox-runtime/dist/sandbox/sandbox-utils.js";
+
 // packages/agent-runtime/src/helper-scripts.ts
 import { fileURLToPath } from "url";
 var helperScriptPath = (name) => gen(function* () {
@@ -2611,9 +2692,14 @@ var RunnerLabel = "kitman.runner";
 var StepAttemptLabel = "kitman.step-attempt";
 var EgressProxyImage = "oven/bun@sha256:4cf82f5686b196504fe119db3fcd9185b191f82ece82c40680e597228ec6070a";
 var egressProxyAddress = "http://kitman-egress:3128";
+var relayedSocket = "/kitman/proxy.sock";
+var trustBundle = "/kitman/trust.pem";
 
 class ContainerError extends TaggedError("ContainerError") {
 }
+
+class SecretProxyUnreachable extends TaggedError("SecretProxyUnreachable") {
+}
 var imagePull = { timeout: "30 minutes" };
 var dockerContainerRunner = map8(ChildProcessSpawner, (spawner) => {
   const docker = (args, options = {}) => runCommand2("docker", args, options).pipe(mapError2((error) => new ContainerError({ message: error.message })), provideService(ChildProcessSpawner, spawner));
@@ -2629,6 +2715,7 @@ var dockerContainerRunner = map8(ChildProcessSpawner, (spawner) => {
       input.name,
       ...labelArgs(input.labels),
       ...input.network === undefined ? [] : ["--network", input.network],
+      ...input.alias === undefined ? [] : ["--network-alias", input.alias],
       ...input.user === undefined ? [] : ["--user", input.user],
       ...input.mounts.flatMap((mount) => [
         "--volume",
@@ -2678,26 +2765,49 @@ var startDockerSandbox = (input) => gen(function* () {
     [StepAttemptLabel, input.attemptId]
   ];
   const agent = `kitman-agent-${id}`;
-  const network = input.policy.network === "open" ? undefined : `kitman-agent-net-${id}`;
+  const { secretProxy } = input;
+  const network = input.policy.network === "open" && secretProxy === undefined ? undefined : `kitman-agent-net-${id}`;
   yield* acquireRelease(void_3, () => containers.removeLabelled([StepAttemptLabel, input.attemptId]));
-  if (input.policy.network !== "open" && network !== undefined) {
+  if (network !== undefined) {
     const proxy = `kitman-egress-${id}`;
+    const script = {
+      source: yield* helperScriptPath("egress-proxy.ts"),
+      target: "/kitman/egress-proxy.ts",
+      readOnly: true
+    };
     yield* containers.createInternalNetwork({ name: network, labels });
-    yield* containers.run({
-      name: proxy,
-      image: input.docker.proxyImage ?? EgressProxyImage,
-      labels,
-      mounts: [
-        {
-          source: yield* helperScriptPath("egress-proxy.ts"),
-          target: "/kitman/egress-proxy.ts",
-          readOnly: true
-        }
-      ],
-      env: {},
-      command: ["bun", "/kitman/egress-proxy.ts", input.policy.network.hosts.join(",")]
-    });
-    yield* containers.connect({ network, container: proxy, alias: "kitman-egress" });
+    const image = input.docker.proxyImage ?? EgressProxyImage;
+    if (secretProxy === undefined) {
+      yield* containers.run({
+        name: proxy,
+        image,
+        labels,
+        mounts: [script],
+        env: {},
+        command: ["bun", script.target, input.policy.network === "open" ? "" : input.policy.network.hosts.join(",")]
+      });
+      yield* containers.connect({ network, container: proxy, alias: "kitman-egress" });
+    } else {
+      yield* containers.run({
+        name: proxy,
+        image,
+        labels,
+        network,
+        alias: "kitman-egress",
+        mounts: [script, { source: secretProxy.socket, target: relayedSocket }],
+        env: {},
+        command: ["bun", script.target, "--relay", relayedSocket]
+      });
+      const probe = yield* containers.exec({
+        container: proxy,
+        workdir: "/",
+        env: {},
+        command: ["bun", script.target, "--probe", relayedSocket],
+        timeout: "1 minute"
+      });
+      if (probe.exitCode !== 0)
+        return yield* new SecretProxyUnreachable({ output: probe.output });
+    }
     for (const service of input.services ?? [])
       yield* acquireRelease(containers.connect({ network, ...service }), () => containers.disconnect({ network, container: service.container }));
   }
@@ -2709,7 +2819,8 @@ var startDockerSandbox = (input) => gen(function* () {
     ...input.docker.user === undefined ? undefined : { user: input.docker.user },
     mounts: [
       ...input.policy.writablePaths.map((writable) => ({ source: writable, target: writable })),
-      ...(input.readOnlyPaths ?? []).map((readable) => ({ source: readable, target: readable, readOnly: true }))
+      ...(input.readOnlyPaths ?? []).map((readable) => ({ source: readable, target: readable, readOnly: true })),
+      ...secretProxy === undefined ? [] : [{ source: secretProxy.trustBundle, target: trustBundle, readOnly: true }]
     ],
     workdir: input.workspace,
     env: {
@@ -2722,7 +2833,8 @@ var startDockerSandbox = (input) => gen(function* () {
         http_proxy: egressProxyAddress,
         NO_PROXY: "localhost,127.0.0.1",
         no_proxy: "localhost,127.0.0.1"
-      }
+      },
+      ...secretProxy === undefined ? undefined : Object.fromEntries(CA_TRUST_VARS.map((name) => [name, trustBundle]))
     },
     command: ["sleep", "infinity"]
   });
@@ -3179,12 +3291,14 @@ var runAttempt = (request, options) => gen(function* () {
   const { attempt } = request.attempt;
   const workspace = request.workspace.path;
   const secrets = request.launch.secrets ?? {};
-  if (Object.keys(secrets).length > 0 && request.sandbox.backend === "docker")
-    return failed("secrets_need_srt", "A docker Step cannot take Secrets yet: its egress proxy cannot swap their references for values, and Kitman puts no value in a sandbox. Run this Step in srt.");
   const bound = yield* result(requireSecretHosts(request.launch.secrets, request.launch.secretDestinations));
   if (isFailure(bound))
     return failed(bound.failure.reason, bound.failure.summary);
-  const referenced = request.sandbox.backend === "srt" ? secretReferences(secrets, request.launch.secretDestinations ?? {}) : undefined;
+  const referenced = request.sandbox.backend === "host" ? undefined : secretReferences(secrets, request.launch.secretDestinations ?? {});
+  const holdSecrets = (initial) => stepSecretRegistry(stepSecretDirectory(options.home, attempt.id), initial, referenced?.references ?? {}).pipe(mapError2(() => new AgentStepFailure({
+    reason: "secret_registry_unwritable",
+    summary: "The Step's Secret references could not be written."
+  })));
   const agent = referenced === undefined || request.launch.secrets === undefined ? request.launch : { ...request.launch, secrets: referenced.references };
   const prepared = yield* result(prepareHarness({
     attempt: request.attempt,
@@ -3225,10 +3339,7 @@ var runAttempt = (request, options) => gen(function* () {
           ]))
         };
         const holdsLogin = holdsLoginByReference(launch);
-        const registry = Object.keys(initial).length === 0 && !holdsLogin ? undefined : yield* stepSecretRegistry(stepSecretDirectory(options.home, attempt.id), initial, referenced?.references ?? {}).pipe(mapError2(() => new AgentStepFailure({
-          reason: "secret_registry_unwritable",
-          summary: "The Step's Secret references could not be written."
-        })));
+        const registry = Object.keys(initial).length === 0 && !holdsLogin ? undefined : yield* holdSecrets(initial);
         const withSessions = sessions === undefined ? policy : {
           ...policy,
           writablePaths: [...policy.writablePaths, sessions],
@@ -3254,14 +3365,27 @@ var runAttempt = (request, options) => gen(function* () {
       case "docker": {
         if (options.docker === undefined)
           return yield* new AgentStepFailure({ reason: "sandbox_unavailable", summary: "`docker` is not available." });
+        const registry = referenced === undefined || Object.keys(referenced.registry).length === 0 ? undefined : yield* holdSecrets(referenced.registry);
+        const secretProxy = registry === undefined ? undefined : yield* startDockerSecretProxy({
+          registryFile: registry.file,
+          socket: dockerSecretProxySocket(registry.directory),
+          network: policy.network
+        }).pipe(tapError2((error) => logWarning("secret_proxy_unavailable", error.cause)), mapError2(() => new AgentStepFailure({
+          reason: "secret_proxy_unavailable",
+          summary: "The proxy that swaps the Step's Secret references could not be started."
+        })));
         const { container } = yield* startDockerSandbox({
           docker: options.docker,
           runnerId: request.runnerId,
           attemptId: attempt.id,
           policy,
           workspace,
-          configDir
-        }).pipe(mapError2(() => new AgentStepFailure({
+          configDir,
+          ...secretProxy === undefined ? undefined : { secretProxy }
+        }).pipe(tapError2((error) => isTagged(error, "SecretProxyUnreachable") ? logWarning("secret_proxy_unavailable", error.output) : void_3), mapError2((error) => isTagged(error, "SecretProxyUnreachable") ? new AgentStepFailure({
+          reason: "secret_proxy_unavailable",
+          summary: "The egress container could not reach the proxy that swaps the Step's Secret references."
+        }) : new AgentStepFailure({
           reason: "sandbox_container_unavailable",
           summary: "The attempt's container could not be started."
         })));
@@ -3285,7 +3409,7 @@ var runAttempt = (request, options) => gen(function* () {
         return {
           argv: dockerExecArgv({ container, workspace, env: policy.environment, argv: harnessArgv }),
           env: policy.environment,
-          registry: undefined
+          registry
         };
       }
       default:
@@ -5861,7 +5985,7 @@ var codexAppServer = (binary = "codex") => (env) => gen(function* () {
   return {
     request: (method, params) => gen(function* () {
       const id = ++lastId;
-      const deferred = yield* make16();
+      const deferred = yield* make15();
       pending.set(id, deferred);
       yield* send({ id, method, params });
       return yield* _await(deferred).pipe(mapError2((error) => new CodexAppServerFailed({ reason: `${method}: ${error.message}` })));
@@ -6004,7 +6128,7 @@ var kitmanMcpPreflight = (mcp) => gen(function* () {
   const server = yield* spawner.spawn(make3(mcp.command, [...mcp.args], {
     extendEnv: true,
     env: mcp.env,
-    stdin: { stream: make11(new TextEncoder().encode(handshake)), endOnDone: false },
+    stdin: { stream: make10(new TextEncoder().encode(handshake)), endOnDone: false },
     stderr: "ignore"
   }));
   const reply = yield* server.stdout.pipe(decodeText, splitLines, map2((line) => getOrUndefined(decodeJsonStringOption(line))), filter((message) => isJsonObject(message) && message.id === 2), runHead);
@@ -6078,7 +6202,7 @@ var programProcessExecutor = (input) => (work) => gen(function* () {
   const exitCode = sandbox === undefined ? yield* gen(function* () {
     const spawner = yield* ChildProcessSpawner;
     const handle = yield* spawner.spawn(make3(input.bun ?? process.execPath, [file], {
-      stdin: make11(new TextEncoder().encode(stdin)),
+      stdin: make10(new TextEncoder().encode(stdin)),
       stdout: "inherit",
       stderr: "inherit",
       extendEnv: false,
@@ -6804,6 +6928,7 @@ export {
   RepoMaterializationError,
   RunnerLabel,
   RunnerReplicaCancellation,
+  SecretProxyUnreachable,
   SkillMaterializationRefused2 as SkillMaterializationRefused,
   StepAttemptLabel,
   agentStepExecutionLimit,

package/dist/{chunk-csbf77zs.js → chunk-7sm45hhc.js}

@@ -22,21 +22,21 @@ import {
   NullOr,
   Finite,
   encodeUnknownJsonStringSync
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   isNumber,
   isJsonObject,
   isString
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-nhd7dh79.js";
 import {
-  make11,
+  make10,
   runForEach,
   compiled2
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 import {
   ChildProcessSpawner,
   make3
-} from "./chunk-1rry0tsn.js";
+} from "./chunk-pyt2zrwc.js";
 
 // packages/agent-runtime/src/opencode-store.ts
 import { lstatSync, readFileSync, realpathSync } from "fs";
@@ -170,7 +170,7 @@ var isolatedRead = (store, name, input) => gen(function* () {
   const spawner = yield* ChildProcessSpawner;
   const [command, ...args] = opencodeReaderCommand();
   const handle = yield* spawner.spawn(make3(command, args, {
-    stdin: make11(new TextEncoder().encode(encodeUnknownJsonStringSync({ store, name, input }))),
+    stdin: make10(new TextEncoder().encode(encodeUnknownJsonStringSync({ store, name, input }))),
     stderr: "ignore",
     extendEnv: false,
     env: {},

package/dist/{chunk-x1zqfxve.js → chunk-7wenq6ew.js}

@@ -75,10 +75,10 @@ import {
   toEquivalence,
   toCodecJson,
   Json
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   guard
-} from "./chunk-rrnee9mk.js";
+} from "./chunk-se79jbha.js";
 import {
   currentTimeMillis,
   WebCrypto,
@@ -105,11 +105,11 @@ import {
   KitDigest,
   KitSetup,
   RunnerRpcError
-} from "./chunk-9e452fhe.js";
+} from "./chunk-030xsst1.js";
 import {
   runForEach,
   FileSystem
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/crypto/internal/webCrypto.js
 var subtleUnavailable = () => new Error("crypto.subtle is unavailable; browsers expose it only in secure contexts");

package/dist/{chunk-q3c7vmby.js → chunk-b63rssdn.js}

@@ -3,7 +3,7 @@ import {
   Random,
   succeed6,
   withFiber2
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Random.js
 var Random2 = Random;

package/dist/{chunk-5n121vsj.js → chunk-cefprsjj.js}

@@ -6,10 +6,10 @@ import {
   gen,
   flatMap3,
   provideContext2
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   runForEach
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 import {
   WebSocketConstructor,
   layerWebSocketConstructorGlobal,
@@ -19,13 +19,13 @@ import {
   RunnerReplicaRpcs,
   RunnerRunFileRpcs,
   ProgramRpcs
-} from "./chunk-9e452fhe.js";
+} from "./chunk-030xsst1.js";
 import {
   layerJson,
   make4,
   withHeaders,
   layerProtocolSocket
-} from "./chunk-cmatdpfy.js";
+} from "./chunk-cj3ef3pv.js";
 
 // packages/live/src/rpc/runner-client.ts
 var proxiedWebSocket = (proxy) => succeed5(WebSocketConstructor)((target) => {

package/dist/{chunk-cmatdpfy.js → chunk-cj3ef3pv.js}

@@ -12,7 +12,7 @@ import {
   add,
   getOrUndefinedUnsafe,
   getUnsafe,
-  get4,
+  get3,
   Reference,
   toMillis,
   isSuccess,
@@ -96,7 +96,7 @@ import {
   Defect,
   Exit,
   toCodecJson
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   interrupt,
   getCurrent,
@@ -108,7 +108,7 @@ import {
   shutdownUnsafe,
   fromQueue,
   unwrap
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 import {
   Clock,
   empty,
@@ -123,7 +123,7 @@ import {
   ParseOptions,
   RpcClientDefect,
   RpcClientError
-} from "./chunk-9e452fhe.js";
+} from "./chunk-030xsst1.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/workers/Transferable.js
 class Collector extends (/* @__PURE__ */ Service2()("effect/workers/Transferable/Collector")) {
@@ -237,7 +237,7 @@ var makeNoSerialization = /* @__PURE__ */ fnUntraced(function* (group, options)
   const disableTracing = options?.disableTracing ?? false;
   const generateRequestId = options?.generateRequestId ?? (() => requestIdCounter++);
   const services = yield* context();
-  const scope = get4(services, Scope);
+  const scope = get3(services, Scope);
   const entries = new Map;
   let isShutdown = false;
   yield* addFinalizer(scope, withFiber2((parent) => {
@@ -643,7 +643,7 @@ var makeRpcSchemas = (codecFor) => {
       return entry;
     }
     const streamSchemas = getStreamSchemas(rpc.successSchema);
-    const parseOptions = get4(rpc.annotations, ParseOptions);
+    const parseOptions = get3(rpc.annotations, ParseOptions);
     const exitSchema2 = exitSchema(rpc);
     let decodeDiscardExit;
     entry = {

package/dist/{chunk-zwec6t49.js → chunk-d2fxfv0j.js}

@@ -102,7 +102,7 @@ import {
   decodeJsonStringOption,
   encodeJsonStringSync,
   encodePrettyJsonString
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-vrt08dk9.js";
 import {
   currentTimeMillis,
   SecureRandom,
@@ -153,13 +153,13 @@ import {
   runMcpEffect,
   createAgentAuthSignedFetch,
   setupMcpAgentCredential
-} from "./chunk-9e452fhe.js";
+} from "./chunk-030xsst1.js";
 import {
   guard,
   Id,
   Timestamp,
   ActorType
-} from "./chunk-rrnee9mk.js";
+} from "./chunk-se79jbha.js";
 import {
   toJsonValue,
   isOneOf,
@@ -173,7 +173,7 @@ import {
   isJsonObject,
   isString,
   kindOf
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-nhd7dh79.js";
 import {
   join,
   interrupt,
@@ -187,17 +187,17 @@ import {
   withDefault,
   option,
   String2
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-7672g0fj.js";
 import {
   nextInt
-} from "./chunk-q3c7vmby.js";
+} from "./chunk-b63rssdn.js";
 import {
   layerJson,
   make4,
   withHeaders,
   layerProtocolSocket,
   ConnectionHooks
-} from "./chunk-cmatdpfy.js";
+} from "./chunk-cj3ef3pv.js";
 
 // apps/cli/src/mcp.ts
 import { tmpdir } from "os";

package/dist/{chunk-tkmp48ha.js → chunk-g8b2z9jn.js}

@@ -1,5 +1,5 @@
 // @bun
-import"./chunk-1rry0tsn.js";
+import"./chunk-pyt2zrwc.js";
 import {
   HERDR_CORE_GENERATION2,
   HERDR_CORE_INSTALL_COMMAND2,
@@ -12,9 +12,9 @@ import {
   herdrCoreLayer2,
   herdrCoreTransportLayer2,
   updateHerdrCore2
-} from "./chunk-9e452fhe.js";
-import"./chunk-dk0ftqwg.js";
-import"./chunk-d3ksv8y1.js";
+} from "./chunk-030xsst1.js";
+import"./chunk-7672g0fj.js";
+import"./chunk-vrt08dk9.js";
 export {
   HERDR_CORE_GENERATION2 as HERDR_CORE_GENERATION,
   HERDR_CORE_INSTALL_COMMAND2 as HERDR_CORE_INSTALL_COMMAND,