@kitman-sh/cli 0.10.71 → 0.10.72

package/dist/{chunk-d3ksv8y1.js → chunk-vrt08dk9.js}

@@ -1331,11 +1331,11 @@ var Prototype = (options) => makePrimitiveProto({
 });
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Equivalence.js
-var make14 = (isEquivalent) => (self, that) => self === that || isEquivalent(self, that);
+var make13 = (isEquivalent) => (self, that) => self === that || isEquivalent(self, that);
 var isStrictEquivalent = (x, y) => x === y;
 var strictEqual = () => isStrictEquivalent;
 function Tuple(elements) {
-  return make14((self, that) => {
+  return make13((self, that) => {
     if (self.length !== that.length) {
       return false;
     }
@@ -1348,7 +1348,7 @@ function Tuple(elements) {
   });
 }
 function Array_(item) {
-  return make14((self, that) => {
+  return make13((self, that) => {
     if (self.length !== that.length)
       return false;
     for (let i = 0;i < self.length; i++) {
@@ -1565,7 +1565,7 @@ var ServiceProto = {
   .../* @__PURE__ */ Prototype({
     label: "Service",
     evaluate(fiber) {
-      return exitSucceed(get4(fiber.context, this));
+      return exitSucceed(get3(fiber.context, this));
     }
   }),
   toJSON() {
@@ -1578,13 +1578,13 @@ var ServiceProto = {
     return self;
   },
   context(self) {
-    return make15(this, self);
+    return make14(this, self);
   },
   use(f) {
-    return withFiber((fiber) => f(get4(fiber.context, this)));
+    return withFiber((fiber) => f(get3(fiber.context, this)));
   },
   useSync(f) {
-    return withFiber((fiber) => exitSucceed(f(get4(fiber.context, this))));
+    return withFiber((fiber) => exitSucceed(f(get3(fiber.context, this))));
   }
 };
 var cacheKeys = /* @__PURE__ */ new Set;
@@ -1682,7 +1682,7 @@ var isContext = (u) => hasProperty(u, TypeId3);
 var isReference = (u) => !!u[ReferenceTypeId];
 var empty3 = () => emptyContext2;
 var emptyContext2 = /* @__PURE__ */ makeUnsafe4(/* @__PURE__ */ new Map);
-var make15 = (key, service) => makeUnsafe4(new Map([[key.key, service]]));
+var make14 = (key, service) => makeUnsafe4(new Map([[key.key, service]]));
 var add = /* @__PURE__ */ dual(3, (self, key, service) => addUnsafe(self, key.key, service));
 var addUnsafe = (self, key, service) => {
   const impl = self;
@@ -1714,7 +1714,7 @@ var getUnsafe = /* @__PURE__ */ dual(2, (self, service) => {
   }
   return value;
 });
-var get4 = getUnsafe;
+var get3 = getUnsafe;
 var defaultValueCacheKey = "~effect/Context/defaultValue";
 var getDefaultValue = (ref) => {
   if (defaultValueCacheKey in ref) {
@@ -2994,7 +2994,7 @@ class FiberImpl {
     return this._dispatcher ??= this.cache.scheduler.makeDispatcher();
   }
   getRef(ref) {
-    return get4(this.context, ref);
+    return get3(this.context, ref);
   }
   addObserver(cb) {
     if (this._exit) {
@@ -3022,7 +3022,7 @@ class FiberImpl {
     }
     let cause = causeInterrupt(fiberId);
     if (this.cache.stackFrame) {
-      cause = causeAnnotate(cause, make15(StackTraceKey, this.cache.stackFrame));
+      cause = causeAnnotate(cause, make14(StackTraceKey, this.cache.stackFrame));
     }
     if (annotations) {
       cause = causeAnnotate(cause, annotations);
@@ -3195,17 +3195,17 @@ class FiberImpl {
 var makeFiberContextCache = (context) => {
   const currentTracer = getOrUndefinedUnsafe(context, TracerKey);
   return {
-    scheduler: get4(context, Scheduler),
+    scheduler: get3(context, Scheduler),
     tracer: currentTracer,
     tracerContext: currentTracer ? currentTracer["context"] : undefined,
-    tracerEnabled: get4(context, TracerEnabled),
+    tracerEnabled: get3(context, TracerEnabled),
     span: getOrUndefinedUnsafe(context, ParentSpanKey),
-    logLevel: get4(context, CurrentLogLevel),
-    minimumLogLevel: get4(context, MinimumLogLevel),
-    stackFrame: get4(context, CurrentStackFrame),
+    logLevel: get3(context, CurrentLogLevel),
+    minimumLogLevel: get3(context, MinimumLogLevel),
+    stackFrame: get3(context, CurrentStackFrame),
     runtimeMetrics: getOrUndefinedUnsafe(context, FiberRuntimeMetricsKey),
-    maxOpsBeforeYield: get4(context, MaxOpsBeforeYield),
-    preventYield: get4(context, PreventSchedulerYield)
+    maxOpsBeforeYield: get3(context, MaxOpsBeforeYield),
+    preventYield: get3(context, PreventSchedulerYield)
   };
 };
 var deferredInterruptCont = {
@@ -4702,10 +4702,10 @@ var noopSpan = (options) => Object.assign(Object.create(NoopSpanProto), options)
 var filterDisablePropagation = (span) => {
   if (!span)
     return none();
-  return get4(span.annotations, DisablePropagation) ? span._tag === "Span" ? filterDisablePropagation(getOrUndefined(span.parent)) : none() : some(span);
+  return get3(span.annotations, DisablePropagation) ? span._tag === "Span" ? filterDisablePropagation(getOrUndefined(span.parent)) : none() : some(span);
 };
 var makeSpanUnsafe = (fiber, name, options) => {
-  const disablePropagation = !fiber.cache.tracerEnabled || options?.annotations && get4(options.annotations, DisablePropagation);
+  const disablePropagation = !fiber.cache.tracerEnabled || options?.annotations && get3(options.annotations, DisablePropagation);
   const parent = options?.parent !== undefined ? some(options.parent) : options?.root ? none() : filterDisablePropagation(fiber.cache.span);
   let span;
   if (disablePropagation) {
@@ -5119,7 +5119,7 @@ var DeferredImpl = function() {
 };
 DeferredImpl.prototype = DeferredProto;
 var makeUnsafe5 = () => new DeferredImpl;
-var make16 = () => sync(() => makeUnsafe5());
+var make15 = () => sync(() => makeUnsafe5());
 var _await = (self) => callback2((resume) => {
   if (self.effect)
     return resume(self.effect);
@@ -5267,9 +5267,9 @@ var build = (self) => withFiber((fiber) => buildWithMemoMap(self, CurrentMemoMap
 var buildWithScope = /* @__PURE__ */ dual(2, (self, scope) => withFiber((fiber) => buildWithMemoMap(self, CurrentMemoMap.forkOrCreate(fiber.context), scope)));
 var succeed5 = function() {
   if (arguments.length === 1) {
-    return (resource) => succeedContext(make15(arguments[0], resource));
+    return (resource) => succeedContext(make14(arguments[0], resource));
   }
-  return succeedContext(make15(arguments[0], arguments[1]));
+  return succeedContext(make14(arguments[0], arguments[1]));
 };
 var succeedContext = (context) => fromBuildUnsafe(constant(succeed2(context)));
 var effect = function() {
@@ -5278,7 +5278,7 @@ var effect = function() {
   }
   return effectImpl(arguments[0], arguments[1]);
 };
-var effectImpl = (service, effect) => effectContext(map7(effect, (value) => make15(service, value)));
+var effectImpl = (service, effect) => effectContext(map7(effect, (value) => make14(service, value)));
 var effectContext = (effect) => fromBuildMemo((_, scope) => provide(effect, scope));
 var effectDiscard = (effect) => effectContext(as2(effect, empty3()));
 var mergeAllEffect = (layers, memoMap, scope) => {
@@ -8881,7 +8881,7 @@ function recur(ast) {
       const rest = ast.rest.map(recur);
       const [head, ...tail] = rest;
       const tailLength = tail.length;
-      return make14((a, b) => {
+      return make13((a, b) => {
         if (!Array.isArray(a) || !Array.isArray(b)) {
           return false;
         }
@@ -8916,7 +8916,7 @@ function recur(ast) {
       }
       const propertySignatures = ast.propertySignatures.map((ps) => recur(ps.type));
       const indexSignatures = ast.indexSignatures.map((is) => recur(is.type));
-      return make14((a, b) => {
+      return make13((a, b) => {
         if (!isObject2(a) || !isObject2(b)) {
           return false;
         }
@@ -8954,7 +8954,7 @@ function recur(ast) {
       const types = toType2(ast).types;
       const index = getCandidateIndex(types);
       const compiled = types.map((candidate, i) => [_is(candidate), recur(ast.types[i])]);
-      return make14((a, b) => {
+      return make13((a, b) => {
         const candidates = index(a, false);
         for (let i = 0;i < candidates.length; i++) {
           const [is, equivalence] = compiled[candidates[i]];
@@ -8967,7 +8967,7 @@ function recur(ast) {
     }
     case "Suspend": {
       let equivalence;
-      return make14((a, b) => (equivalence ??= toEquivalence2(ast.thunk()))(a, b));
+      return make13((a, b) => (equivalence ??= toEquivalence2(ast.thunk()))(a, b));
     }
   }
 }
@@ -9068,7 +9068,7 @@ function isSchemaError(u) {
 var TypeId12 = TypeId11;
 function declareConstructor() {
   return (typeParameters, run, annotations) => {
-    return make17(new Declaration(typeParameters.map(getAST), (typeParameters) => run(typeParameters.map((ast) => make17(ast))), annotations));
+    return make16(new Declaration(typeParameters.map(getAST), (typeParameters) => run(typeParameters.map((ast) => make16(ast))), annotations));
   };
 }
 function declare(is, annotations) {
@@ -9176,27 +9176,27 @@ function encodeUnknownSync(schema, options) {
   };
 }
 var encodeSync = encodeUnknownSync;
-var make17 = make5;
+var make16 = make5;
 function isSchema(u) {
   return hasProperty(u, TypeId12) && u[TypeId12] === TypeId12;
 }
-var optionalKey = /* @__PURE__ */ lambda((schema) => make17(optionalKey2(schema.ast), {
+var optionalKey = /* @__PURE__ */ lambda((schema) => make16(optionalKey2(schema.ast), {
   schema
 }));
 var optional = /* @__PURE__ */ lambda((self) => {
   const schema = UndefinedOr(self);
-  return make17(optional2(self.ast), {
+  return make16(optional2(self.ast), {
     schema
   });
 });
-var toType = /* @__PURE__ */ lambda((schema) => make17(toType2(schema.ast), {
+var toType = /* @__PURE__ */ lambda((schema) => make16(toType2(schema.ast), {
   schema
 }));
-var toEncoded2 = /* @__PURE__ */ lambda((schema) => make17(toEncoded(schema.ast), {
+var toEncoded2 = /* @__PURE__ */ lambda((schema) => make16(toEncoded(schema.ast), {
   schema
 }));
 function Literal(literal) {
-  const out = make17(new Literal2(literal), {
+  const out = make16(new Literal2(literal), {
     literal,
     transform(to) {
       return out.pipe(decodeTo2(Literal(to), {
@@ -9207,16 +9207,16 @@ function Literal(literal) {
   });
   return out;
 }
-var Never = /* @__PURE__ */ make17(never3);
-var Unknown = /* @__PURE__ */ make17(unknown);
-var Null = /* @__PURE__ */ make17(null_);
-var Undefined2 = /* @__PURE__ */ make17(undefined_3);
-var String4 = /* @__PURE__ */ make17(string2);
-var Number5 = /* @__PURE__ */ make17(number2);
-var Boolean2 = /* @__PURE__ */ make17(boolean);
-var Void = /* @__PURE__ */ make17(void_4);
+var Never = /* @__PURE__ */ make16(never3);
+var Unknown = /* @__PURE__ */ make16(unknown);
+var Null = /* @__PURE__ */ make16(null_);
+var Undefined2 = /* @__PURE__ */ make16(undefined_3);
+var String4 = /* @__PURE__ */ make16(string2);
+var Number5 = /* @__PURE__ */ make16(number2);
+var Boolean2 = /* @__PURE__ */ make16(boolean);
+var Void = /* @__PURE__ */ make16(void_4);
 function makeStruct(ast, fields) {
-  return make17(ast, {
+  return make16(ast, {
     fields,
     mapFields(f, options) {
       const fields = f(this.fields);
@@ -9228,25 +9228,25 @@ function Struct(fields) {
   return makeStruct(struct(fields, undefined), fields);
 }
 function Record(key, value) {
-  return make17(record(key.ast, value.ast), {
+  return make16(record(key.ast, value.ast), {
     key,
     value
   });
 }
 function StructWithRest(schema, records) {
-  return make17(structWithRest(schema.ast, records.map(getAST)), {
+  return make16(structWithRest(schema.ast, records.map(getAST)), {
     schema,
     records
   });
 }
-var ArraySchema = /* @__PURE__ */ lambda((schema) => make17(new Arrays(false, [], [schema.ast]), {
+var ArraySchema = /* @__PURE__ */ lambda((schema) => make16(new Arrays(false, [], [schema.ast]), {
   value: schema
 }));
-var NonEmptyArray = /* @__PURE__ */ lambda((schema) => make17(new Arrays(false, [schema.ast], [schema.ast]), {
+var NonEmptyArray = /* @__PURE__ */ lambda((schema) => make16(new Arrays(false, [schema.ast], [schema.ast]), {
   value: schema
 }));
 function makeUnion(ast, members) {
-  return make17(ast, {
+  return make16(ast, {
     members,
     mapMembers(f, options) {
       const members = f(this.members);
@@ -9259,7 +9259,7 @@ function Union(members, options) {
 }
 function Literals(literals) {
   const members = literals.map(Literal);
-  return make17(union(members, undefined, undefined), {
+  return make16(union(members, undefined, undefined), {
     literals,
     members,
     mapMembers(f) {
@@ -9276,18 +9276,18 @@ function Literals(literals) {
 var NullOr = /* @__PURE__ */ lambda((self) => Union([self, Null]));
 var UndefinedOr = /* @__PURE__ */ lambda((self) => Union([self, Undefined2]));
 function suspend4(f) {
-  return make17(new Suspend(() => f().ast));
+  return make16(new Suspend(() => f().ast));
 }
 function decodeTo2(to, transformation) {
   return (from) => {
-    return make17(decodeTo(from.ast, to.ast, transformation ? makeTransformation(transformation) : passthrough3()), {
+    return make16(decodeTo(from.ast, to.ast, transformation ? makeTransformation(transformation) : passthrough3()), {
       from,
       to
     });
   };
 }
 function withConstructorDefault2(defaultValue) {
-  return (schema) => make17(withConstructorDefault(schema.ast, defaultValue), {
+  return (schema) => make16(withConstructorDefault(schema.ast, defaultValue), {
     schema
   });
 }
@@ -9363,7 +9363,7 @@ function isBase64(annotations) {
     ...annotations
   });
 }
-var Finite = /* @__PURE__ */ make17(finite);
+var Finite = /* @__PURE__ */ make16(finite);
 function makeIsGreaterThanOrEqualTo(options) {
   const gte = isGreaterThanOrEqualTo2(options.order);
   const formatter = options.formatter ?? format;
@@ -9849,7 +9849,7 @@ function CauseReason(error, defect) {
       }
     }))
   });
-  return make17(schema.ast, {
+  return make16(schema.ast, {
     error,
     defect
   });
@@ -9886,7 +9886,7 @@ function Cause(error, defect) {
       }) => failures
     }))
   });
-  return make17(schema.ast, {
+  return make16(schema.ast, {
     error,
     defect
   });
@@ -9947,7 +9947,7 @@ function Exit(value, error, defect) {
       }
     }))
   });
-  return make17(schema.ast, {
+  return make16(schema.ast, {
     value,
     error,
     defect
@@ -10051,7 +10051,7 @@ function getClassSchemaFactory(from, identifier, annotations) {
     const ClassTypeId = getClassTypeId(identifier);
     const isClassValue = (input) => input instanceof self || hasProperty(input, ClassTypeId);
     const transformation = getClassTransformation(self);
-    const to = make17(new Declaration([from.ast], () => (input, ast, options) => {
+    const to = make16(new Declaration([from.ast], () => (input, ast, options) => {
       return isClassValue(input) ? succeed6(input) : fail7(new InvalidType(ast, input, options));
     }, {
       identifier,
@@ -10104,7 +10104,7 @@ function toEquivalence(schema) {
 }
 var toCodecJson = toCodecJson2;
 var toCodecStringTree = toCodecStringTree2;
-var Json = /* @__PURE__ */ make17(/* @__PURE__ */ annotate(Json2, {
+var Json = /* @__PURE__ */ make16(/* @__PURE__ */ annotate(Json2, {
   toCode: () => ({
     runtime: "Schema.Json",
     Type: "Schema.Json"
@@ -10121,4 +10121,4 @@ var encodePrettyJsonString = encodeEffect(fromJsonString(Json, { space: 2 }));
 var decodeJsonStringSync = decodeUnknownSync(JsonFromString);
 var encodeUnknownJsonStringSync = encodeSync(fromJsonString(Unknown));
 
-export { pipeArguments, dual, identity, constant, constTrue, constFalse, constVoid, pipe, flow, memoize, isString2, isNumber2, isBoolean2, isBigInt2, isSymbol2, isFunction2, isUndefined2, isNotUndefined, isNotNull, isNullish, isObjectOrArray, isObject2, hasProperty, isTagged, isUint8Array, symbol, hash, combine, number, string, structure, array, symbol2, equals, asEquivalence, symbolRedactable, redact, currentFiberTypeId, format, NodeInspectSymbol, toJson, BaseProto, Class, getStackTraceLimit, setStackTraceLimit, assignProperty, args, evaluate, PipeInspectableProto, isExit, causeFail, makePrimitive, exitSucceed, exitFailCause, exitFail, withFiber, Done, Prototype, make14, strictEqual, Tuple, String3, Number2, mapInput, none, some, isNone, isSome, match, getOrElse, orElse, fromNullishOr, fromUndefinedOr, getOrUndefined, liftThrowable, map4, flatMap, toArray, Service2, makeUnsafe4, empty3, make15, add, getOrUndefined2, getOrUndefinedUnsafe, getUnsafe, get4, merge3, Reference, fromInputUnsafe, isFinite, zero, infinity, millis, seconds, minutes, toMillis, min, max, subtract, format2, normalize, succeed, fail3, try_, isResult, isFailure, isSuccess, map5, getOrElse2, getOrThrow, all2, allocate, fromIterable, isArrayNonEmpty, isReadonlyArrayNonEmpty, isCanonicalArrayIndex, getUnsafe2, sort, of, map6, makeEquivalence2, TaggedClass, Error2, TaggedError, encode, DisablePropagation, getCurrentFiber, fiberJoin, fiberInterrupt, succeed2, sync, suspend2, succeedNone, void_, callback2, asSome, andThen, flatMap2, map7, exitInterrupt, exitVoid, exitZipRight, scopeAddFinalizer, scope, onExitPrimitive, onExitUnsafe, uninterruptibleMask, fiberRunIn, makeLatchUnsafe, makeLatch, ClockRef, currentTimeMillis2, ConsoleRef, succeed3, failCause2, fail4, die, interrupt2, void_2, isSuccess2, isFailure2, hasInterrupts, asVoidAll, makeUnsafe5, make16, _await, fail5, interruptWith, isDone, isDoneUnsafe, succeed4, doneUnsafe, TracerTimingEnabled, Scope, makeUnsafe6, provide, addFinalizerExit, addFinalizer, forkUnsafe, close, build, buildWithScope, succeed5, effect, effectContext, effectDiscard, mergeAll, provide2, provideMerge, isCause, isFailReason, isDieReason, fromReasons, fail6, die2, makeFailReason, makeDieReason, hasInterruptsOnly, squash, findError, findErrorOption, hasInterrupts2, interruptors, pretty, isDone2, Done2, done, IllegalArgumentError, UnknownError, reasonAnnotations, Random, catchDone, isDoneCause, filterDone, doneExitFromCause, matchEffect, max2, during, min2, exponential, jittered, spaced, isEffect, all3, findFirst, forEach, whileLoop, promise, tryPromise, succeed6, suspend3, sync2, void_3, undefined_, callback3, never, gen, fail7, failSync, failCause3, die3, try_2, yieldNow, withFiber2, fromResult, fromNullishOr2, flatMap3, flatten, andThen2, tap2, result, option2, exit, map8, as, asSome2, asVoid, zipWith, catch_, catchTag, catchTags, catchReason, catchCause2, catchDefect, catchIf, catchCauseIf, mapError2, orDie, tapError2, tapCause, retry, retryOrElse, ignore, ignoreCause, orElseSucceed, timeout, timeoutOption, timeoutOrElse, delay, sleep, raceAllFirst, raceFirst, filter2, filterOrFail, when, matchCauseEffect, matchEffect2, context, contextWith, provide3, provideContext2, service, serviceOption, updateContext, updateService, provideService, scope2, scoped, scopedWith, acquireRelease, acquireUseRelease, addFinalizer2, ensuring2, onError, onExitPrimitive2, onExit, cached, interrupt3, interruptible, onInterrupt, uninterruptible, uninterruptibleMask2, forever, repeat, annotateCurrentSpan, makeSpanScoped, useSpan, withSpan, withParentSpan, forkChild, forkIn, forkScoped, forkDetach, runFork, runForkWith, runPromise, runPromiseWith, runSync, runSyncExitWith, fnUntraced, fn, clockWith, logWarning, logError, annotateLogs, effectify, mapEager, flatMapEager, catchEager, encode2, decode, Pointer, makeFormatterStandardSchemaV1, passthrough, transformEffect, Transformation, transform, defaultParseOptions, unknown, getIndexSignatureKeys, applyToSelfOrLastLinkEncoding, decodeTo, toEncoded, decodeUnknownEffect, omit, map9, declare, SchemaError, is, decodeUnknownEffect2, decodeEffect, decodeUnknownExit, decodeUnknownOption, decodeOption, decodeSync, encodeEffect, make17, isSchema, optionalKey, optional, toType, Literal, Never, Unknown, Null, String4, Boolean2, Void, Struct, Record, StructWithRest, ArraySchema, NonEmptyArray, Union, Literals, NullOr, UndefinedOr, suspend4, decodeTo2, withDecodingDefaultKey, tag, TaggedStruct, makeFilter, isPattern, Finite, isGreaterThanOrEqualTo, isLessThanOrEqualTo, Int, isMinLength, isMaxLength, isMinProperties, isMaxProperties, isUnique, Defect, Date2, fromJsonString, FiniteFromString, Cause, Exit, Class2, Error3, TaggedError2, toEquivalence, toCodecJson, toCodecStringTree, Json, JsonObject, decodeJsonString, decodeJsonStringOption, encodeJsonStringSync, encodePrettyJsonString, decodeJsonStringSync, encodeUnknownJsonStringSync };
+export { pipeArguments, dual, identity, constant, constTrue, constFalse, constVoid, pipe, flow, memoize, isString2, isNumber2, isBoolean2, isBigInt2, isSymbol2, isFunction2, isUndefined2, isNotUndefined, isNotNull, isNullish, isObjectOrArray, isObject2, hasProperty, isTagged, isUint8Array, symbol, hash, combine, number, string, structure, array, symbol2, equals, asEquivalence, symbolRedactable, redact, currentFiberTypeId, format, NodeInspectSymbol, toJson, BaseProto, Class, getStackTraceLimit, setStackTraceLimit, assignProperty, args, evaluate, PipeInspectableProto, isExit, causeFail, makePrimitive, exitSucceed, exitFailCause, exitFail, withFiber, Done, Prototype, make13, strictEqual, Tuple, String3, Number2, mapInput, none, some, isNone, isSome, match, getOrElse, orElse, fromNullishOr, fromUndefinedOr, getOrUndefined, liftThrowable, map4, flatMap, toArray, Service2, makeUnsafe4, empty3, make14, add, getOrUndefined2, getOrUndefinedUnsafe, getUnsafe, get3, merge3, Reference, fromInputUnsafe, isFinite, zero, infinity, millis, seconds, minutes, toMillis, min, max, subtract, format2, normalize, succeed, fail3, try_, isResult, isFailure, isSuccess, map5, getOrElse2, getOrThrow, all2, allocate, fromIterable, isArrayNonEmpty, isReadonlyArrayNonEmpty, isCanonicalArrayIndex, getUnsafe2, sort, of, map6, makeEquivalence2, TaggedClass, Error2, TaggedError, encode, DisablePropagation, getCurrentFiber, fiberJoin, fiberInterrupt, succeed2, sync, suspend2, succeedNone, void_, callback2, asSome, andThen, flatMap2, map7, exitInterrupt, exitVoid, exitZipRight, scopeAddFinalizer, scope, onExitPrimitive, onExitUnsafe, uninterruptibleMask, fiberRunIn, makeLatchUnsafe, makeLatch, ClockRef, currentTimeMillis2, ConsoleRef, succeed3, failCause2, fail4, die, interrupt2, void_2, isSuccess2, isFailure2, hasInterrupts, asVoidAll, makeUnsafe5, make15, _await, fail5, interruptWith, isDone, isDoneUnsafe, succeed4, doneUnsafe, TracerTimingEnabled, Scope, makeUnsafe6, provide, addFinalizerExit, addFinalizer, forkUnsafe, close, build, buildWithScope, succeed5, effect, effectContext, effectDiscard, mergeAll, provide2, provideMerge, isCause, isFailReason, isDieReason, fromReasons, fail6, die2, makeFailReason, makeDieReason, hasInterruptsOnly, squash, findError, findErrorOption, hasInterrupts2, interruptors, pretty, isDone2, Done2, done, IllegalArgumentError, UnknownError, reasonAnnotations, Random, catchDone, isDoneCause, filterDone, doneExitFromCause, matchEffect, max2, during, min2, exponential, jittered, spaced, isEffect, all3, findFirst, forEach, whileLoop, promise, tryPromise, succeed6, suspend3, sync2, void_3, undefined_, callback3, never, gen, fail7, failSync, failCause3, die3, try_2, yieldNow, withFiber2, fromResult, fromNullishOr2, flatMap3, flatten, andThen2, tap2, result, option2, exit, map8, as, asSome2, asVoid, zipWith, catch_, catchTag, catchTags, catchReason, catchCause2, catchDefect, catchIf, catchCauseIf, mapError2, orDie, tapError2, tapCause, retry, retryOrElse, ignore, ignoreCause, orElseSucceed, timeout, timeoutOption, timeoutOrElse, delay, sleep, raceAllFirst, raceFirst, filter2, filterOrFail, when, matchCauseEffect, matchEffect2, context, contextWith, provide3, provideContext2, service, serviceOption, updateContext, updateService, provideService, scope2, scoped, scopedWith, acquireRelease, acquireUseRelease, addFinalizer2, ensuring2, onError, onExitPrimitive2, onExit, cached, interrupt3, interruptible, onInterrupt, uninterruptible, uninterruptibleMask2, forever, repeat, annotateCurrentSpan, makeSpanScoped, useSpan, withSpan, withParentSpan, forkChild, forkIn, forkScoped, forkDetach, runFork, runForkWith, runPromise, runPromiseWith, runSync, runSyncExitWith, fnUntraced, fn, clockWith, logWarning, logError, annotateLogs, effectify, mapEager, flatMapEager, catchEager, encode2, decode, Pointer, makeFormatterStandardSchemaV1, passthrough, transformEffect, Transformation, transform, defaultParseOptions, unknown, getIndexSignatureKeys, applyToSelfOrLastLinkEncoding, decodeTo, toEncoded, decodeUnknownEffect, omit, map9, declare, SchemaError, is, decodeUnknownEffect2, decodeEffect, decodeUnknownExit, decodeUnknownOption, decodeOption, decodeSync, encodeEffect, make16, isSchema, optionalKey, optional, toType, Literal, Never, Unknown, Null, String4, Boolean2, Void, Struct, Record, StructWithRest, ArraySchema, NonEmptyArray, Union, Literals, NullOr, UndefinedOr, suspend4, decodeTo2, withDecodingDefaultKey, tag, TaggedStruct, makeFilter, isPattern, Finite, isGreaterThanOrEqualTo, isLessThanOrEqualTo, Int, isMinLength, isMaxLength, isMinProperties, isMaxProperties, isUnique, Defect, Date2, fromJsonString, FiniteFromString, Cause, Exit, Class2, Error3, TaggedError2, toEquivalence, toCodecJson, toCodecStringTree, Json, JsonObject, decodeJsonString, decodeJsonStringOption, encodeJsonStringSync, encodePrettyJsonString, decodeJsonStringSync, encodeUnknownJsonStringSync };

package/dist/{chunk-rm83dbpv.js → chunk-w6qjh6q5.js}

@@ -14,8 +14,8 @@ import {
   writeSrtSettings2,
   srtStepArgv2,
   srtArgv2
-} from "./chunk-dk0ftqwg.js";
-import"./chunk-d3ksv8y1.js";
+} from "./chunk-7672g0fj.js";
+import"./chunk-vrt08dk9.js";
 export {
   compiled2 as compiled,
   harnessesUnsupportedInSrt2 as harnessesUnsupportedInSrt,

package/dist/chunk-wssfts9s.js

@@ -0,0 +1,16 @@
+// @bun
+import {
+  secretFilter2,
+  opaqueTunnelRefusal2,
+  isOpaqueConnectReason2,
+  runSrtStep2
+} from "./chunk-gngg8j56.js";
+import"./chunk-se79jbha.js";
+import"./chunk-nhd7dh79.js";
+import"./chunk-vrt08dk9.js";
+export {
+  isOpaqueConnectReason2 as isOpaqueConnectReason,
+  opaqueTunnelRefusal2 as opaqueTunnelRefusal,
+  runSrtStep2 as runSrtStep,
+  secretFilter2 as secretFilter
+};

package/dist/egress-proxy.ts

@@ -215,10 +215,57 @@ export const startEgressProxy = (input: {
   return once(server, 'listening').then(() => server)
 }
 
-// `bun egress-proxy.ts <comma-separated allowlist>`
-if (import.meta.main)
-  void startEgressProxy({
-    hosts: (Bun.argv[2] ?? '').split(',').filter(host => host.length > 0),
+/** Passes every connection to the proxy listening on the Unix socket `socket`, which decides what leaves. */
+export const startEgressRelay = (input: {
+  readonly socket: string
+  readonly port: number
+  readonly hostname: string
+}): Promise<Server> => {
+  const server = createServer(client => {
+    const upstream = connect(input.socket)
+    let connected = false
+
+    client.pipe(upstream)
+    upstream.pipe(client)
+    upstream.once('connect', () => {
+      connected = true
+    })
+    upstream.on('error', () => {
+      if (connected) client.destroy()
+      else
+        client.end(
+          "HTTP/1.1 502 Bad Gateway\r\nContent-Type: text/plain\r\nConnection: close\r\n\r\nKitman's egress relay cannot reach the Runner's secret proxy.\n"
+        )
+    })
+    client.on('error', () => upstream.destroy())
+  }).listen(input.port, input.hostname)
+
+  return once(server, 'listening').then(() => server)
+}
+
+/** Whether a connection to the Unix socket `socket` opens. */
+export const probeSocket = (socket: string): Promise<boolean> => {
+  const probe = connect(socket)
+
+  return once(probe, 'connect').then(
+    () => (probe.destroy(), true),
+    () => false
+  )
+}
+
+const main = (argv: readonly string[]) => {
+  const [mode = '', socket = ''] = argv
+
+  if (mode === '--probe') return probeSocket(socket).then(opened => process.exit(opened ? 0 : 1))
+
+  if (mode === '--relay') return startEgressRelay({ socket, port: 3128, hostname: '0.0.0.0' })
+
+  return startEgressProxy({
+    hosts: mode.split(',').filter(host => host.length > 0),
     port: 3128,
     hostname: '0.0.0.0'
   })
+}
+
+// `bun egress-proxy.ts <comma-separated allowlist>`, `bun egress-proxy.ts --relay <socket>` or `--probe <socket>`
+if (import.meta.main) void main(Bun.argv.slice(2))

package/dist/index.js

@@ -5,15 +5,15 @@
 var args = process.argv.slice(2);
 if (args[0] === "srt") {
   process.argv.splice(2, 1);
-  const { runSrtCli } = await import("./chunk-rm83dbpv.js");
+  const { runSrtCli } = await import("./chunk-w6qjh6q5.js");
   await runSrtCli();
 } else if (args[0] === "srt-step") {
-  const { runSrtStep } = await import("./chunk-wtpwkjws.js");
+  const { runSrtStep } = await import("./chunk-wssfts9s.js");
   await runSrtStep(args.slice(1));
 } else if (args[0] === "opencode-read") {
-  const { runOpencodeReader } = await import("./chunk-60333x3q.js");
+  const { runOpencodeReader } = await import("./chunk-tv94e132.js");
   runOpencodeReader();
 } else {
-  const { runCli } = await import("./chunk-y7p921rs.js");
+  const { runCli } = await import("./chunk-61by5f18.js");
   runCli(args);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitman-sh/cli",
-  "version": "0.10.71",
+  "version": "0.10.72",
   "type": "module",
   "license": "UNLICENSED",
   "bin": {

package/dist/chunk-1w81w56v.js

@@ -1,109 +0,0 @@
-// @bun
-import {
-  getOrUndefined,
-  flatMap,
-  toArray,
-  decodeUnknownOption,
-  optionalKey,
-  String4,
-  Struct,
-  Record,
-  ArraySchema,
-  decodeJsonStringOption,
-  encodeUnknownJsonStringSync
-} from "./chunk-d3ksv8y1.js";
-import {
-  replaceSecretReferences,
-  secretReferencesIn
-} from "./chunk-rrnee9mk.js";
-
-// packages/agent-runtime/src/secret-proxy.ts
-import { appendFileSync, readFileSync, renameSync, writeFileSync } from "fs";
-
-// packages/agent-runtime/src/egress-proxy.ts
-var egressAllowed = (hosts, host, port) => {
-  const target = host.toLowerCase();
-  return hosts.some((entry) => {
-    const [name = "", entryPort] = entry.toLowerCase().split(":");
-    if (entryPort !== undefined && Number(entryPort) !== port)
-      return false;
-    return name.startsWith("*.") ? target.endsWith(name.slice(1)) : target === name;
-  });
-};
-if (false)
-  ;
-
-// packages/agent-runtime/src/secret-proxy.ts
-var basicPrefix = /^basic\s+/i;
-var basicCredential = (value) => {
-  if (!basicPrefix.test(value))
-    return;
-  const decoded = Buffer.from(value.replace(basicPrefix, ""), "base64").toString("utf8");
-  return secretReferencesIn(decoded).length === 0 ? undefined : decoded;
-};
-var referencesInHeader = (value) => [
-  ...new Set([...secretReferencesIn(value), ...secretReferencesIn(basicCredential(value) ?? "")])
-];
-var swapped = (value, registry) => {
-  const swap = (reference) => registry[reference]?.value ?? reference;
-  const basic = basicCredential(value);
-  return basic === undefined ? replaceSecretReferences(value, swap) : `Basic ${Buffer.from(replaceSecretReferences(basic, swap)).toString("base64")}`;
-};
-var decideSecretRequest = (request, readRegistry) => {
-  const carrying = request.headers.flatMap(([name, value]) => {
-    const references = referencesInHeader(value);
-    return references.length === 0 ? [] : [{ name, value, references }];
-  });
-  const inTarget = secretReferencesIn(request.target);
-  if (carrying.length === 0 && inTarget.length === 0)
-    return { action: "allow" };
-  const registry = readRegistry();
-  const refusals = [
-    ...inTarget.map((reference) => ({
-      reference,
-      host: request.host,
-      reason: "A reference is swapped only in a header, never in a URL."
-    })),
-    ...[...new Set(carrying.flatMap((header) => header.references))].flatMap((reference) => {
-      const entry = registry?.[reference];
-      const reason = entry === undefined ? "The reference is unknown or revoked." : request.scheme !== "https" ? "A reference is swapped only over HTTPS." : !egressAllowed(entry.hosts, request.host, request.port) ? `The Secret may be sent only to ${entry.hosts.join(", ")}.` : undefined;
-      return reason === undefined ? [] : [{ reference, host: request.host, reason }];
-    })
-  ];
-  if (refusals.length > 0)
-    return {
-      action: "deny",
-      reason: `Kitman refused this request: ${refusals.map((refusal) => `${refusal.reference}: ${refusal.reason}`).join(" ")}`,
-      refusals
-    };
-  const names = new Set(carrying.map((header) => header.name.toLowerCase()));
-  return {
-    action: "allow",
-    setHeaders: request.headers.filter(([name]) => names.has(name.toLowerCase())).map(([name, value]) => [name, registry === undefined ? value : swapped(value, registry)])
-  };
-};
-var Registry = Record(String4, Struct({ value: String4, hosts: ArraySchema(String4) }));
-var Refusal = Struct({
-  reference: optionalKey(String4),
-  host: String4,
-  reason: String4
-});
-var readSecretRegistry = (file) => {
-  try {
-    return getOrUndefined(flatMap(decodeJsonStringOption(readFileSync(file, "utf8")), decodeUnknownOption(Registry)));
-  } catch {
-    return;
-  }
-};
-var writeSecretRegistry = (file, registry) => {
-  const next = `${file}.next`;
-  writeFileSync(next, encodeUnknownJsonStringSync(registry), { mode: 384 });
-  renameSync(next, file);
-};
-var secretRefusalLog = (registryFile) => `${registryFile}.refused`;
-var appendSecretRefusals = (registryFile, refusals) => appendFileSync(secretRefusalLog(registryFile), refusals.map((refusal) => `${encodeUnknownJsonStringSync(refusal)}
-`).join(""), { mode: 384 });
-var parseSecretRefusals = (text) => text.split(`
-`).flatMap((line) => toArray(flatMap(decodeJsonStringOption(line), decodeUnknownOption(Refusal))));
-
-export { decideSecretRequest, readSecretRegistry, writeSecretRegistry, secretRefusalLog, appendSecretRefusals, parseSecretRefusals };