@kitman-sh/cli 0.10.73 → 0.10.75

package/dist/{chunk-1rry0tsn.js → chunk-98sg1yyd.js}

@@ -22,7 +22,7 @@ import {
   map8,
   raceFirst,
   scoped
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-jbwk6k6m.js";
 import {
   unwrap,
   drainFork,
@@ -31,7 +31,7 @@ import {
   runCollect,
   runDrain,
   mkString
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-xb70ys3n.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/internal/redacted.js
 var redactedRegistry = /* @__PURE__ */ new WeakMap;

package/dist/{chunk-60333x3q.js → chunk-9zd52pda.js}

@@ -7,11 +7,11 @@ import {
   decoded2,
   readOpencode2,
   runOpencodeReader2
-} from "./chunk-csbf77zs.js";
-import"./chunk-1rry0tsn.js";
-import"./chunk-v01c0k6j.js";
-import"./chunk-dk0ftqwg.js";
-import"./chunk-d3ksv8y1.js";
+} from "./chunk-e8zm8z3a.js";
+import"./chunk-98sg1yyd.js";
+import"./chunk-tzz4fv17.js";
+import"./chunk-xb70ys3n.js";
+import"./chunk-jbwk6k6m.js";
 export {
   decoded2 as decoded,
   decodedOption2 as decodedOption,

package/dist/{chunk-3edjgnxf.js → chunk-b0cscqbw.js}

@@ -1,6 +1,8 @@
 // @bun
 import {
+  getOrElse,
   getOrUndefined,
+  liftThrowable,
   flatMap,
   toArray,
   decodeUnknownOption,
@@ -11,11 +13,11 @@ import {
   ArraySchema,
   decodeJsonStringOption,
   encodeUnknownJsonStringSync
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-jbwk6k6m.js";
 import {
   replaceSecretReferences,
   secretReferencesIn
-} from "./chunk-rrnee9mk.js";
+} from "./chunk-545b129z.js";
 
 // packages/agent-runtime/src/srt-step.ts
 import { SandboxRuntimeConfigSchema } from "@anthropic-ai/sandbox-runtime";
@@ -40,6 +42,20 @@ if (false)
 
 // packages/agent-runtime/src/secret-proxy.ts
 var basicPrefix = /^basic\s+/i;
+var tokenIssuingEndpoints = [
+  { path: "/copilot_internal/v2/token" },
+  { path: "/auto", hosts: ["*.githubcopilot.com", "api.githubcopilot.com"] },
+  { path: "/api/oauth/claude_cli/create_api_key" }
+];
+var normalizedPath = (target) => {
+  const path = (URL.canParse(target) ? new URL(target).pathname : target).split(/[?#]/, 1)[0] ?? "";
+  const decoded = getOrElse(liftThrowable(decodeURIComponent)(path), () => path);
+  return `/${decoded.toLowerCase().split("/").filter(Boolean).join("/")}`;
+};
+var issuesTokens = (request) => {
+  const path = normalizedPath(request.target);
+  return tokenIssuingEndpoints.some((endpoint) => (path === endpoint.path || path.startsWith(`${endpoint.path}/`)) && (endpoint.hosts === undefined || egressAllowed(endpoint.hosts, request.host, request.port)));
+};
 var basicCredential = (value) => {
   if (!basicPrefix.test(value))
     return;
@@ -63,13 +79,19 @@ var decideSecretRequest = (request, readRegistry) => {
   if (carrying.length === 0 && inTarget.length === 0)
     return { action: "allow" };
   const registry = readRegistry();
+  const carried = [...new Set(carrying.flatMap((header) => header.references))];
   const refusals = [
     ...inTarget.map((reference) => ({
       reference,
       host: request.host,
       reason: "A reference is swapped only in a header, never in a URL."
     })),
-    ...[...new Set(carrying.flatMap((header) => header.references))].flatMap((reference) => {
+    ...issuesTokens(request) ? carried.map((reference) => ({
+      reference,
+      host: request.host,
+      reason: "This endpoint answers with a new token, which the Runner obtains itself outside the sandbox."
+    })) : [],
+    ...carried.flatMap((reference) => {
       const entry = registry?.[reference];
       const reason = entry === undefined ? "The reference is unknown or revoked." : request.scheme !== "https" ? "A reference is swapped only over HTTPS." : !egressAllowed(entry.hosts, request.host, request.port) ? `The Secret may be sent only to ${entry.hosts.join(", ")}.` : undefined;
       return reason === undefined ? [] : [{ reference, host: request.host, reason }];

package/dist/{chunk-9e452fhe.js → chunk-bcbne0ek.js}

@@ -248,7 +248,7 @@ import {
   decodeJsonStringOption,
   encodeJsonStringSync,
   encodePrettyJsonString
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-jbwk6k6m.js";
 import {
   map,
   makeEquivalence,
@@ -315,7 +315,7 @@ import {
   String2,
   optionalEnv,
   harnessesUnsupportedInSrt2
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-xb70ys3n.js";
 import {
   isDateTime,
   Numeric,
@@ -327,7 +327,7 @@ import {
   SecretName,
   SecretScope,
   SecretHosts
-} from "./chunk-rrnee9mk.js";
+} from "./chunk-545b129z.js";
 import {
   toJsonValue,
   isOneOf,
@@ -341,7 +341,7 @@ import {
   isSymbol,
   isUndefined,
   kindOf
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-tzz4fv17.js";
 import {
   isRedacted,
   make,
@@ -355,7 +355,7 @@ import {
   make3,
   parseFdName,
   fdName
-} from "./chunk-1rry0tsn.js";
+} from "./chunk-98sg1yyd.js";
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/Tuple.js
 var makeEquivalence3 = Tuple;
@@ -2958,6 +2958,7 @@ var setAll2 = /* @__PURE__ */ dual(2, (self, input) => {
   }
   return make23(params);
 });
+var toString = (input) => new URLSearchParams(fromInput2(input).params.map(([key, value]) => [key, unwrap3(value)])).toString();
 var redact3 = /* @__PURE__ */ dual(2, (self, key) => {
   const patterns = Array.isArray(key) ? key : [key];
   return self.params.map(([name, value]) => [name, typeof value === "string" && isRedactedName2(name, patterns) ? make(value) : value]);
@@ -7127,6 +7128,20 @@ var RunnerTeamGrantList = Struct({
 var RunnerTeamGrantDeleteResult = Struct({
   removed: Boolean2
 });
+var RunnerWorkspaceAttachment = Struct({
+  runnerId: Id,
+  workspaceId: Id,
+  createdAt: Timestamp
+});
+var RunnerWorkspaceAttachmentCreate = Struct({
+  workspaceId: Id
+});
+var RunnerWorkspaceAttachmentList = Struct({
+  items: ArraySchema(RunnerWorkspaceAttachment)
+});
+var RunnerWorkspaceAttachmentDeleteResult = Struct({
+  removed: Boolean2
+});
 var RunnerReplicaPlacement = Struct({
   kind: String4.check(isMinLength(1), isMaxLength(80)),
   label: optionalKey(String4.check(isMinLength(1), isMaxLength(160))),
@@ -9360,6 +9375,18 @@ var uint8Array = (body, contentType) => new Uint8Array2(body, contentType ?? "ap
 var encoder = /* @__PURE__ */ new TextEncoder;
 var buffer = globalThis.Buffer;
 var encodeText = buffer !== undefined ? (body) => buffer.from(body, "utf8") : (body) => encoder.encode(body);
+var text = (body, contentType) => {
+  if (typeof body !== "string") {
+    body = body === undefined ? "" : String(body);
+  }
+  if (buffer !== undefined) {
+    return new Uint8Array2(undefined, contentType ?? "text/plain", buffer.byteLength(body, "utf8"), body);
+  }
+  const bytes = encoder.encode(body);
+  return new Uint8Array2(bytes, contentType ?? "text/plain", bytes.length, body);
+};
+var jsonUnsafe = (body, contentType) => text(JSON.stringify(body), contentType ?? "application/json");
+var urlParams = (urlParams, contentType) => text(toString(fromInput2(urlParams)), contentType ?? "application/x-www-form-urlencoded");
 
 // node_modules/.bun/effect@4.1.2/node_modules/effect/dist/http/HttpClientError.js
 var TypeId9 = "~effect/http/HttpClientError";
@@ -9579,6 +9606,7 @@ var make5 = (method) => (url, options) => modify(empty6, {
   ...options ?? undefined
 });
 var get = /* @__PURE__ */ make5("GET");
+var post = /* @__PURE__ */ make5("POST");
 var put = /* @__PURE__ */ make5("PUT");
 var modify = /* @__PURE__ */ dual(2, (self, options) => {
   let result = self;
@@ -9630,6 +9658,8 @@ var setBody = /* @__PURE__ */ dual(2, (self, body) => {
   return makeWith(self.method, self.url, self.urlParams, self.hash, updateHeaders(self.headers, body), body);
 });
 var bodyUint8Array = /* @__PURE__ */ dual((args) => isHttpClientRequest(args[0]), (self, body, contentType) => setBody(self, uint8Array(body, contentType)));
+var bodyJsonUnsafe = /* @__PURE__ */ dual(2, (self, body) => setBody(self, jsonUnsafe(body)));
+var bodyUrlParams = /* @__PURE__ */ dual(2, (self, input) => setBody(self, urlParams(fromInput2(input))));
 function toUrl(self) {
   const r = make26(self.url, self.urlParams, getOrUndefined(self.hash));
   if (isSuccess(r)) {
@@ -12379,6 +12409,21 @@ class KitmanEffectClient {
       headers: this.headers()
     });
   }
+  attachRunnerWorkspace(runnerId, input) {
+    return this.request("attachRunnerWorkspace", `/runners/${segment(runnerId)}/workspace-attachments`, {
+      method: "POST",
+      headers: this.headers(true),
+      body: JSON.stringify(input)
+    });
+  }
+  listRunnerWorkspaceAttachments(runnerId) {
+    return this.request("listRunnerWorkspaceAttachments", `/runners/${segment(runnerId)}/workspace-attachments`, {
+      headers: this.headers()
+    });
+  }
+  detachRunnerWorkspace(runnerId, workspaceId) {
+    return this.request("detachRunnerWorkspace", `/runners/${segment(runnerId)}/workspace-attachments/${segment(workspaceId)}`, { method: "DELETE", headers: this.headers() });
+  }
   listRunnerControlCommands(runnerId, input, traceparent) {
     return this.request("listRunnerControlCommands", `/runners/${segment(runnerId)}/control-commands`, {
       method: "POST",
@@ -15551,4 +15596,4 @@ function checkServices(declaration) {
   return isSome(decoded) ? [...new Set(decoded.value.services)] : undefined;
 }
 
-export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, put, setHeaders, bodyUint8Array, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };
+export { Clock, currentTimeMillis, WebCrypto, SecureRandom, layerWebCrypto, makeUnsafe, formatIso, empty, fromInput, merge, runMain, layer, layer2, Stdio, Terminal, layer3, error, log, toDate, parseDate, toIso, currentDate, wallClockMillis, waitingOnWords, queueWords, scanDurableSurface, redactResponseSurface, redactCredentials, redactedOutputTail, SafeJson, AgentHarnessIds, AgentSkillRequirement, AgentMcpServerRequirement, AgentEnvironmentFragment, findForbiddenAgentEnvironmentSecretPath, RepoBindingProviders, RepoBindingCredentialProviderTypes, findForbiddenRepoBindingSecretPath, AgentSandboxNetwork, runnerAgentSandboxPolicy, agentNetworkAllowlist, verificationNetworkAllowlist, programNetworkHosts, ContextPackModes, DefaultContextPackMode, ProposalStatuses, ProposalTargetTypes, canonicalJson, canonicalSha256, AgentEfforts, AgentCapabilities, LoopDataSchemaRef, RunDisplayStates, LoopVersion, ProgramLoop, AgentFallback, isTestReportName, checkTests, ProgramWorkUnit, MeasureSample, MeasureEvidence, catchUpPathLimit, CatchUp, RunnerOwnership, defaultRunnerCapabilities, MemoryStatuses, MemoryScopes, MaxMemoryListLimit, DecisionStatuses, Session, SessionEnd, SessionUpdate, SessionUpdateCreate, FixFlowRecoveryActions, KitmanAgentCapabilityNames, sha2562, isRunFileRefusalReason, runFileRefusalWords, RunFileRefused, runFileContentType, repositoryKey, createId, digestSha256, digestSha512, digestWith, sha256Hasher, AgentEvent, raw, make5, get, post, put, setHeaders, acceptJson, bodyUint8Array, bodyJsonUnsafe, bodyUrlParams, schemaBodyJson, filterStatusOk, HttpClient, execute, get2, Fetch, layer4, Socket, SocketReadError, SocketError, WebSocketConstructor, layerWebSocketConstructorGlobal, layerWebSocket, runDisplayLabels, listedSummary, KitName, KitDigest, defaultKitName, KitSetup, SetupArchive, kitMcpSecretNames, kitmanMcpServer, KitmanClientError, KitmanEffectClient, CliError, DefaultApiUrl, resolveConfig, apiUrlFromEnv, stepCredentialFromEnv, stepWorkspaceFromEnv, stepSkillsDirFromEnv, stepFittingSkillsFromEnv, stepOutputOnlyFromEnv, mcpCredentialNameFromEnv, userConfigPath, userAuthPath, userHarnessSyncPath, kitSetupCacheDir, bundleCacheDir, localConfigPath, readUserConfig, writeUserConfig, sessionForApi, readAuthStore, storeSession, removeSession, removeAllSessions, agentCredentialForApi, storeAgentCredential, removeAgentCredential, normalizeApiUrl, isStoredAgentCredential, isStreamSchema, getStreamSchemas, make6, exitSchema, ParseOptions, RpcClientDefect, RpcClientError, make7, Service, RunnerHeaders, RunnerRpcProtocolVersion, RunnerRpcError, RunSettled, UpdateAvailable, RunnerReplicaRpcs, RunnerRunFileRpcs, ProgramRpcs, parseCallbackUrl, revokeToken, toStoredSession, browserLogin, openBrowser, shouldRefresh, createSdkClient, refreshSession, AgentAuthClientError, executeAgentCapability, createAgentAuthBearerToken, McpPlatformLive, runMcpEffect, createAgentAuthSignedFetch, setupMcpAgentCredential, generateAgentKeyPair, HERDR_CORE_GENERATION2, HERDR_CORE_INSTALL_COMMAND2, HerdrCoreMissing2, HerdrCoreIncompatible2, HerdrCoreConnectionLost2, HerdrCoreRpcError2, HerdrCoreUpdateFailed2, HerdrCore2, herdrCoreLayer2, herdrCoreTransportLayer2, updateHerdrCore2, CommandFailed2, runCommand2, withoutPreloads2, shellOutputTailChars2, runProcess2, CommandRunner2, runShell2, detectHarnesses2, kitHarnesses, isKitHarness, instructionsStart, instructionsEnd, harnessNames, renderMcpServer, materializeKitSetup, tomlInline, herdrExecutionExtension2, herdrNativeExtensionIds2, herdrRunnerCapabilitiesForRepoBinding2, herdrRunnerCapabilities2, assertHerdrRunnerCapability2, declaredChecks, installCommand, checkServicesFile, checkServices };

package/dist/{chunk-4wqjxfbv.js → chunk-e3dmkypq.js}

@@ -23,24 +23,24 @@ import {
   fnUntraced,
   encodePrettyJsonString,
   decodeJsonStringSync
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-jbwk6k6m.js";
 import {
   isJsonObject,
   isString
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-tzz4fv17.js";
 import {
   FileSystem,
   Path,
   optionalEnv
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-xb70ys3n.js";
 import {
   AgentHarnessIds,
   sha2562,
   runCommand2
-} from "./chunk-9e452fhe.js";
+} from "./chunk-bcbne0ek.js";
 import {
   NpmRegistry
-} from "./chunk-hr9vd6dj.js";
+} from "./chunk-fqhxxxmp.js";
 
 // packages/agent-runtime/src/config-convergence.ts
 var writeAgentEnvironmentConfigFile2 = fnUntraced(function* (file, content, keep = {}) {

package/dist/{chunk-csbf77zs.js → chunk-e8zm8z3a.js}

@@ -22,21 +22,21 @@ import {
   NullOr,
   Finite,
   encodeUnknownJsonStringSync
-} from "./chunk-d3ksv8y1.js";
+} from "./chunk-jbwk6k6m.js";
 import {
   isNumber,
   isJsonObject,
   isString
-} from "./chunk-v01c0k6j.js";
+} from "./chunk-tzz4fv17.js";
 import {
   make11,
   runForEach,
   compiled2
-} from "./chunk-dk0ftqwg.js";
+} from "./chunk-xb70ys3n.js";
 import {
   ChildProcessSpawner,
   make3
-} from "./chunk-1rry0tsn.js";
+} from "./chunk-98sg1yyd.js";
 
 // packages/agent-runtime/src/opencode-store.ts
 import { lstatSync, readFileSync, realpathSync } from "fs";