@kitman-sh/cli 0.7.2 → 0.7.3

package/dist/{chunk-6f4anyec.js → chunk-x6j2j12j.js}

@@ -3,7 +3,7 @@ import {
   Random,
   succeed5,
   withFiber
-} from "./chunk-704ws2q7.js";
+} from "./chunk-8g2twwm8.js";
 
 // node_modules/.bun/effect@4.0.4/node_modules/effect/dist/Random.js
 var Random2 = Random;

package/dist/{chunk-hrd7xmax.js → chunk-yysejjz0.js}

@@ -41,14 +41,14 @@ import {
   KitAssignmentDeclaration,
   PackageDeclarations,
   RunnerRpcProtocolVersion
-} from "./chunk-704ws2q7.js";
-import"./chunk-dwgta18y.js";
-import"./chunk-ae7gx971.js";
-import"./chunk-ztmwmk8t.js";
+} from "./chunk-8g2twwm8.js";
+import"./chunk-84t0s0s2.js";
+import"./chunk-c5nwtn11.js";
+import"./chunk-0296rete.js";
 import {
   describeFlag,
   Described
-} from "./chunk-6kdj8psf.js";
+} from "./chunk-1n61xbaq.js";
 
 // packages/sdk/src/build/index.ts
 class DependencyInstallFailed extends TaggedError2()("DependencyInstallFailed", {

package/dist/{chunk-gzhxsb25.js → chunk-zc0ebz8f.js}

@@ -3,9 +3,9 @@ import {
   runnerWebSocketProtocol2,
   runnerRpcUrl2,
   makeRunnerRpcClient2
-} from "./chunk-ae7gx971.js";
-import"./chunk-dwgta18y.js";
-import"./chunk-704ws2q7.js";
+} from "./chunk-c5nwtn11.js";
+import"./chunk-84t0s0s2.js";
+import"./chunk-8g2twwm8.js";
 export {
   makeRunnerRpcClient2 as makeRunnerRpcClient,
   runnerRpcUrl2 as runnerRpcUrl,

package/dist/index.js

@@ -227,7 +227,7 @@ import {
   runCommand2,
   detectHarnesses2,
   herdrRunnerCapabilities2
-} from "./chunk-704ws2q7.js";
+} from "./chunk-8g2twwm8.js";
 
 // node_modules/.bun/effect@4.0.4/node_modules/effect/dist/internal/rcRef.js
 var TypeId = "~effect/RcRef";
@@ -1336,7 +1336,7 @@ function renderMaterializationPlan(plan) {
       kind: operation.kind,
       skillName: operation.skillName,
       skillIdentityHash: hashIdentity(auditOperationIdentity(operation)),
-      target: operation.kind === "write_skill" ? operation.path : operation.targetPath
+      target: operation.kind === "symlink_skill" ? operation.targetPath : operation.path
     })),
     materializedSkills: plan.materializedSkills.map((skill) => ({
       name: skill.name,
@@ -1362,7 +1362,11 @@ function renderConfigPlan(plan) {
   };
 }
 function auditOperationIdentity(operation) {
-  return operation.kind === "write_skill" ? `write_skill:${operation.skillName}:content_sha256:${hashIdentity(operation.content)}:${operation.path}` : `symlink_skill:${operation.skillName}:symlink:${operation.sourcePath}:${operation.targetPath}`;
+  if (operation.kind === "write_skill")
+    return `write_skill:${operation.skillName}:content_sha256:${hashIdentity(operation.content)}:${operation.path}`;
+  if (operation.kind === "fetch_git_skill")
+    return `fetch_git_skill:${operation.skillName}:${operation.url}#${operation.ref}:${operation.repositoryPath ?? ""}:${operation.path}`;
+  return `symlink_skill:${operation.skillName}:symlink:${operation.sourcePath}:${operation.targetPath}`;
 }
 function auditMaterializedSkillIdentity(skill) {
   return `${skill.harness}:${skill.name}:${skill.source.kind}:${skill.skillPath ?? ""}:${skill.managed}`;
@@ -1929,7 +1933,7 @@ var package_default = {
 };
 
 // apps/cli/src/scaffold.ts
-var cliVersion = "0.7.2";
+var cliVersion = "0.7.3";
 var packageJson = (name, scaffold) => `${JSON.stringify({
   name,
   private: true,
@@ -2049,7 +2053,7 @@ var scaffoldPackage = (directory, scaffold = {}) => gen(function* () {
   const path = yield* Path;
   const root = path.resolve(directory);
   if (scaffold.fork !== undefined) {
-    const { shippedLoops } = yield* promise(() => import("./chunk-epdajq63.js"));
+    const { shippedLoops } = yield* promise(() => import("./chunk-80g9af03.js"));
     if (!(scaffold.fork in shippedLoops))
       return yield* new CliError({
         message: `Kitman ships no Loop ${scaffold.fork}; fork one of ${Object.keys(shippedLoops).join(", ")}`
@@ -2143,7 +2147,7 @@ var Usage = [
 `);
 var KitCreateValidator = guard(KitCreate);
 var KitUpdateValidator = guard(KitUpdate);
-var agentRuntime = promise(() => import("./chunk-vjnae06n.js"));
+var agentRuntime = promise(() => import("./chunk-kt08et8q.js"));
 var TuiLauncher = Reference("kitman/cli/TuiLauncher", {
   defaultValue: () => gen(function* () {
     const tui = yield* tryPromise({
@@ -2623,7 +2627,7 @@ function harnessSync(args) {
       };
     });
     const projectRoot = command.flags.projectScope ? yield* resolveProjectWriteRoot : undefined;
-    const targetPlans = yield* previewEnvironmentPlans(environments, command, projectRoot, config.mcpCredentialName, syncKits);
+    const targetPlans = yield* previewEnvironmentPlans(environments, command, projectRoot, config.mcpCredentialName, syncKits, (yield* readUserConfig())?.approvedSkillSources);
     const environmentPlan = composeAgentEnvironmentSyncPlan(targetPlans);
     const materializationPlans = targetPlans.map((target) => target.skills);
     const userConfigPlans = command.flags.projectScope ? [] : targetPlans.map((target) => target.harnessConfig);
@@ -2795,7 +2799,7 @@ function isInstallDefaultKit(kit) {
   const rollout = isObject(marketplace) && marketplace !== null && "rollout" in marketplace ? marketplace.rollout : undefined;
   return isObject(rollout) && rollout !== null && "installDefault" in rollout && rollout.installDefault === true;
 }
-function previewEnvironmentPlans(environments, command, projectRoot, mcpCredentialName, syncKits = []) {
+function previewEnvironmentPlans(environments, command, projectRoot, mcpCredentialName, syncKits = [], approvedSkillSources) {
   return forEach(environments, (environment, index) => gen(function* () {
     const rootDir = command.flags.projectScope ? projectRoot : getOrUndefined(yield* option2(String3("HOME")));
     const { previewAgentEnvironmentPlan } = yield* agentRuntime;
@@ -2805,6 +2809,7 @@ function previewEnvironmentPlans(environments, command, projectRoot, mcpCredenti
       scope: command.flags.projectScope ? "project" : "user",
       ...rootDir === undefined ? undefined : { rootDir },
       ...command.flags.noInstall === undefined ? undefined : { noInstall: command.flags.noInstall },
+      ...approvedSkillSources === undefined ? undefined : { approvedSkillSources },
       ...mcpCredentialName === undefined ? undefined : { mcpCredentialName }
     });
   }));
@@ -3449,7 +3454,7 @@ function startCanonicalHerdrRunnerCommand(input) {
       superviseReplica,
       verificationExecutor
     } = yield* agentRuntime;
-    const { makeRunnerRpcClient, runnerRpcUrl, runnerWebSocketProtocol } = yield* promise(() => import("./chunk-gzhxsb25.js"));
+    const { makeRunnerRpcClient, runnerRpcUrl, runnerWebSocketProtocol } = yield* promise(() => import("./chunk-zc0ebz8f.js"));
     const settings = yield* runnerSettings;
     const { concurrency, fullAccess, sshAgentAvailable } = settings;
     const personal = input.runner.ownership.kind === "personal";
@@ -3667,7 +3672,7 @@ function mcpCommand(args) {
     if (command.action === "run") {
       if (command.args.length > 0)
         return yield* new CliError({ message: `Unknown command: ${args.join(" ")}` });
-      const { runMcpServerCommand } = yield* promise(() => import("./chunk-226sychh.js"));
+      const { runMcpServerCommand } = yield* promise(() => import("./chunk-nvf0begz.js"));
       return yield* runMcpServerCommand({ flags: command.flags });
     }
     if (command.action !== "setup")
@@ -4687,7 +4692,7 @@ function secretCommand(args) {
   });
 }
 var PackageBuilder = Reference("kitman/cli/PackageBuilder", {
-  defaultValue: () => (directory) => flatMap(promise(() => import("./chunk-hrd7xmax.js")), (build) => build.buildPackage(directory))
+  defaultValue: () => (directory) => flatMap(promise(() => import("./chunk-yysejjz0.js")), (build) => build.buildPackage(directory))
 });
 var optionalEnv = (name) => String3(name).pipe(option2, map3(getOrUndefined));
 var ciIdToken = (apiUrl) => gen(function* () {
@@ -5192,9 +5197,7 @@ function runnerOwnershipFromCommand(command, required) {
     const ownerUserId = command.flags.scopeId;
     if (!ownerUserId)
       throw new Error("personal runner scope requires --scope-id <owner-user-id>");
-    if (command.flags.projectAccess !== undefined)
-      throw new Error("personal runner scope does not accept --project-access");
-    return { kind: "personal", ownerUserId };
+    return { kind: "personal", ownerUserId, projectAccess: command.flags.projectAccess ?? "all" };
   }
   throw new Error("--scope-type must be workspace, project, or personal");
 }
@@ -5450,12 +5453,12 @@ function repoBindingCredentialRefLabel(ref) {
 function runnerRow(runner) {
   const ownership = runner.ownership;
   let effectiveProjectAccess;
-  if (ownership.kind === "workspace")
-    effectiveProjectAccess = ownership.projectAccess === "all" ? "workspace_all" : runner.projectGrantIds.join(",") || "selected_none";
-  else if (ownership.kind === "project")
+  if (ownership.kind === "project")
     effectiveProjectAccess = `project:${ownership.projectId}`;
+  else if (ownership.projectAccess === "selected")
+    effectiveProjectAccess = runner.projectGrantIds.join(",") || "selected_none";
   else
-    effectiveProjectAccess = `personal:${ownership.ownerUserId}`;
+    effectiveProjectAccess = ownership.kind === "workspace" ? "workspace_all" : `personal:${ownership.ownerUserId}`;
   return {
     id: runner.id,
     name: runner.name,
@@ -5469,7 +5472,7 @@ function runnerRow(runner) {
     sandboxes: runner.capabilities.sandboxBackends.join(","),
     labels: runner.labels.join(","),
     ownership: ownership.kind,
-    projectAccess: ownership.kind === "workspace" ? ownership.projectAccess : undefined,
+    projectAccess: ownership.kind === "project" ? undefined : ownership.projectAccess,
     ownerUserId: ownership.kind === "personal" ? ownership.ownerUserId : undefined,
     scopedProjectId: ownership.kind === "project" ? ownership.projectId : undefined,
     effectiveProjectAccess,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kitman-sh/cli",
-  "version": "0.7.2",
+  "version": "0.7.3",
   "type": "module",
   "license": "UNLICENSED",
   "bin": {