@kitman-sh/sdk 0.8.0 → 0.10.52

package/types/packages/sdk/src/program/host.d.ts

@@ -1,57 +1,204 @@
 import type { ProgramLease } from '../../../live/src/rpc/runner-group';
-import { makeRunnerRpcClient } from '../../../live/src/rpc/runner-client';
+import { type ProgramRpcClient } from '../../../live/src/rpc/runner-client';
 import * as Effect from 'effect/Effect';
 import * as Option from 'effect/Option';
 import * as Schema from 'effect/Schema';
-import type { PackageConfig } from '../loop/config';
+import type { KitConfig } from '../loop/config';
 import { ManifestInvalid } from '../loop/define';
 import { type ProgramJournal } from './engine';
 /** Asks a bundle for its declarations and check results instead of running a program. */
 export declare const describeFlag = "--kitman-describe";
+/** Each Kit the bundle carries, the built Kit first, or the first refusal. */
 export declare const Described: Schema.Union<readonly [Schema.TaggedStruct<"Described", {
-    readonly loops: Schema.$Array<Schema.Struct<{
-        readonly id: Schema.String;
-        readonly title: Schema.String;
-        readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-        readonly output: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-        readonly outcome: Schema.optionalKey<Schema.Literals<readonly ["feature", "bug", "refactor", "investigation", "docs", "migration"]>>;
-        readonly agents: Schema.$Record<Schema.String, Schema.String>;
-        readonly checkout: Schema.Literals<readonly ["none", "read", "write"]>;
-        readonly when: Schema.$Array<Schema.Struct<{
-            readonly event: Schema.String;
-            readonly filter: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
-            readonly input: Schema.$Record<Schema.String, Schema.String>;
-        }>>;
-        readonly offers: Schema.$Array<Schema.Struct<{
+    readonly kits: Schema.$Array<Schema.Struct<{
+        readonly name: Schema.String;
+        readonly version: Schema.String;
+        readonly loops: Schema.$Array<Schema.Struct<{
             readonly id: Schema.String;
             readonly title: Schema.String;
-            readonly loop: Schema.String;
+            readonly version: Schema.optionalKey<Schema.String>;
+            readonly input: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            readonly output: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+            readonly outcome: Schema.optionalKey<Schema.Literals<readonly ["feature", "bug", "refactor", "investigation", "docs", "migration", "performance"]>>;
+            readonly agents: Schema.$Record<Schema.String, Schema.String>;
+            readonly checkout: Schema.Literals<readonly ["none", "read", "write"]>;
+            readonly when: Schema.$Array<Schema.Struct<{
+                readonly event: Schema.String;
+                readonly filter: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+                readonly input: Schema.$Record<Schema.String, Schema.String>;
+                readonly values: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+            }>>;
+            readonly offers: Schema.$Array<Schema.Struct<{
+                readonly id: Schema.String;
+                readonly title: Schema.String;
+                readonly loop: Schema.String;
+                readonly from: Schema.optionalKey<Schema.String>;
+            }>>;
+            readonly capabilities: Schema.$Array<Schema.Literals<readonly ["agent_work", "ask", "call", "verify", "change_request", "write_back", "post_comment", "create_tasks", "merge_change_request", "approve_change_request", "publish_release", "read_transcripts", "read_change_request", "measure", "claim", "propose", "read_project", "draft_update"]>>;
+            readonly secrets: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            readonly network: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
+                readonly hosts: Schema.$Array<Schema.String>;
+            }>, Schema.Literal<"open">]>>;
+            readonly schedule: Schema.optionalKey<Schema.Struct<{
+                readonly rule: Schema.Union<readonly [Schema.Struct<{
+                    readonly frequency: Schema.Literals<readonly ["daily", "weekly"]>;
+                    readonly hour: Schema.Int;
+                    readonly minute: Schema.Int;
+                    readonly second: Schema.optionalKey<Schema.Int>;
+                    readonly daysOfWeek: Schema.optionalKey<Schema.$Array<Schema.Int>>;
+                }>, Schema.Struct<{
+                    readonly cron: Schema.String;
+                }>]>;
+                readonly timezone: Schema.String;
+            }>>;
         }>>;
-        readonly capabilities: Schema.$Array<Schema.Literals<readonly ["agent_work", "ask", "call", "verify", "change_request", "write_back", "post_comment", "create_tasks", "merge_change_request", "publish_release", "read_transcripts", "propose", "read_project", "draft_update"]>>;
-        readonly secrets: Schema.optionalKey<Schema.$Array<Schema.String>>;
-        readonly network: Schema.optionalKey<Schema.Union<readonly [Schema.Struct<{
-            readonly hosts: Schema.$Array<Schema.String>;
-        }>, Schema.Literal<"open">]>>;
-        readonly schedule: Schema.optionalKey<Schema.Struct<{
-            readonly rule: Schema.Union<readonly [Schema.Struct<{
-                readonly frequency: Schema.Literals<readonly ["daily", "weekly"]>;
-                readonly hour: Schema.Int;
-                readonly minute: Schema.Int;
-                readonly second: Schema.optionalKey<Schema.Int>;
-                readonly daysOfWeek: Schema.optionalKey<Schema.$Array<Schema.Int>>;
+        readonly agents: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
+        readonly schedules: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
+        readonly setup: Schema.optionalKey<Schema.Struct<{
+            readonly skills: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"skills_sh">;
+                    readonly slug: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"kitman">;
+                    readonly skillId: Schema.optionalKey<Schema.String>;
+                    readonly name: Schema.optionalKey<Schema.String>;
+                    readonly contentMarkdown: Schema.optionalKey<Schema.String>;
+                    readonly files: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"git">;
+                    readonly url: Schema.String;
+                    readonly ref: Schema.optionalKey<Schema.String>;
+                    readonly path: Schema.optionalKey<Schema.String>;
+                    readonly sha256: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"package">;
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.String;
+                    readonly path: Schema.optionalKey<Schema.String>;
+                    readonly sha256: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"url">;
+                    readonly url: Schema.String;
+                    readonly sha256: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"local_path">;
+                    readonly path: Schema.String;
+                }>]>;
+                readonly appliesTo: Schema.optionalKey<Schema.Struct<{
+                    readonly dependencies: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly files: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                }>>;
+            }>>>;
+            readonly plugins: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly sources: Schema.NonEmptyArray<Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"package">;
+                    readonly packageName: Schema.String;
+                    readonly version: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"git">;
+                    readonly url: Schema.String;
+                    readonly ref: Schema.optionalKey<Schema.String>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"url">;
+                    readonly url: Schema.String;
+                    readonly sha256: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"local_path">;
+                    readonly path: Schema.String;
+                }>]>>;
+            }>>>;
+            readonly mcpServers: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly transport: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"stdio">;
+                    readonly command: Schema.String;
+                    readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                    readonly env: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"streamable_http">;
+                    readonly url: Schema.String;
+                    readonly headers: Schema.optionalKey<Schema.$Record<Schema.String, Schema.String>>;
+                }>]>;
+            }>>>;
+            readonly harnessSettings: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly harness: Schema.Union<readonly [Schema.Literal<"opencode">, Schema.Literal<"claude-code">, Schema.Literal<"codex">, Schema.Literal<"pi">]>;
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>>>;
+            readonly providerAuthRefs: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"existing_harness_login">;
+                readonly accountHint: Schema.optionalKey<Schema.String>;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"local_env">;
+                readonly envName: Schema.String;
             }>, Schema.Struct<{
-                readonly cron: Schema.String;
-            }>]>;
-            readonly timezone: Schema.String;
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"runner_secret">;
+                readonly runnerSecretName: Schema.String;
+            }>, Schema.Struct<{
+                readonly provider: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly kind: Schema.Literal<"managed_oauth">;
+                readonly grantId: Schema.optionalKey<Schema.String>;
+            }>]>>>;
+            readonly runnerSecretRefs: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly source: Schema.Union<readonly [Schema.Struct<{
+                    readonly kind: Schema.Literal<"env">;
+                    readonly envName: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"file">;
+                    readonly pathRef: Schema.String;
+                }>, Schema.Struct<{
+                    readonly kind: Schema.Literal<"exec">;
+                    readonly commandRef: Schema.String;
+                }>]>;
+                readonly capabilities: Schema.optionalKey<Schema.$Array<Schema.String>>;
+            }>>>;
+            readonly permissions: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>>>;
+            readonly hooks: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly name: Schema.String;
+                readonly event: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly command: Schema.String;
+                readonly args: Schema.optionalKey<Schema.$Array<Schema.String>>;
+                readonly timeoutMs: Schema.optionalKey<Schema.Finite>;
+            }>>>;
+            readonly runtimeConstraints: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>>>;
+            readonly sandboxPolicyRequirements: Schema.optionalKey<Schema.$Array<Schema.Struct<{
+                readonly key: Schema.String;
+                readonly policy: Schema.Union<readonly [Schema.Literal<"recommended">, Schema.Literal<"required">]>;
+                readonly value: Schema.Unknown;
+            }>>>;
+            readonly instructions: Schema.optionalKey<Schema.String>;
         }>>;
     }>>;
-    readonly agents: Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>;
-    readonly schedules: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
-    readonly kits: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Codec<Schema.Json, Schema.Json, never, never>>>;
 }>, Schema.TaggedStruct<"Refused", {
     readonly error: Schema.Union<readonly [typeof ManifestInvalid, Schema.Union<readonly [typeof import("../loop").CheckFailed, typeof import("../loop").StepNamedTwice, typeof import("../loop").ReplayDiverged]>]>;
 }>]>;
-type SecretsRpc = Pick<Effect.Success<ReturnType<typeof makeRunnerRpcClient>>, 'programSecrets' | 'finishProgram'>;
+type SecretsRpc = Pick<ProgramRpcClient, 'programSecrets' | 'finishProgram'>;
 /**
  * The Secrets the Loop declares, or none when Kitman refuses them (one deleted while the Run waited): the Run fails
  * then, saying why, since a replay would only be refused again.
@@ -77,6 +224,21 @@ export declare const networkGuard: (input: {
     fetch: Fetch;
     journal: <Journal extends Pick<ProgramJournal, 'suspend' | 'finish'>>(journal: Journal) => Journal;
 };
-/** The entry of every Package bundle. */
-export declare const runPackage: (config: PackageConfig) => void;
+/** A Kit's package name and version, as its build reads them from `package.json`. */
+export type KitIdentity = {
+    readonly name: string;
+    readonly version: string;
+};
+type CarriedKit = {
+    readonly identity: KitIdentity;
+    readonly config: KitConfig;
+};
+/**
+ * The Kit and each Kit it extends, in priority order: the Kit, then each `extends` entry and what it extends, in turn.
+ * A Kit met twice keeps its first place and its highest version. `packages` names each Kit module the build found; a
+ * Kit in `extends` that none names is refused.
+ */
+export declare const carriedKits: (config: KitConfig, identity: KitIdentity, packages: readonly (readonly [KitConfig, KitIdentity])[]) => readonly CarriedKit[];
+/** The entry of every Kit bundle, given the Kit's identity and that of each Kit package it depends on. */
+export declare const runKit: (config: KitConfig, identity: KitIdentity, packages: readonly (readonly [KitConfig, KitIdentity])[]) => void;
 export {};

package/types/packages/core/src/engineering-resources.d.ts

@@ -1,24 +0,0 @@
-import type { KitCreate } from './kit';
-declare const marketplace: {
-    readonly source: 'kitman-engineering-loop';
-    readonly publisher: 'Kitman Platform';
-    readonly visibility: 'public';
-    readonly trusted: true;
-    readonly reviewStatus: 'approved';
-    readonly installable: true;
-    readonly rollout: {
-        readonly channel: 'default';
-        readonly installDefault: true;
-        readonly preservesExistingInstallations: true;
-    };
-};
-type ShippedKit = Omit<KitCreate, 'metadata' | 'kind' | 'slug'> & {
-    readonly slug: string;
-    readonly kind: 'process' | 'technology';
-    readonly metadata: {
-        readonly marketplace: typeof marketplace;
-    };
-};
-/** The Kits every Workspace gets by default: the owner's Claude Code setup, for every Harness, at the latest versions. */
-export declare const ShippedKitCatalog: readonly ShippedKit[];
-export {};