@kitman-sh/sdk 0.9.0 → 0.10.52

package/types/packages/core/src/agent-sandbox-policy.d.ts

@@ -20,23 +20,37 @@ export type AgentSandboxNetwork = (typeof AgentSandboxNetwork)['Type'];
 export type AgentSandboxPolicy = (typeof AgentSandboxPolicy)['Type'];
 /** SSH keys and cloud credentials no sandboxed agent may read. */
 export declare const AgentSandboxCredentialPaths: readonly ['~/.ssh', '~/.aws', '~/.azure', '~/.config/gcloud', '~/.kube', '~/.docker/config.json', '~/.netrc', '~/.git-credentials', '~/.config/gh', '~/.config/glab-cli', '~/.config/kitman/auth.json'];
-/** The Runner's part of a policy; the Agent Backend adds the workspace, the Harness's config and credential. */
+/**
+ * Toolchain installs in the home directory a sandboxed agent or check may read, and mise's config, without which its
+ * shims drop every tool from `PATH`.
+ */
+export declare const AgentSandboxToolchainPaths: readonly ['~/.local/bin', '~/.local/share/mise', '~/.config/mise', '~/.bun', '~/.nvm', '~/.volta', '~/.rustup', '~/.cargo/bin', '~/.asdf/installs', '~/.asdf/shims', '~/.pyenv/versions', '~/.pyenv/shims', '~/.deno/bin', '~/go/bin'];
+/**
+ * The Runner's part of a policy: the home directory is unreadable but for toolchains, and credentials stay denied within
+ * anything allowed back. The Agent Backend adds the workspace, the Harness's config and login.
+ */
 export declare const runnerAgentSandboxPolicy: () => AgentSandboxPolicy;
 /** npm, PyPI, crates.io, the Go module proxy, RubyGems and Maven Central. */
 export declare const PackageRegistryHosts: readonly ['registry.npmjs.org', 'pypi.org', 'files.pythonhosted.org', 'crates.io', 'static.crates.io', 'index.crates.io', 'proxy.golang.org', 'sum.golang.org', 'rubygems.org', 'index.rubygems.org', 'repo.maven.apache.org', 'repo1.maven.org'];
-/** Where an agent Step may connect: Kitman, its Harness's model providers, package registries, its git host and its Agent's own hosts. */
+/**
+ * Where an agent Step may connect: Kitman, its Harness's model providers, package registries, its git host, its Agent's
+ * own hosts and those its Team and RepoBinding allow. Only the Agent can open the network.
+ */
 export declare const agentNetworkAllowlist: (input: {
     readonly apiUrl: string;
     readonly storageOrigin?: string | undefined;
     readonly providerHosts: readonly string[];
     readonly repoBindingHost?: string;
     readonly agent?: AgentSandboxNetwork;
+    /** The hosts the Step's Team and RepoBinding allow. */
+    readonly allowed?: readonly string[];
 }) => AgentSandboxNetwork;
-/** Where a check may connect: Kitman, package registries and its git host. */
+/** Where a check may connect: Kitman, registries, its git host and the hosts its Runner, Team and RepoBinding add. */
 export declare const verificationNetworkAllowlist: (input: {
     readonly apiUrl: string;
     readonly storageOrigin?: string | undefined;
     readonly repoBindingHost: string;
+    readonly hosts?: readonly string[];
 }) => "open" | {
     readonly hosts: readonly string[];
 };

package/types/packages/core/src/change-request-review.d.ts

@@ -37,12 +37,13 @@ export declare const ChangeRequestReview: Schema.Struct<{
     readonly workspaceId: Schema.String;
     readonly teamId: Schema.optionalKey<Schema.String>;
     readonly changeRequestId: Schema.String;
-    readonly taskId: Schema.String;
     readonly sessionId: Schema.optionalKey<Schema.String>;
     readonly stepAttemptId: Schema.optionalKey<Schema.String>;
     readonly reviewerActorType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>>;
     readonly reviewerActorId: Schema.optionalKey<Schema.String>;
     readonly outcome: Schema.Literals<readonly ["approved", "changes_requested", "commented", "needs_human", "failed"]>;
+    /** The head revision reviewed; an approval approves only this commit. */
+    readonly headCommitSha: Schema.optionalKey<Schema.String>;
     /** A person's words, or an agent's summary held to ChangeRequestReviewSafeSummary when it was written. */
     readonly summary: Schema.String;
     readonly providerActionRefs: Schema.$Array<Schema.Struct<{
@@ -72,12 +73,13 @@ export declare const ChangeRequestReviewList: Schema.Struct<{
         readonly workspaceId: Schema.String;
         readonly teamId: Schema.optionalKey<Schema.String>;
         readonly changeRequestId: Schema.String;
-        readonly taskId: Schema.String;
         readonly sessionId: Schema.optionalKey<Schema.String>;
         readonly stepAttemptId: Schema.optionalKey<Schema.String>;
         readonly reviewerActorType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>>;
         readonly reviewerActorId: Schema.optionalKey<Schema.String>;
         readonly outcome: Schema.Literals<readonly ["approved", "changes_requested", "commented", "needs_human", "failed"]>;
+        /** The head revision reviewed; an approval approves only this commit. */
+        readonly headCommitSha: Schema.optionalKey<Schema.String>;
         /** A person's words, or an agent's summary held to ChangeRequestReviewSafeSummary when it was written. */
         readonly summary: Schema.String;
         readonly providerActionRefs: Schema.$Array<Schema.Struct<{
@@ -109,12 +111,13 @@ export declare const ChangeRequestReviewDetail: Schema.Struct<{
         readonly workspaceId: Schema.String;
         readonly teamId: Schema.optionalKey<Schema.String>;
         readonly changeRequestId: Schema.String;
-        readonly taskId: Schema.String;
         readonly sessionId: Schema.optionalKey<Schema.String>;
         readonly stepAttemptId: Schema.optionalKey<Schema.String>;
         readonly reviewerActorType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>>;
         readonly reviewerActorId: Schema.optionalKey<Schema.String>;
         readonly outcome: Schema.Literals<readonly ["approved", "changes_requested", "commented", "needs_human", "failed"]>;
+        /** The head revision reviewed; an approval approves only this commit. */
+        readonly headCommitSha: Schema.optionalKey<Schema.String>;
         /** A person's words, or an agent's summary held to ChangeRequestReviewSafeSummary when it was written. */
         readonly summary: Schema.String;
         readonly providerActionRefs: Schema.$Array<Schema.Struct<{
@@ -142,6 +145,8 @@ export declare const ChangeRequestReviewDetail: Schema.Struct<{
 /** A person's words on a settled Run's ChangeRequest. */
 export declare const RunChangesRequest: Schema.Struct<{
     readonly text: Schema.String;
+    /** As on `RunStart`, for the next Run. */
+    readonly overrideBlockers: Schema.optionalKey<Schema.Boolean>;
 }>;
 /** The review that recorded them, and the next Run of the Loop that makes them. */
 export declare const RunChangesRequested: Schema.Struct<{
@@ -150,12 +155,13 @@ export declare const RunChangesRequested: Schema.Struct<{
         readonly workspaceId: Schema.String;
         readonly teamId: Schema.optionalKey<Schema.String>;
         readonly changeRequestId: Schema.String;
-        readonly taskId: Schema.String;
         readonly sessionId: Schema.optionalKey<Schema.String>;
         readonly stepAttemptId: Schema.optionalKey<Schema.String>;
         readonly reviewerActorType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>>;
         readonly reviewerActorId: Schema.optionalKey<Schema.String>;
         readonly outcome: Schema.Literals<readonly ["approved", "changes_requested", "commented", "needs_human", "failed"]>;
+        /** The head revision reviewed; an approval approves only this commit. */
+        readonly headCommitSha: Schema.optionalKey<Schema.String>;
         /** A person's words, or an agent's summary held to ChangeRequestReviewSafeSummary when it was written. */
         readonly summary: Schema.String;
         readonly providerActionRefs: Schema.$Array<Schema.Struct<{
@@ -187,7 +193,7 @@ export declare const RunChangesRequested: Schema.Struct<{
             readonly taskId: Schema.optionalKey<Schema.String>;
             readonly sessionId: Schema.optionalKey<Schema.String>;
             readonly loopId: Schema.String;
-            readonly packageVersionId: Schema.optionalKey<Schema.String>;
+            readonly kitVersionId: Schema.optionalKey<Schema.String>;
             readonly resourceVersion: Schema.Int;
             readonly status: Schema.Literals<readonly ["pending", "running", "blocked", "completed", "failed", "canceled", "expired"]>;
             readonly trigger: Schema.Struct<{
@@ -267,7 +273,9 @@ export declare const RunChangesRequested: Schema.Struct<{
             }>;
             readonly loopDigest: Schema.optionalKey<Schema.String>;
             readonly loopLayer: Schema.optionalKey<Schema.Literals<readonly ["team", "workspace", "shipped"]>>;
+            readonly loopVersion: Schema.optionalKey<Schema.String>;
             readonly parentRunId: Schema.optionalKey<Schema.String>;
+            readonly continuesRunId: Schema.optionalKey<Schema.String>;
             readonly waiting: Schema.optionalKey<Schema.$Array<Schema.Union<readonly [Schema.Struct<{
                 readonly kind: Schema.Literal<"question">;
                 readonly name: Schema.String;
@@ -293,6 +301,13 @@ export declare const RunChangesRequested: Schema.Struct<{
                 readonly kind: Schema.Literal<"verification">;
                 readonly name: Schema.String;
                 readonly verificationId: Schema.String;
+            }>, Schema.Struct<{
+                readonly kind: Schema.Literal<"queue">;
+                readonly name: Schema.String;
+                readonly workUnitId: Schema.String;
+                readonly rank: Schema.Literals<readonly ["in_progress", "finishing", "new"]>;
+                readonly position: Schema.Int;
+                readonly reason: Schema.String;
             }>]>>>;
             readonly output: Schema.optionalKey<Schema.Unknown>;
             readonly failureSummary: Schema.optionalKey<Schema.String>;

package/types/packages/core/src/change-request.d.ts

@@ -2,10 +2,6 @@ import * as Schema from 'effect/Schema';
 import { ActorType } from './common';
 export declare const ChangeRequestStatuses: readonly ['draft', 'open', 'closed', 'merged'];
 export declare const ChangeRequestStatus: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
-export declare const ChangeRequestAssociationStatuses: readonly ['active', 'unlinked', 'conflict'];
-export declare const ChangeRequestAssociationStatus: Schema.Literals<readonly ["active", "unlinked", "conflict"]>;
-export declare const ChangeRequestRoles: readonly ['primary', 'supporting', 'replacement'];
-export declare const ChangeRequestRole: Schema.Literals<readonly ["primary", "supporting", "replacement"]>;
 export declare const ChangeRequestProviderRef: Schema.Struct<{
     readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
     readonly host: Schema.String;
@@ -35,8 +31,8 @@ export declare const ChangeRequest: Schema.Struct<{
     readonly id: Schema.String;
     readonly workspaceId: Schema.String;
     readonly teamId: Schema.optionalKey<Schema.String>;
-    readonly taskId: Schema.String;
-    readonly role: Schema.Literals<readonly ["primary", "supporting", "replacement"]>;
+    /** The Tasks it delivers; none for a taskless Run's, such as a scheduled Sweep's batch. */
+    readonly taskIds: Schema.$Array<Schema.String>;
     readonly stepAttemptId: Schema.optionalKey<Schema.String>;
     readonly repoBindingId: Schema.String;
     readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
@@ -51,8 +47,6 @@ export declare const ChangeRequest: Schema.Struct<{
     readonly targetBranch: Schema.String;
     readonly status: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
     readonly draft: Schema.Boolean;
-    readonly associationStatus: Schema.Literals<readonly ["active", "unlinked", "conflict"]>;
-    readonly associationRevision: Schema.Int;
     readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
         readonly headCommitSha: Schema.optionalKey<Schema.String>;
         readonly baseCommitSha: Schema.optionalKey<Schema.String>;
@@ -80,8 +74,8 @@ export declare const ChangeRequestList: Schema.Struct<{
         readonly id: Schema.String;
         readonly workspaceId: Schema.String;
         readonly teamId: Schema.optionalKey<Schema.String>;
-        readonly taskId: Schema.String;
-        readonly role: Schema.Literals<readonly ["primary", "supporting", "replacement"]>;
+        /** The Tasks it delivers; none for a taskless Run's, such as a scheduled Sweep's batch. */
+        readonly taskIds: Schema.$Array<Schema.String>;
         readonly stepAttemptId: Schema.optionalKey<Schema.String>;
         readonly repoBindingId: Schema.String;
         readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
@@ -96,8 +90,6 @@ export declare const ChangeRequestList: Schema.Struct<{
         readonly targetBranch: Schema.String;
         readonly status: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
         readonly draft: Schema.Boolean;
-        readonly associationStatus: Schema.Literals<readonly ["active", "unlinked", "conflict"]>;
-        readonly associationRevision: Schema.Int;
         readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
             readonly headCommitSha: Schema.optionalKey<Schema.String>;
             readonly baseCommitSha: Schema.optionalKey<Schema.String>;
@@ -127,8 +119,8 @@ export declare const ChangeRequestDetail: Schema.Struct<{
         readonly id: Schema.String;
         readonly workspaceId: Schema.String;
         readonly teamId: Schema.optionalKey<Schema.String>;
-        readonly taskId: Schema.String;
-        readonly role: Schema.Literals<readonly ["primary", "supporting", "replacement"]>;
+        /** The Tasks it delivers; none for a taskless Run's, such as a scheduled Sweep's batch. */
+        readonly taskIds: Schema.$Array<Schema.String>;
         readonly stepAttemptId: Schema.optionalKey<Schema.String>;
         readonly repoBindingId: Schema.String;
         readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
@@ -143,8 +135,6 @@ export declare const ChangeRequestDetail: Schema.Struct<{
         readonly targetBranch: Schema.String;
         readonly status: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
         readonly draft: Schema.Boolean;
-        readonly associationStatus: Schema.Literals<readonly ["active", "unlinked", "conflict"]>;
-        readonly associationRevision: Schema.Int;
         readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
             readonly headCommitSha: Schema.optionalKey<Schema.String>;
             readonly baseCommitSha: Schema.optionalKey<Schema.String>;
@@ -199,188 +189,9 @@ export declare const ChangeRequestFiles: Schema.Struct<{
 }>;
 export type ChangeRequestChangedFile = (typeof ChangeRequestChangedFile)['Type'];
 export type ChangeRequestFiles = (typeof ChangeRequestFiles)['Type'];
-export declare const ChangeRequestAssociationPreview: Schema.Struct<{
-    readonly changeRequest: Schema.Struct<{
-        readonly id: Schema.String;
-        readonly workspaceId: Schema.String;
-        readonly teamId: Schema.optionalKey<Schema.String>;
-        readonly taskId: Schema.String;
-        readonly role: Schema.Literals<readonly ["primary", "supporting", "replacement"]>;
-        readonly stepAttemptId: Schema.optionalKey<Schema.String>;
-        readonly repoBindingId: Schema.String;
-        readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
-        readonly host: Schema.String;
-        readonly owner: Schema.String;
-        readonly repositoryName: Schema.String;
-        readonly providerRepositoryId: Schema.String;
-        readonly url: Schema.String;
-        readonly externalId: Schema.String;
-        readonly title: Schema.String;
-        readonly sourceBranch: Schema.String;
-        readonly targetBranch: Schema.String;
-        readonly status: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
-        readonly draft: Schema.Boolean;
-        readonly associationStatus: Schema.Literals<readonly ["active", "unlinked", "conflict"]>;
-        readonly associationRevision: Schema.Int;
-        readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
-            readonly headCommitSha: Schema.optionalKey<Schema.String>;
-            readonly baseCommitSha: Schema.optionalKey<Schema.String>;
-            readonly bodyDigest: Schema.optionalKey<Schema.String>;
-            readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
-            readonly mergeable: Schema.optionalKey<Schema.Boolean>;
-            readonly mergeState: Schema.optionalKey<Schema.String>;
-            readonly checkState: Schema.optionalKey<Schema.String>;
-            readonly reviewState: Schema.optionalKey<Schema.String>;
-            readonly reviewHeadCommitSha: Schema.optionalKey<Schema.String>;
-            readonly checkHeadCommitSha: Schema.optionalKey<Schema.String>;
-            readonly snapshotObservedAt: Schema.optionalKey<Schema.String>;
-            readonly reviewObservedAt: Schema.optionalKey<Schema.String>;
-            readonly checkObservedAt: Schema.optionalKey<Schema.String>;
-            readonly reconciliationState: Schema.optionalKey<Schema.Literals<readonly ["current", "required"]>>;
-        }>>;
-        readonly lastObservedAt: Schema.String;
-        readonly createdByActorType: Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>;
-        readonly createdByActorId: Schema.String;
-        readonly createdAt: Schema.String;
-        readonly updatedAt: Schema.String;
-    }>;
-    readonly currentTaskId: Schema.String;
-    readonly proposedTaskId: Schema.optionalKey<Schema.String>;
-    readonly repositoryCompatible: Schema.Boolean;
-    readonly canApply: Schema.Boolean;
-}>;
-export declare const ChangeRequestAssociationMutation: Schema.Union<readonly [Schema.Struct<{
-    readonly action: Schema.Literal<"unlink">;
-    readonly expectedRevision: Schema.Int;
-    readonly reason: Schema.String;
-}>, Schema.Struct<{
-    readonly action: Schema.Literal<"reassign">;
-    readonly targetTaskId: Schema.String;
-    readonly expectedRevision: Schema.Int;
-    readonly reason: Schema.String;
-}>]>;
-export declare const ChangeRequestAssociationConflict: Schema.Struct<{
-    readonly id: Schema.String;
-    readonly workspaceId: Schema.String;
-    readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
-    readonly host: Schema.String;
-    readonly owner: Schema.String;
-    readonly repositoryName: Schema.String;
-    readonly providerRepositoryId: Schema.String;
-    readonly externalId: Schema.String;
-    readonly url: Schema.String;
-    readonly title: Schema.String;
-    readonly sourceBranch: Schema.String;
-    readonly targetBranch: Schema.String;
-    readonly changeRequestStatus: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
-    readonly draft: Schema.Boolean;
-    readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
-        readonly headCommitSha: Schema.optionalKey<Schema.String>;
-        readonly baseCommitSha: Schema.optionalKey<Schema.String>;
-        readonly bodyDigest: Schema.optionalKey<Schema.String>;
-        readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
-        readonly mergeable: Schema.optionalKey<Schema.Boolean>;
-        readonly mergeState: Schema.optionalKey<Schema.String>;
-        readonly checkState: Schema.optionalKey<Schema.String>;
-        readonly reviewState: Schema.optionalKey<Schema.String>;
-        readonly reviewHeadCommitSha: Schema.optionalKey<Schema.String>;
-        readonly checkHeadCommitSha: Schema.optionalKey<Schema.String>;
-        readonly snapshotObservedAt: Schema.optionalKey<Schema.String>;
-        readonly reviewObservedAt: Schema.optionalKey<Schema.String>;
-        readonly checkObservedAt: Schema.optionalKey<Schema.String>;
-        readonly reconciliationState: Schema.optionalKey<Schema.Literals<readonly ["current", "required"]>>;
-    }>>;
-    readonly candidateTaskIds: Schema.$Array<Schema.String>;
-    readonly status: Schema.Literals<readonly ["open", "resolved"]>;
-    readonly revision: Schema.Int;
-    readonly createdAt: Schema.String;
-    readonly resolvedAt: Schema.optionalKey<Schema.String>;
-}>;
-export declare const ChangeRequestAssociationConflictList: Schema.Struct<{
-    readonly items: Schema.$Array<Schema.Struct<{
-        readonly id: Schema.String;
-        readonly workspaceId: Schema.String;
-        readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
-        readonly host: Schema.String;
-        readonly owner: Schema.String;
-        readonly repositoryName: Schema.String;
-        readonly providerRepositoryId: Schema.String;
-        readonly externalId: Schema.String;
-        readonly url: Schema.String;
-        readonly title: Schema.String;
-        readonly sourceBranch: Schema.String;
-        readonly targetBranch: Schema.String;
-        readonly changeRequestStatus: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
-        readonly draft: Schema.Boolean;
-        readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
-            readonly headCommitSha: Schema.optionalKey<Schema.String>;
-            readonly baseCommitSha: Schema.optionalKey<Schema.String>;
-            readonly bodyDigest: Schema.optionalKey<Schema.String>;
-            readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
-            readonly mergeable: Schema.optionalKey<Schema.Boolean>;
-            readonly mergeState: Schema.optionalKey<Schema.String>;
-            readonly checkState: Schema.optionalKey<Schema.String>;
-            readonly reviewState: Schema.optionalKey<Schema.String>;
-            readonly reviewHeadCommitSha: Schema.optionalKey<Schema.String>;
-            readonly checkHeadCommitSha: Schema.optionalKey<Schema.String>;
-            readonly snapshotObservedAt: Schema.optionalKey<Schema.String>;
-            readonly reviewObservedAt: Schema.optionalKey<Schema.String>;
-            readonly checkObservedAt: Schema.optionalKey<Schema.String>;
-            readonly reconciliationState: Schema.optionalKey<Schema.Literals<readonly ["current", "required"]>>;
-        }>>;
-        readonly candidateTaskIds: Schema.$Array<Schema.String>;
-        readonly status: Schema.Literals<readonly ["open", "resolved"]>;
-        readonly revision: Schema.Int;
-        readonly createdAt: Schema.String;
-        readonly resolvedAt: Schema.optionalKey<Schema.String>;
-    }>>;
-}>;
-export declare const ChangeRequestAssociationConflictPreview: Schema.Struct<{
-    readonly conflict: Schema.Struct<{
-        readonly id: Schema.String;
-        readonly workspaceId: Schema.String;
-        readonly provider: Schema.Literals<readonly ["github", "gitlab", "forgejo", "gitea", "gitee", "bitbucket", "azure-devops", "generic_git"]>;
-        readonly host: Schema.String;
-        readonly owner: Schema.String;
-        readonly repositoryName: Schema.String;
-        readonly providerRepositoryId: Schema.String;
-        readonly externalId: Schema.String;
-        readonly url: Schema.String;
-        readonly title: Schema.String;
-        readonly sourceBranch: Schema.String;
-        readonly targetBranch: Schema.String;
-        readonly changeRequestStatus: Schema.Literals<readonly ["draft", "open", "closed", "merged"]>;
-        readonly draft: Schema.Boolean;
-        readonly providerMetadata: Schema.optionalKey<Schema.Struct<{
-            readonly headCommitSha: Schema.optionalKey<Schema.String>;
-            readonly baseCommitSha: Schema.optionalKey<Schema.String>;
-            readonly bodyDigest: Schema.optionalKey<Schema.String>;
-            readonly labels: Schema.optionalKey<Schema.$Array<Schema.String>>;
-            readonly mergeable: Schema.optionalKey<Schema.Boolean>;
-            readonly mergeState: Schema.optionalKey<Schema.String>;
-            readonly checkState: Schema.optionalKey<Schema.String>;
-            readonly reviewState: Schema.optionalKey<Schema.String>;
-            readonly reviewHeadCommitSha: Schema.optionalKey<Schema.String>;
-            readonly checkHeadCommitSha: Schema.optionalKey<Schema.String>;
-            readonly snapshotObservedAt: Schema.optionalKey<Schema.String>;
-            readonly reviewObservedAt: Schema.optionalKey<Schema.String>;
-            readonly checkObservedAt: Schema.optionalKey<Schema.String>;
-            readonly reconciliationState: Schema.optionalKey<Schema.Literals<readonly ["current", "required"]>>;
-        }>>;
-        readonly candidateTaskIds: Schema.$Array<Schema.String>;
-        readonly status: Schema.Literals<readonly ["open", "resolved"]>;
-        readonly revision: Schema.Int;
-        readonly createdAt: Schema.String;
-        readonly resolvedAt: Schema.optionalKey<Schema.String>;
-    }>;
-    readonly proposedTaskId: Schema.String;
-    readonly repositoryCompatible: Schema.Boolean;
-    readonly canApply: Schema.Boolean;
-}>;
-export declare const ChangeRequestAssociationConflictResolution: Schema.Struct<{
-    readonly targetTaskId: Schema.String;
-    readonly expectedRevision: Schema.Int;
-    readonly reason: Schema.String;
+/** A Task to link a ChangeRequest to, which also lifts that Task's suppression. */
+export declare const ChangeRequestTaskLink: Schema.Struct<{
+    readonly taskId: Schema.String;
 }>;
 export declare const ChangeRequestReadiness: Schema.Struct<{
     readonly state: Schema.Literals<readonly ["ready", "blocked", "stale"]>;
@@ -428,14 +239,24 @@ export declare const ChangeRequestReadiness: Schema.Struct<{
 }>;
 type ChangeRequestReadinessInput = {
     readonly changeRequest: Pick<ChangeRequest, 'status' | 'draft' | 'url' | 'lastObservedAt' | 'createdByActorType' | 'createdByActorId' | 'providerMetadata'>;
-    readonly acceptanceCriteria: readonly string[];
+    /** Each delivered Task's acceptance criteria; none when it delivers no Task. */
+    readonly taskAcceptanceCriteria: readonly (readonly string[])[];
     readonly verificationCommands: readonly string[];
-    readonly reviews: readonly Pick<ChangeRequestReviewReadinessEvidence, 'outcome' | 'reviewerActorType' | 'reviewerActorId'>[];
+    readonly reviews: readonly Pick<ChangeRequestReviewReadinessEvidence, 'outcome' | 'reviewerActorType' | 'reviewerActorId' | 'headCommitSha'>[];
     readonly connection: {
         readonly connected: boolean;
         readonly credentialConfigured: boolean;
         readonly capabilities: readonly string[];
     };
+    /** The latest pipeline result reported to Kitman for the head, when the pipeline runs outside the forge. */
+    readonly reportedPipeline?: {
+        readonly head: string;
+        readonly status: 'success' | 'failed' | 'canceled';
+        readonly reportedBy?: {
+            readonly actorType: string;
+            readonly actorId: string;
+        };
+    };
     readonly now: Date;
     readonly maxAgeSeconds?: number;
 };
@@ -443,21 +264,25 @@ type ChangeRequestReviewReadinessEvidence = {
     readonly outcome: string;
     readonly reviewerActorType?: ActorType;
     readonly reviewerActorId?: string;
+    readonly headCommitSha?: string;
 };
+/** The actor id Kitman records a Run's own writes under, such as the ChangeRequest it opens or a review it approves. */
+export declare const runActorId: (runId: string) => string;
+/**
+ * Whether a review approves `head` independently of whoever opened the ChangeRequest: a person's, or a Run's recorded
+ * under `runActorId` once Kitman has checked it did not write the change. Any other agent, including a delegated tool
+ * such as a Step's Code Mode, cannot be tied to the Run it works for, so it may be the author.
+ */
+export declare function isIndependentApproval(review: ChangeRequestReviewReadinessEvidence, changeRequest: Pick<ChangeRequest, 'createdByActorType' | 'createdByActorId'>, head: string | undefined): boolean;
+/** The `checkState` a refresh records when the forge ran no checks for the head. */
+export declare const noForgeChecks = "none";
 export declare function evaluateChangeRequestReadiness(input: ChangeRequestReadinessInput): ChangeRequestReadiness;
 export type ChangeRequestStatus = (typeof ChangeRequestStatus)['Type'];
-export type ChangeRequestRole = (typeof ChangeRequestRole)['Type'];
-export type ChangeRequestAssociationStatus = (typeof ChangeRequestAssociationStatus)['Type'];
 export type ChangeRequestProviderRef = (typeof ChangeRequestProviderRef)['Type'];
 export type ChangeRequestProviderMetadata = (typeof ChangeRequestProviderMetadata)['Type'];
 export type ChangeRequest = (typeof ChangeRequest)['Type'];
 export type ChangeRequestList = (typeof ChangeRequestList)['Type'];
 export type ChangeRequestDetail = (typeof ChangeRequestDetail)['Type'];
-export type ChangeRequestAssociationPreview = (typeof ChangeRequestAssociationPreview)['Type'];
-export type ChangeRequestAssociationMutation = (typeof ChangeRequestAssociationMutation)['Type'];
-export type ChangeRequestAssociationConflict = (typeof ChangeRequestAssociationConflict)['Type'];
-export type ChangeRequestAssociationConflictList = (typeof ChangeRequestAssociationConflictList)['Type'];
-export type ChangeRequestAssociationConflictPreview = (typeof ChangeRequestAssociationConflictPreview)['Type'];
-export type ChangeRequestAssociationConflictResolution = (typeof ChangeRequestAssociationConflictResolution)['Type'];
+export type ChangeRequestTaskLink = (typeof ChangeRequestTaskLink)['Type'];
 export type ChangeRequestReadiness = (typeof ChangeRequestReadiness)['Type'];
 export {};

package/types/packages/core/src/crypto.d.ts

@@ -1,6 +1,8 @@
 type Encoding = 'hex' | 'base64' | 'base64url';
 type Data = string | Uint8Array;
 export declare function digestSha256(data: Data | readonly Data[], encoding: Encoding): string;
+export declare function digestSha512(data: Data, encoding: Encoding): string;
+export declare function digestWith(algorithm: 'sha1' | 'sha256' | 'sha384' | 'sha512', data: Data, encoding: Encoding): string;
 export declare function hmacSha256Bytes(secret: Data, data: Data | readonly Data[]): Uint8Array;
 export declare function hmacSha256(secret: Data, data: Data | readonly Data[], encoding: Encoding): string;
 /** Constant-time equality; values of different lengths are unequal. */

package/types/packages/core/src/index.d.ts

@@ -11,7 +11,6 @@ export * from './extension';
 export * from './sync-kit';
 export * from './agent-sandbox-policy';
 export * from './agent-launch-snapshot';
-export * from './kit';
 export * from './marketplace';
 export * from './memory';
 export * from './proposal';
@@ -36,7 +35,6 @@ export * from './global-search';
 export * from './change-delivery';
 export * from './change-request';
 export * from './change-request-review';
-export * from './engineering-resources';
 export * from './delivery-policy';
 export * from './delivery-operation';
 export * from './epic-delivery';
@@ -47,11 +45,14 @@ export * from './github-delivery-fixtures';
 export * from './integration';
 export * from './enterprise-forge';
 export * from './loop';
+export * from './question-recommendation';
 export * from './run-file';
 export * from './storage';
 export * from './run-launch';
+export * from './resource-claim';
 export * from './my-teams';
 export * from './notification';
+export * from './push';
 export * from './intent';
 export * from './loop-version';
 export * from './id';
@@ -72,10 +73,13 @@ export * from './following';
 export * from './approval-queue';
 export * from './data-lifecycle';
 export * from './run-display';
+export * from './run-queue';
 export * from './run-graph';
 export * from './trust-panel';
 export * from './run-journal';
 export * from './loop-layers';
-export * from './package-declarations';
+export * from './kit-declarations';
 export * from './secret';
-export * from './package';
+export * from './network-host';
+export * from './kit';
+export * from './kit-install';