@desplega.ai/agent-swarm 1.105.0 → 1.107.0

package/dist/{cli-0e24r2b6.js → cli-8p36pjyp.js}

@@ -1,12 +1,16 @@
 import {
   embedScript
-} from "./cli-dd6tegmp.js";
+} from "./cli-hn38x1bp.js";
 import {
   computeContentHash,
+  decryptSecret,
+  encryptSecret,
   getDb,
+  getEncryptionKey,
   getSwarmConfigs,
+  init_crypto,
   init_db
-} from "./cli-wztagmpk.js";
+} from "./cli-wb4j4tfe.js";
 import {
   init_zod
 } from "./cli-q21d49ac.js";
@@ -18,6 +22,10 @@ import {
   string,
   union
 } from "./cli-anrj584m.js";
+import {
+  init_secret_scrubber,
+  registerVolatileSecret
+} from "./cli-3pp1362w.js";
 import {
   __commonJS,
   __require,
@@ -168745,6 +168753,339 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
   } });
 });
 
+// src/be/scripts/db.ts
+init_secret_scrubber();
+
+// src/utils/short-id.ts
+import { randomBytes } from "node:crypto";
+var LETTERS = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+var BASE62 = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ";
+function generateShortId(len = 12) {
+  let out = "";
+  while (out.length < len) {
+    for (const byte of randomBytes((len - out.length) * 2)) {
+      if (byte < 208) {
+        out += LETTERS[byte % 52];
+        if (out.length === len)
+          break;
+      }
+    }
+  }
+  return out;
+}
+function base62(bytes) {
+  let out = "";
+  for (const byte of bytes)
+    out += BASE62[byte % 62];
+  return out;
+}
+function generateBearerToken() {
+  return `xsk_${base62(randomBytes(24))}`;
+}
+
+// src/be/scripts/db.ts
+init_crypto();
+init_db();
+function normalizeScopeId(scope, scopeId) {
+  if (scope === "global")
+    return null;
+  if (!scopeId) {
+    throw new Error("scopeId is required for agent-scoped scripts");
+  }
+  return scopeId;
+}
+function rowToScript(row) {
+  return {
+    ...row,
+    scopeId: row.scopeId ?? null,
+    isScratch: row.isScratch === 1,
+    typeChecked: row.typeChecked === 1,
+    createdByAgentId: row.createdByAgentId ?? null
+  };
+}
+function rowToScriptVersion(row) {
+  return {
+    ...row,
+    changedByAgentId: row.changedByAgentId ?? null,
+    changeReason: row.changeReason ?? null
+  };
+}
+function insertScriptVersion(args) {
+  getDb().prepare(`INSERT INTO script_versions (
+        id, scriptId, version, source, description, intent, signatureJson,
+        contentHash, changedByAgentId, changedAt, changeReason
+      )
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(crypto.randomUUID(), args.scriptId, args.version, args.source, args.description, args.intent, args.signatureJson, args.contentHash, args.changedByAgentId ?? null, new Date().toISOString(), args.changeReason ?? null);
+}
+function insertScript(args) {
+  const now = new Date().toISOString();
+  const id = crypto.randomUUID();
+  const scopeId = normalizeScopeId(args.scope, args.scopeId);
+  const contentHash = computeContentHash(args.source);
+  const fsMode = args.fsMode ?? "none";
+  const isScratch = args.isScratch ? 1 : 0;
+  const typeChecked = args.typeChecked ? 1 : 0;
+  const txn = getDb().transaction(() => {
+    const row = getDb().prepare(`INSERT INTO scripts (
+          id, name, scope, scopeId, source, description, intent, signatureJson,
+          argsJsonSchema, contentHash, isScratch, typeChecked, fsMode, createdByAgentId, createdAt, updatedAt,
+          created_by, updated_by
+        )
+        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+        RETURNING *`).get(id, args.name, args.scope, scopeId, args.source, args.description, args.intent, args.signatureJson, args.argsJsonSchema ?? null, contentHash, isScratch, typeChecked, fsMode, args.agentId ?? null, now, now, args.createdBy ?? null, args.createdBy ?? null);
+    if (!row)
+      throw new Error("Failed to insert script");
+    insertScriptVersion({
+      scriptId: row.id,
+      version: row.version,
+      source: row.source,
+      description: row.description,
+      intent: row.intent,
+      signatureJson: row.signatureJson,
+      contentHash: row.contentHash,
+      changedByAgentId: args.agentId ?? null,
+      changeReason: args.changeReason ?? "Initial creation"
+    });
+    return rowToScript(row);
+  });
+  return txn();
+}
+async function upsertScriptByName(args) {
+  const shouldEmbed = args.embeddingMode !== "skip";
+  const existing = getScript(args);
+  if (!existing) {
+    const script2 = insertScript(args);
+    if (!script2.isScratch && shouldEmbed) {
+      await embedScript(script2);
+    }
+    return {
+      script: script2,
+      isNew: true,
+      contentDeduped: false
+    };
+  }
+  const contentHash = computeContentHash(args.source);
+  if (existing.contentHash === contentHash) {
+    const fsMode2 = args.fsMode ?? existing.fsMode;
+    const isScratch2 = args.isScratch ?? existing.isScratch;
+    const typeChecked2 = args.typeChecked ?? existing.typeChecked;
+    const argsJsonSchema2 = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
+    const trackedMetadataChanged = args.description !== existing.description || args.intent !== existing.intent || args.signatureJson !== existing.signatureJson || argsJsonSchema2 !== existing.argsJsonSchema;
+    const promotedFromScratch = existing.isScratch && !isScratch2;
+    if (fsMode2 !== existing.fsMode || isScratch2 !== existing.isScratch || typeChecked2 !== existing.typeChecked || trackedMetadataChanged) {
+      const row = getDb().prepare(`UPDATE scripts
+          SET description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
+            isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
+          WHERE id = ?
+          RETURNING *`).get(args.description, args.intent, args.signatureJson, argsJsonSchema2 ?? null, isScratch2 ? 1 : 0, typeChecked2 ? 1 : 0, fsMode2, new Date().toISOString(), args.createdBy ?? null, existing.id);
+      if (!row)
+        throw new Error("Failed to update script metadata");
+      const script2 = rowToScript(row);
+      if (!script2.isScratch && shouldEmbed && (trackedMetadataChanged || promotedFromScratch)) {
+        await embedScript(script2);
+      }
+      return {
+        script: script2,
+        isNew: false,
+        contentDeduped: true
+      };
+    }
+    return {
+      script: existing,
+      isNew: false,
+      contentDeduped: true
+    };
+  }
+  const now = new Date().toISOString();
+  const newVersion = existing.version + 1;
+  const fsMode = args.fsMode ?? existing.fsMode;
+  const isScratch = args.isScratch ?? existing.isScratch;
+  const typeChecked = args.typeChecked ?? existing.typeChecked;
+  const argsJsonSchema = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
+  const txn = getDb().transaction(() => {
+    const row = getDb().prepare(`UPDATE scripts
+        SET source = ?, description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
+          contentHash = ?, version = ?, isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
+        WHERE id = ?
+        RETURNING *`).get(args.source, args.description, args.intent, args.signatureJson, argsJsonSchema ?? null, contentHash, newVersion, isScratch ? 1 : 0, typeChecked ? 1 : 0, fsMode, now, args.createdBy ?? null, existing.id);
+    if (!row)
+      throw new Error("Failed to update script");
+    insertScriptVersion({
+      scriptId: row.id,
+      version: row.version,
+      source: row.source,
+      description: row.description,
+      intent: row.intent,
+      signatureJson: row.signatureJson,
+      contentHash: row.contentHash,
+      changedByAgentId: args.agentId ?? null,
+      changeReason: args.changeReason ?? null
+    });
+    return rowToScript(row);
+  });
+  const script = txn();
+  if (!script.isScratch && shouldEmbed) {
+    await embedScript(script);
+  }
+  return {
+    script,
+    isNew: false,
+    contentDeduped: false
+  };
+}
+function getScript(args) {
+  const scopeId = normalizeScopeId(args.scope, args.scopeId);
+  const row = scopeId === null ? getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId IS NULL").get(args.name, args.scope) : getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId = ?").get(args.name, args.scope, scopeId);
+  return row ? rowToScript(row) : null;
+}
+function getScriptById(id) {
+  const row = getDb().prepare("SELECT * FROM scripts WHERE id = ?").get(id);
+  return row ? rowToScript(row) : null;
+}
+function getScriptVersion(args) {
+  if (args.version === undefined && args.contentHash === undefined) {
+    throw new Error("version or contentHash is required");
+  }
+  const row = args.version !== undefined ? getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND version = ?").get(args.scriptId, args.version) : getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND contentHash = ? ORDER BY version DESC LIMIT 1").get(args.scriptId, args.contentHash);
+  return row ? rowToScriptVersion(row) : null;
+}
+function listScripts(args) {
+  const conditions = [];
+  const params = [];
+  if (args?.scope) {
+    conditions.push("scope = ?");
+    params.push(args.scope);
+    if (args.scope === "global") {
+      conditions.push("scopeId IS NULL");
+    } else if (args.scopeId !== undefined) {
+      conditions.push("scopeId = ?");
+      params.push(normalizeScopeId(args.scope, args.scopeId));
+    }
+  } else if (args?.scopeId !== undefined) {
+    conditions.push("scopeId = ?");
+    params.push(args.scopeId ?? "");
+  }
+  if (!args?.includeScratch) {
+    conditions.push("isScratch = 0");
+  }
+  const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
+  return getDb().prepare(`SELECT * FROM scripts ${whereClause} ORDER BY scope ASC, scopeId ASC, name ASC`).all(...params).map(rowToScript);
+}
+function listScriptVersions(scriptId) {
+  return getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? ORDER BY version DESC").all(scriptId).map(rowToScriptVersion);
+}
+function deleteScript(args) {
+  const existing = getScript(args);
+  if (!existing)
+    return false;
+  const result = getDb().run("DELETE FROM scripts WHERE id = ?", [existing.id]);
+  return result.changes > 0;
+}
+var SCRIPT_API_ID_LEN = 12;
+function rowToScriptApi(row) {
+  return {
+    id: row.id,
+    scriptId: row.scriptId,
+    agentId: row.agentId,
+    authMode: row.authMode,
+    enabled: row.enabled === 1,
+    label: row.label ?? null,
+    callCount: row.callCount,
+    lastUsedAt: row.lastUsedAt ?? null,
+    createdAt: row.createdAt
+  };
+}
+function isUniqueConstraintError(err) {
+  return err instanceof Error && /UNIQUE constraint failed/i.test(err.message);
+}
+function createScriptApi(args) {
+  const now = new Date().toISOString();
+  const token = args.authMode === "bearer" ? generateBearerToken() : null;
+  const encrypted = token ? encryptSecret(token, getEncryptionKey()) : null;
+  const createdBy = args.createdBy ?? null;
+  for (let attempt = 0;attempt < 5; attempt++) {
+    const id = generateShortId(SCRIPT_API_ID_LEN);
+    try {
+      const row = getDb().prepare(`INSERT INTO script_apis
+             (id, scriptId, agentId, authMode, bearerTokenEncrypted, enabled, label,
+              callCount, lastUsedAt, createdAt, created_by, updated_by)
+           VALUES (?, ?, ?, ?, ?, 1, ?, 0, NULL, ?, ?, ?)
+           RETURNING *`).get(id, args.scriptId, args.agentId, args.authMode, encrypted, args.label ?? null, now, createdBy, createdBy);
+      if (!row)
+        throw new Error("Failed to create script API endpoint");
+      if (token)
+        registerVolatileSecret(token, `script-api:${id}`);
+      return { ...rowToScriptApi(row), token };
+    } catch (err) {
+      if (isUniqueConstraintError(err) && attempt < 4)
+        continue;
+      throw err;
+    }
+  }
+  throw new Error("Failed to allocate a unique script API endpoint id");
+}
+function listScriptApisForScript(scriptId) {
+  return getDb().prepare("SELECT * FROM script_apis WHERE scriptId = ? ORDER BY createdAt DESC").all(scriptId).map(rowToScriptApi);
+}
+function getScriptApiById(id) {
+  const row = getDb().prepare("SELECT * FROM script_apis WHERE id = ?").get(id);
+  if (!row)
+    return null;
+  return { ...rowToScriptApi(row), bearerTokenEncrypted: row.bearerTokenEncrypted ?? null };
+}
+function getScriptApiSecret(id) {
+  const row = getDb().prepare("SELECT bearerTokenEncrypted FROM script_apis WHERE id = ?").get(id);
+  if (!row?.bearerTokenEncrypted)
+    return null;
+  const token = decryptSecret(row.bearerTokenEncrypted, getEncryptionKey());
+  registerVolatileSecret(token, `script-api:${id}`);
+  return token;
+}
+function updateScriptApi(id, args) {
+  const sets = [];
+  const vals = [];
+  if (args.enabled !== undefined) {
+    sets.push("enabled = ?");
+    vals.push(args.enabled ? 1 : 0);
+  }
+  if (args.label !== undefined) {
+    sets.push("label = ?");
+    vals.push(args.label);
+  }
+  if (args.updatedBy !== undefined) {
+    sets.push("updated_by = ?");
+    vals.push(args.updatedBy);
+  }
+  if (sets.length === 0) {
+    const row2 = getDb().prepare("SELECT * FROM script_apis WHERE id = ?").get(id);
+    return row2 ? rowToScriptApi(row2) : null;
+  }
+  vals.push(id);
+  const row = getDb().prepare(`UPDATE script_apis SET ${sets.join(", ")} WHERE id = ? RETURNING *`).get(...vals);
+  return row ? rowToScriptApi(row) : null;
+}
+function rotateScriptApiSecret(id, updatedBy) {
+  const existing = getScriptApiById(id);
+  if (!existing || existing.authMode !== "bearer")
+    return null;
+  const token = generateBearerToken();
+  const encrypted = encryptSecret(token, getEncryptionKey());
+  const row = getDb().prepare("UPDATE script_apis SET bearerTokenEncrypted = ?, updated_by = ? WHERE id = ? RETURNING *").get(encrypted, updatedBy ?? null, id);
+  if (!row)
+    return null;
+  registerVolatileSecret(token, `script-api:${id}`);
+  return { ...rowToScriptApi(row), token };
+}
+function deleteScriptApi(id) {
+  return getDb().run("DELETE FROM script_apis WHERE id = ?", [id]).changes > 0;
+}
+function recordScriptApiUsage(id) {
+  getDb().run("UPDATE script_apis SET callCount = callCount + 1, lastUsedAt = ? WHERE id = ?", [
+    new Date().toISOString(),
+    id
+  ]);
+}
+
 // src/scripts-runtime/credential-broker/types.ts
 init_zod();
 var CREDENTIAL_BINDINGS_CONFIG_KEY = "SCRIPT_CREDENTIAL_BINDINGS";
@@ -168820,6 +169161,7 @@ class CredentialBroker {
     return resolved;
   }
 }
+
 // src/scripts-runtime/credential-broker/default-bindings.ts
 var DEFAULT_CREDENTIAL_BINDINGS = [
   {
@@ -168831,6 +169173,7 @@ var DEFAULT_CREDENTIAL_BINDINGS = [
     active: true
   }
 ];
+
 // src/scripts-runtime/credential-broker/store.ts
 function appliesToContext(binding, context) {
   if (binding.scope === "global")
@@ -169281,204 +169624,6 @@ ${members.join(`
 `;
 }
 
-// src/be/scripts/db.ts
-init_db();
-function normalizeScopeId(scope, scopeId) {
-  if (scope === "global")
-    return null;
-  if (!scopeId) {
-    throw new Error("scopeId is required for agent-scoped scripts");
-  }
-  return scopeId;
-}
-function rowToScript(row) {
-  return {
-    ...row,
-    scopeId: row.scopeId ?? null,
-    isScratch: row.isScratch === 1,
-    typeChecked: row.typeChecked === 1,
-    createdByAgentId: row.createdByAgentId ?? null
-  };
-}
-function rowToScriptVersion(row) {
-  return {
-    ...row,
-    changedByAgentId: row.changedByAgentId ?? null,
-    changeReason: row.changeReason ?? null
-  };
-}
-function insertScriptVersion(args) {
-  getDb().prepare(`INSERT INTO script_versions (
-        id, scriptId, version, source, description, intent, signatureJson,
-        contentHash, changedByAgentId, changedAt, changeReason
-      )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(crypto.randomUUID(), args.scriptId, args.version, args.source, args.description, args.intent, args.signatureJson, args.contentHash, args.changedByAgentId ?? null, new Date().toISOString(), args.changeReason ?? null);
-}
-function insertScript(args) {
-  const now = new Date().toISOString();
-  const id = crypto.randomUUID();
-  const scopeId = normalizeScopeId(args.scope, args.scopeId);
-  const contentHash = computeContentHash(args.source);
-  const fsMode = args.fsMode ?? "none";
-  const isScratch = args.isScratch ? 1 : 0;
-  const typeChecked = args.typeChecked ? 1 : 0;
-  const txn = getDb().transaction(() => {
-    const row = getDb().prepare(`INSERT INTO scripts (
-          id, name, scope, scopeId, source, description, intent, signatureJson,
-          argsJsonSchema, contentHash, isScratch, typeChecked, fsMode, createdByAgentId, createdAt, updatedAt,
-          created_by, updated_by
-        )
-        VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-        RETURNING *`).get(id, args.name, args.scope, scopeId, args.source, args.description, args.intent, args.signatureJson, args.argsJsonSchema ?? null, contentHash, isScratch, typeChecked, fsMode, args.agentId ?? null, now, now, args.createdBy ?? null, args.createdBy ?? null);
-    if (!row)
-      throw new Error("Failed to insert script");
-    insertScriptVersion({
-      scriptId: row.id,
-      version: row.version,
-      source: row.source,
-      description: row.description,
-      intent: row.intent,
-      signatureJson: row.signatureJson,
-      contentHash: row.contentHash,
-      changedByAgentId: args.agentId ?? null,
-      changeReason: args.changeReason ?? "Initial creation"
-    });
-    return rowToScript(row);
-  });
-  return txn();
-}
-async function upsertScriptByName(args) {
-  const shouldEmbed = args.embeddingMode !== "skip";
-  const existing = getScript(args);
-  if (!existing) {
-    const script2 = insertScript(args);
-    if (!script2.isScratch && shouldEmbed) {
-      await embedScript(script2);
-    }
-    return {
-      script: script2,
-      isNew: true,
-      contentDeduped: false
-    };
-  }
-  const contentHash = computeContentHash(args.source);
-  if (existing.contentHash === contentHash) {
-    const fsMode2 = args.fsMode ?? existing.fsMode;
-    const isScratch2 = args.isScratch ?? existing.isScratch;
-    const typeChecked2 = args.typeChecked ?? existing.typeChecked;
-    const argsJsonSchema2 = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
-    const trackedMetadataChanged = args.description !== existing.description || args.intent !== existing.intent || args.signatureJson !== existing.signatureJson || argsJsonSchema2 !== existing.argsJsonSchema;
-    const promotedFromScratch = existing.isScratch && !isScratch2;
-    if (fsMode2 !== existing.fsMode || isScratch2 !== existing.isScratch || typeChecked2 !== existing.typeChecked || trackedMetadataChanged) {
-      const row = getDb().prepare(`UPDATE scripts
-          SET description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
-            isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
-          WHERE id = ?
-          RETURNING *`).get(args.description, args.intent, args.signatureJson, argsJsonSchema2 ?? null, isScratch2 ? 1 : 0, typeChecked2 ? 1 : 0, fsMode2, new Date().toISOString(), args.createdBy ?? null, existing.id);
-      if (!row)
-        throw new Error("Failed to update script metadata");
-      const script2 = rowToScript(row);
-      if (!script2.isScratch && shouldEmbed && (trackedMetadataChanged || promotedFromScratch)) {
-        await embedScript(script2);
-      }
-      return {
-        script: script2,
-        isNew: false,
-        contentDeduped: true
-      };
-    }
-    return {
-      script: existing,
-      isNew: false,
-      contentDeduped: true
-    };
-  }
-  const now = new Date().toISOString();
-  const newVersion = existing.version + 1;
-  const fsMode = args.fsMode ?? existing.fsMode;
-  const isScratch = args.isScratch ?? existing.isScratch;
-  const typeChecked = args.typeChecked ?? existing.typeChecked;
-  const argsJsonSchema = args.argsJsonSchema !== undefined ? args.argsJsonSchema : existing.argsJsonSchema;
-  const txn = getDb().transaction(() => {
-    const row = getDb().prepare(`UPDATE scripts
-        SET source = ?, description = ?, intent = ?, signatureJson = ?, argsJsonSchema = ?,
-          contentHash = ?, version = ?, isScratch = ?, typeChecked = ?, fsMode = ?, updatedAt = ?, updated_by = ?
-        WHERE id = ?
-        RETURNING *`).get(args.source, args.description, args.intent, args.signatureJson, argsJsonSchema ?? null, contentHash, newVersion, isScratch ? 1 : 0, typeChecked ? 1 : 0, fsMode, now, args.createdBy ?? null, existing.id);
-    if (!row)
-      throw new Error("Failed to update script");
-    insertScriptVersion({
-      scriptId: row.id,
-      version: row.version,
-      source: row.source,
-      description: row.description,
-      intent: row.intent,
-      signatureJson: row.signatureJson,
-      contentHash: row.contentHash,
-      changedByAgentId: args.agentId ?? null,
-      changeReason: args.changeReason ?? null
-    });
-    return rowToScript(row);
-  });
-  const script = txn();
-  if (!script.isScratch && shouldEmbed) {
-    await embedScript(script);
-  }
-  return {
-    script,
-    isNew: false,
-    contentDeduped: false
-  };
-}
-function getScript(args) {
-  const scopeId = normalizeScopeId(args.scope, args.scopeId);
-  const row = scopeId === null ? getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId IS NULL").get(args.name, args.scope) : getDb().prepare("SELECT * FROM scripts WHERE name = ? AND scope = ? AND scopeId = ?").get(args.name, args.scope, scopeId);
-  return row ? rowToScript(row) : null;
-}
-function getScriptById(id) {
-  const row = getDb().prepare("SELECT * FROM scripts WHERE id = ?").get(id);
-  return row ? rowToScript(row) : null;
-}
-function getScriptVersion(args) {
-  if (args.version === undefined && args.contentHash === undefined) {
-    throw new Error("version or contentHash is required");
-  }
-  const row = args.version !== undefined ? getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND version = ?").get(args.scriptId, args.version) : getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? AND contentHash = ? ORDER BY version DESC LIMIT 1").get(args.scriptId, args.contentHash);
-  return row ? rowToScriptVersion(row) : null;
-}
-function listScripts(args) {
-  const conditions = [];
-  const params = [];
-  if (args?.scope) {
-    conditions.push("scope = ?");
-    params.push(args.scope);
-    if (args.scope === "global") {
-      conditions.push("scopeId IS NULL");
-    } else if (args.scopeId !== undefined) {
-      conditions.push("scopeId = ?");
-      params.push(normalizeScopeId(args.scope, args.scopeId));
-    }
-  } else if (args?.scopeId !== undefined) {
-    conditions.push("scopeId = ?");
-    params.push(args.scopeId ?? "");
-  }
-  if (!args?.includeScratch) {
-    conditions.push("isScratch = 0");
-  }
-  const whereClause = conditions.length > 0 ? `WHERE ${conditions.join(" AND ")}` : "";
-  return getDb().prepare(`SELECT * FROM scripts ${whereClause} ORDER BY scope ASC, scopeId ASC, name ASC`).all(...params).map(rowToScript);
-}
-function listScriptVersions(scriptId) {
-  return getDb().prepare("SELECT * FROM script_versions WHERE scriptId = ? ORDER BY version DESC").all(scriptId).map(rowToScriptVersion);
-}
-function deleteScript(args) {
-  const existing = getScript(args);
-  if (!existing)
-    return false;
-  const result = getDb().run("DELETE FROM scripts WHERE id = ?", [existing.id]);
-  return result.changes > 0;
-}
-
 // src/scripts-runtime/import-allowlist.ts
 var import_typescript = __toESM(require_typescript(), 1);
 var ALLOWED_BARE_IMPORTS = new Set(["swarm-sdk", "stdlib", "zod"]);
@@ -169544,4 +169689,4 @@ function validateScriptImports(source) {
   return { ok: false, diagnostic: reason, imports: rejected };
 }
 
-export { CREDENTIAL_BINDINGS_CONFIG_KEY, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, SwarmConfigCredentialBindingStore, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, importLegacyCredentialBindings, listScriptConnections, upsertScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptApiTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, require_typescript, validateScriptImports };
+export { CREDENTIAL_BINDINGS_CONFIG_KEY, CredentialBindingSchema, placeholderForConfigKey, CredentialBroker, DEFAULT_CREDENTIAL_BINDINGS, SwarmConfigCredentialBindingStore, listRelationalCredentialBindings, upsertCredentialBinding, disableCredentialBinding, importLegacyCredentialBindings, listScriptConnections, upsertScriptConnection, setScriptConnectionEnabled, getScriptApiConnectionDescriptors, getScriptApiTypes, upsertScriptByName, getScript, getScriptById, getScriptVersion, listScripts, listScriptVersions, deleteScript, createScriptApi, listScriptApisForScript, getScriptApiById, getScriptApiSecret, updateScriptApi, rotateScriptApiSecret, deleteScriptApi, recordScriptApiUsage, require_typescript, validateScriptImports };

package/dist/{cli-sm9yseh1.js → cli-938phztx.js}

@@ -1,7 +1,7 @@
 import {
   getScriptApiTypes,
   require_typescript
-} from "./cli-0e24r2b6.js";
+} from "./cli-8p36pjyp.js";
 import {
   __toESM
 } from "./cli-p9swy5t3.js";

package/dist/{cli-yfyqsqzj.js → cli-9xjc8dt2.js}

@@ -1,7 +1,7 @@
 import {
   getDb,
   init_db
-} from "./cli-wztagmpk.js";
+} from "./cli-wb4j4tfe.js";
 
 // src/be/users.ts
 init_db();