@desplega.ai/agent-swarm 2.0.0 → 2.1.0

package/dist/{cli-ee9gtz70.js → cli-4mengw46.js}

@@ -12,7 +12,7 @@ import {
   generateRandomCodeVerifier,
   generateRandomState,
   oauthAppRowToProviderConfig
-} from "./cli-6razj6t4.js";
+} from "./cli-711vwbxn.js";
 import {
   CredentialBroker,
   DEFAULT_CREDENTIAL_BINDINGS,
@@ -49,11 +49,11 @@ import {
   updateAuthorizationTokens,
   upsertAuthorization,
   upsertSwarmConfig
-} from "./cli-ef1hg1wv.js";
+} from "./cli-y3167wt1.js";
 import {
   defaultAssetKey,
   init_key
-} from "./cli-cgtksawx.js";
+} from "./cli-pe05f8yk.js";
 import {
   init_zod
 } from "./cli-sd0mxa3c.js";
@@ -95,7 +95,7 @@ import {
   registerVolatileSecret,
   scrubObject,
   scrubSecrets
-} from "./cli-p1x85d2t.js";
+} from "./cli-shk7r5cs.js";
 import {
   __commonJS,
   __require,
@@ -178549,12 +178549,312 @@ async function extractArgsJsonSchema(source) {
 }
 
 // src/be/scripts/typecheck.ts
-var import_typescript3 = __toESM(require_typescript(), 1);
+var import_typescript4 = __toESM(require_typescript(), 1);
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/apps/definition.ts
 init_zod();
 init_db();
+
+// src/scripts-runtime/quickjs-compat.ts
+var import_typescript3 = __toESM(require_typescript(), 1);
+var UNSUPPORTED_GLOBALS = new Set([
+  "AbortController",
+  "AbortSignal",
+  "Blob",
+  "Buffer",
+  "Event",
+  "EventTarget",
+  "File",
+  "FormData",
+  "Intl",
+  "ReadableStream",
+  "Request",
+  "TransformStream",
+  "WebSocket",
+  "WritableStream",
+  "clearImmediate",
+  "navigator",
+  "performance",
+  "queueMicrotask",
+  "setImmediate",
+  "structuredClone"
+]);
+var RESPONSE_BODY_METHODS = new Set(["arrayBuffer", "blob", "formData", "bytes"]);
+var LOCALE_METHODS = new Set(["toLocaleString", "toLocaleDateString", "toLocaleTimeString"]);
+var FS_STDLIB = new Set(["glob", "grep"]);
+var HOST_ONLY_CONFIG = new Set(["apiKey", "runtimeInstanceId"]);
+var MAX_FINDINGS = 20;
+var SCRIPT_FILE = "user-script.ts";
+var MAX_CONST_DEPTH = 4;
+function isAmbient(node) {
+  for (let current = node;current; current = current.parent) {
+    if (import_typescript3.default.canHaveModifiers(current) && import_typescript3.default.getModifiers(current)?.some((modifier) => modifier.kind === import_typescript3.default.SyntaxKind.DeclareKeyword)) {
+      return true;
+    }
+  }
+  return false;
+}
+function createScope(source) {
+  const sourceFile = import_typescript3.default.createSourceFile(SCRIPT_FILE, source, import_typescript3.default.ScriptTarget.Latest, true);
+  const host = {
+    getSourceFile: (name) => name === SCRIPT_FILE ? sourceFile : undefined,
+    getDefaultLibFileName: () => "lib.d.ts",
+    writeFile: () => {},
+    getCurrentDirectory: () => "/",
+    getCanonicalFileName: (name) => name,
+    useCaseSensitiveFileNames: () => true,
+    getNewLine: () => `
+`,
+    fileExists: (name) => name === SCRIPT_FILE,
+    readFile: () => {
+      return;
+    }
+  };
+  const program = import_typescript3.default.createProgram({
+    rootNames: [SCRIPT_FILE],
+    options: { noLib: true, noResolve: true, types: [], target: import_typescript3.default.ScriptTarget.Latest },
+    host
+  });
+  const checker = program.getTypeChecker();
+  const isLocal = (node) => {
+    const symbol = import_typescript3.default.isShorthandPropertyAssignment(node.parent) && node.parent.name === node ? checker.getShorthandAssignmentValueSymbol(node.parent) : checker.getSymbolAtLocation(node);
+    return Boolean(symbol?.declarations?.some((declaration) => declaration.getSourceFile() === sourceFile && !isAmbient(declaration)));
+  };
+  const constInitializer = (node) => {
+    const declaration = checker.getSymbolAtLocation(node)?.valueDeclaration;
+    if (!declaration || !import_typescript3.default.isVariableDeclaration(declaration) || !declaration.initializer) {
+      return null;
+    }
+    return import_typescript3.default.getCombinedNodeFlags(declaration) & import_typescript3.default.NodeFlags.Const ? declaration.initializer : null;
+  };
+  return { sourceFile, isLocal, constInitializer };
+}
+function isValueReference(node) {
+  const parent = node.parent;
+  if (import_typescript3.default.isPropertyAccessExpression(parent) && parent.name === node)
+    return false;
+  if (import_typescript3.default.isShorthandPropertyAssignment(parent))
+    return true;
+  if ("name" in parent && parent.name === node)
+    return false;
+  if (import_typescript3.default.isTypeOfExpression(parent))
+    return false;
+  return true;
+}
+function isTypeOnly(node) {
+  return import_typescript3.default.isTypeNode(node) || import_typescript3.default.isInterfaceDeclaration(node) || import_typescript3.default.isTypeAliasDeclaration(node) || import_typescript3.default.isImportDeclaration(node) && Boolean(node.importClause?.isTypeOnly);
+}
+function stdlibImportNames(node) {
+  if (!import_typescript3.default.isStringLiteral(node.moduleSpecifier) || node.moduleSpecifier.text !== "stdlib")
+    return [];
+  const bindings = node.importClause?.namedBindings;
+  if (!bindings || !import_typescript3.default.isNamedImports(bindings))
+    return [];
+  return bindings.elements.map((element) => (element.propertyName ?? element.name).text).filter((name) => FS_STDLIB.has(name));
+}
+function unwrap(node) {
+  let current = node;
+  while (import_typescript3.default.isParenthesizedExpression(current) || import_typescript3.default.isAsExpression(current) || import_typescript3.default.isNonNullExpression(current) || import_typescript3.default.isTypeAssertionExpression(current) || import_typescript3.default.isSatisfiesExpression(current)) {
+    current = current.expression;
+  }
+  return current;
+}
+function isGlobalThis(node) {
+  const inner = unwrap(node);
+  return import_typescript3.default.isIdentifier(inner) && inner.text === "globalThis";
+}
+function globalName(node, isLocal) {
+  const inner = unwrap(node);
+  if (import_typescript3.default.isIdentifier(inner))
+    return isLocal(inner) ? null : inner.text;
+  if (import_typescript3.default.isPropertyAccessExpression(inner) && isGlobalThis(inner.expression)) {
+    return inner.name.text;
+  }
+  return null;
+}
+function isPrivateIPv42([a = 0, b = 0, c = 0]) {
+  return a === 0 || a === 10 || a === 127 || a === 100 && b >= 64 && b <= 127 || a === 169 && b === 254 || a === 172 && b >= 16 && b <= 31 || a === 192 && b === 168 || a === 192 && b === 0 && c === 0 || a === 198 && (b === 18 || b === 19) || a >= 224;
+}
+function isPrivateIPv62(text) {
+  const [head = "", tail = ""] = text.split("::");
+  const left = head ? head.split(":") : [];
+  const right = text.includes("::") && tail ? tail.split(":") : [];
+  const fill = text.includes("::") ? 8 - left.length - right.length : 0;
+  const g = [...left, ...Array(fill).fill("0"), ...right].map((part) => parseInt(part, 16));
+  const g0 = g[0] ?? 0;
+  if (g.slice(0, 6).every((part) => part === 0))
+    return true;
+  if (g.slice(0, 5).every((part) => part === 0) && g[5] === 65535) {
+    const [g6 = 0, g7 = 0] = g.slice(6);
+    return isPrivateIPv42([g6 >> 8, g6 & 255, g7 >> 8]);
+  }
+  return (g0 & 65024) === 64512 || (g0 & 65472) === 65152 || (g0 & 65472) === 65216 || (g0 & 65280) === 65280;
+}
+function staticHostClass(hostname) {
+  const host = hostname.toLowerCase().replace(/\.$/, "");
+  if (host === "localhost" || host.endsWith(".localhost"))
+    return "private";
+  if (host.startsWith("["))
+    return isPrivateIPv62(host.slice(1, -1)) ? "private" : null;
+  const v4 = /^(\d+)\.(\d+)\.(\d+)\.(\d+)$/.exec(host);
+  if (v4)
+    return isPrivateIPv42(v4.slice(1).map(Number)) ? "private" : null;
+  return host !== "" && !host.includes(".") ? "single-label" : null;
+}
+function fetchCallName(callee) {
+  const inner = unwrap(callee);
+  if (import_typescript3.default.isIdentifier(inner)) {
+    return inner.text === "fetch" || inner.text === "fetchJson" ? inner.text : null;
+  }
+  if (!import_typescript3.default.isPropertyAccessExpression(inner))
+    return null;
+  const method = inner.name.text;
+  if (method !== "fetch" && method !== "fetchJson")
+    return null;
+  const owner = unwrap(inner.expression);
+  if (method === "fetch" && isGlobalThis(owner))
+    return "fetch";
+  const ownerName = import_typescript3.default.isIdentifier(owner) ? owner.text : import_typescript3.default.isPropertyAccessExpression(owner) ? owner.name.text : null;
+  return ownerName === "stdlib" ? `ctx.stdlib.${method}` : null;
+}
+function staticPrefix(node, resolve, depth = 0) {
+  const inner = unwrap(node);
+  if (import_typescript3.default.isStringLiteral(inner) || import_typescript3.default.isNoSubstitutionTemplateLiteral(inner)) {
+    return { text: inner.text, cut: false };
+  }
+  if (import_typescript3.default.isIdentifier(inner)) {
+    const initializer = depth < MAX_CONST_DEPTH ? resolve(inner) : null;
+    return initializer ? staticPrefix(initializer, resolve, depth + 1) : null;
+  }
+  if (import_typescript3.default.isTemplateExpression(inner)) {
+    let text = inner.head.text;
+    let boundary = false;
+    for (const span of inner.templateSpans) {
+      const part = staticPrefix(span.expression, resolve, depth);
+      if (part === null)
+        return { text, cut: !boundary || text === "" };
+      if (part.cut)
+        return { text: text + part.text, cut: true };
+      text += part.text + span.literal.text;
+      boundary = span.literal.text === "";
+    }
+    return { text, cut: false };
+  }
+  if (import_typescript3.default.isBinaryExpression(inner) && inner.operatorToken.kind === import_typescript3.default.SyntaxKind.PlusToken) {
+    const left = staticPrefix(inner.left, resolve, depth);
+    if (left === null || left.cut)
+      return left;
+    const right = staticPrefix(inner.right, resolve, depth);
+    if (right === null)
+      return { text: left.text, cut: !import_typescript3.default.isIdentifier(unwrap(inner.left)) };
+    return { text: left.text + right.text, cut: right.cut };
+  }
+  return null;
+}
+function literalUrl(arg, resolve) {
+  if (!arg)
+    return null;
+  const prefix = staticPrefix(arg, resolve);
+  if (!prefix)
+    return null;
+  if (prefix.cut && !/^[a-z][a-z0-9+.-]*:\/\/[^/?#]*[/?#]/i.test(prefix.text))
+    return null;
+  try {
+    return new URL(prefix.text);
+  } catch {
+    return null;
+  }
+}
+function checkQuickJSCompat(source, options = {}) {
+  const findings = [];
+  const seen = new Set;
+  const { sourceFile, isLocal, constInitializer } = createScope(source);
+  const add = (rule, message, node) => {
+    if (seen.has(`${rule}:${message}`))
+      return;
+    seen.add(`${rule}:${message}`);
+    const line = node ? sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1 : undefined;
+    findings.push(line === undefined ? { rule, message } : { rule, message, line });
+  };
+  if (options.fsMode === "workspace-rw") {
+    add("workspaceRw", "fsMode workspace-rw is not available under quickjs");
+  }
+  const reportGlobal = (name, node) => {
+    if (name === "Bun")
+      add("bunGlobal", "Bun.* is not available under quickjs", node);
+    else if (name === "process")
+      add("process", "process is not available under quickjs", node);
+    else if (UNSUPPORTED_GLOBALS.has(name)) {
+      add("unsupportedGlobal", `${name} is not available under quickjs`, node);
+    }
+  };
+  const visit = (node) => {
+    if (isTypeOnly(node))
+      return;
+    if (import_typescript3.default.isIdentifier(node) && (node.text === "Bun" || node.text === "process" || UNSUPPORTED_GLOBALS.has(node.text)) && isValueReference(node) && !isLocal(node)) {
+      reportGlobal(node.text, node);
+    }
+    if (import_typescript3.default.isPropertyAccessExpression(node)) {
+      const member = node.name.text;
+      const owner = globalName(node.expression, isLocal);
+      if (isGlobalThis(node.expression) && !import_typescript3.default.isTypeOfExpression(node.parent)) {
+        reportGlobal(member, node);
+      }
+      const parent = unwrap(node.expression);
+      if (HOST_ONLY_CONFIG.has(member) && import_typescript3.default.isPropertyAccessExpression(parent) && parent.name.text === "config") {
+        add("hostCredential", `ctx.swarm.config.${member} is host-only under quickjs; ctx.swarm calls use it for you`, node);
+      }
+      if (member === "subtle" && owner === "crypto") {
+        add("cryptoSubtle", "crypto.subtle is not available under quickjs", node);
+      }
+      if (FS_STDLIB.has(member) && import_typescript3.default.isPropertyAccessExpression(unwrap(node.expression)) && unwrap(node.expression).name.text === "stdlib") {
+        add("fsStdlib", `ctx.stdlib.${member} needs filesystem access, which quickjs lacks`, node);
+      }
+    }
+    if (import_typescript3.default.isImportDeclaration(node)) {
+      for (const name of stdlibImportNames(node)) {
+        add("fsStdlib", `stdlib ${name} needs filesystem access, which quickjs lacks`, node);
+      }
+    }
+    if (import_typescript3.default.isVariableDeclaration(node) && import_typescript3.default.isObjectBindingPattern(node.name) && node.initializer && import_typescript3.default.isPropertyAccessExpression(node.initializer) && node.initializer.name.text === "stdlib") {
+      for (const element of node.name.elements) {
+        const name = (element.propertyName ?? element.name).getText(sourceFile);
+        if (FS_STDLIB.has(name)) {
+          add("fsStdlib", `ctx.stdlib.${name} needs filesystem access, which quickjs lacks`, node);
+        }
+      }
+    }
+    if (import_typescript3.default.isCallExpression(node)) {
+      const callee = node.expression;
+      const fetchName = fetchCallName(callee);
+      const url = fetchName ? literalUrl(node.arguments[0], constInitializer) : null;
+      const hostClass = url && (url.protocol === "http:" || url.protocol === "https:") ? staticHostClass(url.hostname) : null;
+      if (url && hostClass) {
+        add("privateHost", `${fetchName} to ${url.host} (${hostClass} host) depends on the egress policy: quickjs refuses private hosts unless the operator allows them`, node);
+      }
+      if (import_typescript3.default.isIdentifier(callee) && callee.text === "require" && !isLocal(callee)) {
+        add("require", "require() is not supported; use an import", node);
+      }
+      if (import_typescript3.default.isPropertyAccessExpression(callee)) {
+        const method = callee.name.text;
+        if (RESPONSE_BODY_METHODS.has(method) && node.arguments.length === 0) {
+          add("responseBody", `.${method}() on a fetch Response is not available under quickjs (text() and json() are)`, node);
+        }
+        if (LOCALE_METHODS.has(method) && node.arguments.length > 0) {
+          add("localeFormat", `${method}(locale, options) ignores its arguments under quickjs (no Intl)`, node);
+        }
+      }
+    }
+    import_typescript3.default.forEachChild(node, visit);
+  };
+  visit(sourceFile);
+  return { compatible: findings.length === 0, findings: findings.slice(0, MAX_FINDINGS) };
+}
+function quickJSCompatWarnings(report, label) {
+  const prefix = label ? `${label}: ` : "";
+  return report.findings.map((finding) => `${prefix}quickjs compat (${finding.rule}${finding.line ? `, line ${finding.line}` : ""}): ${finding.message}`);
+}
 // src/apps/catalog.generated.json
 var catalog_generated_default = {
   $comment: "GENERATED by apps/ui/scripts/generate-catalog-schema.ts — do not hand-edit. Regenerate with `cd apps/ui && bun run generate:catalog-schema`.",
@@ -182607,6 +182907,17 @@ function collectScriptReferences(definition) {
   }
   return references;
 }
+async function scriptCompatWarnings(definition) {
+  const warnings = [];
+  for (const [scriptId, paths] of collectScriptReferences(definition)) {
+    const script = await getScriptById(scriptId);
+    if (!script)
+      continue;
+    const report = checkQuickJSCompat(script.source, { fsMode: script.fsMode });
+    warnings.push(...quickJSCompatWarnings(report, paths.join(", ")));
+  }
+  return warnings;
+}
 function foreignScriptForWriter(context, script) {
   if (script.scope !== "agent")
     return false;
@@ -183538,6 +183849,8 @@ export interface SwarmSdk {
   // --- config ---
   config_get(args?: { agentId?: string; repoId?: string; key?: string; includeSecrets?: boolean }): Promise<unknown>;
   config_list(args?: { scope?: "global" | "agent" | "repo"; scopeId?: string; key?: string; includeSecrets?: boolean }): Promise<unknown>;
+  // --- model profiles ---
+  modelProfile_list(args?: { harness?: string }): Promise<unknown>;
   // --- slack ---
   slack_read(args?: { inboxMessageId?: string; taskId?: string; channelId?: string; threadTs?: string; limit?: number; includeFiles?: boolean }): Promise<unknown>;
   slack_listChannels(args?: { types?: Array<"public" | "private" | "dm" | "mpim">; limit?: number }): Promise<unknown>;
@@ -183745,6 +184058,16 @@ export interface SwarmSdk {
   // --- human input ---
   request_humanInput(args: Record<string, unknown>): Promise<unknown>;
   approval_cancel(args: { requestId: string; reason?: string }): Promise<unknown>;
+
+  // --- decisions ---
+  systemOne_decide(args: {
+    provider?: "typesafe" | "openrouter" | "laya" | "openai" | "cloudflare";
+    model?: string;
+    state: string | string[] | Record<string, unknown>;
+    questions: Record<string, Record<string, unknown>>;
+    timeoutMs?: number;
+    maxRetries?: number;
+  }): Promise<unknown>;
 }
 
 export interface ScriptStdlib {
@@ -184194,20 +184517,20 @@ function sourceFileCacheKey(fileName, languageVersion) {
   return `${fileName}\x00${languageVersion.languageVersion}\x00${languageVersion.impliedNodeFormat}\x00${languageVersion.jsDocParsingMode}`;
 }
 function createCompilerHost(files, options, virtualModules = new Map) {
-  const host = import_typescript3.default.createCompilerHost(options, true);
+  const host = import_typescript4.default.createCompilerHost(options, true);
   const originalGetSourceFile = host.getSourceFile.bind(host);
   host.getSourceFile = (fileName, languageVersion, onError, shouldCreateNewSourceFile) => {
     const normalized = fileName.replace(/\\/g, "/");
     const source = files.get(normalized);
     if (normalized === USER_FILE || normalized === CHECK_FILE) {
       if (source !== undefined) {
-        return import_typescript3.default.createSourceFile(normalized, source, languageVersion, true, import_typescript3.default.ScriptKind.TS);
+        return import_typescript4.default.createSourceFile(normalized, source, languageVersion, true, import_typescript4.default.ScriptKind.TS);
       }
     }
-    const text = source ?? import_typescript3.default.sys.readFile(fileName);
+    const text = source ?? import_typescript4.default.sys.readFile(fileName);
     if (text === undefined || shouldCreateNewSourceFile) {
       if (source !== undefined) {
-        return import_typescript3.default.createSourceFile(normalized, source, languageVersion, true, import_typescript3.default.ScriptKind.TS);
+        return import_typescript4.default.createSourceFile(normalized, source, languageVersion, true, import_typescript4.default.ScriptKind.TS);
       }
       return originalGetSourceFile(fileName, languageVersion, onError, shouldCreateNewSourceFile);
     }
@@ -184215,30 +184538,30 @@ function createCompilerHost(files, options, virtualModules = new Map) {
     const cached = sharedSourceFiles.get(key);
     if (cached && cached.text === text)
       return cached.sourceFile;
-    const sourceFile = source !== undefined ? import_typescript3.default.createSourceFile(normalized, source, languageVersion, true, import_typescript3.default.ScriptKind.TS) : originalGetSourceFile(fileName, languageVersion, onError, shouldCreateNewSourceFile);
+    const sourceFile = source !== undefined ? import_typescript4.default.createSourceFile(normalized, source, languageVersion, true, import_typescript4.default.ScriptKind.TS) : originalGetSourceFile(fileName, languageVersion, onError, shouldCreateNewSourceFile);
     if (sourceFile)
       sharedSourceFiles.set(key, { text, sourceFile });
     return sourceFile;
   };
   host.fileExists = (fileName) => {
     const normalized = fileName.replace(/\\/g, "/");
-    return files.has(normalized) || import_typescript3.default.sys.fileExists(fileName);
+    return files.has(normalized) || import_typescript4.default.sys.fileExists(fileName);
   };
   host.readFile = (fileName) => {
     const normalized = fileName.replace(/\\/g, "/");
-    return files.get(normalized) ?? import_typescript3.default.sys.readFile(fileName);
+    return files.get(normalized) ?? import_typescript4.default.sys.readFile(fileName);
   };
   const projectBase = scriptTypesBase();
   host.resolveModuleNames = (moduleNames, containingFile) => moduleNames.map((moduleName) => {
     if (moduleName === "./user-script") {
-      return { resolvedFileName: USER_FILE, extension: import_typescript3.default.Extension.Ts };
+      return { resolvedFileName: USER_FILE, extension: import_typescript4.default.Extension.Ts };
     }
     const virtualModule = virtualModules.get(moduleName);
     if (virtualModule) {
-      return { resolvedFileName: virtualModule, extension: import_typescript3.default.Extension.Dts };
+      return { resolvedFileName: virtualModule, extension: import_typescript4.default.Extension.Dts };
     }
     const base = containingFile.startsWith("/virtual/") ? projectBase : containingFile;
-    return import_typescript3.default.resolveModuleName(moduleName, base, options, host).resolvedModule;
+    return import_typescript4.default.resolveModuleName(moduleName, base, options, host).resolvedModule;
   });
   const tsLibDir = process.env.TS_LIB_DIR;
   if (tsLibDir) {
@@ -184247,16 +184570,16 @@ function createCompilerHost(files, options, virtualModules = new Map) {
   return host;
 }
 function flattenMessage(messageText) {
-  return import_typescript3.default.flattenDiagnosticMessageText(messageText, `
+  return import_typescript4.default.flattenDiagnosticMessageText(messageText, `
 `);
 }
 function diagnosticSeverity(diag) {
   switch (diag.category) {
-    case import_typescript3.default.DiagnosticCategory.Error:
+    case import_typescript4.default.DiagnosticCategory.Error:
       return "error";
-    case import_typescript3.default.DiagnosticCategory.Warning:
+    case import_typescript4.default.DiagnosticCategory.Warning:
       return "warning";
-    case import_typescript3.default.DiagnosticCategory.Suggestion:
+    case import_typescript4.default.DiagnosticCategory.Suggestion:
       return "suggestion";
     default:
       return "message";
@@ -184312,12 +184635,12 @@ async function typecheckWithAmbient(args) {
   const options = {
     allowImportingTsExtensions: true,
     lib: ["lib.es2022.d.ts"],
-    module: import_typescript3.default.ModuleKind.ESNext,
-    moduleResolution: import_typescript3.default.ModuleResolutionKind.Bundler,
+    module: import_typescript4.default.ModuleKind.ESNext,
+    moduleResolution: import_typescript4.default.ModuleResolutionKind.Bundler,
     noEmit: true,
     skipLibCheck: true,
     strict: true,
-    target: import_typescript3.default.ScriptTarget.ES2022,
+    target: import_typescript4.default.ScriptTarget.ES2022,
     types: []
   };
   const files = new Map([
@@ -184335,7 +184658,7 @@ async function typecheckWithAmbient(args) {
     files.set(`/virtual/ambient-${name.replace(/[^A-Za-z0-9_.-]/g, "_")}.d.ts`, source);
   }
   const host = createCompilerHost(files, options, virtualModules);
-  const program = import_typescript3.default.createProgram([...files.keys()], options, host);
+  const program = import_typescript4.default.createProgram([...files.keys()], options, host);
   const diagnostics = [
     ...program.getSyntacticDiagnostics(),
     ...program.getSemanticDiagnostics()
@@ -184353,7 +184676,7 @@ async function typecheckWithAmbient(args) {
   };
   return {
     ok: false,
-    diagnostics: diagnostics.map((diagnostic) => import_typescript3.default.formatDiagnosticsWithColorAndContext([diagnostic], formatHost).trimEnd()),
+    diagnostics: diagnostics.map((diagnostic) => import_typescript4.default.formatDiagnosticsWithColorAndContext([diagnostic], formatHost).trimEnd()),
     structured: diagnostics.map(toStructured)
   };
 }
@@ -184424,4 +184747,4 @@ function parseSkillContent(content) {
   };
 }
 
-export { require_dist, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript, checkImportAllowlist, validateScriptImports, runScript, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, resolveSyncRunAs, AppNameSchema, ColumnKindSchema, isIso8601Date, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };
+export { require_dist, isInvalidClientError, assertUrlSafe, publicEndpointSsrfOptions, mcpOAuthSsrfOptions, discoverProtectedResourceMetadata, discoverAuthorizationServerMetadata, normalizeTokenEndpointAuthMethod, resolveAdvertisedTokenEndpointAuthMethod, authMethodForStoredClient, selectDcrTokenEndpointAuthMethod, registerClient, buildAuthorizeUrl, exchangeCodeForTokens, refreshMcpToken, revokeMcpToken, computeExpiresAt, getMcpOAuthToken, findReusableMcpOAuthClient, invalidateMcpOAuthClient, upsertMcpOAuthToken, applyMcpOAuthRefresh, markMcpOAuthTokenStatus, deleteMcpOAuthToken, insertMcpOAuthPending, consumeMcpOAuthPending, gcMcpOAuthPending, setMcpServerAuthMethod, ensureMcpToken, callMcpServerTool, resolveSqlDsn, runReadOnlyQuery, listVendoredOpenapiEntries, ConnectionAuthInputSchema, SqlDsnInputSchema, connectionAuthSummary, listRelationalCredentialBindings, getCredentialBindingById, findCredentialBindingByIdentity, upsertCredentialBinding, disableCredentialBinding, listScriptConnections, listScriptConnectionsAsync, getScriptConnectionById, ScriptConnectionConflictError, connectionAuthInputFromFlat, upsertScriptConnection, refreshScriptConnection, setScriptConnectionEnabled, deleteScriptConnection, getScriptApiConnectionDescriptors, getScriptMcpConnectionDescriptors, getScriptApiTypes, getScriptMcpTypes, oauthAppToProviderConfig, getOAuthProviderConfig, getOAuthBindingTokenStatus, buildScriptCredentialBindingsWithFailures, buildSandboxedCommand, sandboxSpawnEnv, createCappedStreamState, snapshotCapped, readStreamCapped, writeBareImportShim, MIN_SCRIPT_WALL_CLOCK_MS, SCRIPT_LONG_TIMEOUT_HINT_MS, MAX_SCRIPT_WALL_CLOCK_MS, DEFAULT_SCRIPT_RESOURCES, require_typescript, checkImportAllowlist, validateScriptImports, runScript, extractScriptSignature, extractArgsJsonSchema, getSavedScriptOwnerAgentId, runSavedScriptAsAgent, checkQuickJSCompat, quickJSCompatWarnings, resolveSyncRunAs, AppNameSchema, ColumnKindSchema, isIso8601Date, SYSTEM_COLUMN_KINDS, SORTABLE_SYSTEM_DATE_COLUMNS, AppElementsSchema, AppDefinitionSchema, collectScriptReferences, scriptCompatWarnings, parseAppDefinition, applyAppDefinitionPatch, upgradeAppDefinition, decodeAppDefinition, appDefinitionNeedsRepair, createApp, getApp, listApps, listAppRecords, updateApp, deleteApp, getScriptAppTypes, SCRIPT_SDK_TYPES, scriptSdkTypesWithGeneratedApis, SCRIPT_STDLIB_MODULE_TYPES, scriptStdlibTypesWithGeneratedApis, typecheckWithAmbient, typecheckScript, parseSkillContent };

package/dist/{cli-03gedhng.js → cli-5twdke5x.js}

@@ -20,7 +20,7 @@ import {
 } from "./cli-w1q7h2r2.js";
 import {
   summarizeSession
-} from "./cli-tr4sxp68.js";
+} from "./cli-035vekcw.js";
 import {
   hasCodexOAuthPoolSlots
 } from "./cli-bqjfjex4.js";
@@ -29,7 +29,7 @@ import {
 } from "./cli-2pdaysab.js";
 import {
   applyReasoningEffort
-} from "./cli-n5vwg842.js";
+} from "./cli-0veb92a3.js";
 import {
   buildRatingsFromLlm,
   fetchRetrievalsForTask,
@@ -48,11 +48,11 @@ import {
   CodexOAuthRefreshError,
   credentialsToAuthJson,
   getValidCodexOAuth
-} from "./cli-e6mpjhed.js";
+} from "./cli-rc6pf5kv.js";
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-cgtksawx.js";
+} from "./cli-pe05f8yk.js";
 import {
   init_runtime_model_catalog,
   runtimeCatalogModel
@@ -60,7 +60,7 @@ import {
 import {
   init_package,
   package_default
-} from "./cli-k382tshb.js";
+} from "./cli-r35rw5de.js";
 import {
   init_env_flag,
   isEnvFlagEnabled
@@ -72,7 +72,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-p1x85d2t.js";
+} from "./cli-shk7r5cs.js";
 import {
   init_src
 } from "./cli-e3g5mbkz.js";

package/dist/{cli-6razj6t4.js → cli-711vwbxn.js}

@@ -9,12 +9,12 @@ import {
   markAuthorizationRefreshFailed,
   releaseOAuthRefreshLock,
   updateAuthorizationTokens
-} from "./cli-ef1hg1wv.js";
+} from "./cli-y3167wt1.js";
 import {
   init_secret_scrubber,
   registerVolatileSecret,
   scrubSecrets
-} from "./cli-p1x85d2t.js";
+} from "./cli-shk7r5cs.js";
 
 // src/oauth/ensure-token.ts
 init_oauth();

package/dist/{cli-s2sp957d.js → cli-78vv7446.js}

@@ -24,7 +24,7 @@ import {
 import {
   init_secret_scrubber,
   scrubSecrets
-} from "./cli-p1x85d2t.js";
+} from "./cli-shk7r5cs.js";
 import {
   __esm
 } from "./cli-bc05qbss.js";

package/dist/{cli-3fbmmawm.js → cli-7n6s5man.js}

@@ -9,7 +9,7 @@ import {
 import {
   applyReasoningEffort,
   reasoningCapability
-} from "./cli-n5vwg842.js";
+} from "./cli-0veb92a3.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-re8z5p8p.js";
@@ -21,7 +21,7 @@ import {
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-cgtksawx.js";
+} from "./cli-pe05f8yk.js";
 import {
   getOpenRouterAttributionHeaders,
   getOpenRouterBaseUrl,
@@ -31,7 +31,7 @@ import {
   init_secret_scrubber,
   registerVolatileSecret,
   scrubSecrets
-} from "./cli-p1x85d2t.js";
+} from "./cli-shk7r5cs.js";
 
 // src/providers/dsh-adapter.ts
 init_types();
@@ -66,7 +66,7 @@ function addDshStepUsage(acc, step) {
 // src/providers/dsh-adapter.ts
 init_openrouter_base_url();
 init_secret_scrubber();
-var DSH_PACKAGE = "@deepseek-ai/dsh@0.2.1-alpha.4";
+var DSH_PACKAGE = "@deepseek-ai/dsh@0.2.1-alpha.5";
 function checkDshCredentials(env) {
   return env.DEEPSEEK_API_KEY?.trim() || env.OPENROUTER_API_KEY?.trim() ? { ready: true, missing: [], satisfiedBy: "env" } : {
     ready: false,

package/dist/{cli-hnhtk6cj.js → cli-8wwxw8a3.js}

@@ -1,7 +1,7 @@
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-cgtksawx.js";
+} from "./cli-pe05f8yk.js";
 
 // src/utils/amp-models.ts
 init_types();

package/dist/{cli-hnmhtzvh.js → cli-9jzdj90z.js}

@@ -59,6 +59,7 @@ var init_tool_config = __esm(() => {
     "script-connections",
     "model-catalog-refresh",
     "model-catalog-overlay-upsert",
+    "list-model-profiles",
     "update-repo",
     "update-profile",
     "context-history",
@@ -105,6 +106,7 @@ var init_tool_config = __esm(() => {
     "create_metric",
     "request-human-input",
     "cancel-approval-request",
+    "system-one-decide",
     "skill-create",
     "skill-update",
     "skill-delete",