@desplega.ai/agent-swarm 2.3.0 → 2.4.1

package/dist/{cli-c5sbmw1v.js → cli-d82btycs.js}

@@ -379,7 +379,10 @@ var SHORT_FLAGS = {
   m: "milestone",
   p: "project",
   r: "reviewer",
-  T: "template"
+  T: "template",
+  e: "editor",
+  f: "fill",
+  w: "web"
 };
 function parseGhArgs(args) {
   const parsed = { positionals: [], flags: [] };
@@ -824,14 +827,18 @@ function parseWithState(command, initial, initialFlags) {
         bodyFiles.push(expanded);
     }
     found.push({
+      action,
       cwd: wrapperFlags || dirUnknown ? null : state.dir,
       repos: [...new Set(repos)],
+      resolvedRepos: repos.map(expand),
       alsoCheckout,
       unknownTarget,
       texts: [...inline, ...fromStdin ? stdin : []],
+      bodyTexts: [...values("body"), ...fromStdin ? stdin : []].map(expand),
       bodyFiles,
       unresolvedBodyFiles,
-      opaqueBody: inline.some((value) => value.endsWith("$")) || action === "edit" && target?.endsWith("$") === true || fromStdin && stdin.length === 0 && args.stdinFile === undefined
+      opaqueBody: inline.some((value) => value.endsWith("$")) || action === "edit" && target?.endsWith("$") === true || fromStdin && stdin.length === 0 && args.stdinFile === undefined,
+      externalBody: values("fill", "fill-first", "fill-verbose", "template", "editor", "web", "recover").length > 0
     });
   };
   const segments = tokenizeShell(command);
@@ -849,6 +856,21 @@ function parseWithState(command, initial, initialFlags) {
   return found;
 }
 var BLOCK_ADVICE = "Paraphrase the motivation ('a maintainer asked for X') and link only public sources (Fixes #N, a public PR or issue). Task, session, agent-fs and Slack permalinks go only under '## Swarm provenance'. Bare Slack ids, ts values and private-chat quotes are blocked everywhere.";
+async function readGhPrBodyFiles(call, readFile) {
+  const texts = [];
+  let unreadable = call.unresolvedBodyFiles[0];
+  for (const bodyFile of call.bodyFiles) {
+    try {
+      const base = isAbsolute(bodyFile) ? "/" : call.cwd;
+      if (base === null)
+        throw new Error("unknown working directory");
+      texts.push(await readFile(resolve(base, bodyFile)));
+    } catch {
+      unreadable ??= bodyFile;
+    }
+  }
+  return { texts, unreadable };
+}
 async function checkGhPrCommand(command, cwd, deps) {
   if (!/\bgh\b[\s\S]*\bpr\b/.test(command))
     return null;
@@ -858,18 +880,10 @@ async function checkGhPrCommand(command, cwd, deps) {
       for (const leak of findPrBodyLeaks(text))
         leaks.add(leak);
     }
-    let unreadable = call.unresolvedBodyFiles[0];
-    for (const bodyFile of call.bodyFiles) {
-      try {
-        const base = isAbsolute(bodyFile) ? "/" : call.cwd;
-        if (base === null)
-          throw new Error("unknown working directory");
-        for (const leak of findPrBodyLeaks(await deps.readFile(resolve(base, bodyFile)))) {
-          leaks.add(leak);
-        }
-      } catch {
-        unreadable ??= bodyFile;
-      }
+    const { texts, unreadable } = await readGhPrBodyFiles(call, deps.readFile);
+    for (const text of texts) {
+      for (const leak of findPrBodyLeaks(text))
+        leaks.add(leak);
     }
     if (leaks.size === 0 && unreadable === undefined)
       continue;
@@ -940,4 +954,69 @@ async function guardGhPrBody(toolInput, cwd, deps = defaultPrBodyGuardDeps()) {
   }
 }
 
-export { guardGhPrBody };
+// src/hooks/pr-room-guard.ts
+var BLOCK_REASON = 'This repo uses PR rooms. Create the room first with the pr-room skill (app action createRoom). Then pass the returned prBody with --body-file. The body must contain the line "PR room: prr-...".';
+var ROOM_LINE = /^PR room: prr-[a-z2-7]{10}\b/m;
+var REMOTE_LOOKUP_TIMEOUT_MS = 5000;
+async function gitRemoteOrigin(cwd, timeoutMs = REMOTE_LOOKUP_TIMEOUT_MS) {
+  const proc = Bun.spawn(["git", "-C", cwd, "config", "--get", "remote.origin.url"], {
+    stdout: "pipe",
+    stderr: "ignore",
+    stdin: "ignore",
+    timeout: timeoutMs,
+    killSignal: "SIGKILL"
+  });
+  const [out, code] = await Promise.all([new Response(proc.stdout).text(), proc.exited]);
+  if (code !== 0)
+    throw new Error("Cannot resolve checkout remote");
+  return out.trim();
+}
+var defaultDeps = () => ({
+  env: process.env,
+  readFile: (path) => Bun.file(path).text(),
+  remoteOrigin: (cwd) => gitRemoteOrigin(cwd)
+});
+function repoFromRemote(remote) {
+  const match = /^(?:https?:\/\/[^/]+\/|ssh:\/\/[^/]+\/|[^\s/@:]+@[^\s/:]+:)([^/\s]+)\/([^/\s]+?)\/?$/.exec(remote.trim());
+  return match ? `${match[1]}/${match[2]?.replace(/\.git$/, "")}`.toLowerCase() : undefined;
+}
+async function guardGhPrRoom(toolInput, cwd, deps = defaultDeps()) {
+  try {
+    const repos = new Set((deps.env.PR_ROOM_REPOS ?? "").split(",").map((repo) => repo.trim().toLowerCase()).filter(Boolean));
+    if (repos.size === 0)
+      return null;
+    const command = shellCommandOf(toolInput);
+    if (command === null)
+      return null;
+    for (const call of parseGhPrCommands(command, cwd, deps.env)) {
+      if (call.action !== "create" || call.unknownTarget || call.cwd === null)
+        continue;
+      if (call.opaqueBody || call.externalBody || call.bodyTexts.includes(null))
+        continue;
+      const targets = [...call.resolvedRepos];
+      if (targets.includes(null))
+        continue;
+      if (targets.length === 0 || call.alsoCheckout) {
+        try {
+          const repo = repoFromRemote(await deps.remoteOrigin(call.cwd));
+          if (!repo)
+            continue;
+          targets.push(repo);
+        } catch {
+          continue;
+        }
+      }
+      if (!targets.every((repo) => repo !== null && repos.has(repo.trim().toLowerCase())))
+        continue;
+      const body = await readGhPrBodyFiles(call, deps.readFile);
+      if (body.unreadable !== undefined)
+        continue;
+      const texts = [...call.bodyTexts, ...body.texts];
+      if (!texts.some((text) => text !== null && ROOM_LINE.test(text)))
+        return BLOCK_REASON;
+    }
+  } catch {}
+  return null;
+}
+
+export { guardGhPrBody, guardGhPrRoom };

package/dist/{cli-vjfpshn3.js → cli-ejs3m1sx.js}

@@ -5,7 +5,7 @@ import {
 import {
   scrubSecrets,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 
 // src/providers/codex-oauth/auth-json.ts
 init_subscription_plans();

package/dist/{cli-yv0vgscc.js → cli-fpmsqq59.js}

@@ -1637,7 +1637,7 @@ function checkExtensionInstallSource(body, ctx) {
     ctx.addIssue({ code: "custom", path: ["files"], message: "files is required with manifest" });
   }
 }
-var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
+var AssetKeySchema, AssetEntityTypeSchema, AssetProviderRefSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, LEGACY_MODEL_TO_TIER, DEFAULT_MODEL_TIER_MAP, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, InboxMessageStatusSchema, InboxMessageSchema, AgentTaskSourceSchema, RoutingReasonSchema, RoutingSourceSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionShareAccessSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringStatusSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, TaskAttachmentKindSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY = "_agentSwarmGeneratedBy", attachmentCapabilitiesSchema, attachmentCommonFields, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, IdentityEventTypeSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentCredStatusLiveTestSchema, AgentLatestModelSchema, AgentBedrockStatusSchema, AgentOpencodeGoStatusSchema, AcpSessionConfigSelectValueSchema, AcpSessionConfigSelectGroupSchema, AcpSessionConfigOptionSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, ChangeSourceSchema, VersionableFieldSchema, ContextVersionSchema, ChannelTypeSchema, ChannelSchema, ChannelMessageSchema, ServiceStatusSchema, ServiceSchema, AgentLogEventTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostSourceSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesSchema, REPO_GUIDELINES_MAX_ENTRIES = 50, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeInstanceStatusSchema, RuntimeProviderKindSchema, DeliveryModeSchema, PoolLifecycleSchema, RuntimeResourcesSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON = "superseded_workflow_task", ExecutorMetaSchema, ValidationResultSchema, StepValidationConfigSchema, SwarmScriptNodeConfigSchema, WorkflowNodeSchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, WebhookVerificationSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowTemplateSchema, WorkflowSnapshotSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSnapshotSchema, PageSchema, PageVersionSchema, MetricParamSchema, MetricVariableTypeSchema, MetricFormatSchema, MetricVisualizationSchema, MetricQuerySchema, MetricVariableSchema, MetricVizConfigSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSnapshotSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunKindSchema, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepStatusSchema, WorkflowRunStepSchema, WaitModeSchema, WaitStateStatusSchema, WaitStateRowSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionNameSchema, SemverSchema, ExtensionBundlePathSchema, ExtensionAssetNameSchema, ExtensionScriptAssetSchema, ExtensionScheduleAssetSchema, ExtensionWorkflowAssetSchema, ExtensionSkillAssetSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionStatusSchema, ExtensionSchema, ExtensionFileSchema, ExtensionVersionSchema, ExtensionRunSchema, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillTypeSchema, SkillScopeSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpServerTransportSchema, McpServerScopeSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KV_NAME_REGEX, KvNamespaceSchema, KvKeySchema, KvEntrySchema;
 var init_types = __esm(() => {
   init_key();
   init_bundle_path();
@@ -1855,6 +1855,17 @@ var init_types = __esm(() => {
     createdAt: string2(),
     lastUpdatedAt: string2()
   });
+  SessionShareAccessSchema = _enum2(["read", "write"]);
+  SessionAccessSchema = _enum2(["owner", "write", "read"]);
+  SessionOwnerSchema = object2({ id: string2(), name: string2() }).openapi("SessionOwner");
+  SessionSharesSchema = object2({
+    everyone: _enum2(["none", "read", "write"]),
+    users: array2(object2({ userId: string2(), access: SessionShareAccessSchema, createdAt: string2() }))
+  }).openapi("SessionShares");
+  SessionSharesUpdateSchema = object2({
+    everyone: _enum2(["none", "read", "write"]),
+    users: array2(object2({ userId: string2().min(1), access: SessionShareAccessSchema })).max(500)
+  });
   SteerModeSchema = _enum2(["steer", "queue"]);
   SteeringStatusSchema = _enum2([
     "pending",
@@ -2254,6 +2265,10 @@ var init_types = __esm(() => {
     models: array2(object2({ id: string2(), name: string2() })).default([]),
     error: string2().optional()
   }).openapi("AgentBedrockStatus");
+  AgentOpencodeGoStatusSchema = object2({
+    probedAt: number2(),
+    models: array2(string2()).default([])
+  }).openapi("AgentOpencodeGoStatus");
   AcpSessionConfigSelectValueSchema = object2({
     value: string2(),
     name: string2(),
@@ -2298,6 +2313,7 @@ var init_types = __esm(() => {
     reportedAt: number2(),
     reportKind: _enum2(["boot", "post_task"]).default("boot"),
     bedrock: AgentBedrockStatusSchema.nullable().default(null),
+    opencodeGo: AgentOpencodeGoStatusSchema.nullable().default(null),
     acp: AgentAcpStatusSchema.nullable().default(null)
   }).openapi("AgentCredStatus");
   AgentWithTasksSchema = AgentSchema.extend({
@@ -3632,4 +3648,4 @@ var init_types = __esm(() => {
   }).openapi("KvEntry");
 });
 
-export { normalizeAssetKey, defaultAssetKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types };
+export { normalizeAssetKey, defaultAssetKey, parseAssetKey, isCanonicalAssetKey, canWriteAssetKey, init_key, isSafeBundlePath, init_bundle_path, $OpenAPIRegistry, $OpenApiGeneratorV31, init_dist, init_zod_openapi, AssetKeySchema, AssetEntityTypeSchema, AssetKeyMappingSchema, AssetSummarySchema, ModelTierSchema, MODEL_TIERS, ReasoningEffortSchema, DEFAULT_MODEL_TIER_MAP, parseModelTier, splitLegacyModelAlias, parseWorkerModelTierOverrides, resolveTaskModelSelection, AgentTaskStatusSchema, TERMINAL_TASK_STATUSES, isTerminalTaskStatus, AgentTaskSourceSchema, RoutingReasonSchema, ProviderNameSchema, ModelProfileNameSchema, ModelProfileSchema, SessionAccessSchema, SessionOwnerSchema, SessionSharesSchema, SessionSharesUpdateSchema, SteerModeSchema, SteeringSourceSchema, SteeringMessageSchema, SteerOutcomeSchema, OnUnsupportedSchema, SteerResultSchema, PROVIDER_STEER_CAPABILITIES, FollowUpConfigSchema, RoutingAffinitySchema, AgentTaskSchema, CreateTaskOptionsSchema, SERVER_GENERATED_ATTACHMENT_CAPABILITY, AttachmentInputSchema, TaskAttachmentSchema, UserSchema, UserCommsPrefsSchema, InboxItemTypeSchema, InboxItemStatusSchema, InboxItemStateSchema, FavoriteItemTypeSchema, UserFavoriteSchema, TaskTemplateKindSchema, TaskTemplateSchema, AgentStatusSchema, AgentAvatarSchema, AgentSchema, AgentLatestModelSchema, AgentAcpStatusSchema, AgentCredStatusSchema, AgentWithTasksSchema, VersionableFieldSchema, ChannelTypeSchema, ResumeReasonSchema, AgentLogSchema, SessionLogSchema, SessionCostModelBreakdownSchema, SessionCostSchema, EventCategorySchema, EventStatusSchema, EventSourceSchema, EventNameSchema, SwarmEventSchema, AutomationIntegrationIdSchema, ScheduledTaskTargetTypeSchema, ScheduledTaskSchema, SwarmConfigScopeSchema, SwarmConfigSchema, RepoGuidelinesInputSchema, RepoHooksSchema, SwarmRepoSchema, AgentMemoryScopeSchema, AgentMemorySourceSchema, AgentMemorySchema, ActiveSessionSchema, WorkerNudgeSchema, RuntimeProviderKindSchema, DeliveryModeSchema, RuntimeControllerCreateSchema, RuntimeControllerUpdateSchema, RuntimeControllerSchema, RuntimePoolCreateSchema, RuntimePoolUpdateSchema, RuntimePoolSchema, RuntimePoolCreateAgentSchema, RuntimeInstanceSchema, RetryPolicySchema, SUPERSEDED_WORKFLOW_TASK_REASON, WorkflowEdgeSchema, WorkflowDefinitionSchema, WorkflowNodePatchSchema, WorkflowPatchSchema, TriggerConfigSchema, CooldownConfigSchema, InputValueSchema, WorkflowSchema, WorkflowVersionSchema, PageContentTypeSchema, PageAuthModeSchema, PageSchema, PageVersionSchema, MetricWidgetSchema, MetricDefinitionSchema, MetricSchema, MetricVersionSchema, WorkflowRunStatusSchema, WorkflowRunSchema, WorkflowRunParentSchema, WorkflowRunSummarySchema, ScriptRunStatusSchema, TERMINAL_SCRIPT_RUN_STATUSES, ScriptRunSchema, ScriptRunListItemSchema, ScriptRunJournalEntrySchema, WorkflowRunStepSchema, PromptTemplateScopeSchema, PromptTemplateStateSchema, PromptTemplateSchema, PromptTemplateHistorySchema, ScriptScopeSchema, ScriptFsModeSchema, ScriptRecordSchema, ScriptVersionRecordSchema, ExtensionWorkflowFileSchema, ExtensionManifestSchema, ExtensionSchema, ExtensionVersionSchema, ExtensionRunSchema, checkExtensionInstallSource, ExtensionInstallBodySchema, ScriptApiAuthModeSchema, ScriptApiRecordSchema, SkillSchema, AgentSkillSchema, SkillWithInstallInfoSchema, SkillFileSchema, McpAuthMethodSchema, McpServerSchema, AgentMcpServerSchema, McpServerWithInstallInfoSchema, ContextSnapshotEventTypeSchema, ContextFormulaSchema, ContextSnapshotSchema, BudgetScopeSchema, BudgetSchema, PricingProviderSchema, PricingTokenClassSchema, PricingRowSchema, BudgetRefusalCauseSchema, BudgetRefusalNotificationSchema, BudgetRefusedTriggerSchema, KvValueTypeSchema, KvNamespaceSchema, KvKeySchema, KvEntrySchema, init_types };

package/dist/cli-fz9kewbh.js

@@ -0,0 +1,382 @@
+import {
+  getDbClient2,
+  scheduleOrgDomainRecompute,
+  init_telemetry_identity,
+  validateRuntimeTokenTtlHours,
+  init_swarm_config_guard,
+  init_db3
+} from "./cli-rqqsfz30.js";
+import {
+  unregisterVolatileSecret,
+  init_secret_scrubber
+} from "./cli-xf234ws8.js";
+import {
+  __esm
+} from "./cli-242037k3.js";
+
+// src/utils/session-token-connections.ts
+function registerSessionTokenConnection(tokenId, close) {
+  let callbacks = connections.get(tokenId);
+  if (!callbacks) {
+    callbacks = new Set;
+    connections.set(tokenId, callbacks);
+  }
+  callbacks.add(close);
+  return () => {
+    callbacks.delete(close);
+    if (callbacks.size === 0)
+      connections.delete(tokenId);
+  };
+}
+function closeSessionTokenConnections(tokenIds) {
+  for (const tokenId of tokenIds) {
+    for (const close of connections.get(tokenId) ?? [])
+      close();
+  }
+}
+var connections;
+var init_session_token_connections = __esm(() => {
+  connections = new Map;
+});
+
+// src/be/users.ts
+import { createHash, randomBytes, randomUUID } from "node:crypto";
+function actorString(actor) {
+  return `${actor.kind}:${actor.id}`;
+}
+function rowToUser(row) {
+  return {
+    id: row.id,
+    name: row.name,
+    email: row.email ?? undefined,
+    role: row.role ?? undefined,
+    notes: row.notes ?? undefined,
+    emailAliases: row.emailAliases ? JSON.parse(row.emailAliases) : [],
+    preferredChannel: row.preferredChannel ?? "slack",
+    timezone: row.timezone ?? undefined,
+    metadata: row.metadata ? JSON.parse(row.metadata) : undefined,
+    dailyBudgetUsd: row.dailyBudgetUsd ?? null,
+    status: row.status ?? "active",
+    createdAt: row.createdAt,
+    lastUpdatedAt: row.lastUpdatedAt
+  };
+}
+async function findUserById(id) {
+  const row = await getDbClient2().get("SELECT * FROM users WHERE id = ?", [id]);
+  return row ? rowToUser(row) : null;
+}
+async function findUserByExternalId(kind, externalId) {
+  const row = await getDbClient2().get(`SELECT u.* FROM users u
+       INNER JOIN user_external_ids x ON x.userId = u.id
+       WHERE x.kind = ? AND x.externalId = ?`, [kind, externalId]);
+  return row ? rowToUser(row) : null;
+}
+async function findUserByEmail(email) {
+  const lower = email.toLowerCase();
+  const db = getDbClient2();
+  const primary = await db.get("SELECT * FROM users WHERE LOWER(email) = LOWER(?)", [
+    email
+  ]);
+  if (primary)
+    return rowToUser(primary);
+  const aliasRows = await db.query("SELECT * FROM users WHERE emailAliases IS NOT NULL AND emailAliases != '[]'");
+  for (const r of aliasRows) {
+    const aliases = r.emailAliases ? JSON.parse(r.emailAliases) : [];
+    if (aliases.some((a) => a.toLowerCase() === lower)) {
+      return rowToUser(r);
+    }
+  }
+  return null;
+}
+async function findUsersByName(name) {
+  const trimmed = name.trim();
+  if (!trimmed)
+    return [];
+  const client = getDbClient2();
+  const exact = await client.query("SELECT * FROM users WHERE LOWER(name) = LOWER(?)", [
+    trimmed
+  ]);
+  if (exact.length > 0)
+    return exact.map(rowToUser);
+  const firstToken = trimmed.split(/\s+/)[0] ?? trimmed;
+  const prefixed = await client.query("SELECT * FROM users WHERE LOWER(name) LIKE LOWER(?) || '%'", [firstToken]);
+  return prefixed.map(rowToUser);
+}
+async function getUserIdentities(userId) {
+  return getDbClient2().query("SELECT kind, externalId FROM user_external_ids WHERE userId = ? ORDER BY kind, externalId", [userId]);
+}
+function rowToEvent(row) {
+  return {
+    id: row.id,
+    userId: row.userId,
+    eventType: row.eventType,
+    actor: row.actor,
+    before: row.beforeJson == null ? null : JSON.parse(row.beforeJson),
+    after: row.afterJson == null ? null : JSON.parse(row.afterJson),
+    createdAt: row.createdAt
+  };
+}
+async function listUserEvents(userId, opts = {}) {
+  const limit = Math.max(1, Math.min(opts.limit ?? 50, 200));
+  const before = opts.before;
+  const client = getDbClient2();
+  if (before) {
+    const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
+           FROM user_identity_events
+          WHERE userId = ? AND createdAt < ?
+          ORDER BY createdAt DESC, rowid DESC
+          LIMIT ?`, [userId, before, limit]);
+    return rows.map(rowToEvent);
+  }
+  const rows = await client.query(`SELECT id, userId, eventType, actor, beforeJson, afterJson, createdAt
+         FROM user_identity_events
+        WHERE userId = ?
+        ORDER BY createdAt DESC, rowid DESC
+        LIMIT ?`, [userId, limit]);
+  return rows.map(rowToEvent);
+}
+async function listUserTokens(userId) {
+  return getDbClient2().query(`SELECT id, userId, label, tokenPreview, createdAt, lastUsedAt, revokedAt
+         FROM user_tokens
+        WHERE userId = ?
+        ORDER BY createdAt DESC`, [userId]);
+}
+async function recordIdentityEvent(userId, eventType, actor, before, after) {
+  await getDbClient2().run(`INSERT INTO user_identity_events (id, userId, eventType, actor, beforeJson, afterJson, createdAt)
+       VALUES (?, ?, ?, ?, ?, ?, ?)`, [
+    randomUUID().replace(/-/g, ""),
+    userId,
+    eventType,
+    actorString(actor),
+    before == null ? null : JSON.stringify(before),
+    after == null ? null : JSON.stringify(after),
+    new Date().toISOString()
+  ]);
+}
+async function findOrCreateUserByEmail(email, hints, actor) {
+  const existing = await findUserByEmail(email);
+  if (existing) {
+    await recordIdentityEvent(existing.id, "auto_merge", actor, null, { email, hints });
+    return { user: existing, created: false };
+  }
+  const id = randomUUID().replace(/-/g, "");
+  const now = new Date().toISOString();
+  const name = hints.name?.trim() || email.split("@")[0] || email;
+  const created = await getDbClient2().transaction(async (tx) => {
+    await tx.run(`INSERT INTO users (id, name, email, role, notes, emailAliases, preferredChannel, timezone, createdAt, lastUpdatedAt, status)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, 'active')`, [
+      id,
+      name,
+      email,
+      hints.role ?? null,
+      hints.notes ?? null,
+      "[]",
+      hints.preferredChannel ?? "slack",
+      null,
+      now,
+      now
+    ]);
+    const row = await tx.get("SELECT * FROM users WHERE id = ?", [id]);
+    if (!row)
+      throw new Error("Failed to create user");
+    await recordIdentityEvent(id, "identity_added", actor, null, { email, name });
+    return rowToUser(row);
+  });
+  getDbClient2().afterCommit(scheduleOrgDomainRecompute);
+  return { user: created, created: true };
+}
+async function linkIdentity(userId, kind, externalId, actor) {
+  await getDbClient2().transaction(async (tx) => {
+    await tx.run("INSERT INTO user_external_ids (userId, kind, externalId) VALUES (?, ?, ?)", [
+      userId,
+      kind,
+      externalId
+    ]);
+    await recordIdentityEvent(userId, "identity_added", actor, null, { kind, externalId });
+  });
+}
+async function unlinkIdentity(userId, kind, externalId, actor) {
+  await getDbClient2().transaction(async (tx) => {
+    await tx.run("DELETE FROM user_external_ids WHERE userId = ? AND kind = ? AND externalId = ?", [
+      userId,
+      kind,
+      externalId
+    ]);
+    await recordIdentityEvent(userId, "identity_removed", actor, { kind, externalId }, null);
+  });
+}
+function base62(bytes) {
+  const alphabet = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
+  let out = "";
+  for (const b of bytes) {
+    out += alphabet[b % 62];
+  }
+  return out;
+}
+function sha256Hex(input) {
+  return createHash("sha256").update(input).digest("hex");
+}
+async function mintToken(userId, label, actor, options = {}) {
+  const plaintext = `${TOKEN_PREFIX}${base62(randomBytes(24))}`;
+  const tokenId = randomUUID().replace(/-/g, "");
+  const hash = sha256Hex(plaintext);
+  const preview = plaintext.slice(-4);
+  const now = new Date().toISOString();
+  await getDbClient2().transaction(async (tx) => {
+    await tx.run(`INSERT INTO user_tokens (id, userId, label, tokenHash, tokenPreview, createdAt)
+       VALUES (?, ?, ?, ?, ?, ?)`, [tokenId, userId, label, hash, preview, now]);
+    await recordIdentityEvent(userId, "token_minted", actor, null, {
+      tokenId,
+      label,
+      preview,
+      ...options.source ? { source: options.source } : {}
+    });
+  });
+  return { tokenId, plaintext };
+}
+async function revokeToken(tokenId, actor) {
+  await getDbClient2().transaction(async (tx) => {
+    const row = await tx.get("SELECT userId, label, tokenPreview FROM user_tokens WHERE id = ?", [tokenId]);
+    if (!row) {
+      throw new Error(`Token not found: ${tokenId}`);
+    }
+    await tx.run("UPDATE user_tokens SET revokedAt = ? WHERE id = ?", [
+      new Date().toISOString(),
+      tokenId
+    ]);
+    await recordIdentityEvent(row.userId, "token_revoked", actor, { tokenId, label: row.label, preview: row.tokenPreview }, null);
+  });
+}
+async function resolveUserByToken(plaintext) {
+  const hash = sha256Hex(plaintext);
+  const client = getDbClient2();
+  const row = await client.get("SELECT id, userId, revokedAt FROM user_tokens WHERE tokenHash = ?", [hash]);
+  if (!row || row.revokedAt !== null)
+    return null;
+  try {
+    await client.run("UPDATE user_tokens SET lastUsedAt = ? WHERE id = ?", [
+      new Date().toISOString(),
+      row.id
+    ]);
+  } catch {}
+  return findUserById(row.userId);
+}
+async function mintSessionToken(agentId, taskId, ttlMs, parent) {
+  if (parent) {
+    return await getDbClient2().transaction(async (client) => {
+      const row = await client.get(`SELECT expiresAt FROM session_tokens WHERE id = ? AND agentId = ? AND runtimeId = ?
+         AND revokedAt IS NULL AND expiresAt > ?`, [parent.tokenId, agentId, parent.runtimeId, new Date().toISOString()]);
+      if (!row)
+        throw new InvalidRuntimeTokenError;
+      return await insertSessionToken(agentId, taskId, null, ttlMs, parent.runtimeId, row.expiresAt);
+    });
+  }
+  return await insertSessionToken(agentId, taskId, null, ttlMs);
+}
+function runtimeTokenTtlMs() {
+  const hours = process.env.RUNTIME_TOKEN_TTL_HOURS ?? "168";
+  return (validateRuntimeTokenTtlHours(hours) === null ? Number(hours) : 168) * 60 * 60 * 1000;
+}
+async function mintRuntimeToken(agentId, runtimeId, ttlMs = runtimeTokenTtlMs()) {
+  return await insertSessionToken(agentId, null, runtimeId, ttlMs);
+}
+async function insertSessionToken(agentId, taskId, runtimeId, ttlMs, parentRuntimeId = null, expiresAtCeiling, controllerId = null) {
+  const plaintext = `${SESSION_TOKEN_PREFIX}${base62(randomBytes(24))}`;
+  const tokenId = randomUUID().replace(/-/g, "");
+  const hash = sha256Hex(plaintext);
+  const preview = plaintext.slice(-4);
+  const now = new Date;
+  const expiresAt = new Date(Math.min(now.getTime() + ttlMs, expiresAtCeiling ? Date.parse(expiresAtCeiling) : Infinity)).toISOString();
+  await getDbClient2().run(`INSERT INTO session_tokens
+     (id, tokenHash, tokenPreview, agentId, taskId, runtimeId, parentRuntimeId, expiresAt, createdAt, controllerId)
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`, [
+    tokenId,
+    hash,
+    preview,
+    agentId,
+    taskId,
+    runtimeId,
+    parentRuntimeId,
+    expiresAt,
+    now.toISOString(),
+    controllerId
+  ]);
+  return { tokenId, plaintext };
+}
+async function revokeSessionToken(tokenId) {
+  await getDbClient2().transaction(async (client) => {
+    const row = await client.get("SELECT runtimeId FROM session_tokens WHERE id = ?", [tokenId]);
+    if (row?.runtimeId) {
+      await revokeRuntimeTokensForRuntime(row.runtimeId);
+    } else {
+      await client.run("UPDATE session_tokens SET revokedAt = ? WHERE id = ? AND revokedAt IS NULL", [new Date().toISOString(), tokenId]);
+      getDbClient2().afterCommit(() => closeSessionTokenConnections([tokenId]));
+    }
+  });
+}
+async function revokeRuntimeTokensForRuntime(runtimeId) {
+  await getDbClient2().transaction(async (client) => {
+    const rows = await client.query("SELECT id FROM session_tokens WHERE runtimeId = ? OR parentRuntimeId = ?", [runtimeId, runtimeId]);
+    await client.run(`UPDATE session_tokens SET revokedAt = ?
+       WHERE (runtimeId = ? OR parentRuntimeId = ?) AND revokedAt IS NULL`, [new Date().toISOString(), runtimeId, runtimeId]);
+    getDbClient2().afterCommit(() => {
+      unregisterVolatileSecret(`runtime:${runtimeId}`);
+      closeSessionTokenConnections(rows.map((row) => row.id));
+    });
+  });
+}
+async function resolveSessionToken(plaintext, options = {}) {
+  if (!plaintext.startsWith(SESSION_TOKEN_PREFIX))
+    return null;
+  const hash = sha256Hex(plaintext);
+  const client = getDbClient2();
+  const row = await client.get(`SELECT s.id, s.agentId, s.taskId, s.runtimeId, s.controllerId, s.expiresAt, s.revokedAt,
+     c.placement FROM session_tokens s LEFT JOIN runtime_controllers c ON c.id = s.controllerId
+     WHERE s.tokenHash = ?`, [hash]);
+  if (!row || row.revokedAt !== null)
+    return null;
+  if (new Date(row.expiresAt) <= new Date)
+    return null;
+  if (row.controllerId !== null) {
+    return row.placement === "remote" ? {
+      kind: "controller",
+      controllerId: row.controllerId,
+      tokenId: row.id,
+      expiresAt: row.expiresAt
+    } : null;
+  }
+  if (options.touch !== false) {
+    try {
+      await client.run("UPDATE session_tokens SET lastUsedAt = ? WHERE id = ?", [
+        new Date().toISOString(),
+        row.id
+      ]);
+    } catch {}
+  }
+  return {
+    kind: "agent",
+    tokenId: row.id,
+    agentId: row.agentId,
+    taskId: row.taskId,
+    runtimeId: row.runtimeId,
+    expiresAt: row.expiresAt
+  };
+}
+function fingerprintApiKey(rawKey) {
+  return `op:${sha256Hex(rawKey).slice(0, 16)}`;
+}
+var TOKEN_PREFIX = "aswt_", SESSION_TOKEN_PREFIX = "aseph_", InvalidRuntimeTokenError;
+var init_users = __esm(() => {
+  init_telemetry_identity();
+  init_secret_scrubber();
+  init_session_token_connections();
+  init_db3();
+  init_swarm_config_guard();
+  InvalidRuntimeTokenError = class InvalidRuntimeTokenError extends Error {
+    constructor() {
+      super("Runtime token is no longer valid");
+    }
+  };
+});
+
+export { registerSessionTokenConnection, closeSessionTokenConnections, init_session_token_connections, findUserById, findUserByExternalId, findUserByEmail, findUsersByName, getUserIdentities, listUserEvents, listUserTokens, recordIdentityEvent, findOrCreateUserByEmail, linkIdentity, unlinkIdentity, mintToken, revokeToken, resolveUserByToken, InvalidRuntimeTokenError, mintSessionToken, mintRuntimeToken, insertSessionToken, revokeSessionToken, revokeRuntimeTokensForRuntime, resolveSessionToken, fingerprintApiKey, init_users };

package/dist/{cli-4s1kqrqg.js → cli-g0hgtz4p.js}

@@ -1,7 +1,7 @@
 import {
   getContextWindowSize,
   clampContextPercent
-} from "./cli-jhp7w1fy.js";
+} from "./cli-a5ebc95n.js";
 import {
   swarmRuntimeInstanceId
 } from "./cli-7a91w22y.js";
@@ -10,17 +10,17 @@ import {
 } from "./cli-jc1g9ndz.js";
 import {
   applyReasoningEffort
-} from "./cli-p22zdvnt.js";
+} from "./cli-bn0rewsy.js";
 import {
   DEFAULT_MODEL_TIER_MAP,
   init_types
-} from "./cli-yv0vgscc.js";
+} from "./cli-fpmsqq59.js";
 import {
   resolveTemplateFromCode,
   resolveTemplateAsync,
   init_resolver,
   init_session_templates
-} from "./cli-w7z94e6c.js";
+} from "./cli-tx00c0h6.js";
 import {
   parseEnvFlag,
   init_env_flag
@@ -29,11 +29,11 @@ import {
   scrubSecrets,
   registerVolatileSecret,
   init_secret_scrubber
-} from "./cli-4mkvwgzr.js";
+} from "./cli-xf234ws8.js";
 import {
   cursorCatalogRef,
   init_src2
-} from "./cli-x3en6ct3.js";
+} from "./cli-nwyw3zhg.js";
 
 // src/providers/cursor-adapter.ts
 init_src2();