sim 2.1.8-dev.101.1 → 2.1.8-dev.95.1

package/dist/index.js

@@ -2366,9 +2366,6 @@ function configPath() {
 function credentialsPath() {
   return process.env.SIM_CREDENTIALS_FILE || join(configDir(), "credentials");
 }
-function updateCachePath() {
-  return join(configDir(), "update-check.json");
-}
 // src/config/profile.ts
 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
@@ -7156,6 +7153,13 @@ var V2_OPERATIONS = {
     responseMode: "json",
     summary: "Create Credential Connection",
     personalKeyOnly: true,
+    body: {
+      workspaceId: {
+        kind: "string",
+        required: true,
+        describe: "Workspace that will own the credential."
+      }
+    },
     opaqueBody: true
   },
   createCustomTool: {
@@ -7568,47 +7572,6 @@ var V2_OPERATIONS = {
       }
     }
   },
-  createSandbox: {
-    method: "POST",
-    path: "/api/v2/sandboxes",
-    pathParams: [],
-    responseMode: "json",
-    summary: "Create Sandbox",
-    personalKeyOnly: true,
-    body: {
-      workspaceId: {
-        kind: "string",
-        required: true,
-        describe: "Workspace in which to create the sandbox."
-      },
-      name: {
-        kind: "string",
-        required: true,
-        describe: "Display name, unique within the workspace; 1 to 64 characters."
-      },
-      language: {
-        kind: "enum",
-        required: true,
-        values: ["javascript", "python"],
-        describe: "Dependency ecosystem: `javascript` installs from npm, `python` from PyPI."
-      },
-      dependencies: {
-        kind: "array",
-        default: [],
-        describe: "Package specifiers installed into the sandbox, one per entry."
-      },
-      cliTools: {
-        kind: "array",
-        default: [],
-        describe: "Pinned managed CLI ids installed into the sandbox, at most 10, no duplicates."
-      },
-      systemPackages: {
-        kind: "array",
-        default: [],
-        describe: "Debian packages installed into the sandbox, one per entry."
-      }
-    }
-  },
   createServiceAccountCredential: {
     method: "POST",
     path: "/api/v2/credentials",
@@ -8126,18 +8089,6 @@ var V2_OPERATIONS = {
       }
     }
   },
-  deleteSandbox: {
-    method: "DELETE",
-    path: "/api/v2/sandboxes/[sandboxId]",
-    pathParams: ["sandboxId"],
-    pathParamDocs: { sandboxId: "Unique sandbox identifier." },
-    responseMode: "json",
-    summary: "Delete Sandbox",
-    personalKeyOnly: true,
-    query: {
-      workspaceId: { kind: "string", required: true, describe: "Workspace that owns the sandbox." }
-    }
-  },
   deleteSecret: {
     method: "DELETE",
     path: "/api/v2/secrets/[name]",
@@ -8419,53 +8370,6 @@ var V2_OPERATIONS = {
       }
     }
   },
-  editFileContent: {
-    method: "PATCH",
-    path: "/api/v2/files/[fileId]/content",
-    pathParams: ["fileId"],
-    pathParamDocs: { fileId: "File identifier." },
-    responseMode: "json",
-    summary: "Edit File Content",
-    body: {
-      workspaceId: { kind: "string", required: true, describe: "Workspace that owns the file." },
-      edit: {
-        kind: "unknown",
-        required: true,
-        describe: "One exact or anchor-based edit: search_replace, replace_between, insert_after, or delete_between."
-      }
-    }
-  },
-  executeTool: {
-    method: "POST",
-    path: "/api/v2/tools/[toolId]/execute",
-    pathParams: ["toolId"],
-    pathParamDocs: {
-      toolId: "Tool identifier. An unversioned name resolves to the newest version, and the response echoes the resolved id."
-    },
-    responseMode: "json",
-    summary: "Run Tool",
-    personalKeyOnly: true,
-    body: {
-      workspaceId: {
-        kind: "string",
-        required: true,
-        describe: "Workspace whose integration allowlist, credentials, and environment variables govern this call."
-      },
-      input: {
-        kind: "object",
-        default: {},
-        describe: "Arguments for the tool, keyed by the parameter ids the tool catalog publishes for it. A parameter whose visibility is `user-only` also accepts an environment-variable reference written as the whole value, `{{VAR_NAME}}`, resolved server-side against the workspace environment; any other value is sent verbatim."
-      },
-      credentialId: {
-        kind: "string",
-        describe: "Credential to authenticate with. Required when the tool declares an OAuth requirement; the workspace credentials list names the candidates."
-      },
-      timeoutSeconds: {
-        kind: "integer",
-        describe: "How long to wait for the tool before abandoning the call."
-      }
-    }
-  },
   executeWorkflow: {
     method: "POST",
     path: "/api/v2/workflows/[workflowId]/execute",
@@ -8860,17 +8764,6 @@ var V2_OPERATIONS = {
       workspaceId: { kind: "string", required: true, describe: "Workspace that owns the table." }
     }
   },
-  getSandbox: {
-    method: "GET",
-    path: "/api/v2/sandboxes/[sandboxId]",
-    pathParams: ["sandboxId"],
-    pathParamDocs: { sandboxId: "Unique sandbox identifier." },
-    responseMode: "json",
-    summary: "Get Sandbox",
-    query: {
-      workspaceId: { kind: "string", required: true, describe: "Workspace that owns the sandbox." }
-    }
-  },
   getSkill: {
     method: "GET",
     path: "/api/v2/skills/[skillId]",
@@ -9190,8 +9083,7 @@ var V2_OPERATIONS = {
           "knowledge-base",
           "voice-input",
           "enrichment",
-          "voice-output",
-          "api-tool"
+          "voice-output"
         ],
         describe: "Restrict results to one usage source."
       },
@@ -9494,28 +9386,6 @@ var V2_OPERATIONS = {
         values: ["active", "archived"],
         default: "active",
         describe: "Which lifecycle set to list: `active` (default) returns live folders only; `archived` returns folders a recursive delete soft-deleted, which is how a caller finds a path to hand to the folder restore. Authorization is identical for both."
-      },
-      recursive: {
-        kind: "enum",
-        values: [
-          "true",
-          "1",
-          "yes",
-          "on",
-          "y",
-          "enabled",
-          "false",
-          "0",
-          "no",
-          "off",
-          "n",
-          "disabled"
-        ],
-        describe: "Whether parentPath includes every descendant instead of direct children only."
-      },
-      depth: {
-        kind: "integer",
-        describe: "Deepest level below parentPath to include when recursive is true."
       }
     }
   },
@@ -10044,41 +9914,6 @@ var V2_OPERATIONS = {
       }
     }
   },
-  listSandboxes: {
-    method: "GET",
-    path: "/api/v2/sandboxes",
-    pathParams: [],
-    responseMode: "json",
-    summary: "List Sandboxes",
-    query: {
-      workspaceId: { kind: "string", required: true, describe: "Workspace that owns the sandbox." },
-      search: {
-        kind: "string",
-        describe: "Case-insensitive substring match against the sandbox name."
-      },
-      sortBy: {
-        kind: "enum",
-        values: ["name", "createdAt", "updatedAt"],
-        default: "name",
-        describe: "Field used to sort the result. Sorting by `name` is case-sensitive and follows the storage collation, so do not rely on a case-insensitive order."
-      },
-      sortOrder: {
-        kind: "enum",
-        values: ["asc", "desc"],
-        default: "asc",
-        describe: "Sort direction."
-      },
-      limit: {
-        kind: "integer",
-        default: 50,
-        describe: "Maximum sandboxes to return per page. Must be a whole number from 1 to 100. Defaults to 50."
-      },
-      cursor: {
-        kind: "string",
-        describe: "Opaque cursor from the previous page. Send it back with the same sort and filters; only `limit` may change. Change anything else and pagination must restart without a cursor."
-      }
-    }
-  },
   listSecrets: {
     method: "GET",
     path: "/api/v2/secrets",
@@ -10734,14 +10569,6 @@ var V2_OPERATIONS = {
       maxBytes: {
         kind: "integer",
         describe: "Optional ceiling on the source bytes fed to the parser, lowering but never raising the server limit."
-      },
-      offset: {
-        kind: "integer",
-        describe: "First line to return, 1-based. Absent starts at the first line."
-      },
-      limit: {
-        kind: "integer",
-        describe: "How many lines to return from `offset`. Absent reads to the end."
       }
     }
   },
@@ -11072,50 +10899,6 @@ var V2_OPERATIONS = {
       workspaceId: { kind: "string", required: true, describe: "Unique workspace identifier." }
     }
   },
-  searchFileContent: {
-    method: "GET",
-    path: "/api/v2/files/search",
-    pathParams: [],
-    responseMode: "json",
-    summary: "Search File Content",
-    query: {
-      workspaceId: { kind: "string", required: true, describe: "Workspace to search." },
-      query: {
-        kind: "string",
-        required: true,
-        describe: "Regular expression, or exact text when `mode` is `exact`."
-      },
-      mode: {
-        kind: "enum",
-        values: ["exact", "regex"],
-        default: "regex",
-        describe: "How `query` is read."
-      },
-      maxResults: { kind: "integer", default: 50, describe: "Maximum matching lines to return." },
-      folderPaths: {
-        kind: "string",
-        describe: "Folders the search is confined to, comma-separated. Absent searches the whole workspace. The scope also narrows `indexStatus`, so `complete` describes the folders searched rather than the workspace."
-      },
-      includeSubfolders: {
-        kind: "enum",
-        values: [
-          "true",
-          "1",
-          "yes",
-          "on",
-          "y",
-          "enabled",
-          "false",
-          "0",
-          "no",
-          "off",
-          "n",
-          "disabled"
-        ],
-        describe: "Whether the scope descends into nested folders. Absent means yes. The listed spellings are the whole accepted vocabulary and are case-sensitive; any other value is rejected."
-      }
-    }
-  },
   searchKnowledge: {
     method: "POST",
     path: "/api/v2/knowledge/search",
@@ -11148,6 +10931,7 @@ var V2_OPERATIONS = {
       },
       searchMode: {
         kind: "enum",
+        default: "vector",
         describe: "Retrieval strategy: vector is semantic-only, while hybrid also runs full-text search."
       },
       rerankerEnabled: {
@@ -11630,39 +11414,6 @@ var V2_OPERATIONS = {
       limit: { kind: "integer", describe: "Maximum matching rows to update." }
     }
   },
-  updateSandbox: {
-    method: "PATCH",
-    path: "/api/v2/sandboxes/[sandboxId]",
-    pathParams: ["sandboxId"],
-    pathParamDocs: { sandboxId: "Unique sandbox identifier." },
-    responseMode: "json",
-    summary: "Update Sandbox",
-    personalKeyOnly: true,
-    body: {
-      workspaceId: { kind: "string", required: true, describe: "Workspace that owns the sandbox." },
-      name: {
-        kind: "string",
-        describe: "New display name, unique within the workspace; 1 to 64 characters."
-      },
-      language: {
-        kind: "enum",
-        values: ["javascript", "python"],
-        describe: "Replacement dependency ecosystem. The whole spec is revalidated against it, so a Python dependency list does not survive a switch to JavaScript."
-      },
-      dependencies: {
-        kind: "array",
-        describe: "Replacement package list; replaces the whole list."
-      },
-      cliTools: {
-        kind: "array",
-        describe: "Replacement managed CLI list; replaces the whole list."
-      },
-      systemPackages: {
-        kind: "array",
-        describe: "Replacement Debian package list; replaces the whole list."
-      }
-    }
-  },
   updateSkill: {
     method: "PATCH",
     path: "/api/v2/skills/[skillId]",
@@ -12401,7 +12152,6 @@ var TABLE_SORT_HELP = 'Ordered sort keys: [{"field":"createdAt","direction":"des
 var KNOWLEDGE_TAG_DEFINITIONS_HELP = 'Tag definitions: [{"tagSlot":"tag1","displayName":"category","fieldType":"text"}]';
 var CUSTOM_TOOL_SCHEMA_HELP = 'OpenAI function schema: {"type":"function","function":{"name":"...","parameters":{"type":"object","properties":{}}}}';
 var DISPATCH_ROW_LIMIT_HELP = "Stop after this many eligible rows have run (1-1,000,000). Omit for an unbounded run";
-var FILE_EDIT_HELP = 'One edit object: {"mode":"search_replace","search":"old","content":"new","replaceAll":false}, {"mode":"replace_between","beforeAnchor":"start line","afterAnchor":"end line","content":"new"}, {"mode":"insert_after","anchor":"line","content":"new"}, or {"mode":"delete_between","startAnchor":"first line deleted","endAnchor":"ending line kept"}. Anchored modes also accept occurrence starting at 1';
 var WORKFLOW_OPERATIONS_HELP = 'Edits to apply, in a single batch, keyed by operation_type: [{"operation_type":"add","block_id":"my-fn","params":{"type":"function","name":"My Fn","inputs":{"code":"return {ok:true}"}}},{"operation_type":"edit","block_id":"<uuid>","params":{"name":"Renamed","connections":{"success":"my-fn"}}},{"operation_type":"delete","block_id":"<uuid>"}]. Also extract_from_subflow, whose params carry {"subflowId":"<loop-id>"}, and insert_into_subflow, which creates a block and so takes an add’s params plus that subflowId';
 var WORKFLOW_SET_BLOCK_ENABLED_HELP = 'Blocks to enable or disable, applied after --operations: [{"block_id":"<uuid>","enabled":false}]. Disabling a loop or parallel cascades to its unlocked descendants; enabling a block whose container is disabled is declined';
 var WORKFLOW_VARIABLE_OPERATIONS_HELP = 'Variable changes to apply in order, keyed by operation: [{"operation":"add","name":"my_var","type":"string","value":"hello"},{"operation":"edit","name":"my_var","value":"updated"},{"operation":"delete","name":"my_var"}]';
@@ -12599,9 +12349,6 @@ var CLI_CONTRACT = {
     confirm: "This revokes the explicit skill editor grant for the selected email."
   },
   deleteCustomTool: { confirm: "This deletes the custom tool." },
-  deleteSandbox: {
-    confirm: "This deletes the sandbox; Function blocks that select it fail until re-pointed."
-  },
   deleteMcpServer: {
     confirm: "This removes the MCP server and the tools it provides."
   },
@@ -12785,25 +12532,6 @@ var CLI_CONTRACT = {
     flags: { folderPaths: FOLDER_PATHS_FLAG },
     confirm: "This deletes every listed table and all of their rows."
   },
-  searchFileContent: {
-    flags: {
-      folderPaths: {
-        ...FOLDER_PATHS_FLAG,
-        describe: "Folders to search, by path as shown in the app; omit to search the whole workspace"
-      },
-      includeSubfolders: {
-        boolean: true,
-        negatable: true,
-        describe: "Whether each folder scope includes nested folders; on by default"
-      }
-    },
-    itemsPath: "results",
-    columns: [
-      { header: "file", path: "fileId" },
-      { header: "line", path: "lineNumber" },
-      { header: "text" }
-    ]
-  },
   searchKnowledge: {
     flags: {
       knowledgeBaseIds: { name: "kb", list: true, describe: "Knowledge base ID (repeatable)" },
@@ -12888,20 +12616,6 @@ var CLI_CONTRACT = {
   importWorkflow: { flags: { folderPath: FOLDER_PATH_FLAG } },
   createCustomTool: { flags: { schema: { json: true, describe: CUSTOM_TOOL_SCHEMA_HELP } } },
   updateCustomTool: { flags: { schema: { json: true, describe: CUSTOM_TOOL_SCHEMA_HELP } } },
-  createSandbox: {
-    flags: {
-      dependencies: { list: true, manifest: true },
-      cliTools: { list: true },
-      systemPackages: { list: true, manifest: true }
-    }
-  },
-  updateSandbox: {
-    flags: {
-      dependencies: { list: true, manifest: true },
-      cliTools: { list: true },
-      systemPackages: { list: true, manifest: true }
-    }
-  },
   listTables: {
     flags: { folderPath: FOLDER_PATH_FLAG },
     columns: [
@@ -13043,15 +12757,6 @@ var CLI_CONTRACT = {
       { header: "updated", path: "updatedAt", format: "timestamp" }
     ]
   },
-  listSandboxes: {
-    columns: [
-      { header: "id" },
-      { header: "name" },
-      { header: "language" },
-      { header: "status", path: "buildStatus" },
-      { header: "updated", path: "updatedAt", format: "timestamp" }
-    ]
-  },
   listCredentials: {
     columns: [
       { header: "id" },
@@ -13246,13 +12951,6 @@ var CLI_CONTRACT = {
       folderPaths: FOLDER_PATHS_FLAG
     }
   },
-  editFileContent: {
-    command: "files edit",
-    describe: "Apply one exact or anchor-based edit to a text file",
-    flags: {
-      edit: { describe: FILE_EDIT_HELP }
-    }
-  },
   updateFileContent: {
     command: "files set-content",
     describe: "Replace a file’s contents",
@@ -13491,24 +13189,6 @@ var CLI_CONTRACT = {
     describe: "Print a workflow as a portable JSON document",
     document: true
   },
-  executeTool: {
-    command: "tools execute",
-    describe: "Run one built-in tool and print what it produced",
-    flags: {
-      input: {
-        json: true,
-        describe: "Tool arguments as JSON, keyed by the parameter ids `sim tools get <toolId>` lists"
-      },
-      credentialId: { describe: "Credential to authenticate with, required for OAuth tools" },
-      timeoutSeconds: { name: "timeout", describe: "Seconds to wait before abandoning the call" }
-    },
-    fields: [
-      { path: "toolId", header: "Tool" },
-      { path: "status", header: "Status" },
-      { path: "output", header: "Output" },
-      { path: "error.message", header: "Error" }
-    ]
-  },
   executeWorkflow: {
     command: "workflows run",
     describe: "Run a deployed workflow or execute saved state manually",
@@ -13848,11 +13528,7 @@ async function readArgumentSource(raw, flagName) {
     throw new SimApiError(`--${flagName} cannot read ${path}: ${error.message}${literalAtHint(error, path)}`, 0);
   }
 }
-function isManifestNoise(line) {
-  const trimmed = line.trim();
-  return trimmed === "" || trimmed.startsWith("#");
-}
-async function readListValues(raw, flagName, manifest = false) {
+async function readListValues(raw, flagName) {
   const arguments_ = Array.isArray(raw) ? raw : [raw];
   const values = [];
   for (const argument of arguments_) {
@@ -13867,11 +13543,10 @@ async function readListValues(raw, flagName, manifest = false) {
     const lines = source.text.split(/\r?\n/);
     if (lines.at(-1) === "")
       lines.pop();
-    const kept = manifest ? lines.filter((line) => !isManifestNoise(line)) : lines;
-    if (kept.length === 0) {
+    if (lines.length === 0) {
       throw new SimApiError(`--${flagName}${source.from} contains no values`, 0);
     }
-    values.push(...kept.map((line, index) => {
+    values.push(...lines.map((line, index) => {
       const value = line.trim();
       if (!value) {
         throw new SimApiError(`--${flagName}${source.from} has an empty value on line ${index + 1}`, 0);
@@ -13916,7 +13591,7 @@ async function coerce(raw, field, flag, flagName) {
   if (raw === undefined)
     return;
   if (flag.list) {
-    const values = (await readListValues(raw, flagName, flag.manifest === true)).map((value) => flag.folderPath ? encodeFolderPath(value) : value);
+    const values = (await readListValues(raw, flagName)).map((value) => flag.folderPath ? encodeFolderPath(value) : value);
     return field.kind === "string" ? values.join(",") : values;
   }
   if (flag.rowCap)
@@ -14065,7 +13740,7 @@ function withoutWireVocabulary(documented) {
   return documented.replace(WIRE_VOCABULARY_SENTENCE, " ").trim();
 }
 var NON_PAGINATED_LIMIT_HINT = " (caps a --filter match only; omit it to act on every match, and note 0 is not accepted)";
-function addFieldOption(command, operation, field, descriptor, slot, paginates, capsAFilter) {
+function addFieldOption(command, operation, field, descriptor, slot, paginates) {
   if (field === PROFILE_INJECTED_FIELD || field === "cursor")
     return;
   const flag = flagSpecFor(operation, field);
@@ -14077,7 +13752,7 @@ function addFieldOption(command, operation, field, descriptor, slot, paginates,
     command.option("--limit <n>", "Maximum items to return (0 for everything)", String(DEFAULT_LIMIT));
     return;
   }
-  const documented = `${describeField(flag, descriptor, name, field)}${capsAFilter && field === "limit" && (descriptor.kind === "number" || descriptor.kind === "integer") ? NON_PAGINATED_LIMIT_HINT : ""}`;
+  const documented = `${describeField(flag, descriptor, name, field)}${field === "limit" && (descriptor.kind === "number" || descriptor.kind === "integer") ? NON_PAGINATED_LIMIT_HINT : ""}`;
   if (descriptor.kind === "boolean" || flag.boolean) {
     const booleanDoc = withoutWireVocabulary(documented);
     if (descriptor.required) {
@@ -14095,7 +13770,7 @@ function addFieldOption(command, operation, field, descriptor, slot, paginates,
   const placeholder = takesList ? "<value...>" : flag.rowCap ? "<n>" : wantsJson ? "<json|@file>" : "<value>";
   const choices = flag.choices ?? descriptor.values;
   const literalNull = slot === "body" && !takesList && !wantsJson;
-  const describe = `${documented}${takesList ? flag.manifest ? " (space-separated, or @path / @- with one value per line; in a file, blank lines and # comments are ignored, while inline values are sent as typed and may not be empty; @@value for a literal leading @)" : " (space-separated, or @path / @- with one value per line; @@value for a literal leading @)" : wantsJson ? " (JSON, or @path / @- to read a file or stdin)" : ""}${descriptor.required ? " (required)" : ""}${literalNull ? literalNullHint(documented, name) : ""}`;
+  const describe = `${documented}${takesList ? " (space-separated, or @path / @- with one value per line; @@value for a literal leading @)" : wantsJson ? " (JSON, or @path / @- to read a file or stdin)" : ""}${descriptor.required ? " (required)" : ""}${literalNull ? literalNullHint(documented, name) : ""}`;
   const renamedFrom = flag.renamedFrom ?? [];
   const option = new Option(`${short}--${name} ${placeholder}`, describe);
   if (flag.hidden)
@@ -14125,14 +13800,13 @@ function addOperationOptions(command, operation, commandSpec, operationSpec) {
     command.addOption(new Option(`${short}--${name} <${flag.placeholder ?? "value"}>`, `${flag.describe ?? operationSpec.pathParamDocs?.[param] ?? `Set ${name.replaceAll("-", " ")}`} (required)`).makeOptionMandatory());
   }
   const paginates = cursorSlot(operationSpec) !== null;
-  const capsAFilter = ["query", "body", "headers"].some((slot) => operationSpec[slot] !== undefined && ("filter" in operationSpec[slot]));
   for (const slot of ["query", "body", "headers"]) {
     for (const [field, descriptor] of Object.entries(operationSpec[slot] ?? {})) {
       if (commandSpec.requestFields && !commandSpec.requestFields.includes(field))
         continue;
       if (commandSpec.positionals?.includes(field))
         continue;
-      addFieldOption(command, operation, field, descriptor, slot, paginates, capsAFilter);
+      addFieldOption(command, operation, field, descriptor, slot, paginates);
     }
   }
   if (commandSpec.allWorkspaces) {
@@ -14523,25 +14197,20 @@ function renderResult(operation, format, raw, spec, options = {}, envelope) {
 }
 
 // src/runtime/execute.ts
-var RUN_OUTCOME_OPERATIONS = {
-  executeWorkflow: {
-    failed: "The workflow run failed.",
-    cancelled: "The workflow run was cancelled."
-  },
-  executeTool: {
-    failed: "The tool call failed."
-  }
+var RUN_OUTCOME_OPERATIONS = new Set(["executeWorkflow"]);
+var FAILED_RUN_STATUS_MESSAGES = {
+  failed: "The workflow run failed.",
+  cancelled: "The workflow run was cancelled."
 };
 function runFailureMessage(operation, payload) {
-  const failureMessages = RUN_OUTCOME_OPERATIONS[operation];
-  if (!failureMessages)
+  if (!RUN_OUTCOME_OPERATIONS.has(operation))
     return null;
   if (!payload || typeof payload !== "object" || Array.isArray(payload))
     return null;
   const { status, error } = payload;
   if (typeof status !== "string")
     return null;
-  const fallback = failureMessages[status];
+  const fallback = FAILED_RUN_STATUS_MESSAGES[status];
   if (!fallback)
     return null;
   const reported = error?.message;
@@ -14855,7 +14524,6 @@ var GROUP_ALIASES = {
   knowledge: "kb",
   logs: "log",
   "mcp-servers": "mcp-server",
-  sandboxes: "sandbox",
   secrets: "secret",
   skills: "skill",
   tables: "table",
@@ -17098,328 +16766,6 @@ function attachSecretCommands(program) {
   secrets.command("set").argument("<name>", "Secret name, as referenced in workflows").description(describeOperation(V2_OPERATIONS.setSecret, "Create or replace a named secret")).addOption(new Option("--scope <scope>", "Secret ownership scope (required)").choices([...SECRET_SCOPES]).makeOptionMandatory()).option("--value <value|@file>", "Secret value. Passing it inline exposes it to shell history and process listings; @path reads it from a file and @- from stdin, verbatim — a trailing newline is part of the value, so write the file with printf rather than echo. Prefix a literal leading @ with a second one").option("--description <description>", "What the secret is for, shown to teammates; workspace scope only. Omit to leave an existing description unchanged").option("--unredacted", `${V2_OPERATIONS.setSecret.body.unredacted.describe} Pass --no-unredacted to restore redaction`).option("--no-unredacted", "Send --unredacted as false").on("option:unredacted", () => redactionSpellings.add("--unredacted")).on("option:no-unredacted", () => redactionSpellings.add("--no-unredacted")).action((name, options, command) => setSecret(name, options, command, redactionSpellings));
 }
 
-// src/update/check.ts
-import { spawn as spawn2 } from "node:child_process";
-import {
-  closeSync,
-  constants as constants2,
-  fstatSync,
-  lstatSync,
-  mkdirSync as mkdirSync2,
-  openSync,
-  readSync as readSync2,
-  renameSync,
-  unlinkSync,
-  writeFileSync as writeFileSync2
-} from "node:fs";
-import { dirname as dirname3 } from "node:path";
-import { fileURLToPath } from "node:url";
-var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
-var REGISTRY_TIMEOUT_MS = 1000;
-var DEFAULT_REGISTRY = "https://registry.npmjs.org";
-var PACKAGE_NAME = "sim";
-var DIST_TAGS_PATH = `-/package/${PACKAGE_NAME}/dist-tags`;
-var MAX_RESPONSE_BYTES = 64 * 1024;
-var MAX_CACHE_BYTES = 4 * 1024;
-var STABLE_VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
-function parseStableVersion(version) {
-  const match = STABLE_VERSION_PATTERN.exec(version);
-  if (!match)
-    return null;
-  const parsed = [Number(match[1]), Number(match[2]), Number(match[3])];
-  return parsed.every(Number.isSafeInteger) ? parsed : null;
-}
-function isNewerVersion(candidate, current) {
-  if (candidate[0] !== current[0])
-    return candidate[0] > current[0];
-  if (candidate[1] !== current[1])
-    return candidate[1] > current[1];
-  return candidate[2] > current[2];
-}
-var CI_VARIABLES = [
-  "CI",
-  "GITHUB_ACTIONS",
-  "JENKINS_URL",
-  "TEAMCITY_VERSION",
-  "BUILDKITE"
-];
-var CACHE_VERSION = 1;
-var cacheWriteSequence = 0;
-function isEnabled(value) {
-  if (value === undefined)
-    return false;
-  const normalized = value.trim().toLowerCase();
-  return normalized !== "" && normalized !== "0" && normalized !== "false";
-}
-function isProjectLocalInstall(modulePath, cwd) {
-  const normalizedModulePath = normalizeModulePath(modulePath);
-  const nodeModulesIndex = normalizedModulePath.indexOf("/node_modules/");
-  if (nodeModulesIndex < 0)
-    return false;
-  const installRoot = normalizedModulePath.slice(0, nodeModulesIndex);
-  const workingDirectory = normalizeModulePath(cwd).replace(/\/+$/, "");
-  return workingDirectory === installRoot || workingDirectory.startsWith(`${installRoot}/`);
-}
-function isUnadvisableInstall(modulePath, env, cwd) {
-  const normalized = normalizeModulePath(modulePath);
-  return env.npm_command === "exec" || normalized.includes("/_npx/") || normalized.includes("/packages/sim-cli/") || isProjectLocalInstall(modulePath, cwd);
-}
-function normalizeModulePath(modulePath) {
-  return modulePath.replace(/\\/g, "/").toLowerCase();
-}
-function registryUrl(env) {
-  const fallback = new URL(DIST_TAGS_PATH, DEFAULT_REGISTRY);
-  const configured = env.npm_config_registry?.trim();
-  if (!configured)
-    return fallback;
-  try {
-    const base = new URL(configured);
-    if (base.protocol !== "http:" && base.protocol !== "https:")
-      return null;
-    if (base.username || base.password)
-      return null;
-    base.pathname = `${base.pathname.replace(/\/$/, "")}/${DIST_TAGS_PATH}`;
-    return base;
-  } catch {
-    return null;
-  }
-}
-var REGISTRY_REQUEST_SCRIPT = `
-let input = ''
-process.stdin.setEncoding('utf8')
-for await (const chunk of process.stdin) input += chunk
-
-try {
-  const { url, headers, maxResponseBytes, timeoutMs } = JSON.parse(input)
-  const deadline = setTimeout(() => process.exit(1), timeoutMs)
-  const response = await fetch(url, { headers, redirect: 'error' })
-  const declared = Number(response.headers.get('content-length'))
-
-  if (!response.ok || !response.body || (Number.isFinite(declared) && declared > maxResponseBytes)) {
-    process.exit(1)
-  }
-
-  const reader = response.body.getReader()
-  const chunks = []
-  let seen = 0
-
-  while (true) {
-    const { done, value } = await reader.read()
-    if (done) break
-    seen += value.byteLength
-    if (seen > maxResponseBytes) {
-      process.exit(1)
-    }
-    chunks.push(Buffer.from(value))
-  }
-
-  clearTimeout(deadline)
-  process.stdout.write(Buffer.concat(chunks), () => process.exit(0))
-} catch {
-  process.exit(1)
-}
-`;
-function registryProcessEnv() {
-  const env = { ...process.env };
-  for (const key of Object.keys(env)) {
-    const normalized = key.toLowerCase();
-    if (normalized === "npm_config_registry" || normalized === "sim_api_key")
-      delete env[key];
-  }
-  return env;
-}
-function requestRegistry(url, { headers, maxResponseBytes, timeoutMs }) {
-  return new Promise((resolve, reject) => {
-    const proxyArguments = process.execArgv.filter((argument) => argument === "--use-env-proxy" || argument === "--no-use-env-proxy");
-    const child = spawn2(process.execPath, [...proxyArguments, "--input-type=module", "--eval", REGISTRY_REQUEST_SCRIPT], {
-      env: registryProcessEnv(),
-      killSignal: "SIGKILL",
-      stdio: ["pipe", "pipe", "ignore"],
-      timeout: timeoutMs,
-      windowsHide: true
-    });
-    const chunks = [];
-    let failed = false;
-    let seen = 0;
-    child.stdout.on("data", (chunk) => {
-      seen += chunk.byteLength;
-      if (seen > maxResponseBytes) {
-        failed = true;
-        child.kill("SIGKILL");
-        return;
-      }
-      chunks.push(chunk);
-    });
-    child.stdout.on("error", () => {
-      failed = true;
-      child.kill("SIGKILL");
-    });
-    child.stdin.on("error", () => {});
-    child.once("error", reject);
-    child.once("close", (code) => {
-      resolve(code === 0 && !failed ? Buffer.concat(chunks).toString("utf8") : null);
-    });
-    child.stdin.end(JSON.stringify({ headers, maxResponseBytes, timeoutMs, url: url.href }));
-  });
-}
-async function fetchDistTags(env, request) {
-  try {
-    const url = registryUrl(env);
-    if (!url)
-      return null;
-    const text = await request(url, {
-      headers: { accept: "application/json", "user-agent": `${PACKAGE_NAME}-cli/${cliVersion()}` },
-      maxResponseBytes: MAX_RESPONSE_BYTES,
-      timeoutMs: REGISTRY_TIMEOUT_MS
-    });
-    if (text === null || Buffer.byteLength(text) > MAX_RESPONSE_BYTES)
-      return null;
-    const body = JSON.parse(text);
-    if (typeof body !== "object" || body === null || Array.isArray(body))
-      return null;
-    const tags = {};
-    for (const [tag, version] of Object.entries(body)) {
-      if (typeof version === "string")
-        tags[tag] = version;
-    }
-    return tags;
-  } catch {
-    return null;
-  }
-}
-function readCache(path) {
-  let descriptor = null;
-  try {
-    if (!lstatSync(path).isFile())
-      return null;
-    descriptor = openSync(path, constants2.O_RDONLY | constants2.O_NONBLOCK | constants2.O_NOFOLLOW);
-    const descriptorStats = fstatSync(descriptor);
-    if (!descriptorStats.isFile() || descriptorStats.size > MAX_CACHE_BYTES) {
-      return null;
-    }
-    const buffer = Buffer.allocUnsafe(MAX_CACHE_BYTES + 1);
-    let bytesRead = 0;
-    while (bytesRead < buffer.byteLength) {
-      const count = readSync2(descriptor, buffer, bytesRead, buffer.byteLength - bytesRead, bytesRead);
-      if (count === 0)
-        break;
-      bytesRead += count;
-    }
-    if (bytesRead > MAX_CACHE_BYTES)
-      return null;
-    const parsed = JSON.parse(buffer.subarray(0, bytesRead).toString("utf8"));
-    if (typeof parsed !== "object" || parsed === null)
-      return null;
-    const entry = parsed;
-    if (entry.version !== CACHE_VERSION)
-      return null;
-    if (typeof entry.checkedAt !== "string" || Number.isNaN(Date.parse(entry.checkedAt)))
-      return null;
-    return {
-      version: CACHE_VERSION,
-      checkedAt: entry.checkedAt
-    };
-  } catch {
-    return null;
-  } finally {
-    if (descriptor !== null) {
-      try {
-        closeSync(descriptor);
-      } catch {}
-    }
-  }
-}
-function writeCache(path, entry) {
-  let descriptor = null;
-  let temporaryCreated = false;
-  const temporaryPath = `${path}.${process.pid}.${Date.now()}.${cacheWriteSequence++}.tmp`;
-  try {
-    mkdirSync2(dirname3(path), { recursive: true, mode: 448 });
-    descriptor = openSync(temporaryPath, "wx", 420);
-    temporaryCreated = true;
-    writeFileSync2(descriptor, `${JSON.stringify(entry, null, 2)}
-`);
-    closeSync(descriptor);
-    descriptor = null;
-    renameSync(temporaryPath, path);
-    temporaryCreated = false;
-  } catch {} finally {
-    if (descriptor !== null) {
-      try {
-        closeSync(descriptor);
-      } catch {}
-    }
-    if (temporaryCreated) {
-      try {
-        unlinkSync(temporaryPath);
-      } catch {}
-    }
-  }
-}
-function isFresh(entry, now) {
-  const age = now.getTime() - Date.parse(entry.checkedAt);
-  return age >= 0 && age < CHECK_INTERVAL_MS;
-}
-function upgradeCommand(modulePath = fileURLToPath(import.meta.url), env = process.env) {
-  const target = `${PACKAGE_NAME}@latest`;
-  const normalized = normalizeModulePath(modulePath);
-  if (normalized.includes(".bun/install/global"))
-    return `bun add -g ${target}`;
-  if (normalized.includes("/pnpm/") || normalized.includes("/.pnpm/")) {
-    return `pnpm add -g ${target}`;
-  }
-  if (normalized.includes("/.yarn/") || normalized.includes("/yarn/")) {
-    return `yarn global add ${target}`;
-  }
-  const agent = env.npm_config_user_agent ?? "";
-  if (agent.startsWith("pnpm/"))
-    return `pnpm add -g ${target}`;
-  if (agent.startsWith("yarn/"))
-    return `yarn global add ${target}`;
-  if (agent.startsWith("bun/"))
-    return `bun add -g ${target}`;
-  return `npm install -g ${target}`;
-}
-async function announceUpdateIfAvailable(options = {}) {
-  try {
-    const env = options.env ?? process.env;
-    const isTty = options.isTty ?? process.stderr.isTTY === true;
-    const modulePath = options.modulePath ?? fileURLToPath(import.meta.url);
-    const cwd = options.cwd ?? process.cwd();
-    const now = options.now ?? new Date;
-    if (isEnabled(env.SIM_NO_UPDATE_CHECK))
-      return;
-    if (!isTty)
-      return;
-    if (CI_VARIABLES.some((variable) => isEnabled(env[variable])))
-      return;
-    if (isUnadvisableInstall(modulePath, env, cwd))
-      return;
-    const currentVersion = options.currentVersion ?? cliVersion();
-    const current = parseStableVersion(currentVersion);
-    if (!current)
-      return;
-    const cachePath = updateCachePath();
-    const cached = readCache(cachePath);
-    if (cached && isFresh(cached, now))
-      return;
-    const tags = await fetchDistTags(env, options.registryRequest ?? requestRegistry);
-    const latest = tags?.latest ?? null;
-    const available = latest ? parseStableVersion(latest) : null;
-    writeCache(cachePath, {
-      version: CACHE_VERSION,
-      checkedAt: now.toISOString()
-    });
-    if (!latest || !available)
-      return;
-    if (!isNewerVersion(available, current))
-      return;
-    const write = options.write ?? ((message) => void process.stderr.write(message));
-    write(`Update available: sim ${currentVersion} → ${latest}. Run: ${upgradeCommand(modulePath, env)}
-`);
-  } catch {}
-}
-
 // src/program.ts
 var PROGRAM_DESCRIPTION = "Talk to the Sim API from your terminal";
 var HELP_EPILOGUE = `
@@ -17502,7 +16848,6 @@ function buildProgram(options = {}) {
   attachProtocolCommands(program);
   attachSecretCommands(program);
   program.addHelpText("after", options.helpText ?? HELP_EPILOGUE);
-  program.hook("preAction", () => announceUpdateIfAvailable());
   refuseHelpAfterUnknownCommand(program);
   assertNoReservedProgramFlags(program);
   return program;