fix(extension-host): regenerate the committed bundle for zod 4.6.7

`9e741d191b` bumped zod to 4.6.7 to clear GHSA-mrhx-c7xc-m3w5 but left the
committed extension-host bundle at 4.6.5, so CI's "check the committed
bundle" step (`npm run build` then `git diff --exit-code -- dist`) went red
on the candidate at `77ba257112`.

Regenerated with `npm run build`. The diff is exactly the version bump:
`dist/LICENSES.txt` zod 4.6.5 -> 4.6.7, the `mcp` builtin digest
3a648054 -> ce5ccf03, the mirrored digest in `codewhale-extension-host.mjs`,
and the bundled zod source inside `dist/builtin/mcp.mjs`.

Verified locally, mirroring the CI step exactly:
- `npm ci --ignore-scripts` exit 0, `found 0 vulnerabilities`
- `npm test` -> 420 tests, 413 pass, 7 skipped, 0 fail
- `npm run typecheck` exit 0
- `npm run build` exit 0, twice, byte-identical output (sha256 of all mjs/json
  dist files unchanged between runs), so the checked-in bundle is reproducible
- `git diff --exit-code -- dist` is clean for this commit's content

Not verified here: the hosted job itself. No Cargo, no native build.

crates/tui/extension-host/dist/LICENSES.txt

@@ -24,7 +24,7 @@ Packages:
   [email protected] (MIT)
   [email protected] (MIT)
   [email protected] (MIT)
-  [email protected].5 (MIT)
+  [email protected].7 (MIT)
 
 ========================================================================
 @deepseek-ai/[email protected] (MIT)
@@ -1010,7 +1010,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 ========================================================================
-[email protected].5 (MIT)
+[email protected].7 (MIT)
 ========================================================================
 
 MIT License

crates/tui/extension-host/dist/builtin-modules.json

@@ -1,6 +1,6 @@
 {
   "modules": {
     "harness": "ad24207f93d963dcffe1967f6863f416117d9acd67cdfccbcef59c12ccb39f92",
-    "mcp": "3a64805433d63f34822ae71230a432ccdbd956174bc8575d5a0a001fda8c50cf"
+    "mcp": "ce5ccf035b30769cfaca0892ebdb1f5498bca373b618bcca376a12866c42de04"
   }
 }

crates/tui/extension-host/dist/builtin/mcp.mjs

@@ -133,6 +133,7 @@ __export(util_exports, {
   required: () => required,
   safeExtend: () => safeExtend,
   shallowClone: () => shallowClone,
+  sizeCaps: () => sizeCaps,
   slugify: () => slugify,
   stringifyPrimitive: () => stringifyPrimitive,
   toZod: () => toZod,
@@ -652,6 +653,18 @@ function prefixIssues(path, issues) {
 function unwrapMessage(message) {
   return typeof message === "string" ? message : message?.message;
 }
+function sizeCaps(defChecks) {
+  const caps = [];
+  for (const ch of defChecks ?? []) {
+    const d = ch._zod.def;
+    if (!/_(length|size)$|_equals$/.test(d.check))
+      break;
+    const max = d.maximum ?? d.length ?? d.size;
+    if (max >= 0)
+      caps.push([max, ch]);
+  }
+  return caps;
+}
 function attachSchema(issues, start, inst) {
   var _a3;
   for (let i = start; i < issues.length; i++) {
@@ -1714,7 +1727,7 @@ ${content.join("\n")}
 var version = {
   major: 4,
   minor: 6,
-  patch: 5
+  patch: 7
 };
 
 // node_modules/zod/v4/core/schemas.js
@@ -2336,6 +2349,29 @@ var $ZodDate = /* @__PURE__ */ $constructor("$ZodDate", (inst, def) => {
     return payload;
   };
 });
+function capSize(inst, size) {
+  const caps = sizeCaps(inst._zod.def.checks);
+  if (!caps.length)
+    return;
+  const cap = Math.min(...caps.map((c) => c[0]));
+  const parse2 = inst._zod.parse;
+  inst._zod.parse = (payload, ctx) => {
+    const n = size(payload.value);
+    if (n > cap && !ctx?.skipChecks && ctx?.direction !== "backward") {
+      for (const [max, ch] of sizeCaps(inst._zod.def.checks)) {
+        if (n > max && ch._zod.def.when(payload)) {
+          const start = payload.issues.length;
+          ch._zod.check(payload);
+          payload.issues[start].continue = false;
+          attachSchema(payload.issues, start, inst);
+          return payload;
+        }
+      }
+    }
+    return parse2(payload, ctx);
+  };
+}
+var arraySize = (input) => Array.isArray(input) ? input.length : -1;
 function handleArrayResult(result, final, index) {
   if (result.issues.length) {
     final.issues.push(...prefixIssues(index, result.issues));
@@ -2379,6 +2415,7 @@ var $ZodArray = /* @__PURE__ */ $constructor("$ZodArray", (inst, def) => {
     }
     return payload;
   };
+  capSize(inst, arraySize);
 });
 function handlePropertyResult(result, final, key, input, optin, optout) {
   const isPresent = key in input;

crates/tui/extension-host/dist/codewhale-extension-host.mjs

@@ -19,7 +19,7 @@ var __export = (target, all) => {
 var define_BUILTIN_MODULE_DIGESTS_default;
 var init_define_BUILTIN_MODULE_DIGESTS = __esm({
   "<define:__BUILTIN_MODULE_DIGESTS__>"() {
-    define_BUILTIN_MODULE_DIGESTS_default = { harness: "ad24207f93d963dcffe1967f6863f416117d9acd67cdfccbcef59c12ccb39f92", mcp: "3a64805433d63f34822ae71230a432ccdbd956174bc8575d5a0a001fda8c50cf" };
+    define_BUILTIN_MODULE_DIGESTS_default = { harness: "ad24207f93d963dcffe1967f6863f416117d9acd67cdfccbcef59c12ccb39f92", mcp: "ce5ccf035b30769cfaca0892ebdb1f5498bca373b618bcca376a12866c42de04" };
   }
 });