@vm0/cli 9.111.1 → 9.111.3

package/{chunk-H56HRDOU.js → chunk-JZJGXOGN.js}

@@ -34652,7 +34652,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.111.1",
+    release: "9.111.3",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -34671,7 +34671,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.111.1",
+    version: "9.111.3",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -53351,6 +53351,27 @@ var CONNECTOR_TYPES_DEF = {
     },
     defaultAuthMethod: "api-token"
   },
+  plain: {
+    label: "Plain",
+    environmentMapping: {
+      PLAIN_TOKEN: "$secrets.PLAIN_TOKEN"
+    },
+    helpText: "Connect your Plain account to manage customer support threads, customers, and labels via Plain's GraphQL API",
+    authMethods: {
+      "api-token": {
+        label: "API Key",
+        helpText: "1. Log in to [Plain](https://app.plain.com)\n2. Go to **Settings \u2192 Machine Users**\n3. Click **New machine user** and generate an API key\n4. Copy the API key",
+        secrets: {
+          PLAIN_TOKEN: {
+            label: "API Key",
+            required: true,
+            placeholder: "plainApiKey__..."
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-token"
+  },
   plausible: {
     label: "Plausible",
     environmentMapping: {
@@ -59464,6 +59485,27 @@ var perplexityFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/plain.generated.ts
+init_esm_shims();
+var plainFirewall = {
+  name: "plain",
+  description: "Plain",
+  placeholders: {
+    PLAIN_TOKEN: "plainApiKey__CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLo"
+  },
+  apis: [
+    {
+      base: "https://core-api.uk.plain.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PLAIN_TOKEN }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/plausible.generated.ts
 init_esm_shims();
 var plausibleFirewall = {
@@ -63545,6 +63587,7 @@ var CONNECTOR_FIREWALLS = {
   pdfco: pdfcoFirewall,
   pdforge: pdforgeFirewall,
   perplexity: perplexityFirewall,
+  plain: plainFirewall,
   plausible: plausibleFirewall,
   podchaser: podchaserFirewall,
   posthog: posthogFirewall,
@@ -63635,24 +63678,28 @@ function getDefaultFirewallPolicies(type) {
   const allowed = DEFAULT_ALLOWED[type];
   const allowSet = allowed ? new Set(allowed) : null;
   const config2 = getConnectorFirewall(type);
-  const result = {};
+  const policies = {};
   for (const api of config2.apis) {
     if (api.permissions) {
       for (const p of api.permissions) {
-        result[p.name] = !allowSet || allowSet.has(p.name) ? "allow" : "deny";
+        policies[p.name] = !allowSet || allowSet.has(p.name) ? "allow" : "deny";
       }
     }
   }
-  return result;
+  return { policies, unknownPolicy: "allow" };
 }
 function resolveFirewallPolicies(stored, connectors) {
   let resolved = stored;
   for (const connector of connectors) {
     if (!isFirewallConnectorType(connector)) continue;
     const defaults = getDefaultFirewallPolicies(connector);
+    const existing = resolved?.[connector];
     resolved = {
       ...resolved,
-      [connector]: { ...defaults, ...resolved?.[connector] }
+      [connector]: {
+        policies: { ...defaults.policies, ...existing?.policies },
+        ...existing?.unknownPolicy !== void 0 ? { unknownPolicy: existing.unknownPolicy } : { unknownPolicy: defaults.unknownPolicy }
+      }
     };
   }
   return resolved;
@@ -68208,18 +68255,21 @@ var firewallConfigSchema = external_exports.object({
   placeholders: external_exports.record(external_exports.string(), external_exports.string()).optional()
 });
 var firewallPolicyValueSchema = external_exports.enum(["allow", "deny", "ask"]);
+var firewallPolicySchema = external_exports.object({
+  policies: external_exports.record(external_exports.string(), firewallPolicyValueSchema),
+  unknownPolicy: firewallPolicyValueSchema.optional()
+});
 var firewallPoliciesSchema = external_exports.record(
   external_exports.string(),
-  external_exports.record(external_exports.string(), firewallPolicyValueSchema)
+  firewallPolicySchema
 );
-var grantedPermissionSchema = external_exports.object({
+var networkPolicySchema = external_exports.object({
   allow: external_exports.array(external_exports.string()),
-  allowUnknown: external_exports.boolean()
+  deny: external_exports.array(external_exports.string()),
+  ask: external_exports.array(external_exports.string()),
+  unknownPolicy: firewallPolicyValueSchema
 });
-var grantedPermissionsSchema = external_exports.record(
-  external_exports.string(),
-  grantedPermissionSchema
-);
+var networkPoliciesSchema = external_exports.record(external_exports.string(), networkPolicySchema);
 var BASE_URL_VARS_PATTERN = /\$\{\{\s*vars\.([a-zA-Z_][a-zA-Z0-9_]*)\s*\}\}/;
 var BASE_URL_VARS_PATTERN_G = new RegExp(BASE_URL_VARS_PATTERN.source, "g");
 
@@ -68446,7 +68496,8 @@ var orgResponseSchema = external_exports.object({
   slug: external_exports.string(),
   name: external_exports.string(),
   tier: external_exports.string().optional(),
-  role: orgRoleSchema.optional()
+  role: orgRoleSchema.optional(),
+  createdBy: external_exports.string().optional()
 });
 var updateOrgRequestSchema = external_exports.object({
   slug: orgSlugSchema.optional(),
@@ -70566,8 +70617,8 @@ var storedExecutionContextSchema = external_exports.object({
   memoryName: external_exports.string().optional(),
   // Firewall for proxy-side token replacement (complete config, all permissions)
   firewalls: firewallsSchema.optional(),
-  // Per-firewall grant config: which permissions are granted + allowUnknown flag
-  grantedPermissions: grantedPermissionsSchema.optional(),
+  // Per-firewall network policies: which permissions are granted + unknownPolicy
+  networkPolicies: networkPoliciesSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: external_exports.array(external_exports.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -70608,8 +70659,8 @@ var executionContextSchema = external_exports.object({
   memoryName: external_exports.string().optional(),
   // Firewall for proxy-side token replacement (complete config, all permissions)
   firewalls: firewallsSchema.optional(),
-  // Per-firewall grant config: which permissions are granted + allowUnknown flag
-  grantedPermissions: grantedPermissionsSchema.optional(),
+  // Per-firewall network policies: which permissions are granted + unknownPolicy
+  networkPolicies: networkPoliciesSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: external_exports.array(external_exports.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -71050,7 +71101,6 @@ var zeroAgentResponseSchema = external_exports.object({
   sound: external_exports.string().nullable(),
   avatarUrl: external_exports.string().nullable(),
   permissionPolicies: firewallPoliciesSchema.nullable(),
-  allowUnknownEndpoints: external_exports.record(external_exports.string(), external_exports.boolean()).nullable(),
   customSkills: external_exports.array(external_exports.string()).default([])
 });
 var zeroAgentRequestSchema = external_exports.object({
@@ -71162,8 +71212,7 @@ var zeroAgentsByIdContract = c17.router({
 });
 var zeroAgentPermissionPoliciesRequestSchema = external_exports.object({
   agentId: external_exports.string().uuid(),
-  policies: firewallPoliciesSchema,
-  allowUnknownEndpoints: external_exports.record(external_exports.string(), external_exports.boolean()).optional()
+  policies: firewallPoliciesSchema
 });
 var zeroAgentPermissionPoliciesContract = c17.router({
   update: {
@@ -72077,7 +72126,7 @@ var runContextResponseSchema = external_exports.object({
   vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
   environment: external_exports.record(external_exports.string(), external_exports.string()),
   firewalls: external_exports.array(runContextFirewallSchema),
-  grantedPermissions: grantedPermissionsSchema.nullable().optional(),
+  networkPolicies: networkPoliciesSchema.nullable().optional(),
   volumes: external_exports.array(runContextVolumeSchema),
   artifact: runContextArtifactSchema.nullable(),
   memory: runContextArtifactSchema.nullable()
@@ -75519,7 +75568,7 @@ function parsePermissionPolicies(json2) {
   } catch {
     throw new Error(
       `Invalid --permission-policies JSON: ${json2}
-Expected format: '{"ref": {"permission": "allow|deny|ask"}}'`
+Expected format: '{"ref": {"permissions": {"perm": "allow|deny|ask"}}}'`
     );
   }
   const result = firewallPoliciesSchema.safeParse(parsed);
@@ -75926,4 +75975,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-H56HRDOU.js.map
+//# sourceMappingURL=chunk-JZJGXOGN.js.map