@vm0/cli 9.121.4 → 9.122.0

package/{chunk-GPSANZ2L.js → chunk-CRGB4RUH.js}

@@ -73649,7 +73649,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.121.4",
+    release: "9.122.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -73668,7 +73668,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.121.4",
+    version: "9.122.0",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -94311,6 +94311,39 @@ var CONNECTOR_TYPES_DEF = {
       }
     },
     defaultAuthMethod: "api-token"
+  },
+  "test-oauth": {
+    label: "Test OAuth (internal)",
+    featureFlag: "testOauthConnector" /* TestOauthConnector */,
+    environmentMapping: {
+      TEST_OAUTH_TOKEN: "$secrets.TEST_OAUTH_ACCESS_TOKEN"
+    },
+    helpText: "Synthetic OAuth 2.0 connector served by this app itself. For automated tests only \u2014 not a real third-party service.",
+    authMethods: {
+      oauth: {
+        label: "OAuth",
+        helpText: "Test-only OAuth provider. Only reachable in dev/preview.",
+        secrets: {
+          TEST_OAUTH_ACCESS_TOKEN: {
+            label: "Access Token",
+            required: true
+          },
+          TEST_OAUTH_REFRESH_TOKEN: {
+            label: "Refresh Token",
+            required: true
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "oauth",
+    oauth: {
+      // Relative paths — the handler resolves them against NEXT_PUBLIC_APP_URL
+      // at call time because the fake provider lives inside this same app and
+      // the preview-URL host changes per deploy.
+      authorizationUrl: "/api/test/oauth-provider/authorize",
+      tokenUrl: "/api/test/oauth-provider/token",
+      scopes: ["read"]
+    }
   }
 };
 var CONNECTOR_TYPES = CONNECTOR_TYPES_DEF;
@@ -101009,6 +101042,33 @@ var tavilyFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/test-oauth.generated.ts
+init_esm_shims();
+var testOauthFirewall = {
+  name: "test-oauth",
+  description: "Test OAuth connector (internal synthetic provider)",
+  placeholders: {
+    TEST_OAUTH_TOKEN: "testoauth_placeholder_token"
+  },
+  apis: [
+    {
+      base: "https://{pr}.vm6.ai/api/test/oauth-provider",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.TEST_OAUTH_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "echo",
+          description: "Test echo endpoint used to verify token injection",
+          rules: ["GET /echo"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/tldv.generated.ts
 init_esm_shims();
 var tldvFirewall = {
@@ -103037,6 +103097,7 @@ var CONNECTOR_FIREWALLS = {
   supabase: supabaseFirewall,
   supadata: supadataFirewall,
   tavily: tavilyFirewall,
+  "test-oauth": testOauthFirewall,
   tldv: tldvFirewall,
   todoist: todoistFirewall,
   twenty: twentyFirewall,
@@ -113656,6 +113717,11 @@ var FEATURE_SWITCHES = {
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
+  ["testOauthConnector" /* TestOauthConnector */]: {
+    maintainer: "liangyou@vm0.ai",
+    description: "Enable the test-oauth connector, a synthetic OAuth 2.0 provider used only for automated tests. Off in prod.",
+    enabled: false
+  },
   ["slackAgentSwitch" /* SlackAgentSwitch */]: {
     maintainer: "yuma@vm0.ai",
     description: "Per-user agent override in the org-aware Slack app. When enabled for an org, members can choose which agent replies to their Slack mentions / DMs via `/zero switch` (opens an agent picker modal) or the Switch button on the App Home tab. The help text for `/zero help` also lists the switch subcommand. Selecting an alternate agent persists a row in `slack_user_agent_preferences` so the preference follows the user across every Slack workspace joined under the same org, and subsequent mention / DM replies from a non-default agent carry a `Sent via <agent>` footer so it's clear which agent produced the reply. When gated off, the modal, slash subcommand, App Home button, and help line are hidden AND any existing DB preferences are ignored at read time \u2014 every user falls back to the org default agent with no footer. Staff-only during the rollout window defined by `enabledOrgIdHashes`.",
@@ -116128,4 +116194,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-GPSANZ2L.js.map
+//# sourceMappingURL=chunk-CRGB4RUH.js.map