@vm0/cli 9.131.0 → 9.131.1

package/{chunk-65M57PU6.js → chunk-BS3XRRR3.js}

@@ -73642,7 +73642,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.131.0",
+    release: "9.131.1",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -73661,7 +73661,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.131.0",
+    version: "9.131.1",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -91157,6 +91157,32 @@ var stripe = {
   }
 };
 
+// ../../packages/core/src/contracts/connectors/onyx.ts
+init_esm_shims();
+var onyx = {
+  onyx: {
+    label: "Onyx",
+    helpText: "Connect your Onyx account to search internal knowledge bases, chat with AI agents, and index documents",
+    environmentMapping: {
+      ONYX_TOKEN: "$secrets.ONYX_TOKEN"
+    },
+    authMethods: {
+      "api-token": {
+        label: "API Key / PAT",
+        helpText: "1. Log in to [Onyx Cloud](https://cloud.onyx.app)\n2. Go to **Settings \u2192 Accounts & Access**\n3. Click **Create New Token**\n4. Give it a name and choose an expiration\n5. Copy the token immediately \u2014 it is shown only once",
+        secrets: {
+          ONYX_TOKEN: {
+            label: "API Key or Personal Access Token",
+            required: true,
+            placeholder: "onyx_pat_..."
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-token"
+  }
+};
+
 // ../../packages/core/src/contracts/connectors/openai.ts
 init_esm_shims();
 var openai = {
@@ -93863,6 +93889,7 @@ var CONNECTOR_TYPES_DEF = {
   ...atlassian,
   ...metaAds,
   ...stripe,
+  ...onyx,
   ...openai,
   ...similarweb,
   ...perplexity,
@@ -101898,6 +101925,27 @@ var notionFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/onyx.generated.ts
+init_esm_shims();
+var onyxFirewall = {
+  name: "onyx",
+  description: "Onyx",
+  placeholders: {
+    ONYX_TOKEN: "onyx_pat_CoffeeSafeLocalCoffeeSafeLocal"
+  },
+  apis: [
+    {
+      base: "https://cloud.onyx.app",
+      auth: {
+        headers: {
+          "Authorization": "Bearer ${{ secrets.ONYX_TOKEN }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/openai.generated.ts
 init_esm_shims();
 var openaiFirewall = {
@@ -105715,6 +105763,7 @@ var CONNECTOR_FIREWALLS = {
   n8n: n8nFirewall,
   neon: neonFirewall,
   notion: notionFirewall,
+  onyx: onyxFirewall,
   openai: openaiFirewall,
   "outlook-calendar": outlookCalendarFirewall,
   "outlook-mail": outlookMailFirewall,
@@ -110830,7 +110879,6 @@ var unifiedRunRequestSchema = external_exports.object({
   vars: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   secrets: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   volumeVersions: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  memoryName: external_exports.string().optional(),
   // Additional volumes passed directly at run time (bypass compose)
   additionalVolumes: external_exports.array(
     external_exports.object({
@@ -110857,7 +110905,7 @@ var unifiedRunRequestSchema = external_exports.object({
   triggerSource: triggerSourceSchema.optional(),
   // Per-permission policies (e.g., { "github": { "actions:read": "allow" } })
   permissionPolicies: firewallPoliciesSchema.optional()
-});
+}).passthrough();
 var createRunResponseSchema = external_exports.object({
   runId: external_exports.string(),
   status: runStatusSchema,
@@ -110901,8 +110949,7 @@ var runResultSchema = external_exports.object({
   conversationId: external_exports.string(),
   artifact: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   // optional when run has no artifact
-  volumes: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  memory: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  volumes: external_exports.record(external_exports.string(), external_exports.string()).optional()
 });
 var runStateSchema = external_exports.object({
   status: runStatusSchema,
@@ -111324,7 +111371,7 @@ var runsQueueContract = c4.router({
 // ../../packages/core/src/contracts/storages.ts
 init_esm_shims();
 var c5 = initContract();
-var storageTypeSchema = external_exports.enum(["volume", "artifact", "memory"]);
+var storageTypeSchema = external_exports.enum(["volume", "artifact"]);
 var versionQuerySchema = external_exports.string().regex(/^[a-f0-9]{8,64}$/i, "Version must be 8-64 hex characters").optional();
 var uploadStorageResponseSchema = external_exports.object({
   name: external_exports.string(),
@@ -111556,10 +111603,6 @@ var artifactSnapshotSchema = external_exports.object({
   artifactName: external_exports.string(),
   artifactVersion: external_exports.string()
 });
-var memorySnapshotSchema = external_exports.object({
-  memoryName: external_exports.string(),
-  memoryVersion: external_exports.string()
-});
 var volumeVersionsSnapshotSchema = external_exports.object({
   versions: external_exports.record(external_exports.string(), external_exports.string())
 });
@@ -111643,16 +111686,13 @@ var webhookCheckpointsContract = c6.router({
         64,
         "cliAgentSessionHistoryHash must be a 64-character SHA-256 hex string"
       ),
-      // Legacy singleton artifact snapshot. The guest-agent still emits this
-      // when exactly one artifact is snapshotted so older servers can read it;
-      // new code must read artifactSnapshots instead.
+      // Legacy singleton artifact snapshot. The guest-agent may still emit
+      // this when exactly one artifact is snapshotted during rollout; the
+      // server folds it into artifactSnapshots before persisting.
       artifactSnapshot: artifactSnapshotSchema.optional(),
-      // Multi-artifact snapshot map: artifact name → version id. Emitted
-      // unconditionally by the guest-agent (empty object when nothing to
-      // snapshot). Double-written to both the legacy single-entry column and
-      // the new artifact_snapshots JSONB column on checkpoints.
+      // Multi-artifact snapshot map: artifact name → version id. Authoritative
+      // payload persisted to checkpoints.artifact_snapshots.
       artifactSnapshots: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-      memorySnapshot: memorySnapshotSchema.optional(),
       volumeVersionsSnapshot: volumeVersionsSnapshotSchema.optional()
     }),
     responses: {
@@ -111660,9 +111700,7 @@ var webhookCheckpointsContract = c6.router({
         checkpointId: external_exports.string(),
         agentSessionId: external_exports.string(),
         conversationId: external_exports.string(),
-        artifact: artifactSnapshotSchema.optional(),
         artifacts: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-        memory: memorySnapshotSchema.optional(),
         volumes: external_exports.record(external_exports.string(), external_exports.string()).optional()
       }),
       400: apiErrorSchema,
@@ -111935,15 +111973,16 @@ var webhookUsageContract = c6.router({
     summary: "Receive proxy-extracted usage data from sandbox"
   }
 });
-var webhookConnectorBillingContract = c6.router({
+var webhookUsageEventContract = c6.router({
   send: {
     method: "POST",
-    path: "/api/webhooks/agent/connector-billing",
+    path: "/api/webhooks/agent/usage-event",
     headers: authHeadersSchema,
     body: external_exports.object({
       runId: external_exports.string().min(1, "runId is required"),
-      flowId: external_exports.string().min(1).max(100),
-      connector: external_exports.string().min(1).max(50),
+      idempotencyKey: external_exports.uuid(),
+      kind: external_exports.enum(["connector"]),
+      provider: external_exports.string().min(1).max(100),
       category: external_exports.string().min(1).max(100),
       quantity: external_exports.number().int().min(0)
     }),
@@ -111956,7 +111995,7 @@ var webhookConnectorBillingContract = c6.router({
       404: apiErrorSchema,
       500: apiErrorSchema
     },
-    summary: "Receive connector billing data from sandbox"
+    summary: "Receive usage event data from sandbox"
   }
 });
 
@@ -112684,10 +112723,6 @@ var agentComposeSnapshotSchema = external_exports.object({
   vars: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   secretNames: external_exports.array(external_exports.string()).optional()
 });
-var artifactSnapshotSchema2 = external_exports.object({
-  artifactName: external_exports.string(),
-  artifactVersion: external_exports.string()
-});
 var volumeVersionsSnapshotSchema2 = external_exports.object({
   versions: external_exports.record(external_exports.string(), external_exports.string())
 });
@@ -112696,11 +112731,8 @@ var checkpointResponseSchema = external_exports.object({
   runId: external_exports.string(),
   conversationId: external_exports.string(),
   agentComposeSnapshot: agentComposeSnapshotSchema,
-  // Legacy single-artifact snapshot. Populated from artifact_snapshots when
-  // the checkpoint has exactly one entry, left null otherwise.
-  artifactSnapshot: artifactSnapshotSchema2.nullable(),
   // Multi-artifact snapshot map: artifact name → version id. Null when the
-  // checkpoint predates the multi-mount migration or has no artifacts.
+  // checkpoint has no artifacts.
   artifactSnapshots: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
   volumeVersionsSnapshot: volumeVersionsSnapshotSchema2.nullable(),
   createdAt: external_exports.string()
@@ -113199,8 +113231,7 @@ var artifactEntrySchema = external_exports.object({
 });
 var storageManifestSchema = external_exports.object({
   storages: external_exports.array(storageEntrySchema),
-  artifacts: external_exports.array(artifactEntrySchema),
-  memory: artifactEntrySchema.nullable()
+  artifacts: external_exports.array(artifactEntrySchema)
 });
 var resumeSessionSchema = external_exports.object({
   sessionId: external_exports.string(),
@@ -113224,8 +113255,6 @@ var storedExecutionContextSchema = external_exports.object({
   apiStartTime: external_exports.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: external_exports.string().optional(),
-  // Memory storage name (for first-run when manifest.memory is null)
-  memoryName: external_exports.string().optional(),
   // Firewall for proxy-side token replacement (complete config, all permissions)
   firewalls: firewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
@@ -113269,8 +113298,6 @@ var executionContextSchema = external_exports.object({
   apiStartTime: external_exports.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: external_exports.string().optional(),
-  // Memory storage name (for first-run when manifest.memory is null)
-  memoryName: external_exports.string().optional(),
   // Firewall for proxy-side token replacement (complete config, all permissions)
   firewalls: firewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
@@ -114672,7 +114699,6 @@ var zeroComposesListContract = c25.router({
 init_esm_shims();
 var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   triggerSource: true,
-  memoryName: true,
   artifactName: true,
   artifactVersion: true,
   artifacts: true,
@@ -114811,7 +114837,6 @@ var runContextResponseSchema = external_exports.object({
   networkPolicies: networkPoliciesSchema.nullable(),
   volumes: external_exports.array(runContextVolumeSchema),
   artifact: runContextArtifactSchema.nullable(),
-  memory: runContextArtifactSchema.nullable(),
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).nullable()
 });
 var zeroRunContextContract = c26.router({
@@ -115935,7 +115960,7 @@ var zeroUsageInsightContract = c37.router({
     path: "/api/zero/usage/insight",
     headers: authHeadersSchema,
     query: external_exports.object({
-      range: external_exports.enum(["24h", "7d", "28d"]),
+      range: external_exports.enum(["today", "yesterday", "7d", "28d"]),
       groupBy: external_exports.enum(["source", "agent"]),
       tz: external_exports.string()
     }),
@@ -116565,11 +116590,6 @@ var zeroVoiceIoQuotaContract = c51.router({
 // ../../packages/core/src/contracts/zero-voice-chat-candidate.ts
 init_esm_shims();
 var c52 = initContract();
-var voiceChatCandidateSessionStatusSchema = external_exports.enum([
-  "active",
-  "ended",
-  "timeout"
-]);
 var voiceChatCandidateItemRoleSchema = external_exports.enum([
   "user",
   "assistant",
@@ -116593,16 +116613,13 @@ var voiceChatCandidateSessionSchema = external_exports.object({
   userId: external_exports.string(),
   agentId: external_exports.uuid().nullable(),
   mode: external_exports.literal("chat"),
-  status: voiceChatCandidateSessionStatusSchema,
   conversationSummary: external_exports.string().nullable(),
   workingTasksSummary: external_exports.string().nullable(),
   finishedTasksSummary: external_exports.string().nullable(),
   summarySeq: external_exports.number().int(),
   summaryVersion: external_exports.number().int(),
   lastSummaryAt: external_exports.string().nullable(),
-  createdAt: external_exports.string(),
-  lastHeartbeatAt: external_exports.string(),
-  endedAt: external_exports.string().nullable()
+  createdAt: external_exports.string()
 });
 var voiceChatCandidateItemSchema = external_exports.object({
   id: external_exports.uuid(),
@@ -116703,52 +116720,6 @@ var zeroVoiceChatCandidateContract = c52.router({
     },
     summary: "List voice-chat-candidate sessions for the current user"
   },
-  reenterSession: {
-    method: "POST",
-    path: "/api/zero/voice-chat-candidate/:id/reenter",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({ id: external_exports.uuid() }),
-    body: external_exports.object({}),
-    responses: {
-      200: external_exports.object({
-        session: voiceChatCandidateSessionSchema,
-        recentTaskLogs: external_exports.string(),
-        finishedTasksFullText: external_exports.string(),
-        talkerInstructions: external_exports.string(),
-        talkerInstructionTokens: external_exports.number().int().nonnegative()
-      }),
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema
-    },
-    summary: "Reactivate and load a voice-chat-candidate session, re-computing talker instructions"
-  },
-  endSession: {
-    method: "POST",
-    path: "/api/zero/voice-chat-candidate/:id/end",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({ id: external_exports.uuid() }),
-    body: external_exports.object({}),
-    responses: {
-      200: okResponseSchema2,
-      401: apiErrorSchema,
-      404: apiErrorSchema
-    },
-    summary: "End a voice-chat-candidate session"
-  },
-  heartbeat: {
-    method: "POST",
-    path: "/api/zero/voice-chat-candidate/:id/heartbeat",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({ id: external_exports.uuid() }),
-    body: external_exports.object({}),
-    responses: {
-      200: okResponseSchema2,
-      401: apiErrorSchema,
-      404: apiErrorSchema
-    },
-    summary: "Keep a voice-chat-candidate session alive"
-  },
   triggerReasoning: {
     method: "POST",
     path: "/api/zero/voice-chat-candidate/:id/trigger-reasoning",
@@ -116776,18 +116747,28 @@ var zeroVoiceChatCandidateContract = c52.router({
     },
     summary: "Append a conversation item to a voice-chat-candidate session"
   },
+  /**
+   * task_result items are server-written when a tasker run completes. The
+   * client pulls them incrementally via `sinceSeq` (no cursor = baseline
+   * probe returning at most the latest row) and forwards them to the Talker
+   * so it can narrate slow-brain outcomes. User / assistant transcripts are
+   * NOT exposed via HTTP — the client holds the last utterance locally; the
+   * DB copy is server-side only and feeds the Reasoner's summary pipeline.
+   */
   readItems: {
     method: "GET",
-    path: "/api/zero/voice-chat-candidate/:id/items",
+    path: "/api/zero/voice-chat-candidate/:id/transcript/task-results",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.uuid() }),
-    query: external_exports.object({ after: external_exports.coerce.number().int().optional() }),
+    query: external_exports.object({
+      sinceSeq: external_exports.coerce.number().int().nonnegative().optional()
+    }),
     responses: {
       200: external_exports.object({ items: external_exports.array(voiceChatCandidateItemSchema) }),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Read conversation items from a voice-chat-candidate session"
+    summary: "Read task_result items with seq cursor (for Talker injection only)"
   },
   createTask: {
     method: "POST",
@@ -116803,6 +116784,13 @@ var zeroVoiceChatCandidateContract = c52.router({
     },
     summary: "Create a task from the Talker's createTask tool call"
   },
+  /**
+   * Task list for the Trinity sidebar. Returns every still-running task
+   * (pending / queued / running) in chronological ASC order, followed by up
+   * to the 3 most-recently-finished tasks (done / failed) in finishedAt DESC
+   * order. Full replace per Ably tick — no cursor. Older finished tasks drop
+   * off; the UI shows them briefly as context and then tidies itself.
+   */
   listTasks: {
     method: "GET",
     path: "/api/zero/voice-chat-candidate/:id/tasks",
@@ -116813,7 +116801,7 @@ var zeroVoiceChatCandidateContract = c52.router({
       401: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "List voice-chat-candidate tasks for a session"
+    summary: "List active + recently-finished tasks for a session"
   },
   token: {
     method: "POST",
@@ -117537,6 +117525,11 @@ var FEATURE_SWITCHES = {
     description: "Gate the entire platform-managed connector UI (Enable button and POST /api/zero/platform-connectors/:type). When off, only api-token and OAuth methods surface in connectors list/search, and the enable endpoint 404s. Staff-only during rollout.",
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
+  },
+  ["trinity" /* Trinity */]: {
+    maintainer: "ethan@vm0.ai",
+    description: "Embed the candidate voice-chat mic toggle + voice-mode layout into the agent chat page. Gates the mic launcher, composer swap, and status/subtitle/task-card UI.",
+    enabled: false
   }
 };
 function isFeatureEnabled(key, ctx) {
@@ -120179,4 +120172,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-65M57PU6.js.map
+//# sourceMappingURL=chunk-BS3XRRR3.js.map