@vm0/cli 9.131.0 → 9.131.2

package/{chunk-65M57PU6.js → chunk-A7EYNH3B.js}

@@ -73642,7 +73642,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.131.0",
+    release: "9.131.2",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -73661,7 +73661,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.131.0",
+    version: "9.131.2",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -91157,6 +91157,32 @@ var stripe = {
   }
 };
 
+// ../../packages/core/src/contracts/connectors/onyx.ts
+init_esm_shims();
+var onyx = {
+  onyx: {
+    label: "Onyx",
+    helpText: "Connect your Onyx account to search internal knowledge bases, chat with AI agents, and index documents",
+    environmentMapping: {
+      ONYX_TOKEN: "$secrets.ONYX_TOKEN"
+    },
+    authMethods: {
+      "api-token": {
+        label: "API Key / PAT",
+        helpText: "1. Log in to [Onyx Cloud](https://cloud.onyx.app)\n2. Go to **Settings \u2192 Accounts & Access**\n3. Click **Create New Token**\n4. Give it a name and choose an expiration\n5. Copy the token immediately \u2014 it is shown only once",
+        secrets: {
+          ONYX_TOKEN: {
+            label: "API Key or Personal Access Token",
+            required: true,
+            placeholder: "onyx_pat_..."
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-token"
+  }
+};
+
 // ../../packages/core/src/contracts/connectors/openai.ts
 init_esm_shims();
 var openai = {
@@ -93863,6 +93889,7 @@ var CONNECTOR_TYPES_DEF = {
   ...atlassian,
   ...metaAds,
   ...stripe,
+  ...onyx,
   ...openai,
   ...similarweb,
   ...perplexity,
@@ -101898,6 +101925,27 @@ var notionFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/onyx.generated.ts
+init_esm_shims();
+var onyxFirewall = {
+  name: "onyx",
+  description: "Onyx",
+  placeholders: {
+    ONYX_TOKEN: "onyx_pat_CoffeeSafeLocalCoffeeSafeLocal"
+  },
+  apis: [
+    {
+      base: "https://cloud.onyx.app",
+      auth: {
+        headers: {
+          "Authorization": "Bearer ${{ secrets.ONYX_TOKEN }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/openai.generated.ts
 init_esm_shims();
 var openaiFirewall = {
@@ -105715,6 +105763,7 @@ var CONNECTOR_FIREWALLS = {
   n8n: n8nFirewall,
   neon: neonFirewall,
   notion: notionFirewall,
+  onyx: onyxFirewall,
   openai: openaiFirewall,
   "outlook-calendar": outlookCalendarFirewall,
   "outlook-mail": outlookMailFirewall,
@@ -110813,13 +110862,7 @@ var unifiedRunRequestSchema = external_exports.object({
   agentComposeId: external_exports.string().optional(),
   agentComposeVersionId: external_exports.string().optional(),
   conversationId: external_exports.string().optional(),
-  // @deprecated Legacy singleton artifact fields retained for a one-release
-  // compat window. The POST /api/agent/runs handler rewrites them into the
-  // new `artifacts` array before dispatch — prefer `artifacts` in new code.
-  artifactName: external_exports.string().optional(),
-  artifactVersion: external_exports.string().optional(),
-  // Multi-mount artifacts, each with its own mountPath. When provided, the
-  // server ignores artifactName/artifactVersion.
+  // Multi-mount artifacts, each with its own mountPath.
   artifacts: external_exports.array(
     external_exports.object({
       name: external_exports.string(),
@@ -110830,7 +110873,6 @@ var unifiedRunRequestSchema = external_exports.object({
   vars: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   secrets: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   volumeVersions: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  memoryName: external_exports.string().optional(),
   // Additional volumes passed directly at run time (bypass compose)
   additionalVolumes: external_exports.array(
     external_exports.object({
@@ -110857,7 +110899,7 @@ var unifiedRunRequestSchema = external_exports.object({
   triggerSource: triggerSourceSchema.optional(),
   // Per-permission policies (e.g., { "github": { "actions:read": "allow" } })
   permissionPolicies: firewallPoliciesSchema.optional()
-});
+}).strict();
 var createRunResponseSchema = external_exports.object({
   runId: external_exports.string(),
   status: runStatusSchema,
@@ -110901,8 +110943,7 @@ var runResultSchema = external_exports.object({
   conversationId: external_exports.string(),
   artifact: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   // optional when run has no artifact
-  volumes: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  memory: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  volumes: external_exports.record(external_exports.string(), external_exports.string()).optional()
 });
 var runStateSchema = external_exports.object({
   status: runStatusSchema,
@@ -111324,7 +111365,7 @@ var runsQueueContract = c4.router({
 // ../../packages/core/src/contracts/storages.ts
 init_esm_shims();
 var c5 = initContract();
-var storageTypeSchema = external_exports.enum(["volume", "artifact", "memory"]);
+var storageTypeSchema = external_exports.enum(["volume", "artifact"]);
 var versionQuerySchema = external_exports.string().regex(/^[a-f0-9]{8,64}$/i, "Version must be 8-64 hex characters").optional();
 var uploadStorageResponseSchema = external_exports.object({
   name: external_exports.string(),
@@ -111552,14 +111593,6 @@ var agentEventSchema = external_exports.object({
   type: external_exports.string(),
   sequenceNumber: external_exports.number().int().nonnegative()
 }).passthrough();
-var artifactSnapshotSchema = external_exports.object({
-  artifactName: external_exports.string(),
-  artifactVersion: external_exports.string()
-});
-var memorySnapshotSchema = external_exports.object({
-  memoryName: external_exports.string(),
-  memoryVersion: external_exports.string()
-});
 var volumeVersionsSnapshotSchema = external_exports.object({
   versions: external_exports.record(external_exports.string(), external_exports.string())
 });
@@ -111643,26 +111676,17 @@ var webhookCheckpointsContract = c6.router({
         64,
         "cliAgentSessionHistoryHash must be a 64-character SHA-256 hex string"
       ),
-      // Legacy singleton artifact snapshot. The guest-agent still emits this
-      // when exactly one artifact is snapshotted so older servers can read it;
-      // new code must read artifactSnapshots instead.
-      artifactSnapshot: artifactSnapshotSchema.optional(),
-      // Multi-artifact snapshot map: artifact name → version id. Emitted
-      // unconditionally by the guest-agent (empty object when nothing to
-      // snapshot). Double-written to both the legacy single-entry column and
-      // the new artifact_snapshots JSONB column on checkpoints.
+      // Multi-artifact snapshot map: artifact name → version id.
+      // Authoritative payload persisted to checkpoints.artifact_snapshots.
       artifactSnapshots: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-      memorySnapshot: memorySnapshotSchema.optional(),
       volumeVersionsSnapshot: volumeVersionsSnapshotSchema.optional()
-    }),
+    }).strict(),
     responses: {
       200: external_exports.object({
         checkpointId: external_exports.string(),
         agentSessionId: external_exports.string(),
         conversationId: external_exports.string(),
-        artifact: artifactSnapshotSchema.optional(),
         artifacts: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-        memory: memorySnapshotSchema.optional(),
         volumes: external_exports.record(external_exports.string(), external_exports.string()).optional()
       }),
       400: apiErrorSchema,
@@ -111935,15 +111959,16 @@ var webhookUsageContract = c6.router({
     summary: "Receive proxy-extracted usage data from sandbox"
   }
 });
-var webhookConnectorBillingContract = c6.router({
+var webhookUsageEventContract = c6.router({
   send: {
     method: "POST",
-    path: "/api/webhooks/agent/connector-billing",
+    path: "/api/webhooks/agent/usage-event",
     headers: authHeadersSchema,
     body: external_exports.object({
       runId: external_exports.string().min(1, "runId is required"),
-      flowId: external_exports.string().min(1).max(100),
-      connector: external_exports.string().min(1).max(50),
+      idempotencyKey: external_exports.uuid(),
+      kind: external_exports.enum(["connector"]),
+      provider: external_exports.string().min(1).max(100),
       category: external_exports.string().min(1).max(100),
       quantity: external_exports.number().int().min(0)
     }),
@@ -111956,7 +111981,7 @@ var webhookConnectorBillingContract = c6.router({
       404: apiErrorSchema,
       500: apiErrorSchema
     },
-    summary: "Receive connector billing data from sandbox"
+    summary: "Receive usage event data from sandbox"
   }
 });
 
@@ -112684,10 +112709,6 @@ var agentComposeSnapshotSchema = external_exports.object({
   vars: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   secretNames: external_exports.array(external_exports.string()).optional()
 });
-var artifactSnapshotSchema2 = external_exports.object({
-  artifactName: external_exports.string(),
-  artifactVersion: external_exports.string()
-});
 var volumeVersionsSnapshotSchema2 = external_exports.object({
   versions: external_exports.record(external_exports.string(), external_exports.string())
 });
@@ -112696,11 +112717,8 @@ var checkpointResponseSchema = external_exports.object({
   runId: external_exports.string(),
   conversationId: external_exports.string(),
   agentComposeSnapshot: agentComposeSnapshotSchema,
-  // Legacy single-artifact snapshot. Populated from artifact_snapshots when
-  // the checkpoint has exactly one entry, left null otherwise.
-  artifactSnapshot: artifactSnapshotSchema2.nullable(),
   // Multi-artifact snapshot map: artifact name → version id. Null when the
-  // checkpoint predates the multi-mount migration or has no artifacts.
+  // checkpoint has no artifacts.
   artifactSnapshots: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
   volumeVersionsSnapshot: volumeVersionsSnapshotSchema2.nullable(),
   createdAt: external_exports.string()
@@ -113199,8 +113217,7 @@ var artifactEntrySchema = external_exports.object({
 });
 var storageManifestSchema = external_exports.object({
   storages: external_exports.array(storageEntrySchema),
-  artifacts: external_exports.array(artifactEntrySchema),
-  memory: artifactEntrySchema.nullable()
+  artifacts: external_exports.array(artifactEntrySchema)
 });
 var resumeSessionSchema = external_exports.object({
   sessionId: external_exports.string(),
@@ -113224,8 +113241,6 @@ var storedExecutionContextSchema = external_exports.object({
   apiStartTime: external_exports.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: external_exports.string().optional(),
-  // Memory storage name (for first-run when manifest.memory is null)
-  memoryName: external_exports.string().optional(),
   // Firewall for proxy-side token replacement (complete config, all permissions)
   firewalls: firewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
@@ -113269,8 +113284,6 @@ var executionContextSchema = external_exports.object({
   apiStartTime: external_exports.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: external_exports.string().optional(),
-  // Memory storage name (for first-run when manifest.memory is null)
-  memoryName: external_exports.string().optional(),
   // Firewall for proxy-side token replacement (complete config, all permissions)
   firewalls: firewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
@@ -114672,9 +114685,6 @@ var zeroComposesListContract = c25.router({
 init_esm_shims();
 var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   triggerSource: true,
-  memoryName: true,
-  artifactName: true,
-  artifactVersion: true,
   artifacts: true,
   disallowedTools: true,
   volumeVersions: true,
@@ -114811,7 +114821,6 @@ var runContextResponseSchema = external_exports.object({
   networkPolicies: networkPoliciesSchema.nullable(),
   volumes: external_exports.array(runContextVolumeSchema),
   artifact: runContextArtifactSchema.nullable(),
-  memory: runContextArtifactSchema.nullable(),
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).nullable()
 });
 var zeroRunContextContract = c26.router({
@@ -115935,7 +115944,7 @@ var zeroUsageInsightContract = c37.router({
     path: "/api/zero/usage/insight",
     headers: authHeadersSchema,
     query: external_exports.object({
-      range: external_exports.enum(["24h", "7d", "28d"]),
+      range: external_exports.enum(["today", "yesterday", "7d", "28d"]),
       groupBy: external_exports.enum(["source", "agent"]),
       tz: external_exports.string()
     }),
@@ -116565,11 +116574,6 @@ var zeroVoiceIoQuotaContract = c51.router({
 // ../../packages/core/src/contracts/zero-voice-chat-candidate.ts
 init_esm_shims();
 var c52 = initContract();
-var voiceChatCandidateSessionStatusSchema = external_exports.enum([
-  "active",
-  "ended",
-  "timeout"
-]);
 var voiceChatCandidateItemRoleSchema = external_exports.enum([
   "user",
   "assistant",
@@ -116593,16 +116597,13 @@ var voiceChatCandidateSessionSchema = external_exports.object({
   userId: external_exports.string(),
   agentId: external_exports.uuid().nullable(),
   mode: external_exports.literal("chat"),
-  status: voiceChatCandidateSessionStatusSchema,
   conversationSummary: external_exports.string().nullable(),
   workingTasksSummary: external_exports.string().nullable(),
   finishedTasksSummary: external_exports.string().nullable(),
   summarySeq: external_exports.number().int(),
   summaryVersion: external_exports.number().int(),
   lastSummaryAt: external_exports.string().nullable(),
-  createdAt: external_exports.string(),
-  lastHeartbeatAt: external_exports.string(),
-  endedAt: external_exports.string().nullable()
+  createdAt: external_exports.string()
 });
 var voiceChatCandidateItemSchema = external_exports.object({
   id: external_exports.uuid(),
@@ -116703,52 +116704,6 @@ var zeroVoiceChatCandidateContract = c52.router({
     },
     summary: "List voice-chat-candidate sessions for the current user"
   },
-  reenterSession: {
-    method: "POST",
-    path: "/api/zero/voice-chat-candidate/:id/reenter",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({ id: external_exports.uuid() }),
-    body: external_exports.object({}),
-    responses: {
-      200: external_exports.object({
-        session: voiceChatCandidateSessionSchema,
-        recentTaskLogs: external_exports.string(),
-        finishedTasksFullText: external_exports.string(),
-        talkerInstructions: external_exports.string(),
-        talkerInstructionTokens: external_exports.number().int().nonnegative()
-      }),
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema
-    },
-    summary: "Reactivate and load a voice-chat-candidate session, re-computing talker instructions"
-  },
-  endSession: {
-    method: "POST",
-    path: "/api/zero/voice-chat-candidate/:id/end",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({ id: external_exports.uuid() }),
-    body: external_exports.object({}),
-    responses: {
-      200: okResponseSchema2,
-      401: apiErrorSchema,
-      404: apiErrorSchema
-    },
-    summary: "End a voice-chat-candidate session"
-  },
-  heartbeat: {
-    method: "POST",
-    path: "/api/zero/voice-chat-candidate/:id/heartbeat",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({ id: external_exports.uuid() }),
-    body: external_exports.object({}),
-    responses: {
-      200: okResponseSchema2,
-      401: apiErrorSchema,
-      404: apiErrorSchema
-    },
-    summary: "Keep a voice-chat-candidate session alive"
-  },
   triggerReasoning: {
     method: "POST",
     path: "/api/zero/voice-chat-candidate/:id/trigger-reasoning",
@@ -116776,18 +116731,28 @@ var zeroVoiceChatCandidateContract = c52.router({
     },
     summary: "Append a conversation item to a voice-chat-candidate session"
   },
+  /**
+   * task_result items are server-written when a tasker run completes. The
+   * client pulls them incrementally via `sinceSeq` (no cursor = baseline
+   * probe returning at most the latest row) and forwards them to the Talker
+   * so it can narrate slow-brain outcomes. User / assistant transcripts are
+   * NOT exposed via HTTP — the client holds the last utterance locally; the
+   * DB copy is server-side only and feeds the Reasoner's summary pipeline.
+   */
   readItems: {
     method: "GET",
-    path: "/api/zero/voice-chat-candidate/:id/items",
+    path: "/api/zero/voice-chat-candidate/:id/transcript/task-results",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.uuid() }),
-    query: external_exports.object({ after: external_exports.coerce.number().int().optional() }),
+    query: external_exports.object({
+      sinceSeq: external_exports.coerce.number().int().nonnegative().optional()
+    }),
     responses: {
       200: external_exports.object({ items: external_exports.array(voiceChatCandidateItemSchema) }),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Read conversation items from a voice-chat-candidate session"
+    summary: "Read task_result items with seq cursor (for Talker injection only)"
   },
   createTask: {
     method: "POST",
@@ -116803,6 +116768,13 @@ var zeroVoiceChatCandidateContract = c52.router({
     },
     summary: "Create a task from the Talker's createTask tool call"
   },
+  /**
+   * Task list for the Trinity sidebar. Returns every still-running task
+   * (pending / queued / running) in chronological ASC order, followed by up
+   * to the 3 most-recently-finished tasks (done / failed) in finishedAt DESC
+   * order. Full replace per Ably tick — no cursor. Older finished tasks drop
+   * off; the UI shows them briefly as context and then tidies itself.
+   */
   listTasks: {
     method: "GET",
     path: "/api/zero/voice-chat-candidate/:id/tasks",
@@ -116813,7 +116785,7 @@ var zeroVoiceChatCandidateContract = c52.router({
       401: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "List voice-chat-candidate tasks for a session"
+    summary: "List active + recently-finished tasks for a session"
   },
   token: {
     method: "POST",
@@ -116906,14 +116878,7 @@ var zeroVoiceChatTasksContract = c53.router({
 // ../../packages/core/src/contracts/tasks.ts
 init_esm_shims();
 var c54 = initContract();
-var taskTypeSchema = external_exports.enum([
-  "chat",
-  "schedule",
-  "slack",
-  "email",
-  "voice_chat",
-  "agent"
-]);
+var taskTypeSchema = external_exports.enum(["chat", "schedule", "slack", "email", "agent"]);
 var taskAgentSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string(),
@@ -116932,7 +116897,6 @@ var taskItemSchema = external_exports.object({
   scheduleId: external_exports.string().optional(),
   slackThreadSessionId: external_exports.string().optional(),
   emailThreadSessionId: external_exports.string().optional(),
-  voiceChatSessionId: external_exports.string().optional(),
   agentRunId: external_exports.string().optional(),
   createdAt: external_exports.string(),
   updatedAt: external_exports.string()
@@ -117537,6 +117501,11 @@ var FEATURE_SWITCHES = {
     description: "Gate the entire platform-managed connector UI (Enable button and POST /api/zero/platform-connectors/:type). When off, only api-token and OAuth methods surface in connectors list/search, and the enable endpoint 404s. Staff-only during rollout.",
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
+  },
+  ["trinity" /* Trinity */]: {
+    maintainer: "ethan@vm0.ai",
+    description: "Embed the candidate voice-chat mic toggle + voice-mode layout into the agent chat page. Gates the mic launcher, composer swap, and status/subtitle/task-card UI.",
+    enabled: false
   }
 };
 function isFeatureEnabled(key, ctx) {
@@ -118802,75 +118771,6 @@ async function getPhoneCallDetail(callId) {
   );
 }
 
-// src/lib/api/domains/zero-voice-chat-context.ts
-init_esm_shims();
-async function getVoiceChatContextEvents(sessionId, after) {
-  const config4 = await getClientConfig();
-  const client = initClient(zeroVoiceChatContextContract, config4);
-  const result = await client.getEvents({
-    params: { id: sessionId },
-    query: { after },
-    headers: {}
-  });
-  if (result.status === 200) {
-    return result.body;
-  }
-  handleError(result, "Failed to get voice-chat context events");
-}
-async function appendVoiceChatContextEvent(sessionId, body) {
-  const config4 = await getClientConfig();
-  const client = initClient(zeroVoiceChatContextContract, config4);
-  const result = await client.appendEvent({
-    params: { id: sessionId },
-    body,
-    headers: {}
-  });
-  if (result.status === 200) {
-    return result.body.event;
-  }
-  handleError(result, "Failed to append voice-chat context event");
-}
-
-// src/lib/api/domains/zero-voice-chat-tasks.ts
-init_esm_shims();
-async function createVoiceChatTask(sessionId, body) {
-  const config4 = await getClientConfig();
-  const client = initClient(zeroVoiceChatTasksContract, config4);
-  const result = await client.createTask({
-    params: { id: sessionId },
-    body,
-    headers: {}
-  });
-  if (result.status === 200) {
-    return result.body.task;
-  }
-  handleError(result, "Failed to create voice-chat task");
-}
-async function getVoiceChatTask(sessionId, taskId) {
-  const config4 = await getClientConfig();
-  const client = initClient(zeroVoiceChatTasksContract, config4);
-  const result = await client.getTask({
-    params: { id: sessionId, taskId },
-    headers: {}
-  });
-  if (result.status === 200) {
-    return result.body.task;
-  }
-  handleError(result, "Failed to get voice-chat task");
-}
-async function listVoiceChatTasks(sessionId) {
-  const config4 = await getClientConfig();
-  const client = initClient(zeroVoiceChatTasksContract, config4);
-  const result = await client.listTasks({
-    params: { id: sessionId },
-    headers: {}
-  });
-  if (result.status === 200) {
-    return result.body.tasks;
-  }
-  handleError(result, "Failed to list voice-chat tasks");
-}
-
 // src/lib/api/domains/web.ts
 init_esm_shims();
 import { createWriteStream as createWriteStream2, readFileSync as readFileSync3, statSync } from "fs";
@@ -120139,11 +120039,6 @@ export {
   createPhoneCall,
   listPhoneCalls,
   getPhoneCallDetail,
-  getVoiceChatContextEvents,
-  appendVoiceChatContextEvent,
-  createVoiceChatTask,
-  getVoiceChatTask,
-  listVoiceChatTasks,
   downloadWebFile,
   uploadWebFile,
   require_prompts3 as require_prompts,
@@ -120179,4 +120074,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-65M57PU6.js.map
+//# sourceMappingURL=chunk-A7EYNH3B.js.map