@vm0/cli 9.139.2 → 9.140.0

package/{chunk-WL4PGRGW.js → chunk-6LA4WVWX.js}

@@ -74090,7 +74090,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.139.2",
+    release: "9.140.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74109,7 +74109,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.139.2",
+    version: "9.140.0",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -88710,6 +88710,10 @@ var RUN_ERROR_GUIDANCE = {
     title: "Provider temporarily unavailable",
     guidance: "The model provider is temporarily unavailable. Please try again later."
   },
+  PROVIDER_DELETED: {
+    title: "Model provider unavailable",
+    guidance: "The model provider used by this thread has been deleted. Start a new chat thread to continue."
+  },
   TOO_MANY_REQUESTS: {
     title: "Concurrent run limit reached",
     guidance: "Wait for your current run to complete before starting a new one."
@@ -94886,6 +94890,7 @@ var huggingFace = {
   "hugging-face": {
     label: "Hugging Face",
     category: "ai-general-models",
+    generation: ["image", "text"],
     environmentMapping: {
       HUGGING_FACE_TOKEN: "$secrets.HUGGING_FACE_TOKEN"
     },
@@ -94913,6 +94918,7 @@ var hume = {
   hume: {
     label: "Hume",
     category: "ai-voice-audio",
+    generation: ["audio"],
     environmentMapping: {
       HUME_TOKEN: "$secrets.HUME_TOKEN"
     },
@@ -94939,6 +94945,7 @@ var heygen = {
   heygen: {
     label: "HeyGen",
     category: "marketing-content-growth",
+    generation: ["video"],
     environmentMapping: {
       HEYGEN_TOKEN: "$secrets.HEYGEN_TOKEN"
     },
@@ -95730,6 +95737,7 @@ var deepseek = {
   deepseek: {
     label: "DeepSeek",
     category: "ai-general-models",
+    generation: ["code", "text"],
     environmentMapping: {
       DEEPSEEK_TOKEN: "$secrets.DEEPSEEK_TOKEN"
     },
@@ -95906,6 +95914,7 @@ var dify = {
   dify: {
     label: "Dify",
     category: "ai-agent-apps",
+    generation: ["text"],
     environmentMapping: {
       DIFY_TOKEN: "$secrets.DIFY_TOKEN"
     },
@@ -96064,6 +96073,7 @@ var minimax = {
   minimax: {
     label: "MiniMax",
     category: "ai-general-models",
+    generation: ["audio", "text", "video"],
     environmentMapping: {
       MINIMAX_TOKEN: "$secrets.MINIMAX_TOKEN"
     },
@@ -96389,6 +96399,7 @@ var gamma = {
   gamma: {
     label: "Gamma",
     category: "marketing-content-growth",
+    generation: ["document", "presentation", "website"],
     environmentMapping: {
       GAMMA_TOKEN: "$secrets.GAMMA_TOKEN"
     },
@@ -97320,6 +97331,7 @@ var openai = {
   openai: {
     label: "OpenAI",
     category: "ai-general-models",
+    generation: ["audio", "image", "text"],
     tags: ["llm", "ai", "gpt", "chatgpt"],
     environmentMapping: {
       OPENAI_TOKEN: "$secrets.OPENAI_TOKEN"
@@ -97380,6 +97392,7 @@ var perplexity = {
   perplexity: {
     label: "Perplexity",
     category: "data-automation-infrastructure",
+    generation: ["text"],
     environmentMapping: {
       PERPLEXITY_TOKEN: "$secrets.PERPLEXITY_TOKEN"
     },
@@ -97613,6 +97626,7 @@ var replicate = {
   replicate: {
     label: "Replicate",
     category: "ai-image-video",
+    generation: ["image", "text"],
     environmentMapping: {
       REPLICATE_TOKEN: "$secrets.REPLICATE_TOKEN"
     },
@@ -97640,6 +97654,7 @@ var pdf4me = {
   pdf4me: {
     label: "PDF4me",
     category: "data-automation-infrastructure",
+    generation: ["document"],
     environmentMapping: {
       PDF4ME_TOKEN: "$secrets.PDF4ME_TOKEN"
     },
@@ -98001,6 +98016,7 @@ var browserless = {
   browserless: {
     label: "Browserless",
     category: "data-automation-infrastructure",
+    generation: ["document", "image"],
     environmentMapping: {
       BROWSERLESS_TOKEN: "$secrets.BROWSERLESS_TOKEN"
     },
@@ -98105,6 +98121,7 @@ var pdfco = {
   pdfco: {
     label: "PDF.co",
     category: "data-automation-infrastructure",
+    generation: ["document"],
     environmentMapping: {
       PDFCO_TOKEN: "$secrets.PDFCO_TOKEN"
     },
@@ -98131,6 +98148,7 @@ var elevenlabs = {
   elevenlabs: {
     label: "ElevenLabs",
     category: "ai-voice-audio",
+    generation: ["audio"],
     environmentMapping: {
       ELEVENLABS_TOKEN: "$secrets.ELEVENLABS_TOKEN"
     },
@@ -98266,6 +98284,7 @@ var fal = {
   fal: {
     label: "fal.ai",
     category: "ai-image-video",
+    generation: ["image", "video"],
     environmentMapping: {
       FAL_TOKEN: "$secrets.FAL_TOKEN"
     },
@@ -98486,6 +98505,7 @@ var runway = {
   runway: {
     label: "Runway",
     category: "ai-image-video",
+    generation: ["video"],
     environmentMapping: {
       RUNWAY_TOKEN: "$secrets.RUNWAY_TOKEN"
     },
@@ -98575,6 +98595,7 @@ var stabilityAi = {
   "stability-ai": {
     label: "Stability AI",
     category: "ai-image-video",
+    generation: ["image"],
     environmentMapping: {
       STABILITY_TOKEN: "$secrets.STABILITY_TOKEN"
     },
@@ -98744,6 +98765,7 @@ var together = {
   together: {
     label: "Together AI",
     category: "ai-general-models",
+    generation: ["image", "text"],
     environmentMapping: {
       TOGETHER_TOKEN: "$secrets.TOGETHER_TOKEN"
     },
@@ -98921,6 +98943,7 @@ var htmlcsstoimage = {
   htmlcsstoimage: {
     label: "HTML/CSS to Image",
     category: "marketing-content-growth",
+    generation: ["image"],
     environmentMapping: {
       HCTI_API_KEY: "$secrets.HCTI_API_KEY",
       HCTI_USER_ID: "$vars.HCTI_USER_ID"
@@ -99099,6 +99122,7 @@ var luma = {
   luma: {
     label: "Luma AI",
     category: "ai-image-video",
+    generation: ["image", "video"],
     environmentMapping: {
       LUMA_TOKEN: "$secrets.LUMA_TOKEN"
     },
@@ -99247,6 +99271,7 @@ var pdforge = {
   pdforge: {
     label: "PDForge",
     category: "data-automation-infrastructure",
+    generation: ["document"],
     environmentMapping: {
       PDFORGE_API_KEY: "$secrets.PDFORGE_API_KEY"
     },
@@ -99445,6 +99470,7 @@ var v0 = {
   v0: {
     label: "v0",
     category: "ai-agent-apps",
+    generation: ["code", "website"],
     environmentMapping: {
       V0_TOKEN: "$secrets.V0_TOKEN"
     },
@@ -99547,6 +99573,27 @@ var msg9 = {
   }
 };
 
+// ../../packages/connectors/src/connectors/nano-banana.ts
+init_esm_shims();
+var nanoBanana = {
+  "nano-banana": {
+    label: "Nano Banana",
+    category: "ai-image-video",
+    generation: ["image"],
+    environmentMapping: {},
+    helpText: "Google Gemini image generation, billed to your org credits",
+    featureFlag: "platformConnectors" /* PlatformConnectors */,
+    authMethods: {
+      platform: {
+        label: "Enable",
+        helpText: "Image generations are billed to your organization's credits. By enabling, you agree that prompts and reference images are sent to the Google Gemini API.",
+        secrets: {}
+      }
+    },
+    defaultAuthMethod: "platform"
+  }
+};
+
 // ../../packages/connectors/src/connectors/amplitude.ts
 init_esm_shims();
 var amplitude = {
@@ -99944,6 +99991,7 @@ var groq = {
   groq: {
     label: "Groq",
     category: "ai-general-models",
+    generation: ["text"],
     tags: ["llm", "ai", "llama", "inference"],
     environmentMapping: {
       GROQ_TOKEN: "$secrets.GROQ_TOKEN"
@@ -100270,6 +100318,7 @@ var CONNECTOR_TYPES_DEF = {
   ...db9,
   ...drive9,
   ...msg9,
+  ...nanoBanana,
   ...amplitude,
   ...attio,
   ...buffer,
@@ -100356,6 +100405,7 @@ var zeroConnectorsMainContract = c6.router({
     responses: {
       200: connectorListResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       500: apiErrorSchema
     },
     summary: "List all connectors (zero proxy)"
@@ -100370,6 +100420,7 @@ var zeroConnectorsByTypeContract = c6.router({
     responses: {
       200: connectorResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get connector by type (zero proxy)"
@@ -100411,6 +100462,7 @@ var zeroConnectorScopeDiffContract = c6.router({
     responses: {
       200: scopeDiffResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get scope diff for a connector"
@@ -100497,6 +100549,7 @@ var zeroComputerConnectorContract = c6.router({
     responses: {
       200: connectorResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get computer connector status (zero proxy)"
@@ -101986,6 +102039,7 @@ var zeroRunsByIdContract = c12.router({
       200: getRunResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get agent run by ID (zero proxy)"
@@ -102138,6 +102192,7 @@ var zeroRunRunnerContract = c12.router({
       200: runRunnerResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get runner-level metadata for a run"
@@ -102432,6 +102487,25 @@ var MODEL_PROVIDER_TYPES = {
     ],
     defaultModel: "anthropic/claude-sonnet-4.6"
   },
+  "openai-api-key": {
+    framework: "codex",
+    secretName: "OPENAI_API_KEY",
+    label: "OpenAI",
+    secretLabel: "API key",
+    helpText: "Get your API key at: https://platform.openai.com/api-keys",
+    environmentMapping: {
+      OPENAI_API_KEY: "$secret",
+      OPENAI_MODEL: "$model"
+    },
+    models: [
+      "gpt-5.5",
+      "gpt-5.4",
+      "gpt-5.4-mini",
+      "gpt-5.3-codex",
+      "gpt-5.2"
+    ],
+    defaultModel: "gpt-5.5"
+  },
   "azure-foundry": {
     framework: "claude-code",
     label: "Azure Foundry",
@@ -102552,6 +102626,9 @@ function getSelectableProviderTypes() {
 }
 var ANTHROPIC_API_BASE = "https://api.anthropic.com";
 function getFirewallBaseUrl(type) {
+  if (getFrameworkForType(type) === "codex") {
+    return "https://api.openai.com/v1/responses";
+  }
   const base = (getEnvironmentMapping(type)?.ANTHROPIC_BASE_URL ?? ANTHROPIC_API_BASE).replace(/\/+$/, "");
   return `${base}/v1/messages`;
 }
@@ -102634,6 +102711,13 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
     "vercel-ai-gateway",
     { name: "Authorization", valuePrefix: "Bearer" },
     "sk-CoffeeSafeLocalCoffeeSafeLocalCo"
+  ),
+  // Placeholder: sk-proj-{156 chars}T3BlbkFJ{156 chars} (typical project key shape)
+  // Source: matches turbo/packages/connectors/src/firewalls/openai.generated.ts
+  "openai-api-key": mpFirewall(
+    "openai-api-key",
+    { name: "Authorization", valuePrefix: "Bearer" },
+    "sk-proj-CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocaT3BlbkFJCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLoca"
   )
 };
 var modelProviderTypeSchema = external_exports.enum([
@@ -102645,11 +102729,15 @@ var modelProviderTypeSchema = external_exports.enum([
   "deepseek-api-key",
   "zai-api-key",
   "vercel-ai-gateway",
+  "openai-api-key",
   "azure-foundry",
   "aws-bedrock",
   "vm0"
 ]);
-var modelProviderFrameworkSchema = external_exports.enum(["claude-code"]);
+var modelProviderFrameworkSchema = external_exports.enum(["claude-code", "codex"]);
+function getFrameworkForType(type) {
+  return MODEL_PROVIDER_TYPES[type]?.framework ?? "claude-code";
+}
 function hasAuthMethods(type) {
   const config4 = MODEL_PROVIDER_TYPES[type];
   if (!config4) return false;
@@ -102977,7 +103065,14 @@ var chatMessagesContract = c13.router({
       // Client-generated UUID used as the user message's primary key.
       // Lets the client render an optimistic row and reconcile with the
       // server row by id — no temp-id swap, no React remount.
-      clientMessageId: external_exports.string().uuid().optional()
+      clientMessageId: external_exports.string().uuid().optional(),
+      // Test-only escape hatch: when the host runner has USE_MOCK_CODEX
+      // set (CI default), allow the request to bypass the mock and execute
+      // the real codex CLI. Mirrors `debugNoMockClaude` / `debugNoMockCodex`
+      // on /api/zero/runs so e2e BYOK smoke tests can exercise the chat
+      // entry path end-to-end.
+      debugNoMockClaude: external_exports.boolean().optional(),
+      debugNoMockCodex: external_exports.boolean().optional()
     }),
     responses: {
       201: external_exports.object({
@@ -102989,7 +103084,8 @@ var chatMessagesContract = c13.router({
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
-      404: apiErrorSchema
+      404: apiErrorSchema,
+      422: apiErrorSchema
     },
     summary: "Send a chat message (create thread + run + association)"
   }
@@ -113046,6 +113142,45 @@ var n8nFirewall = {
   ]
 };
 
+// ../../packages/connectors/src/firewalls/nano-banana.generated.ts
+init_esm_shims();
+var nanoBananaFirewall = {
+  name: "nano-banana",
+  description: "Google Gemini image generation (Nano Banana)",
+  placeholders: {
+    NANO_BANANA_TOKEN: "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSaf"
+  },
+  apis: [
+    {
+      base: "https://generativelanguage.googleapis.com/v1beta/models/gemini-3-pro-image-preview:generateContent",
+      auth: {
+        headers: {
+          "x-goog-api-key": "${{ secrets.NANO_BANANA_TOKEN }}"
+        }
+      },
+      permissions: []
+    },
+    {
+      base: "https://generativelanguage.googleapis.com/v1beta/models/gemini-3.1-flash-image-preview:generateContent",
+      auth: {
+        headers: {
+          "x-goog-api-key": "${{ secrets.NANO_BANANA_TOKEN }}"
+        }
+      },
+      permissions: []
+    },
+    {
+      base: "https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash-image:generateContent",
+      auth: {
+        headers: {
+          "x-goog-api-key": "${{ secrets.NANO_BANANA_TOKEN }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
 // ../../packages/connectors/src/firewalls/neon.generated.ts
 init_esm_shims();
 var neonFirewall = {
@@ -117003,6 +117138,7 @@ var CONNECTOR_FIREWALLS = {
   monday: mondayFirewall,
   msg9: msg9Firewall,
   n8n: n8nFirewall,
+  "nano-banana": nanoBananaFirewall,
   neon: neonFirewall,
   notion: notionFirewall,
   onyx: onyxFirewall,
@@ -117963,7 +118099,8 @@ var zeroComposesMainContract = c35.router({
       200: composeResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
-      403: apiErrorSchema
+      403: apiErrorSchema,
+      404: apiErrorSchema
     },
     summary: "Get agent compose by name (zero proxy)"
   }
@@ -118602,7 +118739,8 @@ var zeroUsageInsightContract = c42.router({
     path: "/api/zero/usage/insight",
     headers: authHeadersSchema,
     query: external_exports.object({
-      range: external_exports.enum(["today", "yesterday", "7d", "28d"]),
+      range: external_exports.enum(["today", "yesterday", "day", "7d", "28d", "30d"]),
+      date: external_exports.string().optional(),
       groupBy: external_exports.enum(["source", "agent"]),
       tz: external_exports.string()
     }),
@@ -118626,19 +118764,16 @@ var modelUsageRankingItemSchema = external_exports.object({
   outputTokens: external_exports.number(),
   cacheTokens: external_exports.number(),
   totalTokens: external_exports.number(),
-  credits: external_exports.number(),
-  previousCredits: external_exports.number(),
+  previousTotalTokens: external_exports.number(),
   changePercent: external_exports.number().nullable(),
   share: external_exports.number()
 });
 var modelUsageRankingDailyModelSchema = external_exports.object({
   model: external_exports.string(),
-  credits: external_exports.number(),
   totalTokens: external_exports.number()
 });
 var modelUsageRankingDailyBucketSchema = external_exports.object({
   date: external_exports.string(),
-  totalCredits: external_exports.number(),
   totalTokens: external_exports.number(),
   models: external_exports.array(modelUsageRankingDailyModelSchema)
 });
@@ -118646,7 +118781,6 @@ var modelUsageRankingResponseSchema = external_exports.object({
   range: modelUsageRankingRangeSchema,
   generatedAt: external_exports.string(),
   grandTotalTokens: external_exports.number(),
-  grandTotalCredits: external_exports.number(),
   models: external_exports.array(modelUsageRankingItemSchema),
   daily: external_exports.array(modelUsageRankingDailyBucketSchema)
 });
@@ -118673,6 +118807,7 @@ init_esm_shims();
 var c44 = initContract();
 var teamComposeItemSchema = external_exports.object({
   id: external_exports.string(),
+  ownerId: external_exports.string().optional(),
   displayName: external_exports.string().nullable(),
   description: external_exports.string().nullable(),
   sound: external_exports.string().nullable(),
@@ -118939,6 +119074,19 @@ var insightMemberCreditsSchema = external_exports.object({
   agentNames: external_exports.array(external_exports.string()).optional(),
   agentCredits: external_exports.record(external_exports.string(), external_exports.number()).optional()
 });
+var insightDayScheduleSchema = external_exports.object({
+  scheduleId: external_exports.string(),
+  scheduleName: external_exports.string(),
+  scheduleDescription: external_exports.string().nullable(),
+  credits: external_exports.number(),
+  tokens: external_exports.number()
+});
+var insightDayChatSchema = external_exports.object({
+  threadId: external_exports.string(),
+  threadTitle: external_exports.string().nullable(),
+  credits: external_exports.number(),
+  tokens: external_exports.number()
+});
 var dayInsightSchema = external_exports.object({
   date: external_exports.string(),
   agents: external_exports.array(insightAgentSchema).default([]),
@@ -118947,7 +119095,9 @@ var dayInsightSchema = external_exports.object({
   teamUsage: external_exports.array(insightMemberCreditsSchema).default([]),
   topTask: insightTopTaskSchema.nullable().default(null),
   services: external_exports.array(insightServiceSchema).default([]),
-  permissions: external_exports.array(insightPermissionSchema).default([])
+  permissions: external_exports.array(insightPermissionSchema).default([]),
+  schedules: external_exports.array(insightDayScheduleSchema).default([]),
+  chats: external_exports.array(insightDayChatSchema).default([])
 });
 var insightsResponseSchema = external_exports.object({
   days: external_exports.array(dayInsightSchema),
@@ -119871,6 +120021,12 @@ var FEATURE_SWITCHES = {
     maintainer: "ethan@vm0.ai",
     description: "Enable the Gumroad creator commerce connector (api-token + OAuth).",
     enabled: true
+  },
+  ["codexBeta" /* CodexBeta */]: {
+    maintainer: "lancy@vm0.ai",
+    description: "Gate the codex framework via BYOK OpenAI provider in zero web. When off, the openai-api-key tile is hidden in the add-provider dialog and POST /api/zero/model-providers with type=openai-api-key returns 404. Staff-only during rollout; per-user toggle via Lab.",
+    enabled: false,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   }
 };
 function isFeatureEnabled(key, ctx) {
@@ -121247,4 +121403,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-WL4PGRGW.js.map
+//# sourceMappingURL=chunk-6LA4WVWX.js.map