@vm0/cli 9.144.0 → 9.145.0

package/{chunk-75VR4R5J.js → chunk-4YMN74AI.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.144.0",
+    release: "9.145.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.144.0",
+    version: "9.145.0",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -99146,6 +99146,34 @@ var lark = {
 init_esm_shims();
 var luma = {
   luma: {
+    label: "Luma",
+    category: "meetings-scheduling",
+    helpText: "Connect your Luma account to manage events, guests, tickets, and calendar data via the Luma API",
+    tags: ["events", "calendar", "tickets", "guests", "rsvp"],
+    authMethods: {
+      "api-token": {
+        label: "API Key",
+        helpText: "1. Log in at [lu.ma](https://lu.ma)\n2. Go to Calendars Home \u2192 select your calendar \u2192 Settings \u2192 Developer\n3. Generate or copy your API key\n4. Paste the key here",
+        secrets: {
+          LUMA_API_KEY: {
+            label: "API Key",
+            required: true,
+            placeholder: "your-luma-api-key"
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-token",
+    environmentMapping: {
+      LUMA_API_KEY: "$secrets.LUMA_API_KEY"
+    }
+  }
+};
+
+// ../../packages/connectors/src/connectors/luma-ai.ts
+init_esm_shims();
+var lumaAi = {
+  "luma-ai": {
     label: "Luma AI",
     category: "ai-image-video",
     generation: ["image", "video"],
@@ -99599,27 +99627,6 @@ var msg9 = {
   }
 };
 
-// ../../packages/connectors/src/connectors/nano-banana.ts
-init_esm_shims();
-var nanoBanana = {
-  "nano-banana": {
-    label: "Nano Banana",
-    category: "ai-image-video",
-    generation: ["image"],
-    environmentMapping: {},
-    helpText: "Google Gemini image generation, billed to your org credits",
-    featureFlag: "platformConnectors" /* PlatformConnectors */,
-    authMethods: {
-      platform: {
-        label: "Enable",
-        helpText: "Image generations are billed to your organization's credits. By enabling, you agree that prompts and reference images are sent to the Google Gemini API.",
-        secrets: {}
-      }
-    },
-    defaultAuthMethod: "platform"
-  }
-};
-
 // ../../packages/connectors/src/connectors/amplitude.ts
 init_esm_shims();
 var amplitude = {
@@ -100330,6 +100337,7 @@ var CONNECTOR_TYPES_DEF = {
   ...discord,
   ...lark,
   ...luma,
+  ...lumaAi,
   ...langsmith,
   ...mailsac,
   ...manus,
@@ -100344,7 +100352,6 @@ var CONNECTOR_TYPES_DEF = {
   ...db9,
   ...drive9,
   ...msg9,
-  ...nanoBanana,
   ...amplitude,
   ...attio,
   ...buffer,
@@ -102559,23 +102566,31 @@ var MODEL_PROVIDER_TYPES = {
           // layer at egress) — keeping them non-serverOnly preserves the
           // placeholder injection path. CHATGPT_REFRESH_TOKEN and
           // CHATGPT_ID_TOKEN stay serverOnly per the #7365 invariant.
+          //
+          // All four are `derived: true` — the server-side parser populates
+          // them from the user-pasted CODEX_AUTH_JSON. The UI MUST NOT render
+          // them as input fields (per #12024).
           CHATGPT_ACCESS_TOKEN: {
             label: "CHATGPT_ACCESS_TOKEN",
-            required: true
+            required: true,
+            derived: true
           },
           CHATGPT_REFRESH_TOKEN: {
             label: "CHATGPT_REFRESH_TOKEN",
             required: true,
-            serverOnly: true
+            serverOnly: true,
+            derived: true
           },
           CHATGPT_ACCOUNT_ID: {
             label: "CHATGPT_ACCOUNT_ID",
-            required: true
+            required: true,
+            derived: true
           },
           CHATGPT_ID_TOKEN: {
             label: "CHATGPT_ID_TOKEN",
             required: true,
-            serverOnly: true
+            serverOnly: true,
+            derived: true
           }
         }
       }
@@ -102849,7 +102864,13 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
     },
     placeholders: {
       CHATGPT_ACCESS_TOKEN: "chatgpt-token-CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocal",
-      CHATGPT_ACCOUNT_ID: "ws_VM0_PLACEHOLDER_DO_NOT_TRUST"
+      CHATGPT_ACCOUNT_ID: "ws_VM0_PLACEHOLDER_DO_NOT_TRUST",
+      // refresh_token written by guest-agent into ~/.codex/auth.json (#12077).
+      // Kept in this map so the firewall can substitute it on egress if codex
+      // ever tries to use it directly — defense-in-depth alongside
+      // CODEX_REFRESH_TOKEN_URL_OVERRIDE which redirects refresh attempts to
+      // localhost. The sandbox never gets the real refresh_token (#7365).
+      CHATGPT_REFRESH_TOKEN: "rt_VM0_PLACEHOLDER_DO_NOT_TRUST"
     }
   }
 };
@@ -103010,11 +103031,24 @@ var pendingMessageSchema = external_exports.object({
   content: external_exports.string().nullable(),
   attachments: external_exports.array(persistedAttachmentSchema).nullable(),
   createdAt: external_exports.string(),
-  updatedAt: external_exports.string()
+  updatedAt: external_exports.string(),
+  /**
+   * Client-generated UUID. The auto-send path uses this as the new
+   * `chat_messages.id` so the optimistic queued bubble reconciles with the
+   * real row by matching id once the server dispatches the queued message.
+   * Nullable for back-compat with rows queued before this field landed.
+   */
+  clientMessageId: external_exports.string().uuid().nullable()
 });
 var appendPendingMessageBodySchema = external_exports.object({
   content: external_exports.string().min(1).optional(),
-  attachments: external_exports.array(persistedAttachmentSchema).min(1).optional()
+  attachments: external_exports.array(persistedAttachmentSchema).min(1).optional(),
+  /**
+   * Pre-generated UUID the client uses for its optimistic queued-message
+   * bubble. Persisted on the thread and reused as `chat_messages.id`
+   * when the auto-send path dispatches the queued message.
+   */
+  clientMessageId: external_exports.string().uuid().optional()
 }).refine(
   (body) => {
     return body.content !== void 0 || body.attachments !== void 0;
@@ -113177,6 +113211,27 @@ var loopsFirewall = {
 init_esm_shims();
 var lumaFirewall = {
   name: "luma",
+  description: "Luma event management platform",
+  placeholders: {
+    LUMA_API_KEY: "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalC"
+  },
+  apis: [
+    {
+      base: "https://public-api.luma.com",
+      auth: {
+        headers: {
+          "x-luma-api-key": "${{ secrets.LUMA_API_KEY }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
+// ../../packages/connectors/src/firewalls/luma-ai.generated.ts
+init_esm_shims();
+var lumaAiFirewall = {
+  name: "luma-ai",
   description: "Luma AI Dream Machine",
   placeholders: {
     LUMA_TOKEN: "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalC"
@@ -113561,45 +113616,6 @@ var n8nFirewall = {
   ]
 };
 
-// ../../packages/connectors/src/firewalls/nano-banana.generated.ts
-init_esm_shims();
-var nanoBananaFirewall = {
-  name: "nano-banana",
-  description: "Google Gemini image generation (Nano Banana)",
-  placeholders: {
-    NANO_BANANA_TOKEN: "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSaf"
-  },
-  apis: [
-    {
-      base: "https://generativelanguage.googleapis.com/v1beta/models/gemini-3-pro-image-preview:generateContent",
-      auth: {
-        headers: {
-          "x-goog-api-key": "${{ secrets.NANO_BANANA_TOKEN }}"
-        }
-      },
-      permissions: []
-    },
-    {
-      base: "https://generativelanguage.googleapis.com/v1beta/models/gemini-3.1-flash-image-preview:generateContent",
-      auth: {
-        headers: {
-          "x-goog-api-key": "${{ secrets.NANO_BANANA_TOKEN }}"
-        }
-      },
-      permissions: []
-    },
-    {
-      base: "https://generativelanguage.googleapis.com/v1beta/models/gemini-2.5-flash-image:generateContent",
-      auth: {
-        headers: {
-          "x-goog-api-key": "${{ secrets.NANO_BANANA_TOKEN }}"
-        }
-      },
-      permissions: []
-    }
-  ]
-};
-
 // ../../packages/connectors/src/firewalls/neon.generated.ts
 init_esm_shims();
 var neonFirewall = {
@@ -117543,6 +117559,7 @@ var CONNECTOR_FIREWALLS = {
   linear: linearFirewall,
   loops: loopsFirewall,
   luma: lumaFirewall,
+  "luma-ai": lumaAiFirewall,
   mailchimp: mailchimpFirewall,
   make: makeFirewall,
   mailsac: mailsacFirewall,
@@ -117557,7 +117574,6 @@ var CONNECTOR_FIREWALLS = {
   monday: mondayFirewall,
   msg9: msg9Firewall,
   n8n: n8nFirewall,
-  "nano-banana": nanoBananaFirewall,
   neon: neonFirewall,
   notion: notionFirewall,
   onyx: onyxFirewall,
@@ -120467,7 +120483,8 @@ var FEATURE_SWITCHES = {
   ["apiBackend" /* ApiBackend */]: {
     maintainer: "ethan@vm0.ai",
     description: "Route platform API traffic to the api backend host instead of the www backend host. Unported endpoints continue through the api backend's web fallback proxy.",
-    enabled: false
+    enabled: false,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["connectorCategories" /* ConnectorCategories */]: {
     maintainer: "ethan@vm0.ai",
@@ -121888,4 +121905,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-75VR4R5J.js.map
+//# sourceMappingURL=chunk-4YMN74AI.js.map