@vm0/cli 9.145.11 → 9.145.13

package/{chunk-DLWFP5WP.js → chunk-FQ7FOJMC.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.145.11",
+    release: "9.145.13",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.145.11",
+    version: "9.145.13",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -102628,6 +102628,34 @@ var MODEL_PROVIDER_TYPES = {
     label: "ChatGPT (Codex)",
     helpText: "Run `codex login` on your machine, then paste the resulting ~/.codex/auth.json contents to authorize ChatGPT (Plus / Pro / Business / Edu / Enterprise) for Codex.",
     authMethods: {
+      oauth: {
+        label: "OpenAI OAuth",
+        helpText: "Sign in with OpenAI to authorize ChatGPT (Plus / Pro / Business / Edu / Enterprise) for Codex.",
+        secrets: {
+          CHATGPT_ACCESS_TOKEN: {
+            label: "CHATGPT_ACCESS_TOKEN",
+            required: true,
+            derived: true
+          },
+          CHATGPT_REFRESH_TOKEN: {
+            label: "CHATGPT_REFRESH_TOKEN",
+            required: true,
+            serverOnly: true,
+            derived: true
+          },
+          CHATGPT_ACCOUNT_ID: {
+            label: "CHATGPT_ACCOUNT_ID",
+            required: true,
+            derived: true
+          },
+          CHATGPT_ID_TOKEN: {
+            label: "CHATGPT_ID_TOKEN",
+            required: true,
+            serverOnly: true,
+            derived: true
+          }
+        }
+      },
       // Paste-based auth: client posts CODEX_AUTH_JSON, server parses it via
       // codex-auth-json-parser.ts and persists the four derived CHATGPT_*
       // fields. The raw blob is NEVER stored. The wire-shape secret
@@ -119240,6 +119268,7 @@ var zeroBillingInvoicesContract = c41.router({
     responses: {
       200: billingInvoicesResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       500: apiErrorSchema
     },
     summary: "Get invoices for current org"
@@ -120736,8 +120765,9 @@ var FEATURE_SWITCHES = {
   },
   ["modelFirstModelProvider" /* ModelFirstModelProvider */]: {
     maintainer: "lancy@vm0.ai",
-    description: "Gate the model-first model provider selection foundation. When off, all provider-first resolver, UI, CLI, and legacy model provider defaults remain unchanged. When on, follow-up work can use org model policies, canonical models, and member-scoped OAuth credentials. Default-off for every org, including staff; per-user toggle via Lab.",
-    enabled: false
+    description: "Gate the model-first model provider selection foundation. When off, all provider-first resolver, UI, CLI, and legacy model provider defaults remain unchanged. When on, follow-up work can use org model policies, canonical models, and member-scoped OAuth credentials. Staff-only during rollout; per-user toggle via Lab.",
+    enabled: false,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["voiceChatRealtimeBilling" /* VoiceChatRealtimeBilling */]: {
     maintainer: "lancy@vm0.ai",
@@ -122216,4 +122246,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-DLWFP5WP.js.map
+//# sourceMappingURL=chunk-FQ7FOJMC.js.map