@vm0/cli 9.151.0 → 9.153.0

package/{chunk-VUZYX6DE.js → chunk-7B5CZ4YO.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.151.0",
+    release: "9.153.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.151.0",
+    version: "9.153.0",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -107049,7 +107049,21 @@ var localBrowserReadCommandKindSchema = external_exports.enum([
   "page.selection",
   "page.metadata"
 ]);
+var localBrowserWriteCommandKindSchema = external_exports.enum([
+  "page.click",
+  "page.type",
+  "page.scroll",
+  "page.navigate",
+  "tabs.activate",
+  "tabs.open",
+  "tabs.close"
+]);
+var localBrowserCommandKindSchema = external_exports.enum([
+  ...localBrowserReadCommandKindSchema.options,
+  ...localBrowserWriteCommandKindSchema.options
+]);
 var localBrowserCommandStatusSchema = external_exports.enum([
+  "pending_approval",
   "queued",
   "running",
   "succeeded",
@@ -107066,6 +107080,11 @@ var hostNameSchema2 = external_exports.string().trim().min(1).max(128);
 var browserSchema = external_exports.string().trim().min(1).max(64);
 var extensionVersionSchema = external_exports.string().trim().min(1).max(64);
 var tabIdSchema = external_exports.string().trim().min(1).max(128);
+var targetUrlSchema = external_exports.string().trim().url().max(2048).refine((value) => {
+  const protocol = new URL(value).protocol;
+  return protocol === "http:" || protocol === "https:";
+}, "URL must use http or https");
+var cssSelectorSchema = external_exports.string().trim().min(1).max(1024);
 var supportedCapabilitiesSchema = external_exports.array(external_exports.string().trim().min(1).max(128)).max(50);
 var localBrowserRuntimeBodySchema = external_exports.object({
   hostName: hostNameSchema2,
@@ -107119,6 +107138,23 @@ var localBrowserHostSchema = external_exports.object({
 var localBrowserHostListResponseSchema = external_exports.object({
   hosts: external_exports.array(localBrowserHostSchema)
 });
+var localBrowserAuditEventSchema = external_exports.object({
+  id: external_exports.string(),
+  commandId: external_exports.string(),
+  runId: external_exports.string().nullable(),
+  hostId: external_exports.string().nullable(),
+  tabId: external_exports.string().nullable(),
+  kind: localBrowserWriteCommandKindSchema,
+  targetUrl: external_exports.string().nullable(),
+  event: external_exports.enum(["created", "approved", "denied", "completed"]),
+  approvalOutcome: external_exports.enum(["approved", "denied"]).nullable(),
+  redactedResult: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
+  error: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
+  createdAt: external_exports.string()
+});
+var localBrowserAuditEventListResponseSchema = external_exports.object({
+  auditEvents: external_exports.array(localBrowserAuditEventSchema)
+});
 var localBrowserHostStartResponseSchema = external_exports.object({
   hostId: external_exports.string(),
   hostToken: external_exports.string()
@@ -107126,15 +107162,81 @@ var localBrowserHostStartResponseSchema = external_exports.object({
 var localBrowserHostDeleteResponseSchema = external_exports.object({
   ok: external_exports.literal(true)
 });
-var localBrowserCommandCreateBodySchema = external_exports.object({
-  kind: localBrowserReadCommandKindSchema,
+var localBrowserCommandTargetShape = {
   tabId: tabIdSchema.optional(),
   hostId: external_exports.string().min(1).optional(),
   hostName: hostNameSchema2.optional(),
   timeoutMs: external_exports.number().int().min(1e3).max(6e4).default(15e3)
+};
+var localBrowserCommandCreateBodySchema = external_exports.object({
+  kind: localBrowserReadCommandKindSchema,
+  ...localBrowserCommandTargetShape
+});
+var localBrowserWriteCommandCreateBodySchema = external_exports.object({
+  kind: localBrowserWriteCommandKindSchema,
+  ...localBrowserCommandTargetShape,
+  selector: cssSelectorSchema.optional(),
+  x: external_exports.number().int().min(0).optional(),
+  y: external_exports.number().int().min(0).optional(),
+  text: external_exports.string().min(1).max(64e3).optional(),
+  direction: external_exports.enum(["up", "down"]).optional(),
+  amount: external_exports.number().int().positive().max(1e4).optional(),
+  url: targetUrlSchema.optional()
+}).superRefine((body, ctx) => {
+  const requireField = (field, message) => {
+    ctx.addIssue({
+      code: "custom",
+      path: [field],
+      message
+    });
+  };
+  if (body.kind === "page.click") {
+    const hasPoint = body.x !== void 0 && body.y !== void 0;
+    if (!body.selector && !hasPoint) {
+      requireField("selector", "page.click requires selector or x/y");
+    }
+    if (body.x === void 0 !== (body.y === void 0)) {
+      requireField("x", "page.click coordinates require both x and y");
+    }
+    return;
+  }
+  if (body.kind === "page.type") {
+    if (!body.selector) {
+      requireField("selector", "page.type requires selector");
+    }
+    if (!body.text) {
+      requireField("text", "page.type requires text");
+    }
+    return;
+  }
+  if (body.kind === "page.scroll") {
+    if (!body.direction) {
+      requireField("direction", "page.scroll requires direction");
+    }
+    if (!body.amount) {
+      requireField("amount", "page.scroll requires amount");
+    }
+    return;
+  }
+  if (body.kind === "page.navigate" || body.kind === "tabs.open") {
+    if (!body.url) {
+      requireField("url", `${body.kind} requires url`);
+    }
+    return;
+  }
+  if ((body.kind === "tabs.activate" || body.kind === "tabs.close") && !body.tabId) {
+    requireField("tabId", `${body.kind} requires tabId`);
+  }
 });
 var localBrowserCommandPayloadSchema = external_exports.object({
-  tabId: tabIdSchema.optional()
+  tabId: tabIdSchema.optional(),
+  selector: cssSelectorSchema.optional(),
+  x: external_exports.number().int().min(0).optional(),
+  y: external_exports.number().int().min(0).optional(),
+  text: external_exports.string().max(64e3).optional(),
+  direction: external_exports.enum(["up", "down"]).optional(),
+  amount: external_exports.number().int().positive().max(1e4).optional(),
+  url: targetUrlSchema.optional()
 });
 var localBrowserTabSchema = external_exports.object({
   id: external_exports.string(),
@@ -107171,7 +107273,11 @@ var localBrowserCommandResultSchema = external_exports.union([
     faviconUrl: external_exports.string().max(2048).optional()
   }).refine((value) => {
     return Object.keys(value).length > 0;
-  }, "Metadata result must include at least one field")
+  }, "Metadata result must include at least one field"),
+  external_exports.object({
+    ok: external_exports.literal(true),
+    details: external_exports.string().max(1024).optional()
+  })
 ]);
 var localBrowserCommandErrorSchema = external_exports.object({
   code: localBrowserCommandErrorCodeSchema,
@@ -107179,11 +107285,11 @@ var localBrowserCommandErrorSchema = external_exports.object({
 });
 var localBrowserCommandCreateResponseSchema = external_exports.object({
   commandId: external_exports.string(),
-  status: external_exports.literal("queued")
+  status: external_exports.enum(["queued", "pending_approval"])
 });
 var localBrowserCommandResponseSchema = external_exports.object({
   id: external_exports.string(),
-  kind: localBrowserReadCommandKindSchema,
+  kind: localBrowserCommandKindSchema,
   status: localBrowserCommandStatusSchema,
   hostId: external_exports.string().nullable(),
   hostName: external_exports.string().nullable(),
@@ -107203,7 +107309,7 @@ var localBrowserHostCommandNextResponseSchema = external_exports.discriminatedUn
       status: external_exports.literal("command"),
       command: external_exports.object({
         id: external_exports.string(),
-        kind: localBrowserReadCommandKindSchema,
+        kind: localBrowserCommandKindSchema,
         payload: localBrowserCommandPayloadSchema,
         timeoutMs: external_exports.number().int().positive().nullable()
       })
@@ -107226,6 +107332,10 @@ var localBrowserHostCommandCompleteBodySchema = external_exports.discriminatedUn
 var localBrowserHostCommandCompleteResponseSchema = external_exports.object({
   ok: external_exports.literal(true)
 });
+var localBrowserCommandApprovalResponseSchema = external_exports.object({
+  commandId: external_exports.string(),
+  status: external_exports.enum(["queued", "failed"])
+});
 var zeroLocalBrowserDeviceStartContract = c27.router({
   start: {
     method: "POST",
@@ -107344,6 +107454,25 @@ var zeroLocalBrowserHostsContract = c27.router({
     summary: "Delete a local-browser host"
   }
 });
+var zeroLocalBrowserAuditEventsContract = c27.router({
+  list: {
+    method: "GET",
+    path: "/api/zero/local-browser/audit-events",
+    headers: authHeadersSchema,
+    query: external_exports.object({
+      limit: external_exports.coerce.number().int().min(1).max(200).default(50),
+      commandId: external_exports.string().min(1).optional(),
+      hostId: external_exports.string().min(1).optional(),
+      runId: external_exports.string().min(1).optional()
+    }),
+    responses: {
+      200: localBrowserAuditEventListResponseSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema
+    },
+    summary: "List local-browser write command audit events"
+  }
+});
 var zeroLocalBrowserHostSelfContract = c27.router({
   delete: {
     method: "DELETE",
@@ -107389,6 +107518,46 @@ var zeroLocalBrowserCommandContract = c27.router({
     summary: "Get a local-browser command result"
   }
 });
+var zeroLocalBrowserWriteCommandContract = c27.router({
+  create: {
+    method: "POST",
+    path: "/api/zero/local-browser/write-commands",
+    headers: authHeadersSchema,
+    body: localBrowserWriteCommandCreateBodySchema,
+    responses: {
+      200: localBrowserCommandCreateResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Create an approved-write local-browser command"
+  }
+});
+var zeroLocalBrowserCommandApprovalContract = c27.router({
+  decide: {
+    method: "POST",
+    path: "/api/zero/local-browser/commands/:commandId/approval",
+    pathParams: external_exports.object({
+      commandId: external_exports.string().min(1)
+    }),
+    headers: authHeadersSchema,
+    body: external_exports.object({
+      decision: external_exports.enum(["approve", "deny"]),
+      message: external_exports.string().trim().min(1).max(1024).optional()
+    }),
+    responses: {
+      200: localBrowserCommandApprovalResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Approve or deny a pending local-browser write command"
+  }
+});
 var zeroLocalBrowserHostCommandsContract = c27.router({
   next: {
     method: "POST",
@@ -107402,7 +107571,7 @@ var zeroLocalBrowserHostCommandsContract = c27.router({
       400: apiErrorSchema,
       401: apiErrorSchema
     },
-    summary: "Claim the next local-browser read command"
+    summary: "Claim the next approved local-browser command"
   },
   complete: {
     method: "POST",
@@ -107419,7 +107588,7 @@ var zeroLocalBrowserHostCommandsContract = c27.router({
       404: apiErrorSchema,
       409: apiErrorSchema
     },
-    summary: "Complete a local-browser read command"
+    summary: "Complete a local-browser command"
   }
 });
 
@@ -107478,6 +107647,30 @@ async function createLocalBrowserReadCommand(params) {
   }
   handleError(result, "Failed to create local-browser command");
 }
+async function createLocalBrowserWriteCommand(params) {
+  const config4 = await getLocalBrowserClientConfig();
+  const client = initClient(zeroLocalBrowserWriteCommandContract, config4);
+  const result = await client.create({
+    body: {
+      kind: params.kind,
+      timeoutMs: params.timeoutMs ?? 15e3,
+      ...params.tabId ? { tabId: params.tabId } : {},
+      ...params.hostId ? { hostId: params.hostId } : {},
+      ...params.hostName ? { hostName: params.hostName } : {},
+      ...params.selector ? { selector: params.selector } : {},
+      ...params.x !== void 0 ? { x: params.x } : {},
+      ...params.y !== void 0 ? { y: params.y } : {},
+      ...params.text ? { text: params.text } : {},
+      ...params.direction ? { direction: params.direction } : {},
+      ...params.amount !== void 0 ? { amount: params.amount } : {},
+      ...params.url ? { url: params.url } : {}
+    }
+  });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to create local-browser write command");
+}
 async function getLocalBrowserReadCommand(commandId) {
   const config4 = await getLocalBrowserClientConfig();
   const client = initClient(zeroLocalBrowserCommandContract, config4);
@@ -107487,6 +107680,40 @@ async function getLocalBrowserReadCommand(commandId) {
   }
   handleError(result, "Failed to get local-browser command");
 }
+async function listLocalBrowserHosts() {
+  const config4 = await getLocalBrowserClientConfig();
+  const client = initClient(zeroLocalBrowserHostsContract, config4);
+  const result = await client.list({});
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to list local-browser hosts");
+}
+async function deleteLocalBrowserHost(hostId) {
+  const config4 = await getLocalBrowserClientConfig();
+  const client = initClient(zeroLocalBrowserHostsContract, config4);
+  const result = await client.delete({ params: { hostId } });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to revoke local-browser host");
+}
+async function listLocalBrowserAuditEvents(params) {
+  const config4 = await getLocalBrowserClientConfig();
+  const client = initClient(zeroLocalBrowserAuditEventsContract, config4);
+  const result = await client.list({
+    query: {
+      limit: params.limit ?? 50,
+      ...params.commandId ? { commandId: params.commandId } : {},
+      ...params.hostId ? { hostId: params.hostId } : {},
+      ...params.runId ? { runId: params.runId } : {}
+    }
+  });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to list local-browser audit events");
+}
 
 // src/lib/api/domains/web.ts
 init_esm_shims();
@@ -107759,12 +107986,16 @@ async function generateWebImage(options) {
       headers,
       body: JSON.stringify({
         prompt: options.prompt,
+        ...options.model ? { model: options.model } : {},
         ...options.size ? { size: options.size } : {},
         ...options.quality ? { quality: options.quality } : {},
         ...options.background ? { background: options.background } : {},
         ...options.outputFormat ? { outputFormat: options.outputFormat } : {},
         ...options.outputCompression !== void 0 ? { outputCompression: options.outputCompression } : {},
-        ...options.moderation ? { moderation: options.moderation } : {}
+        ...options.moderation ? { moderation: options.moderation } : {},
+        ...options.seed !== void 0 ? { seed: options.seed } : {},
+        ...options.safetyTolerance ? { safetyTolerance: options.safetyTolerance } : {},
+        ...options.enhancePrompt !== void 0 ? { enhancePrompt: options.enhancePrompt } : {}
       })
     }
   );
@@ -125004,12 +125235,16 @@ init_esm_shims();
 var c89 = initContract();
 var zeroImageIoGenerateRequestSchema = external_exports.object({
   prompt: external_exports.unknown().optional(),
+  model: external_exports.unknown().optional(),
   size: external_exports.unknown().optional(),
   quality: external_exports.unknown().optional(),
   background: external_exports.unknown().optional(),
   outputFormat: external_exports.unknown().optional(),
   outputCompression: external_exports.unknown().optional(),
-  moderation: external_exports.unknown().optional()
+  moderation: external_exports.unknown().optional(),
+  seed: external_exports.unknown().optional(),
+  safetyTolerance: external_exports.unknown().optional(),
+  enhancePrompt: external_exports.unknown().optional()
 }).passthrough();
 var zeroImageIoUsageSchema = external_exports.object({
   textInputTokens: external_exports.number(),
@@ -125025,14 +125260,20 @@ var zeroImageIoGenerateResponseSchema = external_exports.object({
   url: external_exports.string(),
   creditsCharged: external_exports.number(),
   model: external_exports.string(),
+  provider: external_exports.string(),
   imageSize: external_exports.string(),
   quality: external_exports.string(),
   background: external_exports.string(),
   outputFormat: external_exports.string(),
   outputCompression: external_exports.number().optional(),
   moderation: external_exports.string().optional(),
+  safetyTolerance: external_exports.string().optional(),
   revisedPrompt: external_exports.string().optional(),
-  usage: zeroImageIoUsageSchema
+  usage: zeroImageIoUsageSchema.optional(),
+  billingCategory: external_exports.string().optional(),
+  billingQuantity: external_exports.number().optional(),
+  sourceUrl: external_exports.string().optional(),
+  seed: external_exports.number().optional()
 });
 var zeroImageIoGenerateContract = c89.router({
   post: {
@@ -126442,8 +126683,7 @@ var FEATURE_SWITCHES = {
   ["remoteAgent" /* RemoteAgent */]: {
     maintainer: "lancy@vm0.ai",
     description: "Enable remote-agent device pairing and local Codex/Claude host heartbeat endpoints.",
-    enabled: false,
-    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
+    enabled: true
   },
   ["lab" /* Lab */]: {
     maintainer: "ethan@vm0.ai",
@@ -126557,8 +126797,7 @@ var FEATURE_SWITCHES = {
   ["privateAgents" /* PrivateAgents */]: {
     maintainer: "ethan@vm0.ai",
     description: "Enable private agents. Private agents are visible only to their owner, are excluded from the workspace public-agent limit, and can only be managed or run by their owner.",
-    enabled: false,
-    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
+    enabled: true
   },
   ["hostedSites" /* HostedSites */]: {
     maintainer: "lancy@vm0.ai",
@@ -128051,7 +128290,11 @@ export {
   unregisterComputerUseHost,
   getComputerUseHost,
   createLocalBrowserReadCommand,
+  createLocalBrowserWriteCommand,
   getLocalBrowserReadCommand,
+  listLocalBrowserHosts,
+  deleteLocalBrowserHost,
+  listLocalBrowserAuditEvents,
   downloadWebFile,
   uploadWebFile,
   generateWebVoice,
@@ -128108,4 +128351,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-VUZYX6DE.js.map
+//# sourceMappingURL=chunk-7B5CZ4YO.js.map