@vm0/cli 9.160.6 → 9.160.8

package/{chunk-ITWX7YWW.js → chunk-3P3WTJU2.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.160.6",
+    release: "9.160.8",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.160.6",
+    version: "9.160.8",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -74338,8 +74338,7 @@ var FEATURE_SWITCHES = {
   ["codexDeviceAuth" /* CodexDeviceAuth */]: {
     maintainer: "liangyou@vm0.ai",
     description: "Gate Codex device-auth UI and API surfaces.",
-    enabled: false,
-    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
+    enabled: true
   },
   ["posthogConnector" /* PosthogConnector */]: {
     maintainer: "ethan@vm0.ai",
@@ -74492,7 +74491,7 @@ var FEATURE_SWITCHES = {
   ["persistentSecretKmsRead" /* PersistentSecretKmsRead */]: {
     maintainer: "ethan@vm0.ai",
     description: "Prefer AWS KMS material when reading persistent secret envelopes such as bot tokens, callback secrets, OAuth tokens, and queued execution secrets. Legacy AES remains as a fallback while backfills complete.",
-    enabled: false
+    enabled: true
   },
   ["persistentSecretKmsWrite" /* PersistentSecretKmsWrite */]: {
     maintainer: "ethan@vm0.ai",
@@ -95374,6 +95373,32 @@ var cliAuthTokenContract = c9.router({
 var apiErrorResponseSchema = external_exports.object({
   error: external_exports.object({ message: external_exports.string(), code: external_exports.string() })
 });
+var cliAuthApproveErrorSchema = external_exports.object({
+  success: external_exports.literal(false),
+  error: external_exports.string()
+});
+var cliAuthApproveContract = c9.router({
+  /**
+   * POST /api/cli/auth/approve
+   * Approve a pending CLI device code from a browser session
+   */
+  approve: {
+    method: "POST",
+    path: "/api/cli/auth/approve",
+    headers: authHeadersSchema,
+    body: external_exports.object({
+      device_code: external_exports.string().min(1, "device_code is required"),
+      timezone: external_exports.string().min(1).optional()
+    }),
+    responses: {
+      200: external_exports.object({ success: external_exports.literal(true) }),
+      400: cliAuthApproveErrorSchema,
+      401: apiErrorResponseSchema,
+      403: apiErrorResponseSchema
+    },
+    summary: "Approve a CLI device authorization flow"
+  }
+});
 var cliAuthOrgContract = c9.router({
   /**
    * POST /api/cli/auth/org
@@ -97467,7 +97492,7 @@ var github = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://github.com/login/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://github.com/login/oauth/access_token",
       client: {
         clientRegistration: "static",
@@ -97510,7 +97535,7 @@ var gmail = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -97553,7 +97578,7 @@ var notion = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://api.notion.com/v1/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.notion.com/v1/oauth/token",
       client: {
         clientRegistration: "static",
@@ -97595,7 +97620,7 @@ var x = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://twitter.com/i/oauth2/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.twitter.com/2/oauth2/token",
       client: {
         clientRegistration: "static",
@@ -97683,7 +97708,7 @@ var googleDrive = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -97725,7 +97750,7 @@ var slack = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://slack.com/oauth/v2/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://slack.com/api/oauth.v2.access",
       client: {
         clientRegistration: "static",
@@ -97805,7 +97830,7 @@ var googleSheets = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -97851,7 +97876,7 @@ var googleCalendar = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -97896,7 +97921,7 @@ var googleDocs = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -97942,7 +97967,7 @@ var linear = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://linear.app/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.linear.app/oauth/token",
       client: {
         clientRegistration: "static",
@@ -97986,7 +98011,7 @@ var intervalsIcu = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://intervals.icu/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://intervals.icu/api/oauth/token",
       client: {
         clientRegistration: "static",
@@ -98024,6 +98049,7 @@ var vercel = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
+      flow: "authorization-code",
       tokenUrl: "https://api.vercel.com/v2/oauth/access_token",
       client: {
         clientRegistration: "static",
@@ -98065,7 +98091,7 @@ var strava = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://www.strava.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://www.strava.com/oauth/token",
       client: {
         clientRegistration: "static",
@@ -98112,7 +98138,7 @@ var googleMeet = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -98162,7 +98188,7 @@ var hubspot = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://app.hubspot.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.hubapi.com/oauth/v1/token",
       client: {
         clientRegistration: "static",
@@ -98237,7 +98263,7 @@ var sentry = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://sentry.io/oauth/authorize/",
+      flow: "authorization-code",
       tokenUrl: "https://sentry.io/oauth/token/",
       client: {
         clientRegistration: "static",
@@ -98282,7 +98308,7 @@ var todoist = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://todoist.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://todoist.com/oauth/access_token",
       client: {
         clientRegistration: "static",
@@ -98324,7 +98350,7 @@ var xero = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://login.xero.com/identity/connect/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://identity.xero.com/connect/token",
       client: {
         clientRegistration: "static",
@@ -98389,7 +98415,7 @@ var airtable = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://airtable.com/oauth2/v1/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://airtable.com/oauth2/v1/token",
       client: {
         clientRegistration: "static",
@@ -98440,7 +98466,7 @@ var docusign = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://account-d.docusign.com/oauth/auth",
+      flow: "authorization-code",
       tokenUrl: "https://account-d.docusign.com/oauth/token",
       client: {
         clientRegistration: "static",
@@ -98485,7 +98511,7 @@ var googleAds = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.google.com/o/oauth2/v2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.googleapis.com/token",
       client: {
         clientRegistration: "static",
@@ -98565,7 +98591,7 @@ var gumroad = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://gumroad.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://gumroad.com/oauth/token",
       client: {
         clientRegistration: "static",
@@ -98614,7 +98640,7 @@ var spotify = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://accounts.spotify.com/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://accounts.spotify.com/api/token",
       client: {
         clientRegistration: "static",
@@ -98762,7 +98788,7 @@ var ahrefs = {
     },
     defaultAuthMethod: "api-token",
     oauth: {
-      authorizationUrl: "https://app.ahrefs.com/api/auth",
+      flow: "authorization-code",
       tokenUrl: "https://app.ahrefs.com/api/token",
       client: {
         clientRegistration: "static",
@@ -98954,7 +98980,7 @@ var asana = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://app.asana.com/-/oauth_authorize",
+      flow: "authorization-code",
       tokenUrl: "https://app.asana.com/-/oauth_token",
       client: {
         clientRegistration: "static",
@@ -99546,7 +99572,7 @@ var canva = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://www.canva.com/api/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.canva.com/rest/v1/oauth/token",
       client: {
         clientRegistration: "static",
@@ -99741,7 +99767,7 @@ var close2 = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://app.close.com/oauth2/authorize/",
+      flow: "authorization-code",
       tokenUrl: "https://api.close.com/oauth2/token/",
       client: {
         clientRegistration: "static",
@@ -100006,7 +100032,7 @@ var deel = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://app.deel.com/oauth2/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://app.deel.com/oauth2/tokens",
       client: {
         clientRegistration: "static",
@@ -100315,7 +100341,7 @@ var dropbox = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://www.dropbox.com/oauth2/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.dropboxapi.com/oauth2/token",
       client: {
         clientRegistration: "static",
@@ -100627,7 +100653,7 @@ var figma = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://www.figma.com/oauth",
+      flow: "authorization-code",
       tokenUrl: "https://api.figma.com/v1/oauth/token",
       client: {
         clientRegistration: "static",
@@ -100795,7 +100821,7 @@ var garminConnect = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://connect.garmin.com/oauth2Confirm",
+      flow: "authorization-code",
       tokenUrl: "https://diauth.garmin.com/di-oauth2-service/oauth/token",
       client: {
         clientRegistration: "static",
@@ -101750,7 +101776,7 @@ var mailchimp = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://login.mailchimp.com/oauth2/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://login.mailchimp.com/oauth2/token",
       client: {
         clientRegistration: "static",
@@ -101968,7 +101994,7 @@ var mercury = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://oauth2.mercury.com/oauth2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.mercury.com/oauth2/token",
       client: {
         clientRegistration: "static",
@@ -102007,7 +102033,7 @@ var metaAds = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://www.facebook.com/v22.0/dialog/oauth",
+      flow: "authorization-code",
       tokenUrl: "https://graph.facebook.com/v22.0/oauth/access_token",
       client: {
         clientRegistration: "static",
@@ -102217,7 +102243,7 @@ var monday = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://auth.monday.com/oauth2/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://auth.monday.com/oauth2/token",
       client: {
         clientRegistration: "static",
@@ -102381,7 +102407,7 @@ var neon = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://oauth2.neon.tech/oauth2/auth",
+      flow: "authorization-code",
       tokenUrl: "https://oauth2.neon.tech/oauth2/token",
       client: {
         clientRegistration: "static",
@@ -102600,7 +102626,7 @@ var outlookCalendar = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
       client: {
         clientRegistration: "static",
@@ -102643,7 +102669,7 @@ var outlookMail = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://login.microsoftonline.com/common/oauth2/v2.0/token",
       client: {
         clientRegistration: "static",
@@ -102997,7 +103023,7 @@ var posthog = {
     },
     defaultAuthMethod: "api-token",
     oauth: {
-      authorizationUrl: "https://us.posthog.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://us.posthog.com/oauth/token",
       client: {
         clientRegistration: "static",
@@ -103301,7 +103327,7 @@ var reddit = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://www.reddit.com/api/v1/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://www.reddit.com/api/v1/access_token",
       client: {
         clientRegistration: "static",
@@ -104058,7 +104084,7 @@ var stripe = {
       ]
     },
     oauth: {
-      authorizationUrl: "https://connect.stripe.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://connect.stripe.com/oauth/token",
       client: {
         clientRegistration: "static",
@@ -104112,7 +104138,7 @@ var supabase = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://api.supabase.com/v1/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.supabase.com/v1/oauth/token",
       client: {
         clientRegistration: "static",
@@ -104247,10 +104273,10 @@ var testOauth = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      // Relative paths — the handler resolves them against NEXT_PUBLIC_APP_URL
-      // at call time because the fake provider lives inside this same app and
-      // the preview-URL host changes per deploy.
-      authorizationUrl: "/api/test/oauth-provider/authorize",
+      flow: "authorization-code",
+      // Relative path — the provider resolves it against the concrete app/API
+      // URL at call time because the fake provider lives inside this same app
+      // and the preview-URL host changes per deploy.
       tokenUrl: "/api/test/oauth-provider/token",
       client: {
         clientRegistration: "static",
@@ -104264,6 +104290,45 @@ var testOauth = {
   }
 };
 
+// ../../packages/connectors/src/connectors/test-oauth-device.ts
+init_esm_shims();
+var testOauthDevice = {
+  "test-oauth-device": {
+    label: "Test OAuth Device (internal)",
+    category: "data-automation-infrastructure",
+    environmentMapping: {
+      TEST_OAUTH_DEVICE_TOKEN: "$secrets.TEST_OAUTH_DEVICE_ACCESS_TOKEN"
+    },
+    helpText: "Synthetic OAuth 2.0 device authorization connector. For automated tests only.",
+    authMethods: {
+      oauth: {
+        featureFlag: "testOauthConnector" /* TestOauthConnector */,
+        label: "OAuth Device Authorization",
+        helpText: "Test-only OAuth device provider.",
+        secrets: {
+          TEST_OAUTH_DEVICE_ACCESS_TOKEN: {
+            label: "Access Token",
+            required: true
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "oauth",
+    oauth: {
+      flow: "device-authorization",
+      deviceAuthorizationUrl: "https://oauth-device.test/device/code",
+      tokenUrl: "https://oauth-device.test/token",
+      client: {
+        clientRegistration: "static",
+        clientType: "public",
+        tokenEndpointAuthMethod: "none",
+        clientId: "test-oauth-device-client"
+      },
+      scopes: ["read"]
+    }
+  }
+};
+
 // ../../packages/connectors/src/connectors/testrail.ts
 init_esm_shims();
 var testrail = {
@@ -104536,7 +104601,7 @@ var webflow = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://webflow.com/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://api.webflow.com/oauth/access_token",
       client: {
         clientRegistration: "static",
@@ -104885,7 +104950,7 @@ var zoom = {
     },
     defaultAuthMethod: "oauth",
     oauth: {
-      authorizationUrl: "https://zoom.us/oauth/authorize",
+      flow: "authorization-code",
       tokenUrl: "https://zoom.us/oauth/token",
       client: {
         clientRegistration: "static",
@@ -105120,6 +105185,7 @@ var CONNECTOR_TYPES_DEF = {
   ...supermemory,
   ...tavily,
   ...testOauth,
+  ...testOauthDevice,
   ...testrail,
   ...tldv,
   ...together,
@@ -114944,6 +115010,21 @@ var vercelFirewall = {
 
 // ../../packages/connectors/src/connector-utils.ts
 init_esm_shims();
+
+// ../../packages/connectors/src/oauth-providers/google-oauth-connectors.ts
+init_esm_shims();
+var GOOGLE_OAUTH_CONNECTOR_TYPES = [
+  "gmail",
+  "google-ads",
+  "google-calendar",
+  "google-docs",
+  "google-drive",
+  "google-meet",
+  "google-sheets"
+];
+var GOOGLE_OAUTH_CONNECTOR_TYPE_SET = new Set(GOOGLE_OAUTH_CONNECTOR_TYPES);
+
+// ../../packages/connectors/src/connector-utils.ts
 function getConnectorGenerationTypes(type) {
   const config4 = CONNECTOR_TYPES[type];
   return "generation" in config4 ? config4.generation ?? [] : [];
@@ -132489,4 +132570,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-ITWX7YWW.js.map
+//# sourceMappingURL=chunk-3P3WTJU2.js.map