@vm0/cli 9.216.0 → 9.217.0

package/{chunk-5EBRKXYZ.js → chunk-B5PHHGBT.js}

@@ -5,7 +5,7 @@ import {
   CONNECTOR_TYPES,
   CONNECTOR_TYPE_KEYS,
   connectorAuthMethodIdSchema
-} from "./chunk-BXXT44X3.js";
+} from "./chunk-TKAJDWGT.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -181,4 +181,4 @@ export {
   hasRequiredConnectorAuthMethodScopes,
   getConnectorAuthMethodScopeDiff
 };
-//# sourceMappingURL=chunk-5EBRKXYZ.js.map
+//# sourceMappingURL=chunk-B5PHHGBT.js.map

package/{chunk-4XK5RSTU.js → chunk-CGGDMYJR.js}

@@ -10,10 +10,10 @@ import {
   parseBoundedLogCount,
   parseSearchQuery,
   parseTime
-} from "./chunk-UGBUWMXB.js";
+} from "./chunk-B4YVYCNP.js";
 import {
   searchZeroLogs
-} from "./chunk-BXXT44X3.js";
+} from "./chunk-TKAJDWGT.js";
 import {
   withErrorHandler
 } from "./chunk-3F4RFLPX.js";
@@ -176,4 +176,4 @@ export {
   runLogsSearch,
   searchCommand
 };
-//# sourceMappingURL=chunk-4XK5RSTU.js.map
+//# sourceMappingURL=chunk-CGGDMYJR.js.map

package/{chunk-PK2FIZAP.js → chunk-G6N7QXRB.js}

@@ -50,7 +50,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.216.0",
+    release: "9.217.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -69,7 +69,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.216.0",
+    version: "9.217.0",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -146,4 +146,4 @@ async function configureGlobalProxyFromEnv() {
 export {
   configureGlobalProxyFromEnv
 };
-//# sourceMappingURL=chunk-PK2FIZAP.js.map
+//# sourceMappingURL=chunk-G6N7QXRB.js.map

package/{chunk-RDAZHUSS.js → chunk-HBSUM372.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   MODEL_PROVIDER_TYPES
-} from "./chunk-BXXT44X3.js";
+} from "./chunk-TKAJDWGT.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -40,4 +40,4 @@ export {
   formatModelProviderRoute,
   formatModelPolicyStatus
 };
-//# sourceMappingURL=chunk-RDAZHUSS.js.map
+//# sourceMappingURL=chunk-HBSUM372.js.map

package/{chunk-H6ZIZI7O.js → chunk-O76AI2N5.js}

@@ -8,7 +8,7 @@ import {
   parseSegment,
   splitPathSegments,
   validateBaseUrl
-} from "./chunk-BXXT44X3.js";
+} from "./chunk-TKAJDWGT.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -597,4 +597,4 @@ export {
   matchFirewallBaseUrl,
   findMatchingRoutingPermissions
 };
-//# sourceMappingURL=chunk-H6ZIZI7O.js.map
+//# sourceMappingURL=chunk-O76AI2N5.js.map

package/{chunk-GPPNNNQY.js → chunk-QUGHDCZQ.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   loadFirewallPermissionMetadata,
   resolveFirewallMetadataPolicies
-} from "./chunk-2K3VV6M7.js";
+} from "./chunk-66CRY7ZE.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -87,4 +87,4 @@ export {
   policyIcon,
   loadConnectorPermissionInfos
 };
-//# sourceMappingURL=chunk-GPPNNNQY.js.map
+//# sourceMappingURL=chunk-QUGHDCZQ.js.map

package/{chunk-BXXT44X3.js → chunk-TKAJDWGT.js}

@@ -253,7 +253,7 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
     { name: "Authorization", valuePrefix: "Bearer" },
     MODEL_PROVIDER_ENV_PLACEHOLDERS.OPENAI_API_KEY
   ),
-  // ChatGPT OAuth provider: multi-header injection plus auth.openai.com deny.
+  // ChatGPT OAuth provider: multi-header injection plus unknown-policy auth.openai.com deny.
   "codex-oauth-token": {
     name: "model-provider:codex-oauth-token",
     apis: [
@@ -268,6 +268,7 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
         permissions: [
           {
             name: "codex:api",
+            description: "Access the ChatGPT Codex backend with GET and POST requests.",
             rules: ["GET /{path*}", "POST /{path*}"]
           }
         ]
@@ -275,11 +276,10 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
       {
         base: "https://auth.openai.com",
         auth: { headers: {} },
-        permissions: [{ name: "denied", rules: ["ANY /*"] }]
+        permissions: []
       }
     ],
     defaultPolicies: {
-      deny: ["denied"],
       unknownPolicy: "deny"
     },
     placeholders: {
@@ -6280,6 +6280,12 @@ var chatThreadDetailSchema = external_exports.object({
   activeRunIds: external_exports.array(external_exports.string()),
   createdAt: external_exports.string(),
   updatedAt: external_exports.string(),
+  /**
+   * ISO timestamp at which the user pinned this thread. Exposed on detail so
+   * the current thread can be placed in the correct sidebar segment even when
+   * it is omitted from the paged list response.
+   */
+  pinnedAt: external_exports.string().nullable().optional(),
   draftContent: external_exports.string().nullable().optional(),
   draftAttachments: external_exports.array(persistedAttachmentSchema).nullable().optional(),
   computerUseHostId: external_exports.string().uuid().nullable().optional(),
@@ -6299,6 +6305,10 @@ var chatThreadDetailSchema = external_exports.object({
    */
   renamedAt: external_exports.string().nullable().optional()
 });
+var chatThreadMetadataSchema = external_exports.object({
+  id: external_exports.string(),
+  title: external_exports.string().nullable()
+});
 var modelSelectionRequestSchema = external_exports.object({
   modelProviderId: external_exports.string().uuid(),
   selectedModel: external_exports.string().min(1)
@@ -6343,7 +6353,12 @@ var chatThreadsContract = c15.router({
        * `pinned` is empty (pinned threads are only included on the first
        * page) and `threads` continues from the position after the cursor.
        */
-      cursor: external_exports.string().optional()
+      cursor: external_exports.string().optional(),
+      /**
+       * Optional server-side list filter. `unread` returns only threads whose
+       * latest visible message is newer than the caller's read cursor.
+       */
+      filter: external_exports.enum(["unread"]).optional()
     }),
     responses: {
       200: external_exports.object({
@@ -6546,6 +6561,22 @@ var chatThreadRenameContract = c15.router({
     summary: "Rename a chat thread (suppresses automated title generation)"
   }
 });
+var chatThreadMetadataContract = c15.router({
+  get: {
+    method: "GET",
+    path: "/api/zero/chat-threads/:id/metadata",
+    headers: authHeadersSchema,
+    pathParams: chatThreadIdPathParamsSchema,
+    responses: {
+      200: chatThreadMetadataSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Get chat thread metadata"
+  }
+});
 var chatThreadModelSelectionContract = c15.router({
   update: {
     method: "POST",
@@ -23228,6 +23259,17 @@ async function renameZeroChatThread(options) {
   }
   handleError(result, "Failed to rename chat thread");
 }
+async function getZeroChatThread(options) {
+  const config = await getClientConfig();
+  const client = initClient(chatThreadMetadataContract, config);
+  const result = await client.get({
+    params: { id: options.threadId }
+  });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to get chat thread");
+}
 
 // src/lib/api/domains/zero-developer-support.ts
 init_esm_shims();
@@ -27518,6 +27560,7 @@ export {
   searchZeroLogs,
   searchZeroChat,
   renameZeroChatThread,
+  getZeroChatThread,
   getSystemLog,
   getMetrics,
   getAgentEvents,
@@ -27536,4 +27579,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-BXXT44X3.js.map
+//# sourceMappingURL=chunk-TKAJDWGT.js.map