@vm0/cli 9.222.1 → 9.222.3

package/{agent-URKTRVVY.js → agent-LPPBYNS2.js}

@@ -4,10 +4,10 @@ const require = __createRequire(import.meta.url);
 import {
   loadConnectorPermissionInfos,
   policyIcon
-} from "./chunk-SYUXIMDL.js";
+} from "./chunk-V2NS7MND.js";
 import {
   permissionGrantsToFirewallPolicies
-} from "./chunk-L7YXAPYN.js";
+} from "./chunk-K7F6VF2Z.js";
 import {
   isInteractive,
   promptConfirm
@@ -24,7 +24,7 @@ import {
   listZeroUserPermissionGrants,
   updateZeroAgent,
   updateZeroAgentInstructions
-} from "./chunk-LR3SNXFF.js";
+} from "./chunk-3QZMZ46V.js";
 import {
   withErrorHandler
 } from "./chunk-3F4RFLPX.js";
@@ -595,4 +595,4 @@ Notes:
 export {
   zeroAgentCommand
 };
-//# sourceMappingURL=agent-URKTRVVY.js.map
+//# sourceMappingURL=agent-LPPBYNS2.js.map

package/{automation-7TUOVCC6.js → automation-BB4N3JL7.js}

@@ -8,10 +8,10 @@ import {
 } from "./chunk-HQFETCZ6.js";
 import {
   isUUID
-} from "./chunk-CS63UKLQ.js";
+} from "./chunk-OFENJD2Q.js";
 import "./chunk-YRZ6VZJR.js";
-import "./chunk-KJNJT27A.js";
-import "./chunk-P2NVIMW4.js";
+import "./chunk-72DXWQL4.js";
+import "./chunk-A5RF3VZM.js";
 import {
   isInteractive,
   promptConfirm
@@ -28,7 +28,7 @@ import {
   showAutomation,
   updateAutomation,
   updateAutomationTrigger
-} from "./chunk-LR3SNXFF.js";
+} from "./chunk-3QZMZ46V.js";
 import {
   withErrorHandler
 } from "./chunk-3F4RFLPX.js";
@@ -498,4 +498,4 @@ Examples:
 export {
   zeroAutomationCommand
 };
-//# sourceMappingURL=automation-7TUOVCC6.js.map
+//# sourceMappingURL=automation-BB4N3JL7.js.map

package/{banking-7XABHZ5S.js → banking-WAVEYEQR.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import "./chunk-LTDQISD7.js";
 import {
   callZeroBanking
-} from "./chunk-LR3SNXFF.js";
+} from "./chunk-3QZMZ46V.js";
 import {
   withErrorHandler
 } from "./chunk-3F4RFLPX.js";
@@ -115,4 +115,4 @@ Notes:
 export {
   zeroBankingCommand
 };
-//# sourceMappingURL=banking-7XABHZ5S.js.map
+//# sourceMappingURL=banking-WAVEYEQR.js.map

package/{chat-GZ4XQAP5.js → chat-WLUTTBQU.js}

@@ -5,7 +5,7 @@ import "./chunk-LTDQISD7.js";
 import {
   getZeroChatThread,
   renameZeroChatThread
-} from "./chunk-LR3SNXFF.js";
+} from "./chunk-3QZMZ46V.js";
 import {
   withErrorHandler
 } from "./chunk-3F4RFLPX.js";
@@ -120,4 +120,4 @@ Examples:
 export {
   zeroChatCommand
 };
-//# sourceMappingURL=chat-GZ4XQAP5.js.map
+//# sourceMappingURL=chat-WLUTTBQU.js.map

package/{chunk-LR3SNXFF.js → chunk-3QZMZ46V.js}

@@ -3712,6 +3712,7 @@ var AUTH_REFERENCE_PATTERN_G = new RegExp(AUTH_REFERENCE_PATTERN.source, "g");
 var AUTH_REFERENCE_PREFIX_PATTERN = new RegExp(
   `^${AUTH_REFERENCE_PATTERN.source}`
 );
+var AUTH_TEMPLATE_START = "${{";
 var AUTH_TEMPLATE_URL_PLACEHOLDER = "placeholder";
 var IPV4_MAX_OCTET = 255;
 var IPV4_OCTET_BASE = IPV4_MAX_OCTET + 1;
@@ -5174,6 +5175,129 @@ function validateBaseUrl(base, serviceName) {
     );
   }
 }
+function authBaseForStaticUrlValidation(authBase) {
+  if (!authBase.includes(AUTH_TEMPLATE_START)) {
+    return { url: authBase, dynamicPrefixSuffix: "" };
+  }
+  const replaced = authBase.replace(
+    AUTH_REFERENCE_PATTERN_G,
+    AUTH_TEMPLATE_URL_PLACEHOLDER
+  );
+  if (replaced.includes(AUTH_TEMPLATE_START)) {
+    return { url: authBase, dynamicPrefixSuffix: "" };
+  }
+  const prefixMatch = AUTH_REFERENCE_PREFIX_PATTERN.exec(authBase);
+  if (prefixMatch) {
+    return {
+      url: null,
+      dynamicPrefixSuffix: authBase.slice(prefixMatch[0].length).replace(AUTH_REFERENCE_PATTERN_G, AUTH_TEMPLATE_URL_PLACEHOLDER)
+    };
+  }
+  return { url: replaced, dynamicPrefixSuffix: "" };
+}
+function validateDynamicAuthBaseSuffix(authBase, suffix, serviceName) {
+  if (suffix.includes(AUTH_TEMPLATE_START)) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": contains unsupported template reference`
+    );
+  }
+  if (hasRawWhitespace(suffix)) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain whitespace`
+    );
+  }
+  if (hasUnsafeUrlCodepoint(suffix)) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain control characters or invalid Unicode`
+    );
+  }
+  if (suffix.includes("#")) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain fragment`
+    );
+  }
+  if (suffix !== "" && !suffix.startsWith("/") && !suffix.startsWith("?")) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": dynamic URL suffix must start with "/" or "?"`
+    );
+  }
+}
+function validateAuthBaseUrl(authBase, serviceName) {
+  if (authBase.includes("\\")) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain backslash`
+    );
+  }
+  const target = authBaseForStaticUrlValidation(authBase);
+  validateDynamicAuthBaseSuffix(
+    authBase,
+    target.dynamicPrefixSuffix,
+    serviceName
+  );
+  const validationUrl = target.url;
+  if (validationUrl === null) return;
+  if (validationUrl.includes(AUTH_TEMPLATE_START)) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": contains unsupported template reference`
+    );
+  }
+  if (hasRawWhitespace(validationUrl)) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain whitespace`
+    );
+  }
+  if (hasUnsafeUrlCodepoint(validationUrl)) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain control characters or invalid Unicode`
+    );
+  }
+  validateUrlSchemeDelimiter(
+    validationUrl,
+    serviceName,
+    "auth.base URL",
+    authBase
+  );
+  let url;
+  try {
+    url = new URL(validationUrl);
+  } catch {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": not a valid URL`
+    );
+  }
+  if (url.protocol.slice(0, -1).toLowerCase() !== REQUIRED_AUTH_BASE_URL_SCHEME) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": scheme must be https`
+    );
+  }
+  if (url.hash) {
+    throw new Error(
+      `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain fragment`
+    );
+  }
+  const authority = rawAuthorityFromBaseUrl(validationUrl);
+  if (authority !== null) {
+    if (authority === "") {
+      throw new Error(
+        `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": not a valid URL authority`
+      );
+    }
+    if (authorityHasEmptyPort(authority)) {
+      throw new Error(
+        `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": not a valid URL authority`
+      );
+    }
+    if (authority.includes("@")) {
+      throw new Error(
+        `Invalid auth.base URL "${authBase}" in firewall "${serviceName}": must not contain userinfo`
+      );
+    }
+    validateHostPercentEncoding(authority, validationUrl, serviceName);
+    validateHostHasCanonicalIpv4Syntax(authority, validationUrl, serviceName);
+    validateHostHasNoUnsafeIdnaMappings(authority, validationUrl, serviceName);
+  }
+  validateStaticHostLabels(url.hostname, validationUrl, serviceName);
+}
 
 // ../../packages/api-contracts/src/contracts/logs.ts
 init_esm_shims();
@@ -6293,6 +6417,7 @@ var chatThreadUnreadAgentsSchema = external_exports.object({
   agentIds: external_exports.array(external_exports.string())
 });
 var chatThreadEventIdSchema = external_exports.string().uuid();
+var codexServiceTierSchema = external_exports.enum(["fast"]);
 var chatThreadListItemSchema = external_exports.object({
   id: external_exports.string(),
   title: external_exports.string().nullable(),
@@ -6421,6 +6546,9 @@ var pagedChatMessageBaseSchema = external_exports.object({
   isGoalRun: external_exports.boolean().optional(),
   runEventId: external_exports.string().optional(),
   goalEvent: zeroGoalEventSchema.optional(),
+  goalSnapshot: external_exports.object({
+    objectiveBrief: external_exports.string().min(1)
+  }).optional(),
   usage: chatMessageUsagePayloadSchema.optional(),
   revokesMessageId: external_exports.string().optional(),
   interruptsRunId: external_exports.string().optional(),
@@ -6516,6 +6644,7 @@ var chatThreadDetailSchema = external_exports.object({
   modelProviderType: modelProviderTypeSchema.nullable().optional(),
   modelProviderCredentialScope: modelProviderCredentialScopeSchema.nullable().optional(),
   selectedModel: external_exports.string().nullable().optional(),
+  codexServiceTier: codexServiceTierSchema.nullable().optional(),
   /**
    * ISO timestamp at which the user manually renamed this thread. Null/undefined
    * means never renamed. When set, automated title generation is suppressed.
@@ -6539,7 +6668,6 @@ var modelSelectionRequestSchema = external_exports.object({
     });
   }
 });
-var codexServiceTierSchema = external_exports.enum(["fast"]);
 var chatRunOptionsRequestSchema = external_exports.object({
   codexServiceTier: codexServiceTierSchema.optional()
 });
@@ -6863,7 +6991,8 @@ var chatThreadModelSelectionContract = c15.router({
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
     body: external_exports.object({
-      modelSelection: modelSelectionRequestSchema.nullable()
+      modelSelection: modelSelectionRequestSchema.nullable(),
+      codexServiceTier: codexServiceTierSchema.nullable().optional()
     }),
     responses: {
       204: c15.noBody(),
@@ -22761,7 +22890,6 @@ var runnersPollContract = c23.router({
     body: external_exports.object({
       group: runnerGroupSchema,
       profiles: external_exports.array(external_exports.string()).optional(),
-      heldSessionStates: external_exports.array(heldSessionStateSchema).max(1024).optional(),
       telemetry: runnerPollTelemetrySchema.optional()
     }),
     responses: {
@@ -28366,6 +28494,7 @@ export {
   resolveFirewallBaseUrlTemplate,
   hasBaseUrlParams,
   validateBaseUrl,
+  validateAuthBaseUrl,
   runnerGroupSchema,
   volumeConfigSchema,
   agentDefinitionSchema,
@@ -28527,4 +28656,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-LR3SNXFF.js.map
+//# sourceMappingURL=chunk-3QZMZ46V.js.map