@vm0/cli 9.236.0 → 9.237.1

package/{agent-H37ZBBFD.js → agent-G5NJDTZD.js}

@@ -4,10 +4,10 @@ const require = __createRequire(import.meta.url);
 import {
   loadConnectorPermissionInfos,
   policyIcon
-} from "./chunk-W4AAAM2I.js";
+} from "./chunk-ZJOHVGBX.js";
 import {
   permissionGrantsToFirewallPolicies
-} from "./chunk-VM5QYVD6.js";
+} from "./chunk-AJUYZVZU.js";
 import {
   isInteractive,
   promptConfirm
@@ -24,10 +24,10 @@ import {
   listZeroUserPermissionGrants,
   updateZeroAgent,
   updateZeroAgentInstructions
-} from "./chunk-COXWIO7D.js";
+} from "./chunk-G55J25QR.js";
 import {
   withErrorHandler
-} from "./chunk-MGWKM7UC.js";
+} from "./chunk-DNWL4DAH.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -595,4 +595,4 @@ Notes:
 export {
   zeroAgentCommand
 };
-//# sourceMappingURL=agent-H37ZBBFD.js.map
+//# sourceMappingURL=agent-G5NJDTZD.js.map

package/{banking-IRMYJKNC.js → banking-RE4Y55OB.js}

@@ -4,10 +4,10 @@ const require = __createRequire(import.meta.url);
 import "./chunk-LTDQISD7.js";
 import {
   callZeroBanking
-} from "./chunk-COXWIO7D.js";
+} from "./chunk-G55J25QR.js";
 import {
   withErrorHandler
-} from "./chunk-MGWKM7UC.js";
+} from "./chunk-DNWL4DAH.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -115,4 +115,4 @@ Notes:
 export {
   zeroBankingCommand
 };
-//# sourceMappingURL=banking-IRMYJKNC.js.map
+//# sourceMappingURL=banking-RE4Y55OB.js.map

package/{chat-NZ6TRVR5.js → chat-TRC4V4LW.js}

@@ -3,17 +3,17 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   formatModelProviderRoute
-} from "./chunk-26HAGVMF.js";
+} from "./chunk-SSQSKO3U.js";
 import "./chunk-LTDQISD7.js";
 import {
   getZeroChatThread,
   listZeroModelPolicies,
   renameZeroChatThread,
   updateZeroChatThreadModelSelection
-} from "./chunk-COXWIO7D.js";
+} from "./chunk-G55J25QR.js";
 import {
   withErrorHandler
-} from "./chunk-MGWKM7UC.js";
+} from "./chunk-DNWL4DAH.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -244,4 +244,4 @@ Examples:
 export {
   zeroChatCommand
 };
-//# sourceMappingURL=chat-NZ6TRVR5.js.map
+//# sourceMappingURL=chat-TRC4V4LW.js.map

package/{chunk-73CTMK6P.js → chunk-4KHAQF4M.js}

@@ -5,7 +5,7 @@ import {
   CONNECTOR_TYPES,
   CONNECTOR_TYPE_KEYS,
   connectorAuthMethodIdSchema
-} from "./chunk-COXWIO7D.js";
+} from "./chunk-G55J25QR.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -121,4 +121,4 @@ export {
   getConnectorStoredSecretDisplayInfo,
   getDiagnosticConnectorTypeForRuntimeEnvName
 };
-//# sourceMappingURL=chunk-73CTMK6P.js.map
+//# sourceMappingURL=chunk-4KHAQF4M.js.map

package/{chunk-VM5QYVD6.js → chunk-AJUYZVZU.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   UNKNOWN_PERMISSION_GRANT
-} from "./chunk-COXWIO7D.js";
+} from "./chunk-G55J25QR.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -1251,4 +1251,4 @@ export {
   getFirewallPermissionSummary,
   loadFirewallPermissionMetadata
 };
-//# sourceMappingURL=chunk-VM5QYVD6.js.map
+//# sourceMappingURL=chunk-AJUYZVZU.js.map

package/{chunk-MGWKM7UC.js → chunk-DNWL4DAH.js}

@@ -14959,7 +14959,7 @@ function createCliClientHeaderInjector(options) {
   };
 }
 var addDefaultCliClientHeaders = createCliClientHeaderInjector({
-  clientVersion: "9.236.0"
+  clientVersion: "9.237.1"
 });
 function addCliClientHeaders(headers) {
   addDefaultCliClientHeaders(headers);
@@ -15833,4 +15833,4 @@ export {
   generateWebVideo,
   transcribeAudio
 };
-//# sourceMappingURL=chunk-MGWKM7UC.js.map
+//# sourceMappingURL=chunk-DNWL4DAH.js.map

package/{chunk-76G34YAK.js → chunk-FAIVSEFV.js}

@@ -10,7 +10,7 @@ import {
   splitPathSegments,
   validateAuthBaseUrl,
   validateBaseUrl
-} from "./chunk-COXWIO7D.js";
+} from "./chunk-G55J25QR.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -1175,4 +1175,4 @@ export {
   matchFirewallBaseUrl,
   matchFirewallRequestDecision
 };
-//# sourceMappingURL=chunk-76G34YAK.js.map
+//# sourceMappingURL=chunk-FAIVSEFV.js.map

package/{chunk-COXWIO7D.js → chunk-G55J25QR.js}

@@ -14,7 +14,7 @@ import {
   headersWithCliClientHeaders,
   initClient,
   initContract
-} from "./chunk-MGWKM7UC.js";
+} from "./chunk-DNWL4DAH.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -22381,6 +22381,11 @@ var secretConnectorMetadataMapSchema = external_exports.record(
 var storedExecutionContextSchema = external_exports.object({
   storageManifest: storageManifestSchema.nullable(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  // API-only references used to reconstruct runner masking values from the
+  // stored environment. Missing means legacy/stripped data, null means no
+  // persistent secret map, and array order/repetition follows secret-map values.
+  // This field must not be included in the runner-facing ExecutionContext.
+  secretValueEnvironmentKeys: external_exports.array(external_exports.string()).nullable().optional(),
   // Connector-owned runtime vars used by proxy/firewall template resolution.
   // User-provided run vars stay in agent_runs.vars and are merged at claim time.
   vars: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
@@ -26988,6 +26993,65 @@ var integrationsTelegramMessageContract = c34.router({
     summary: "Send a Telegram message via org bot token"
   }
 });
+var teamsAdaptiveCardSchema = external_exports.object({
+  type: external_exports.literal("AdaptiveCard"),
+  version: external_exports.string().min(1),
+  body: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional(),
+  actions: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown())).optional()
+}).passthrough();
+var sendTeamsMessageBodySchema = external_exports.object({
+  conversationId: external_exports.string().min(1, "Conversation ID is required").optional(),
+  user: external_exports.string().min(1, "Teams user ID is required").optional(),
+  text: external_exports.string().min(1, "Message text is required").optional(),
+  activityId: external_exports.string().min(1, "Activity ID is required").optional(),
+  card: teamsAdaptiveCardSchema.optional()
+}).refine(
+  (body) => {
+    return Boolean(body.conversationId) !== Boolean(body.user);
+  },
+  {
+    message: "Exactly one of conversationId or user is required",
+    path: ["conversationId"]
+  }
+).refine(
+  (body) => {
+    return Boolean(body.text) || Boolean(body.card);
+  },
+  {
+    message: "Message text or card is required",
+    path: ["text"]
+  }
+).refine(
+  (body) => {
+    return !(body.user && body.activityId);
+  },
+  {
+    message: "activityId can only be used with conversationId",
+    path: ["activityId"]
+  }
+);
+var sendTeamsMessageResponseSchema = external_exports.object({
+  ok: external_exports.literal(true),
+  activityId: external_exports.string().optional(),
+  conversationId: external_exports.string()
+});
+var integrationsTeamsMessageContract = c34.router({
+  sendMessage: {
+    method: "POST",
+    path: "/api/zero/integrations/teams/message",
+    headers: authHeadersSchema,
+    body: sendTeamsMessageBodySchema,
+    responses: {
+      200: sendTeamsMessageResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      502: apiErrorSchema
+    },
+    summary: "Send a Microsoft Teams message via org bot"
+  }
+});
 var sendPhoneMessageBodySchema = external_exports.object({
   agentphoneAgentId: external_exports.string().min(1, "AgentPhone agent ID is required").optional(),
   toNumber: external_exports.string().min(1, "Phone number is required"),
@@ -27126,6 +27190,34 @@ var integrationsTelegramUploadInitContract = c34.router({
     summary: "Get a pre-signed upload URL for Telegram file delivery"
   }
 });
+var teamsUploadInitBodySchema = external_exports.object({
+  filename: external_exports.string().min(1, "Filename is required").max(255),
+  contentType: external_exports.string().min(1, "Content type is required").max(200),
+  length: external_exports.number().int().positive("File length must be a positive integer")
+});
+var teamsUploadInitResponseSchema = external_exports.object({
+  uploadId: external_exports.string().uuid(),
+  uploadUrl: external_exports.string(),
+  fileUrl: external_exports.string(),
+  filename: external_exports.string(),
+  contentType: external_exports.string(),
+  size: external_exports.number().int().nonnegative()
+});
+var integrationsTeamsUploadInitContract = c34.router({
+  init: {
+    method: "POST",
+    path: "/api/zero/integrations/teams/upload-file/init",
+    headers: authHeadersSchema,
+    body: teamsUploadInitBodySchema,
+    responses: {
+      200: teamsUploadInitResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema
+    },
+    summary: "Get a pre-signed upload URL for Microsoft Teams file delivery"
+  }
+});
 var telegramUploadCompleteBodySchema = external_exports.object({
   uploadId: external_exports.string().uuid("Upload ID must be a UUID"),
   botId: external_exports.string().min(1, "Bot ID is required"),
@@ -27160,6 +27252,38 @@ var integrationsTelegramUploadCompleteContract = c34.router({
     summary: "Finalize Telegram file upload and send it to a chat"
   }
 });
+var teamsUploadCompleteBodySchema = external_exports.object({
+  uploadId: external_exports.string().uuid("Upload ID must be a UUID"),
+  conversationId: external_exports.string().min(1, "Conversation ID is required"),
+  activityId: external_exports.string().min(1, "Activity ID is required").optional(),
+  contentType: external_exports.string().min(1).max(200).optional(),
+  text: external_exports.string().max(4e3).optional()
+});
+var teamsUploadCompleteResponseSchema = external_exports.object({
+  activityId: external_exports.string().optional(),
+  conversationId: external_exports.string(),
+  filename: external_exports.string(),
+  mimetype: external_exports.string(),
+  size: external_exports.number().int().nonnegative(),
+  url: external_exports.string()
+});
+var integrationsTeamsUploadCompleteContract = c34.router({
+  complete: {
+    method: "POST",
+    path: "/api/zero/integrations/teams/upload-file/complete",
+    headers: authHeadersSchema,
+    body: teamsUploadCompleteBodySchema,
+    responses: {
+      200: teamsUploadCompleteResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      502: apiErrorSchema
+    },
+    summary: "Finalize Microsoft Teams file upload and send it to a conversation"
+  }
+});
 var githubUploadInitBodySchema = external_exports.object({
   filename: external_exports.string().min(1, "Filename is required").max(255),
   contentType: external_exports.string().min(1, "Content type is required").max(200),
@@ -27476,11 +27600,89 @@ async function downloadTelegramFile(fileId, botId, outPath) {
   return { path: outPath, mimetype, size };
 }
 
-// src/lib/api/domains/integrations-github.ts
+// src/lib/api/domains/integrations-teams.ts
 init_esm_shims();
 import { createWriteStream as createWriteStream3 } from "fs";
 import { Readable as Readable3 } from "stream";
 import { pipeline as pipeline3 } from "stream/promises";
+async function sendTeamsMessage(body) {
+  const config = await getClientConfig();
+  const client = initClient(integrationsTeamsMessageContract, config);
+  const result = await client.sendMessage({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to send Microsoft Teams message");
+}
+async function initTeamsFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient(integrationsTeamsUploadInitContract, config);
+  const result = await client.init({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to initialize Microsoft Teams file upload");
+}
+async function completeTeamsFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient(integrationsTeamsUploadCompleteContract, config);
+  const result = await client.complete({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to complete Microsoft Teams file upload");
+}
+async function downloadTeamsFile(fileId, outPath) {
+  const baseUrl = await getBaseUrl();
+  const token = await getActiveToken();
+  if (!token) {
+    throw new ApiRequestError("Not authenticated", "UNAUTHORIZED", 401);
+  }
+  const url = new URL("/api/zero/integrations/teams/download-file", baseUrl);
+  url.searchParams.set("file_id", fileId);
+  const headers = {
+    Authorization: `Bearer ${token}`
+  };
+  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+  if (bypassSecret) {
+    headers["x-vercel-protection-bypass"] = bypassSecret;
+  }
+  const response = await fetch(url, {
+    headers: headersWithCliClientHeaders(headers)
+  });
+  if (!response.ok) {
+    let message = `Failed to download Microsoft Teams file (HTTP ${response.status})`;
+    let code = "UNKNOWN";
+    try {
+      const body = await response.json();
+      if (body.error?.message) message = body.error.message;
+      if (body.error?.code) code = body.error.code;
+    } catch {
+    }
+    throw new ApiRequestError(message, code, response.status);
+  }
+  if (!response.body) {
+    throw new ApiRequestError(
+      "Microsoft Teams download response has no body",
+      "EMPTY_BODY",
+      502
+    );
+  }
+  const mimetype = response.headers.get("x-file-mimetype") ?? response.headers.get("content-type") ?? "application/octet-stream";
+  await pipeline3(
+    Readable3.fromWeb(response.body),
+    createWriteStream3(outPath)
+  );
+  const contentLengthHeader = response.headers.get("content-length");
+  const size = contentLengthHeader ? Number(contentLengthHeader) : 0;
+  return { path: outPath, mimetype, size };
+}
+
+// src/lib/api/domains/integrations-github.ts
+init_esm_shims();
+import { createWriteStream as createWriteStream4 } from "fs";
+import { Readable as Readable4 } from "stream";
+import { pipeline as pipeline4 } from "stream/promises";
 async function initGithubFileUpload(body) {
   const config = await getClientConfig();
   const client = initClient(integrationsGithubUploadInitContract, config);
@@ -27539,9 +27741,9 @@ async function downloadGithubFile(fileUrl, outPath, filename) {
     );
   }
   const mimetype = response.headers.get("x-file-mimetype") ?? response.headers.get("content-type") ?? "application/octet-stream";
-  await pipeline3(
-    Readable3.fromWeb(response.body),
-    createWriteStream3(outPath)
+  await pipeline4(
+    Readable4.fromWeb(response.body),
+    createWriteStream4(outPath)
   );
   const contentLengthHeader = response.headers.get("content-length");
   const size = contentLengthHeader ? Number(contentLengthHeader) : 0;
@@ -27550,9 +27752,9 @@ async function downloadGithubFile(fileUrl, outPath, filename) {
 
 // src/lib/api/domains/integrations-phone.ts
 init_esm_shims();
-import { createWriteStream as createWriteStream4 } from "fs";
-import { Readable as Readable4 } from "stream";
-import { pipeline as pipeline4 } from "stream/promises";
+import { createWriteStream as createWriteStream5 } from "fs";
+import { Readable as Readable5 } from "stream";
+import { pipeline as pipeline5 } from "stream/promises";
 async function sendPhoneMessage(body) {
   const config = await getClientConfig();
   const client = initClient(integrationsPhoneMessageContract, config);
@@ -27617,9 +27819,9 @@ async function downloadPhoneFile(fileId, outPath) {
     );
   }
   const mimetype = response.headers.get("x-file-mimetype") ?? response.headers.get("content-type") ?? "application/octet-stream";
-  await pipeline4(
-    Readable4.fromWeb(response.body),
-    createWriteStream4(outPath)
+  await pipeline5(
+    Readable5.fromWeb(response.body),
+    createWriteStream5(outPath)
   );
   const contentLengthHeader = response.headers.get("content-length");
   const size = contentLengthHeader ? Number(contentLengthHeader) : 0;
@@ -29376,6 +29578,10 @@ export {
   initTelegramFileUpload,
   completeTelegramFileUpload,
   downloadTelegramFile,
+  sendTeamsMessage,
+  initTeamsFileUpload,
+  completeTeamsFileUpload,
+  downloadTeamsFile,
   initGithubFileUpload,
   completeGithubFileUpload,
   downloadGithubFile,
@@ -29428,4 +29634,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-COXWIO7D.js.map
+//# sourceMappingURL=chunk-G55J25QR.js.map