@vm0/cli 9.251.0 → 9.252.0

package/{chunk-H46N52S6.js → chunk-IX2GN2TI.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   getZeroAgent,
   getZeroAgentUserConnectors
-} from "./chunk-ZSP7ISNV.js";
+} from "./chunk-QL2BWE6J.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -265,4 +265,4 @@ export {
   resolveManualGrantAuthMethod,
   resolveAgentContext
 };
-//# sourceMappingURL=chunk-H46N52S6.js.map
+//# sourceMappingURL=chunk-IX2GN2TI.js.map

package/{chunk-ZSP7ISNV.js → chunk-QL2BWE6J.js}

@@ -21,7 +21,7 @@ import {
   updateOrgModelPoliciesRequestSchema,
   upsertModelProviderRequestSchema,
   upsertModelProviderResponseSchema
-} from "./chunk-CGLTWZX7.js";
+} from "./chunk-E2DKMMGY.js";
 import {
   __commonJS,
   __esm,
@@ -3367,8 +3367,30 @@ var attachFileSchema = external_exports.object({
   contentType: external_exports.string(),
   size: external_exports.number()
 });
+var assetMaterializationSchema = external_exports.discriminatedUnion("status", [
+  external_exports.object({ status: external_exports.literal("ready") }),
+  external_exports.object({ status: external_exports.literal("pending") }),
+  external_exports.object({
+    status: external_exports.literal("failed"),
+    error: external_exports.object({
+      code: external_exports.string(),
+      message: external_exports.string(),
+      retryable: external_exports.boolean()
+    })
+  })
+]);
+var assetRefSchema = external_exports.object({
+  id: external_exports.string().uuid(),
+  classification: external_exports.enum(["input", "published-output"]),
+  access: external_exports.enum(["private", "published"]),
+  materialization: assetMaterializationSchema,
+  provenance: external_exports.object({
+    provider: external_exports.string()
+  }).optional()
+});
 var resolvedAttachFileSchema = attachFileSchema.extend({
-  url: external_exports.string()
+  url: external_exports.string(),
+  assetRef: assetRefSchema.optional()
 });
 var chatThreadArtifactGoogleDriveSyncSchema = external_exports.discriminatedUnion("status", [
   external_exports.object({
@@ -3403,6 +3425,7 @@ var artifactItemSchema = external_exports.object({
   contentType: external_exports.string(),
   size: external_exports.number().default(0),
   url: external_exports.string(),
+  assetRef: assetRefSchema.optional(),
   previewImageUrl: external_exports.string().optional(),
   createdAt: external_exports.string(),
   updatedAt: external_exports.string(),
@@ -4245,6 +4268,9 @@ var chatThreadMessagesContract = c14.router({
     },
     summary: "Get paginated chat messages for a thread"
   },
+  // Compatibility for already-open app-v0.627.3 browser clients. The next app
+  // no longer calls this route; remove it only after those clients can no
+  // longer reasonably remain active against the current backend.
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/messages/:messageId",
@@ -7588,6 +7614,53 @@ var webhookModelUsageObservationContract = c25.router({
     summary: "Receive model usage observation data from sandbox"
   }
 });
+var webhookModelUsageObservationV2ItemSchema = external_exports.object({
+  idempotencyKey: external_exports.uuid(),
+  model: external_exports.string().min(1).max(255),
+  inputTokens: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+  outputTokens: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+  cacheReadInputTokens: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER),
+  cacheCreationInputTokens: external_exports.number().int().min(0).max(Number.MAX_SAFE_INTEGER)
+}).strict().refine(
+  (event) => {
+    return event.inputTokens > 0 || event.outputTokens > 0 || event.cacheReadInputTokens > 0 || event.cacheCreationInputTokens > 0;
+  },
+  { message: "At least one token counter must be positive" }
+);
+var webhookModelUsageObservationV2BodySchema = external_exports.object({
+  runId: external_exports.string().min(1, "runId is required"),
+  events: external_exports.array(webhookModelUsageObservationV2ItemSchema).min(1).max(100)
+}).strict().superRefine((body, ctx) => {
+  const idempotencyKeys = /* @__PURE__ */ new Set();
+  body.events.forEach((event, index) => {
+    if (idempotencyKeys.has(event.idempotencyKey)) {
+      ctx.addIssue({
+        code: "custom",
+        path: ["events", index, "idempotencyKey"],
+        message: "Idempotency keys must be unique within a request"
+      });
+    }
+    idempotencyKeys.add(event.idempotencyKey);
+  });
+});
+var webhookModelUsageObservationV2Contract = c25.router({
+  send: {
+    method: "POST",
+    path: "/api/webhooks/agent/model-usage-observation-v2",
+    headers: authHeadersSchema,
+    body: webhookModelUsageObservationV2BodySchema,
+    responses: {
+      200: external_exports.object({
+        success: external_exports.boolean()
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Receive compact model usage observation data from sandbox"
+  }
+});
 
 // ../../packages/api-contracts/src/contracts/zero-runs.ts
 var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
@@ -10988,7 +11061,13 @@ var zeroMailDraftStatusSchema = external_exports.enum(["draft", "sent", "deleted
 var zeroMailAttachmentSchema = external_exports.object({
   filename: external_exports.string(),
   contentType: external_exports.string(),
-  size: external_exports.number().int().nonnegative()
+  size: external_exports.number().int().nonnegative(),
+  partId: external_exports.string().optional()
+});
+var zeroMailInlineImageSchema = external_exports.object({
+  contentId: external_exports.string().min(1),
+  partId: external_exports.string().min(1),
+  alt: external_exports.string()
 });
 var zeroMailDraftBaseSchema = external_exports.object({
   provider: external_exports.literal("gmail"),
@@ -10999,6 +11078,9 @@ var zeroMailDraftBaseSchema = external_exports.object({
   bcc: external_exports.array(external_exports.email()),
   subject: external_exports.string(),
   body: external_exports.string(),
+  bodyHtml: external_exports.string().optional(),
+  inlineImages: external_exports.array(zeroMailInlineImageSchema).optional(),
+  accessStatus: external_exports.enum(["ready", "reconnect"]).optional(),
   replyTo: external_exports.string().optional(),
   inReplyTo: external_exports.string().optional(),
   references: external_exports.array(external_exports.string()),
@@ -11028,6 +11110,9 @@ var zeroMailLinkResponseSchema = zeroMailDraftResponseSchema.pick({
 var zeroMailDraftPathParamsSchema = external_exports.object({
   mailDraftId: external_exports.string().uuid()
 });
+var zeroMailDraftAttachmentPathParamsSchema = zeroMailDraftPathParamsSchema.extend({
+  partId: external_exports.string().min(1)
+});
 var zeroMailContract = c36.router({
   linkDraft: {
     method: "POST",
@@ -11061,6 +11146,23 @@ var zeroMailContract = c36.router({
     },
     summary: "Get an email draft by ID"
   },
+  getAttachment: {
+    method: "GET",
+    path: "/api/zero/mail/drafts/:mailDraftId/attachments/:partId",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftAttachmentPathParamsSchema,
+    responses: {
+      200: c36.otherResponse({
+        contentType: "application/octet-stream",
+        body: c36.type()
+      }),
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Get a Gmail draft attachment"
+  },
   deleteDraft: {
     method: "DELETE",
     path: "/api/zero/mail/drafts/:mailDraftId",
@@ -11209,6 +11311,117 @@ var integrationsFeishuMessageContract = c37.router({
     summary: "Send a Feishu message via an organization custom app"
   }
 });
+var FEISHU_FILE_UPLOAD_MAX_BYTES = 30 * 1024 * 1024;
+var feishuResourceTypeSchema = external_exports.enum(["file", "image"]);
+var integrationsFeishuDownloadFileContract = c37.router({
+  download: {
+    method: "GET",
+    path: "/api/zero/integrations/feishu/download-file",
+    headers: authHeadersSchema,
+    query: external_exports.object({
+      installation_id: external_exports.string().uuid().optional(),
+      message_id: external_exports.string().min(1, "Message ID is required"),
+      file_key: external_exports.string().min(1, "File key is required"),
+      type: feishuResourceTypeSchema
+    }),
+    responses: {
+      200: c37.otherResponse({
+        contentType: "application/octet-stream",
+        body: external_exports.unknown()
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      413: apiErrorSchema,
+      502: apiErrorSchema
+    },
+    summary: "Download a file from a Feishu message"
+  }
+});
+var feishuUploadInitBodySchema = external_exports.object({
+  filename: external_exports.string().min(1, "Filename is required").max(255),
+  contentType: external_exports.string().min(1, "Content type is required").max(200),
+  length: external_exports.number().int().positive("File length must be a positive integer").max(
+    FEISHU_FILE_UPLOAD_MAX_BYTES,
+    `File must not exceed ${FEISHU_FILE_UPLOAD_MAX_BYTES} bytes`
+  )
+});
+var feishuUploadInitResponseSchema = external_exports.object({
+  uploadId: external_exports.string().uuid(),
+  uploadUrl: external_exports.string(),
+  fileUrl: external_exports.string(),
+  filename: external_exports.string(),
+  contentType: external_exports.string(),
+  size: external_exports.number().int().nonnegative()
+});
+var integrationsFeishuUploadInitContract = c37.router({
+  init: {
+    method: "POST",
+    path: "/api/zero/integrations/feishu/upload-file/init",
+    headers: authHeadersSchema,
+    body: feishuUploadInitBodySchema,
+    responses: {
+      200: feishuUploadInitResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema
+    },
+    summary: "Get a pre-signed upload URL for Feishu file delivery"
+  }
+});
+var feishuUploadCompleteBodySchema = external_exports.object({
+  uploadId: external_exports.string().uuid("Upload ID must be a UUID"),
+  installationId: external_exports.string().uuid().optional(),
+  chat: external_exports.string().min(1, "Chat ID is required").optional(),
+  user: external_exports.string().min(1, "Feishu open ID is required").optional(),
+  replyToMessageId: external_exports.string().min(1, "Message ID is required").optional(),
+  replyInThread: external_exports.boolean().optional(),
+  contentType: external_exports.string().min(1).max(200).optional()
+}).refine(
+  (body) => {
+    return [body.chat, body.user, body.replyToMessageId].filter(Boolean).length === 1;
+  },
+  {
+    message: "Exactly one of chat, user, or replyToMessageId is required",
+    path: ["chat"]
+  }
+).refine(
+  (body) => {
+    return !body.replyInThread || Boolean(body.replyToMessageId);
+  },
+  {
+    message: "replyInThread requires replyToMessageId",
+    path: ["replyInThread"]
+  }
+);
+var feishuUploadCompleteResponseSchema = external_exports.object({
+  messageId: external_exports.string(),
+  chatId: external_exports.string().nullable(),
+  fileKey: external_exports.string(),
+  filename: external_exports.string(),
+  mimetype: external_exports.string(),
+  size: external_exports.number().int().nonnegative(),
+  url: external_exports.string()
+});
+var integrationsFeishuUploadCompleteContract = c37.router({
+  complete: {
+    method: "POST",
+    path: "/api/zero/integrations/feishu/upload-file/complete",
+    headers: authHeadersSchema,
+    body: feishuUploadCompleteBodySchema,
+    responses: {
+      200: feishuUploadCompleteResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      413: apiErrorSchema,
+      502: apiErrorSchema
+    },
+    summary: "Finalize Feishu file upload and send it to a conversation"
+  }
+});
 var sendTelegramMessageBodySchema = external_exports.object({
   botId: external_exports.string().min(1, "Bot ID is required"),
   chatId: external_exports.string().min(1, "Chat ID is required"),
@@ -11385,12 +11598,32 @@ var integrationsTelegramBotListContract = c37.router({
 });
 var slackUploadInitBodySchema = external_exports.object({
   filename: external_exports.string().min(1, "Filename is required"),
-  length: external_exports.number().int().positive("File length must be a positive integer")
+  length: external_exports.number().int().positive("File length must be a positive integer"),
+  canonical: external_exports.object({
+    operationId: external_exports.string().uuid(),
+    contentType: external_exports.string().min(1).max(200),
+    checksumSha256: external_exports.string().regex(/^[a-f0-9]{64}$/),
+    channel: external_exports.string().min(1, "Channel ID is required"),
+    threadTs: external_exports.string().optional(),
+    title: external_exports.string().optional(),
+    initialComment: external_exports.string().optional()
+  }).optional()
 });
-var slackUploadInitResponseSchema = external_exports.object({
+var directSlackUploadInitResponseSchema = external_exports.object({
   uploadUrl: external_exports.string(),
   fileId: external_exports.string()
 });
+var canonicalSlackUploadInitResponseSchema = external_exports.object({
+  kind: external_exports.literal("canonical"),
+  assetId: external_exports.string().uuid(),
+  operationId: external_exports.string().uuid(),
+  uploadUrl: external_exports.string().url().optional(),
+  url: external_exports.string().url()
+});
+var slackUploadInitResponseSchema = external_exports.union([
+  directSlackUploadInitResponseSchema,
+  canonicalSlackUploadInitResponseSchema
+]);
 var integrationsSlackUploadInitContract = c37.router({
   init: {
     method: "POST",
@@ -11407,6 +11640,47 @@ var integrationsSlackUploadInitContract = c37.router({
     summary: "Get a pre-signed Slack upload URL via org bot token"
   }
 });
+var slackUploadMaterializeBodySchema = external_exports.object({
+  assetId: external_exports.string().uuid(),
+  operationId: external_exports.string().uuid()
+});
+var slackUploadMaterializeResponseSchema = external_exports.object({
+  assetId: external_exports.string().uuid(),
+  url: external_exports.string().url(),
+  delivery: external_exports.discriminatedUnion("status", [
+    external_exports.object({
+      status: external_exports.literal("pending"),
+      uploadUrl: external_exports.string(),
+      fileId: external_exports.string()
+    }),
+    external_exports.object({
+      status: external_exports.literal("delivered"),
+      fileId: external_exports.string(),
+      permalink: external_exports.string()
+    }),
+    external_exports.object({
+      status: external_exports.literal("failed"),
+      message: external_exports.string(),
+      retryable: external_exports.boolean()
+    })
+  ])
+});
+var integrationsSlackUploadMaterializeContract = c37.router({
+  materialize: {
+    method: "POST",
+    path: "/api/zero/integrations/slack/upload-file/materialize",
+    headers: authHeadersSchema,
+    body: slackUploadMaterializeBodySchema,
+    responses: {
+      200: slackUploadMaterializeResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Materialize a canonical Slack publication before delivery"
+  }
+});
 var telegramUploadInitBodySchema = external_exports.object({
   filename: external_exports.string().min(1, "Filename is required").max(255),
   contentType: external_exports.string().min(1, "Content type is required").max(200),
@@ -11660,11 +11934,18 @@ var slackUploadCompleteBodySchema = external_exports.object({
   channel: external_exports.string().min(1, "Channel ID is required"),
   threadTs: external_exports.string().optional(),
   title: external_exports.string().optional(),
-  initialComment: external_exports.string().optional()
+  initialComment: external_exports.string().optional(),
+  canonicalAssetId: external_exports.string().uuid().optional(),
+  operationId: external_exports.string().uuid().optional(),
+  uploadError: external_exports.string().max(2e3).optional()
 });
 var slackUploadCompleteResponseSchema = external_exports.object({
   fileId: external_exports.string(),
-  permalink: external_exports.string()
+  permalink: external_exports.string(),
+  assetId: external_exports.string().uuid().optional(),
+  assetUrl: external_exports.string().url().optional(),
+  deliveryStatus: external_exports.enum(["delivered", "failed"]).optional(),
+  deliveryError: external_exports.string().optional()
 });
 var integrationsSlackUploadCompleteContract = c37.router({
   complete: {
@@ -11711,6 +11992,15 @@ async function completeSlackFileUpload(body) {
   }
   handleError(result, "Failed to complete Slack file upload");
 }
+async function materializeSlackFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient(integrationsSlackUploadMaterializeContract, config);
+  const result = await client.materialize({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to materialize Slack file upload");
+}
 async function downloadSlackFile(fileId, outPath) {
   const baseUrl = await getBaseUrl();
   const token = await getActiveToken();
@@ -11925,6 +12215,9 @@ async function downloadTeamsFile(fileId, outPath) {
 
 // src/lib/api/domains/integrations-feishu.ts
 init_esm_shims();
+import { createWriteStream as createWriteStream4 } from "fs";
+import { Readable as Readable4 } from "stream";
+import { pipeline as pipeline4 } from "stream/promises";
 async function sendFeishuMessage(body) {
   const config = await getClientConfig();
   const client = initClient(integrationsFeishuMessageContract, config);
@@ -11934,12 +12227,84 @@ async function sendFeishuMessage(body) {
   }
   handleError(result, "Failed to send Feishu message");
 }
+async function initFeishuFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient(integrationsFeishuUploadInitContract, config);
+  const result = await client.init({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to initialize Feishu file upload");
+}
+async function completeFeishuFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient(integrationsFeishuUploadCompleteContract, config);
+  const result = await client.complete({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to complete Feishu file upload");
+}
+async function downloadFeishuFile(messageId, fileKey, resourceType, installationId, outPath) {
+  const baseUrl = await getBaseUrl();
+  const token = await getActiveToken();
+  if (!token) {
+    throw new ApiRequestError("Not authenticated", "UNAUTHORIZED", 401);
+  }
+  const url = new URL("/api/zero/integrations/feishu/download-file", baseUrl);
+  url.searchParams.set("message_id", messageId);
+  url.searchParams.set("file_key", fileKey);
+  url.searchParams.set("type", resourceType);
+  if (installationId) {
+    url.searchParams.set("installation_id", installationId);
+  }
+  const headers = {
+    Authorization: `Bearer ${token}`
+  };
+  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+  if (bypassSecret) {
+    headers["x-vercel-protection-bypass"] = bypassSecret;
+  }
+  const response = await fetch(url, {
+    headers: headersWithCliClientHeaders(headers)
+  });
+  if (!response.ok) {
+    let message = `Failed to download Feishu file (HTTP ${response.status})`;
+    let code = "UNKNOWN";
+    try {
+      const body = await response.json();
+      if (body.error?.message) {
+        message = body.error.message;
+      }
+      if (body.error?.code) {
+        code = body.error.code;
+      }
+    } catch {
+    }
+    throw new ApiRequestError(message, code, response.status);
+  }
+  if (!response.body) {
+    throw new ApiRequestError(
+      "Feishu download response has no body",
+      "EMPTY_BODY",
+      502
+    );
+  }
+  const mimetype = response.headers.get("x-file-mimetype") ?? response.headers.get("content-type") ?? "application/octet-stream";
+  await pipeline4(
+    Readable4.fromWeb(response.body),
+    createWriteStream4(outPath)
+  );
+  const contentLength = response.headers.get("content-length");
+  const size = contentLength ? Number(contentLength) : 0;
+  return { path: outPath, mimetype, size };
+}
 
 // src/lib/api/domains/integrations-github.ts
 init_esm_shims();
-import { createWriteStream as createWriteStream4 } from "fs";
-import { Readable as Readable4 } from "stream";
-import { pipeline as pipeline4 } from "stream/promises";
+import { createWriteStream as createWriteStream5 } from "fs";
+import { Readable as Readable5 } from "stream";
+import { pipeline as pipeline5 } from "stream/promises";
 async function initGithubFileUpload(body) {
   const config = await getClientConfig();
   const client = initClient(integrationsGithubUploadInitContract, config);
@@ -11998,9 +12363,9 @@ async function downloadGithubFile(fileUrl, outPath, filename) {
     );
   }
   const mimetype = response.headers.get("x-file-mimetype") ?? response.headers.get("content-type") ?? "application/octet-stream";
-  await pipeline4(
-    Readable4.fromWeb(response.body),
-    createWriteStream4(outPath)
+  await pipeline5(
+    Readable5.fromWeb(response.body),
+    createWriteStream5(outPath)
   );
   const contentLengthHeader = response.headers.get("content-length");
   const size = contentLengthHeader ? Number(contentLengthHeader) : 0;
@@ -12009,9 +12374,9 @@ async function downloadGithubFile(fileUrl, outPath, filename) {
 
 // src/lib/api/domains/integrations-phone.ts
 init_esm_shims();
-import { createWriteStream as createWriteStream5 } from "fs";
-import { Readable as Readable5 } from "stream";
-import { pipeline as pipeline5 } from "stream/promises";
+import { createWriteStream as createWriteStream6 } from "fs";
+import { Readable as Readable6 } from "stream";
+import { pipeline as pipeline6 } from "stream/promises";
 async function sendPhoneMessage(body) {
   const config = await getClientConfig();
   const client = initClient(integrationsPhoneMessageContract, config);
@@ -12076,9 +12441,9 @@ async function downloadPhoneFile(fileId, outPath) {
     );
   }
   const mimetype = response.headers.get("x-file-mimetype") ?? response.headers.get("content-type") ?? "application/octet-stream";
-  await pipeline5(
-    Readable5.fromWeb(response.body),
-    createWriteStream5(outPath)
+  await pipeline6(
+    Readable6.fromWeb(response.body),
+    createWriteStream6(outPath)
   );
   const contentLengthHeader = response.headers.get("content-length");
   const size = contentLengthHeader ? Number(contentLengthHeader) : 0;
@@ -12318,9 +12683,11 @@ export {
   listZeroCustomConnectors,
   getZeroCustomConnector,
   linkZeroMailDraft,
+  FEISHU_FILE_UPLOAD_MAX_BYTES,
   sendSlackMessage,
   initSlackFileUpload,
   completeSlackFileUpload,
+  materializeSlackFileUpload,
   downloadSlackFile,
   listTelegramBots,
   sendTelegramMessage,
@@ -12332,6 +12699,9 @@ export {
   completeTeamsFileUpload,
   downloadTeamsFile,
   sendFeishuMessage,
+  initFeishuFileUpload,
+  completeFeishuFileUpload,
+  downloadFeishuFile,
   initGithubFileUpload,
   completeGithubFileUpload,
   downloadGithubFile,
@@ -12394,4 +12764,4 @@ export {
   getHostedSiteFiles,
   getHostedSiteDeployments
 };
-//# sourceMappingURL=chunk-ZSP7ISNV.js.map
+//# sourceMappingURL=chunk-QL2BWE6J.js.map