@vm0/cli 9.269.4 → 9.270.0

package/{chunk-FEI7ZJ5N.js → chunk-P46KNOFG.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   getApiUrl
-} from "./chunk-46U457KT.js";
+} from "./chunk-JUE2IIB6.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -42,4 +42,4 @@ export {
   toPlatformUrl,
   getPlatformOrigin
 };
-//# sourceMappingURL=chunk-FEI7ZJ5N.js.map
+//# sourceMappingURL=chunk-P46KNOFG.js.map

package/{chunk-VKL5BLSI.js → chunk-W25EDDGL.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   MODEL_PROVIDER_TYPES
-} from "./chunk-46U457KT.js";
+} from "./chunk-JUE2IIB6.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -40,4 +40,4 @@ export {
   formatModelProviderRoute,
   formatModelPolicyStatus
 };
-//# sourceMappingURL=chunk-VKL5BLSI.js.map
+//# sourceMappingURL=chunk-W25EDDGL.js.map

package/{chunk-ADUPVKAW.js → chunk-WFGX6IFZ.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   source_default
-} from "./chunk-46U457KT.js";
+} from "./chunk-JUE2IIB6.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -19,4 +19,4 @@ function policyIcon(policy) {
 export {
   policyIcon
 };
-//# sourceMappingURL=chunk-ADUPVKAW.js.map
+//# sourceMappingURL=chunk-WFGX6IFZ.js.map

package/{computer-use-WLFY3UFR.js → computer-use-KIPDCGWU.js}

@@ -12,12 +12,12 @@ import {
   fetchComputerUseScreenshot,
   getComputerUseCommand,
   listComputerUseHosts
-} from "./chunk-HPIFUDM3.js";
-import "./chunk-3PIT5M5L.js";
+} from "./chunk-NGVPA5PP.js";
+import "./chunk-72ZGOFYI.js";
 import {
   ApiRequestError,
   withErrorHandler
-} from "./chunk-46U457KT.js";
+} from "./chunk-JUE2IIB6.js";
 import "./chunk-ZUHSC7WF.js";
 import {
   Command
@@ -970,4 +970,4 @@ export {
   formatComputerUseResultForConsole,
   zeroComputerUseCommand
 };
-//# sourceMappingURL=computer-use-WLFY3UFR.js.map
+//# sourceMappingURL=computer-use-KIPDCGWU.js.map

package/{connector-FPYSJ7H6.js → connector-Y5RELY3X.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   hasConnectorFirewallMetadataPermission
-} from "./chunk-W6UHMLBM.js";
+} from "./chunk-IWQVF27E.js";
 import {
   CALLBACK_PROMPT_PLACEHOLDER,
   addRequestedCallbackSearchParams,
@@ -18,13 +18,17 @@ import {
   resolveConnectorDiscoveryAgentContext,
   resolveManualGrantAuthMethod,
   searchConnectorCatalog
-} from "./chunk-L6MOA3RG.js";
+} from "./chunk-6AA2D344.js";
 import {
   UNKNOWN_PERMISSION_GRANT,
+  addZeroAgentCustomConnector,
   connectZeroConnectorManualGrant,
   createBrowserAuthorizationRequest,
   createComputerUseAuthorizationRequest,
-  customConnectorProposalSchema,
+  createZeroCustomConnector,
+  customConnectorAuthModeSchema,
+  customConnectorOAuthConfigInputSchema,
+  customConnectorValueInputSchema,
   diagnoseZeroConnectorCheck,
   getZeroAgent,
   getZeroAgentCustomConnectors,
@@ -33,21 +37,26 @@ import {
   getZeroConnectorCatalogPermissions,
   getZeroCustomConnector,
   listZeroConnectorCatalogStatus,
-  listZeroCustomConnectors
-} from "./chunk-HPIFUDM3.js";
-import "./chunk-3PIT5M5L.js";
+  listZeroCustomConnectors,
+  setZeroCustomConnectorValues,
+  startZeroCustomConnectorOAuth2,
+  updateCustomConnectorBodySchema
+} from "./chunk-NGVPA5PP.js";
+import "./chunk-72ZGOFYI.js";
 import {
   getPlatformOrigin,
   toPlatformUrl
-} from "./chunk-FEI7ZJ5N.js";
+} from "./chunk-P46KNOFG.js";
 import "./chunk-MA22KQYU.js";
 import {
   ApiRequestError,
   getApiUrl,
   source_default,
   withErrorHandler
-} from "./chunk-46U457KT.js";
-import "./chunk-ZUHSC7WF.js";
+} from "./chunk-JUE2IIB6.js";
+import {
+  decodeZeroTokenPayload
+} from "./chunk-ZUHSC7WF.js";
 import {
   Command,
   Option
@@ -1244,7 +1253,253 @@ var statusCommand = new Command().name("status").description("Show detailed stat
 
 // src/commands/zero/connector/custom/index.ts
 init_esm_shims();
+
+// src/commands/zero/connector/custom/create.ts
+init_esm_shims();
 import { readFile } from "fs/promises";
+var customConnectorDefinitionSchema = updateCustomConnectorBodySchema.omit({
+  authMode: true,
+  oauthConfig: true
+});
+var manualCustomConnectorCreateSchema = customConnectorDefinitionSchema.extend({
+  authMode: customConnectorAuthModeSchema.extract(["manual"]),
+  values: customConnectorValueInputSchema.array()
+}).strict();
+var oauthCreateConfigSchema = customConnectorOAuthConfigInputSchema.required({
+  clientSecret: true
+});
+var oauthCustomConnectorCreateSchema = customConnectorDefinitionSchema.extend({
+  authMode: customConnectorAuthModeSchema.extract(["oauth"]),
+  oauthConfig: oauthCreateConfigSchema,
+  values: customConnectorValueInputSchema.array()
+}).strict();
+var customConnectorCreateSchema = manualCustomConnectorCreateSchema.or(
+  oauthCustomConnectorCreateSchema
+);
+function requireCustomConnectorWriteCapability() {
+  const payload = decodeZeroTokenPayload();
+  if (payload && !payload.capabilities.includes("connector:write")) {
+    throw new Error(
+      "Custom connector creation is not enabled for this agent run"
+    );
+  }
+}
+function valueMarker(value) {
+  return `${value.kind}:${value.key}`;
+}
+function validateValues(definition) {
+  const fields = new Map(
+    definition.fields.map((field) => {
+      return [valueMarker(field), field];
+    })
+  );
+  const provided = /* @__PURE__ */ new Set();
+  for (const value of definition.values) {
+    const marker = valueMarker(value);
+    if (!fields.has(marker)) {
+      throw new Error(`Unknown custom connector value: ${marker}`);
+    }
+    if (provided.has(marker)) {
+      throw new Error(`Duplicate custom connector value: ${marker}`);
+    }
+    provided.add(marker);
+  }
+  const missing = definition.fields.flatMap((field) => {
+    const marker = valueMarker(field);
+    return field.required && !provided.has(marker) ? [marker] : [];
+  });
+  if (missing.length > 0) {
+    throw new Error(
+      `Missing required custom connector values: ${missing.join(", ")}`
+    );
+  }
+}
+function printCreateResult(result, json) {
+  if (json) {
+    console.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  console.log(
+    source_default.green(`\u2713 Custom connector "${result.connector.displayName}" created`)
+  );
+  console.log(source_default.dim(`  ID:             ${result.connector.id}`));
+  console.log(source_default.dim(`  Slug:           ${result.connector.slug}`));
+  console.log(
+    source_default.dim(`  Authentication: ${result.connector.authMode ?? "manual"}`)
+  );
+  console.log(
+    source_default.dim(
+      `  Status:         ${result.connector.connected ? "connected" : "awaiting authorization"}`
+    )
+  );
+  if (result.agentId && !result.authorizationUrl) {
+    console.log(source_default.dim(`  Agent:          ${result.agentId} (authorized)`));
+  }
+  if (!result.authorizationUrl) {
+    return;
+  }
+  console.log();
+  console.log("Complete OAuth authorization:");
+  console.log(
+    `  [Authorize ${result.connector.displayName}](${result.authorizationUrl})`
+  );
+  if (result.agentId) {
+    console.log(
+      source_default.dim(
+        `  Approval will also authorize this connector for agent ${result.agentId}.`
+      )
+    );
+  }
+}
+async function createManualCustomConnector(definition, agentId) {
+  validateValues(definition);
+  const { values, ...body } = definition;
+  const created = await createZeroCustomConnector(body);
+  const connector = await setZeroCustomConnectorValues(created.id, values);
+  if (agentId) {
+    await addZeroAgentCustomConnector(agentId, connector.id);
+  }
+  return {
+    connector,
+    ...agentId ? { agentId } : {}
+  };
+}
+async function createOAuthCustomConnector(definition, agentId) {
+  const { values, ...body } = definition;
+  if (body.fields.length > 0 || values.length > 0) {
+    throw new Error(
+      "OAuth custom connectors require empty fields and values arrays"
+    );
+  }
+  const created = await createZeroCustomConnector(body);
+  const authorizationUrl = await startZeroCustomConnectorOAuth2(
+    created.id,
+    agentId
+  );
+  return {
+    connector: created,
+    authorizationUrl,
+    ...agentId ? { agentId } : {}
+  };
+}
+var createCustomConnectorCommand = new Command().name("create").description(
+  "Create and configure a manual or OAuth custom connector from JSON"
+).requiredOption(
+  "-f, --file <path>",
+  "JSON file containing the connector definition and credentials"
+).option(
+  "--agent <id>",
+  "Authorize this agent (defaults to ZERO_AGENT_ID when available)"
+).option("--json", "Print the connector and authorization result as JSON").addHelpText(
+  "after",
+  `
+File format:
+  The file must contain one complete connector definition. The agent should
+  generate this file from the user's requirements and credentials.
+
+Agent workflow:
+  1. Ask the user in chat only for missing API details and credentials.
+  2. Derive the prefixes, fields, injections, and OAuth settings.
+  3. Write a temporary JSON file, run this command, then remove the file.
+  The user should not need to write JSON or run this command.
+
+  Common fields:
+    displayName       Human-readable connector name
+    prefixTemplates   Allowed HTTPS API URL prefixes
+    fields            Inputs referenced by manual templates
+    headerInjections  Headers added to matching requests
+    queryInjections   Query parameters added to matching requests
+    authMode          "manual" or "oauth"
+
+Manual mode:
+  Add a values array with one entry for every required field. References use
+  {{secrets.KEY}} or {{variables.KEY}}. The command creates the connector,
+  stores the values, and authorizes --agent in one flow.
+
+  {
+    "displayName": "Acme API",
+    "prefixTemplates": ["https://api.acme.example/v1/"],
+    "fields": [
+      {
+        "key": "api_key",
+        "label": "API key",
+        "kind": "secret",
+        "required": true
+      }
+    ],
+    "headerInjections": [
+      {
+        "name": "Authorization",
+        "valueTemplate": "Bearer {{secrets.api_key}}"
+      }
+    ],
+    "queryInjections": [],
+    "authMode": "manual",
+    "values": [
+      { "key": "api_key", "kind": "secret", "value": "<user-api-key>" }
+    ]
+  }
+
+OAuth mode:
+  Use {{oauth.access_token}} in an injection and provide the complete OAuth
+  client configuration. OAuth mode requires empty fields and values arrays.
+  The command prints an authorization link. If --agent is set, completing
+  OAuth also authorizes that agent.
+
+  {
+    "displayName": "Acme OAuth API",
+    "prefixTemplates": ["https://api.acme.example/v1/"],
+    "fields": [],
+    "headerInjections": [
+      {
+        "name": "Authorization",
+        "valueTemplate": "Bearer {{oauth.access_token}}"
+      }
+    ],
+    "queryInjections": [],
+    "authMode": "oauth",
+    "values": [],
+    "oauthConfig": {
+      "providerAdapter": "standard",
+      "clientId": "<oauth-client-id>",
+      "clientSecret": "<oauth-client-secret>",
+      "authorizationUrl": "https://acme.example/oauth/authorize",
+      "tokenUrl": "https://acme.example/oauth/token",
+      "tokenEndpointAuthMethod": "client_secret_post",
+      "pkceMethod": "S256",
+      "scopes": ["read", "write"],
+      "authorizationParams": {}
+    }
+  }
+
+Examples:
+  zero connector custom create --file ./connector.json
+  zero connector custom create --file ./connector.json --agent <agent-id>
+  zero connector custom create --file ./connector.json --json
+
+Notes:
+  - Requires an organization admin
+  - Requires the customConnectorCliCreate feature
+  - OAuth custom connectors also require the customConnectorOAuth2 feature
+  - --agent defaults to ZERO_AGENT_ID inside an agent run
+  - OAuth always requires the user to approve the generated authorization link
+  - The file contains plaintext credentials; keep it temporary and never commit it`
+).action(
+  withErrorHandler(async (options) => {
+    requireCustomConnectorWriteCapability();
+    const raw = await readFile(options.file, "utf8");
+    const input = JSON.parse(raw);
+    const definition = customConnectorCreateSchema.parse(input);
+    const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
+    if (agentId) {
+      await getZeroAgent(agentId);
+    }
+    const result = definition.authMode === "manual" ? await createManualCustomConnector(definition, agentId) : await createOAuthCustomConnector(definition, agentId);
+    printCreateResult(result, options.json ?? false);
+  })
+);
+
+// src/commands/zero/connector/custom/index.ts
 var LABEL_WIDTH2 = 18;
 function renderConnected(connector) {
   if (connector.connected) {
@@ -1255,12 +1510,6 @@ function renderConnected(connector) {
   }
   return source_default.yellow(`missing ${connector.missingRequiredFields.join(", ")}`);
 }
-function encodeBase64UrlJson(value) {
-  return Buffer.from(JSON.stringify(value), "utf8").toString("base64url");
-}
-function isJsonObject(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 async function resolveCustomAgentContext(agentId) {
   const resolvedAgentId = agentId ?? process.env.ZERO_AGENT_ID;
   if (!resolvedAgentId) {
@@ -1360,36 +1609,7 @@ var statusCommand2 = new Command().name("status").description("Show detailed sta
     }
   )
 );
-var proposeCommand = new Command().name("propose").description("Create a browser save link for a custom connector proposal").requiredOption("--proposal-file <path>", "JSON proposal file").option("--connector-id <id>", "Override connector id for update proposals").option("--agent <id>", "Authorize this agent when the proposal is saved").action(
-  withErrorHandler(
-    async (options) => {
-      const raw = await readFile(options.proposalFile, "utf8");
-      const proposalJson = JSON.parse(raw);
-      if (!isJsonObject(proposalJson)) {
-        throw new Error("Proposal file must contain a JSON object");
-      }
-      const parsed = customConnectorProposalSchema.parse({
-        ...proposalJson,
-        ...options.connectorId ? { connectorId: options.connectorId } : {}
-      });
-      const origin = await getPlatformOrigin();
-      const params = new URLSearchParams({
-        p: encodeBase64UrlJson(parsed)
-      });
-      const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
-      if (agentId) {
-        params.set("agentId", agentId);
-      }
-      const url = `${origin}/connectors/custom/proposal?${params.toString()}`;
-      console.log(`[Configure ${parsed.displayName}](${url})`);
-      console.log();
-      console.log(
-        "Open this link to review, save values, and authorize the connector."
-      );
-    }
-  )
-);
-var customConnectorCommand = new Command().name("custom").description("Inspect and propose org custom connectors").addCommand(listCommand2).addCommand(statusCommand2).addCommand(proposeCommand);
+var customConnectorCommand = new Command().name("custom").description("Create and inspect org custom connectors").addCommand(createCustomConnectorCommand).addCommand(listCommand2).addCommand(statusCommand2);
 
 // src/commands/zero/connector/permission-request.ts
 init_esm_shims();
@@ -1625,4 +1845,4 @@ var zeroConnectorCommand = new Command().name("connector").description("Manage a
 export {
   zeroConnectorCommand
 };
-//# sourceMappingURL=connector-FPYSJ7H6.js.map
+//# sourceMappingURL=connector-Y5RELY3X.js.map