@vm0/cli 9.271.0 → 9.271.1

package/{agent-O4PIZ7NO.js → agent-JNXSPIHQ.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   policyIcon
-} from "./chunk-MOWAU52B.js";
+} from "./chunk-6GXJ5D26.js";
 import {
   isInteractive,
   promptConfirm
@@ -11,7 +11,7 @@ import {
 import {
   connectorPermissionGrantsToFirewallPolicies,
   loadConnectorPermissionInfos
-} from "./chunk-VSL4HRIA.js";
+} from "./chunk-YYLDEO2K.js";
 import {
   createZeroAgent,
   deleteZeroAgent,
@@ -23,13 +23,13 @@ import {
   listZeroUserPermissionGrants,
   updateZeroAgent,
   updateZeroAgentInstructions
-} from "./chunk-TZDXFY6G.js";
-import "./chunk-JXUQQIUP.js";
+} from "./chunk-LMVTFXNK.js";
+import "./chunk-ADB5CIIV.js";
 import "./chunk-MA22KQYU.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-D7TEG7WN.js";
+} from "./chunk-F7O355AV.js";
 import "./chunk-MD3YWUKO.js";
 import {
   Command
@@ -599,4 +599,4 @@ Notes:
 export {
   zeroAgentCommand
 };
-//# sourceMappingURL=agent-O4PIZ7NO.js.map
+//# sourceMappingURL=agent-JNXSPIHQ.js.map

package/{banking-K3T7FGVL.js → banking-VNN5IQV3.js}

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   callZeroBanking
-} from "./chunk-TZDXFY6G.js";
-import "./chunk-JXUQQIUP.js";
+} from "./chunk-LMVTFXNK.js";
+import "./chunk-ADB5CIIV.js";
 import "./chunk-MA22KQYU.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-D7TEG7WN.js";
+} from "./chunk-F7O355AV.js";
 import "./chunk-MD3YWUKO.js";
 import {
   Command,
@@ -114,4 +114,4 @@ Notes:
 export {
   zeroBankingCommand
 };
-//# sourceMappingURL=banking-K3T7FGVL.js.map
+//# sourceMappingURL=banking-VNN5IQV3.js.map

package/{browser-ZUXV2DZI.js → browser-VYD56AFV.js}

@@ -8,13 +8,13 @@ import {
   leaseZeroBrowser,
   useZeroBrowser,
   zeroBrowserCreateRequestSchema
-} from "./chunk-TZDXFY6G.js";
-import "./chunk-JXUQQIUP.js";
+} from "./chunk-LMVTFXNK.js";
+import "./chunk-ADB5CIIV.js";
 import "./chunk-MA22KQYU.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-D7TEG7WN.js";
+} from "./chunk-F7O355AV.js";
 import "./chunk-MD3YWUKO.js";
 import {
   Command,
@@ -189,4 +189,4 @@ Notes:
 export {
   zeroBrowserCommand
 };
-//# sourceMappingURL=browser-ZUXV2DZI.js.map
+//# sourceMappingURL=browser-VYD56AFV.js.map

package/{chat-FQ65YTRM.js → chat-TCKWZAWS.js}

@@ -11,7 +11,7 @@ import {
 } from "./chunk-LN2ATWKS.js";
 import {
   formatModelProviderRoute
-} from "./chunk-TC7IZRA2.js";
+} from "./chunk-L5SV5PJD.js";
 import {
   chatThreadEventSchema,
   chatThreadSnapshotProjectionSchema,
@@ -27,14 +27,14 @@ import {
   sendZeroChatEvent,
   updateZeroChatThreadModelSelection,
   userMessageDocumentSchema
-} from "./chunk-TZDXFY6G.js";
-import "./chunk-JXUQQIUP.js";
+} from "./chunk-LMVTFXNK.js";
+import "./chunk-ADB5CIIV.js";
 import "./chunk-MA22KQYU.js";
 import {
   getApiUrl,
   source_default,
   withErrorHandler
-} from "./chunk-D7TEG7WN.js";
+} from "./chunk-F7O355AV.js";
 import {
   decodeZeroTokenPayload
 } from "./chunk-MD3YWUKO.js";
@@ -1168,4 +1168,4 @@ Examples:
 export {
   zeroChatCommand
 };
-//# sourceMappingURL=chat-FQ65YTRM.js.map
+//# sourceMappingURL=chat-TCKWZAWS.js.map

package/{chunk-X7YXT2UE.js → chunk-3BGTDXRB.js}

@@ -27,6 +27,11 @@ var STAFF_ORG_ID_HASHES = [
 ];
 
 // ../../packages/core/src/feature-switch.ts
+var CUSTOM_MODEL_GATEWAY_ORG_ID_HASHES = [
+  ...STAFF_ORG_ID_HASHES,
+  "a6e60503"
+  // geo rollout workspace
+];
 var FEATURE_SWITCHES = {
   ["dummy" /* Dummy */]: {
     maintainer: "ethan@vm0.ai",
@@ -231,6 +236,18 @@ var FEATURE_SWITCHES = {
     enabled: false,
     userOverridable: false
   },
+  ["koreanLocale" /* KoreanLocale */]: {
+    maintainer: "yuma@vm0.ai",
+    description: "Allow ko-KR preference writes after incompatible API readers and rollback candidates have drained.",
+    enabled: false,
+    userOverridable: false
+  },
+  ["indonesianLocale" /* IndonesianLocale */]: {
+    maintainer: "yuma@vm0.ai",
+    description: "Allow id-ID preference writes after incompatible API readers and rollback candidates have drained.",
+    enabled: false,
+    userOverridable: false
+  },
   ["banking" /* Banking */]: {
     maintainer: "linghan@vm0.ai",
     description: "Enable the managed Zero Banking gateway and banking:read ZERO_TOKEN capability for Finicity-backed accounts, balances, and transactions.",
@@ -325,6 +342,13 @@ var FEATURE_SWITCHES = {
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES,
     userOverridable: true
   },
+  ["customModelGateways" /* CustomModelGateways */]: {
+    maintainer: "ethan@vm0.ai",
+    description: "Enable admin-defined Anthropic Messages and OpenAI Responses model gateway connections.",
+    enabled: false,
+    enabledOrgIdHashes: CUSTOM_MODEL_GATEWAY_ORG_ID_HASHES,
+    userOverridable: false
+  },
   ["zapierConnector" /* ZapierConnector */]: {
     maintainer: "yuma@vm0.ai",
     description: "Enable the Zapier connector. When disabled, Zapier is hidden from the connectors list and cannot be connected.",
@@ -348,6 +372,13 @@ var FEATURE_SWITCHES = {
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
+  ["pwaChatKeyboardGestures" /* PwaChatKeyboardGestures */]: {
+    maintainer: "bingjie@vm0.ai",
+    description: "Keep the PWA chat composer pinned above the software keyboard and support swipe-to-dismiss gestures.",
+    enabled: false,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,
+    userOverridable: false
+  },
   ["chatThreadSidebarAutoOpen" /* ChatThreadSidebarAutoOpen */]: {
     maintainer: "ethan@vm0.ai",
     description: "Automatically open the latest sidebar-capable card from a running or successfully completed chat run when the utility sidebar is closed and split view is available.",
@@ -489,4 +520,4 @@ function isFeatureEnabled(key, ctx) {
 export {
   isFeatureEnabled
 };
-//# sourceMappingURL=chunk-X7YXT2UE.js.map
+//# sourceMappingURL=chunk-3BGTDXRB.js.map

package/chunk-3BGTDXRB.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../packages/core/src/feature-switch-key.ts","../../../packages/core/src/feature-switch.ts","../../../packages/core/src/identity-hash.ts"],"sourcesContent":["/**\n * Feature switch keys\n *\n * Defines all available feature switch identifiers.\n */\nexport enum FeatureSwitchKey {\n  Dummy = \"dummy\",\n  AhrefsConnector = \"ahrefsConnector\",\n  BillConnector = \"billConnector\",\n  BentomlConnector = \"bentomlConnector\",\n  BoxConnector = \"boxConnector\",\n  CanvaConnector = \"canvaConnector\",\n  CalComConnector = \"calComConnector\",\n  CopperConnector = \"copperConnector\",\n  DatadogConnector = \"datadogConnector\",\n  DeelConnector = \"deelConnector\",\n  DocuSignConnector = \"docusignConnector\",\n  DropboxConnector = \"dropboxConnector\",\n  FigmaConnector = \"figmaConnector\",\n  ExpensifyConnector = \"expensifyConnector\",\n  GoogleContactsConnector = \"googleContactsConnector\",\n  GoogleFormsConnector = \"googleFormsConnector\",\n  JoggAiConnector = \"joggAiConnector\",\n  MercuryConnector = \"mercuryConnector\",\n  NeonConnector = \"neonConnector\",\n  NetSuiteConnector = \"netSuiteConnector\",\n  GarminConnectConnector = \"garminConnectConnector\",\n  QuickBooksConnector = \"quickbooksConnector\",\n  RedditConnector = \"redditConnector\",\n  SupabaseConnector = \"supabaseConnector\",\n  WebflowConnector = \"webflowConnector\",\n  CloseConnector = \"closeConnector\",\n  MetaAdsConnector = \"metaAdsConnector\",\n  TikTokAdsConnector = \"tiktokAdsConnector\",\n  AwsConnector = \"awsConnector\",\n  PosthogConnector = \"posthogConnector\",\n  PayPalConnector = \"payPalConnector\",\n  RampConnector = \"rampConnector\",\n  MailchimpConnector = \"mailchimpConnector\",\n  ResendConnector = \"resendConnector\",\n  PexelsConnector = \"pexelsConnector\",\n  SpotifyConnector = \"spotifyConnector\",\n  ZeroDebug = \"zeroDebug\",\n  LanguagePreference = \"languagePreference\",\n  BrazilianPortugueseLocale = \"brazilianPortugueseLocale\",\n  JapaneseLocale = \"japaneseLocale\",\n  KoreanLocale = \"koreanLocale\",\n  IndonesianLocale = \"indonesianLocale\",\n  ZeroBrowser = \"zeroBrowser\",\n  ZeroChatMessaging = \"zeroChatMessaging\",\n  ZeroMailReplyFollowUp = \"zeroMailReplyFollowUp\",\n  Banking = \"banking\",\n  Lab = \"lab\",\n  NotionWorkflowAutomations = \"notionWorkflowAutomations\",\n  GithubWebhookAutomations = \"githubWebhookAutomations\",\n  MorningBrief = \"morningBrief\",\n  ManualMorningBrief = \"manualMorningBrief\",\n  TestOauthConnector = \"testOauthConnector\",\n  FreshdeskConnector = \"freshdeskConnector\",\n  StabilityAiConnector = \"stabilityAiConnector\",\n  ZoomConnector = \"zoomConnector\",\n  WorkdayConnector = \"workdayConnector\",\n  CodexFastMode = \"codexFastMode\",\n  ClaudeSessionPruning = \"claudeSessionPruning\",\n  RealAgentInPreview = \"realAgentInPreview\",\n  ComposerUploadPopover = \"composerUploadPopover\",\n  StructuredPromptInlineTemplates = \"structuredPromptInlineTemplates\",\n  CustomModelGateways = \"customModelGateways\",\n\n  ZapierConnector = \"zapierConnector\",\n  ComputerUseDesktopPlugins = \"computerUseDesktopPlugins\",\n  ChatThreadUnifiedSearch = \"chatThreadUnifiedSearch\",\n  ChatErrorRecovery = \"chatErrorRecovery\",\n  PwaChatKeyboardGestures = \"pwaChatKeyboardGestures\",\n  ComposerSkillSubstringSearch = \"composerSkillSubstringSearch\",\n  SidebarSubscriptionUsage = \"sidebarSubscriptionUsage\",\n  SlackDmSessionRouting = \"slackDmSessionRouting\",\n  TeamsIntegration = \"teamsIntegration\",\n  FeishuIntegration = \"feishuIntegration\",\n  StrapiIntegration = \"strapiIntegration\",\n  ArtifactKeyV2 = \"artifactKeyV2\",\n  HostedArtifactVersions = \"hostedArtifactVersions\",\n  VideoArtifactPosters = \"videoArtifactPosters\",\n  ImageStyleR2 = \"imageStyleR2\",\n  WorkflowConnectorReadiness = \"workflowConnectorReadiness\",\n  ComposerConnectorPermissions = \"composerConnectorPermissions\",\n  ThreeColumnNav = \"threeColumnNav\",\n  ChatThreadSidebarAutoOpen = \"chatThreadSidebarAutoOpen\",\n  CustomConnectorCliCreate = \"customConnectorCliCreate\",\n  CustomConnectorOAuth2 = \"customConnectorOAuth2\",\n}\n","/**\n * Feature switch system\n *\n * Provides centralized feature flag management with user-identity based overrides.\n * User IDs are stored as FNV-1a hashes to avoid exposing plain-text identifiers in source code.\n *\n * NOT AN AUTHORIZATION BOUNDARY. User-overridable switches can be self-enabled\n * through `POST /api/zero/feature-switches`, and `userOverridable: false` only\n * excludes a switch from that API. For money-granting, credential, or\n * privilege-escalation endpoints, gate with a hard identity check (e.g.\n * `isStaffOrg()` from `./staff-org`) instead of this system.\n */\n\nimport { FeatureSwitchKey } from \"./feature-switch-key\";\nimport { STAFF_ORG_ID_HASHES, fnv1a } from \"./identity-hash\";\n\nexport interface FeatureSwitch {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly enabled: boolean;\n  readonly enabledUserHashes?: readonly string[];\n  readonly enabledEmailHashes?: readonly string[];\n  readonly enabledOrgIdHashes?: readonly string[];\n  readonly userOverridable?: boolean;\n}\n\nexport interface FeatureSwitchMetadata {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly userOverridable: boolean;\n}\n\nexport interface FeatureSwitchContext {\n  readonly userId?: string;\n  readonly email?: string;\n  readonly orgId?: string;\n  readonly overrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n}\n\nconst CUSTOM_MODEL_GATEWAY_ORG_ID_HASHES = [\n  ...STAFF_ORG_ID_HASHES,\n  \"a6e60503\", // geo rollout workspace\n] as const;\n\n/**\n * Registry of all feature switches\n */\nconst FEATURE_SWITCHES: Record<FeatureSwitchKey, FeatureSwitch> = {\n  [FeatureSwitchKey.Dummy]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Test-only feature switch for flag system validation\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.AhrefsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ahrefs SEO connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BillConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BILL Spend & Expense connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BentomlConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BentoML model serving connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BoxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Box file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CanvaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Canva design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CalComConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Cal.com scheduling connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CopperConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Copper CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DatadogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Datadog observability connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DeelConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Deel HR connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DocuSignConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the DocuSign e-signature connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DropboxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Dropbox file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FigmaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Figma design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ExpensifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Expensify accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleContactsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Contacts connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleFormsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Forms connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.JoggAiConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the JoggAI video generation connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MercuryConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mercury banking connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NeonConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Neon serverless Postgres connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NetSuiteConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Oracle NetSuite ERP connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GarminConnectConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Garmin Connect wellness connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.QuickBooksConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the QuickBooks accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RedditConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Reddit connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SupabaseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Supabase database connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CloseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Close CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WebflowConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Webflow site management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MetaAdsConnector]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Enable the Meta Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.TikTokAdsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the TikTok Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.AwsConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Enable the temporary AWS remote login connector\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PosthogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PostHog analytics connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PayPalConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PayPal payments connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RampConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ramp spend management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MailchimpConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mailchimp email marketing connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ResendConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Resend email service connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PexelsConnector]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description: \"Enable the Pexels stock photo and video connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SpotifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Spotify connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZeroDebug]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Reveal activity debug surfaces, activity log navigation, appended system prompts, and Debug preferences\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.LanguagePreference]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable workspace language bootstrap, persistence, and the Settings preference entry.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.BrazilianPortugueseLocale]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Allow pt-BR preference writes after incompatible API readers and rollback candidates have drained.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.JapaneseLocale]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Allow ja-JP preference writes after incompatible API readers and rollback candidates have drained.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.KoreanLocale]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Allow ko-KR preference writes after incompatible API readers and rollback candidates have drained.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.IndonesianLocale]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Allow id-ID preference writes after incompatible API readers and rollback candidates have drained.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.Banking]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Enable the managed Zero Banking gateway and banking:read ZERO_TOKEN capability for Finicity-backed accounts, balances, and transactions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Lab]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Show the Lab page for toggling experimental features\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.MorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the daily 7:00 local-time Morning Brief email built from GitHub, Gmail, and Google Calendar.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.ManualMorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show a Send now button in Settings that triggers a Morning Brief immediately for testing.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.NotionWorkflowAutomations]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Notion event workflow automations, starting with child pages created under a configured parent page.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.GithubWebhookAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show creation entry points for GitHub workflow job, pull request review, deployment status, and issue comment automations.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.TestOauthConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable the test-oauth connector, a synthetic OAuth 2.0 provider used only for automated tests. Off in prod.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FreshdeskConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Freshdesk helpdesk connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.StabilityAiConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Stability AI image generation connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZoomConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zoom connector (OAuth 2.0) for meetings, past participants, and cloud recordings access\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WorkdayConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Workday HCM and finance connector\",\n    enabled: false,\n  },\n\n  [FeatureSwitchKey.CodexFastMode]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Codex fast mode for ChatGPT subscription GPT 5.5 and GPT 5.6 web chat runs.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ClaudeSessionPruning]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Prune oversized Claude Code checkpoint histories to the latest native compact generation.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.RealAgentInPreview]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Send preview chat runs through real agent CLIs instead of preview mock runners.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComposerUploadPopover]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Use the Upload popover in the chat composer instead of the legacy paperclip attachment button.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.StructuredPromptInlineTemplates]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable multiple inline artifact templates in structured chat prompts.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.CustomModelGateways]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable admin-defined Anthropic Messages and OpenAI Responses model gateway connections.\",\n    enabled: false,\n    enabledOrgIdHashes: CUSTOM_MODEL_GATEWAY_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ZapierConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zapier connector. When disabled, Zapier is hidden from the connectors list and cannot be connected.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComputerUseDesktopPlugins]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Zero Desktop Computer Use plugins for local resources, starting with the bundled filesystem plugin gateway.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatThreadUnifiedSearch]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat thread title results from the local event-driven thread cache in the command-shift-a conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatErrorRecovery]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Replace supported Codex and Claude Code limit errors with recovery actions in chat.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PwaChatKeyboardGestures]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Keep the PWA chat composer pinned above the software keyboard and support swipe-to-dismiss gestures.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ChatThreadSidebarAutoOpen]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Automatically open the latest sidebar-capable card from a running or successfully completed chat run when the utility sidebar is closed and split view is available.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComposerSkillSubstringSearch]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Match chat composer slash skill suggestions by any slug substring instead of only prefixes.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ThreeColumnNav]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Slack-style three-column navigation: a labeled icon rail, a pinned-agents and chat-threads list column, and the conversation pane.\",\n    enabled: false,\n    // Ming only for the first pass; widen to staff once it settles.\n    enabledEmailHashes: [\"54757055\"], // fnv1a(\"ming@vm0.ai\")\n  },\n  [FeatureSwitchKey.SidebarSubscriptionUsage]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show Codex and Claude Code personal subscription usage in the Zero sidebar footer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.SlackDmSessionRouting]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Reuse agent/model-scoped sessions for top-level Slack direct messages.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.TeamsIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show standalone Microsoft Teams integration settings, connect flows, and Works page entry points.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.FeishuIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show the Feishu direct-message integration and Works page entry point.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.StrapiIntegration]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable Strapi integration settings and Strapi entry-published workflow automations.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ArtifactKeyV2]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Store new user artifacts under flat, ten-character hashed public keys.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.HostedArtifactVersions]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Create immutable hosted artifact versions behind stable site aliases.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.VideoArtifactPosters]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate poster images asynchronously when video artifacts are recorded.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ImageStyleR2]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Resolve archive-enabled image styles from private R2 packages. When off, image style authoring continues reading vm0-skills from GitHub.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.WorkflowConnectorReadiness]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Show the manual connector readiness check on workflow settings pages.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ZeroMailReplyFollowUp]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable Zero Mail reply follow-up after all API deployments can read Gmail event configurations with threadId.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ZeroBrowser]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable thread-scoped Cloud browser access in chat and the Zero CLI.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroChatMessaging]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Advertise zero chat create, send, and cancel in the agent system prompt without gating the CLI commands or API.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComposerConnectorPermissions]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Show the configure-permissions entry in the chat composer connector popover, opening the agent×connector firewall dialog inline.\",\n    enabled: false,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.CustomConnectorCliCreate]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Allow Zero CLI agents to create and configure custom connectors directly.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.CustomConnectorOAuth2]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Allow org admins to add OAuth 2.0 authentication to custom connectors.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n};\n\ninterface ResolvedHashes {\n  readonly userHash?: string;\n  readonly emailHash?: string;\n  readonly orgIdHash?: string;\n}\n\nfunction evaluateSwitch(fs: FeatureSwitch, hashes: ResolvedHashes): boolean {\n  if (fs.enabled) return true;\n  if (hashes.userHash && fs.enabledUserHashes?.includes(hashes.userHash))\n    return true;\n  if (hashes.emailHash && fs.enabledEmailHashes?.includes(hashes.emailHash))\n    return true;\n  if (hashes.orgIdHash && fs.enabledOrgIdHashes?.includes(hashes.orgIdHash))\n    return true;\n  return false;\n}\n\n/**\n * Evaluate all feature switches at once for the given context.\n *\n * Computes identity hashes once and checks all switches synchronously.\n */\nexport function getAllFeatureStates(\n  ctx?: FeatureSwitchContext,\n): Record<FeatureSwitchKey, boolean> {\n  const switches = Object.values(FEATURE_SWITCHES);\n  const hashes: ResolvedHashes = {\n    userHash:\n      ctx?.userId &&\n      switches.some((s) => {\n        return s.enabledUserHashes?.length;\n      })\n        ? fnv1a(ctx.userId)\n        : undefined,\n    emailHash:\n      ctx?.email &&\n      switches.some((s) => {\n        return s.enabledEmailHashes?.length;\n      })\n        ? fnv1a(ctx.email.toLowerCase())\n        : undefined,\n    orgIdHash:\n      ctx?.orgId &&\n      switches.some((s) => {\n        return s.enabledOrgIdHashes?.length;\n      })\n        ? fnv1a(ctx.orgId)\n        : undefined,\n  };\n\n  const result = {} as Record<FeatureSwitchKey, boolean>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = evaluateSwitch(FEATURE_SWITCHES[key], hashes);\n  }\n\n  if (ctx?.overrides) {\n    for (const [key, value] of Object.entries(ctx.overrides)) {\n      if (key in FEATURE_SWITCHES && value !== undefined) {\n        result[key as FeatureSwitchKey] = value;\n      }\n    }\n  }\n\n  return result;\n}\n\n/**\n * Return the description for every feature switch.\n */\nexport function getFeatureSwitchDescriptions(): Record<\n  FeatureSwitchKey,\n  string | undefined\n> {\n  const result = {} as Record<FeatureSwitchKey, string | undefined>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = FEATURE_SWITCHES[key].description;\n  }\n  return result;\n}\n\n/**\n * Return display metadata for every feature switch.\n */\nexport function getFeatureSwitchMetadata(): Record<\n  FeatureSwitchKey,\n  FeatureSwitchMetadata\n> {\n  const result = {} as Record<FeatureSwitchKey, FeatureSwitchMetadata>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    const featureSwitch = FEATURE_SWITCHES[key];\n    result[key] = {\n      maintainer: featureSwitch.maintainer,\n      description: featureSwitch.description,\n      userOverridable: featureSwitch.userOverridable !== false,\n    };\n  }\n  return result;\n}\n\nexport function isUserOverridableFeatureSwitch(\n  key: string,\n): key is FeatureSwitchKey {\n  if (!(key in FEATURE_SWITCHES)) {\n    return false;\n  }\n  return FEATURE_SWITCHES[key as FeatureSwitchKey].userOverridable !== false;\n}\n\nexport function getUserOverridableFeatureSwitchKeys(): readonly FeatureSwitchKey[] {\n  return Object.values(FeatureSwitchKey).filter(isUserOverridableFeatureSwitch);\n}\n\nexport function filterUserOverridableFeatureSwitchOverrides(\n  switches: Record<string, boolean>,\n): Record<string, boolean> {\n  const filtered: Record<string, boolean> = {};\n  for (const [key, value] of Object.entries(switches)) {\n    if (isUserOverridableFeatureSwitch(key)) {\n      filtered[key] = value;\n    }\n  }\n  return filtered;\n}\n\n/**\n * Check if a feature is enabled for the given context.\n *\n * `ctx` is required so callers must pass identity (userId/orgId/email) or an\n * explicit `{}`. A switch gated by `enabledUserHashes` / `enabledOrgIdHashes`\n * silently returns `false` when ctx omits identity, which has caused bugs.\n * Client-side callers should usually read the platform `featureSwitch$` signal\n * instead — it also merges DB overrides on top of identity context.\n */\nexport function isFeatureEnabled(\n  key: FeatureSwitchKey,\n  ctx: FeatureSwitchContext,\n): boolean {\n  const override = ctx.overrides?.[key];\n  if (override !== undefined) {\n    return override;\n  }\n\n  const featureSwitch = FEATURE_SWITCHES[key];\n  if (featureSwitch.enabled) {\n    return true;\n  }\n  if (ctx.userId && featureSwitch.enabledUserHashes?.length) {\n    if (featureSwitch.enabledUserHashes.includes(fnv1a(ctx.userId)))\n      return true;\n  }\n  if (ctx.email && featureSwitch.enabledEmailHashes?.length) {\n    if (\n      featureSwitch.enabledEmailHashes.includes(fnv1a(ctx.email.toLowerCase()))\n    )\n      return true;\n  }\n  if (ctx.orgId && featureSwitch.enabledOrgIdHashes?.length) {\n    if (featureSwitch.enabledOrgIdHashes.includes(fnv1a(ctx.orgId)))\n      return true;\n  }\n  return false;\n}\n","/**\n * Identity hashing — FNV-1a 32-bit hash used to reference users / orgs / emails\n * without embedding plain-text identifiers in source code.\n *\n * Shared between the feature-switch registry (UI rollout targeting) and\n * `staff-org.ts` (authorization primitive). The hash is deterministic and\n * synchronous; no crypto API needed.\n */\n\nexport function fnv1a(input: string): string {\n  let h = 2166136261 >>> 0;\n  for (let i = 0; i < input.length; i++) {\n    h ^= input.charCodeAt(i);\n    h = Math.imul(h, 16777619) >>> 0;\n  }\n  return h.toString(16).padStart(8, \"0\");\n}\n\n/**\n * Hashes of internal staff org IDs.\n *\n * This list is the source of truth for `isStaffOrg()` — adding an entry here\n * grants that org access to every endpoint that uses `isStaffOrg` as an\n * authorization check. Treat changes with the same care as role grants.\n */\nexport const STAFF_ORG_ID_HASHES: readonly string[] = [\n  \"afce210e\", // org_3ANttyrbWYJk6JKRSTRLEsbsDLe\n];\n"],"mappings":";;;;;;;;AAAA;;;ACAA;;;ACAA;AASO,SAAS,MAAM,OAAuB;AAC3C,MAAI,IAAI,eAAe;AACvB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAQ,MAAM;AAAA,EACjC;AACA,SAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACvC;AASO,IAAM,sBAAyC;AAAA,EACpD;AAAA;AACF;;;ADYA,IAAM,qCAAqC;AAAA,EACzC,GAAG;AAAA,EACH;AAAA;AACF;AAKA,IAAM,mBAA4D;AAAA,EAChE,oBAAuB,GAAG;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wBAAyB,GAAG;AAAA,IAC1B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gBAAqB,GAAG;AAAA,IACtB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EAEA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wEAAiD,GAAG;AAAA,IAClD,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA;AAAA,IAET,oBAAoB,CAAC,UAAU;AAAA;AAAA,EACjC;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8DAA4C,GAAG;AAAA,IAC7C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AACF;AAuIO,SAAS,iBACd,KACA,KACS;AACT,QAAM,WAAW,IAAI,YAAY,GAAG;AACpC,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,iBAAiB,GAAG;AAC1C,MAAI,cAAc,SAAS;AACzB,WAAO;AAAA,EACT;AACA,MAAI,IAAI,UAAU,cAAc,mBAAmB,QAAQ;AACzD,QAAI,cAAc,kBAAkB,SAAS,MAAM,IAAI,MAAM,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QACE,cAAc,mBAAmB,SAAS,MAAM,IAAI,MAAM,YAAY,CAAC,CAAC;AAExE,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QAAI,cAAc,mBAAmB,SAAS,MAAM,IAAI,KAAK,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,SAAO;AACT;","names":[]}

package/{chunk-MOWAU52B.js → chunk-6GXJ5D26.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   source_default
-} from "./chunk-D7TEG7WN.js";
+} from "./chunk-F7O355AV.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -19,4 +19,4 @@ function policyIcon(policy) {
 export {
   policyIcon
 };
-//# sourceMappingURL=chunk-MOWAU52B.js.map
+//# sourceMappingURL=chunk-6GXJ5D26.js.map

package/{chunk-JXUQQIUP.js → chunk-ADB5CIIV.js}

@@ -6,7 +6,7 @@ import {
   getActiveToken,
   getBaseUrl,
   headersWithCliClientHeaders
-} from "./chunk-D7TEG7WN.js";
+} from "./chunk-F7O355AV.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -656,4 +656,4 @@ export {
   generateWebVideo,
   transcribeAudio
 };
-//# sourceMappingURL=chunk-JXUQQIUP.js.map
+//# sourceMappingURL=chunk-ADB5CIIV.js.map

package/{chunk-D7TEG7WN.js → chunk-F7O355AV.js}

@@ -15391,7 +15391,7 @@ function createCliClientHeaderInjector(options) {
 }
 var addDefaultCliClientHeaders = createCliClientHeaderInjector({
   clientVersion: addClientCapabilityToVersion(
-    "9.271.0",
+    "9.271.1",
     CLIENT_CAPABILITY_CONNECTOR_SLUG_IDENTITIES
   )
 });
@@ -15745,6 +15745,8 @@ var modelProviderCodexRuntimeConfigSchema = external_exports.object({
   name: external_exports.string().min(1),
   baseUrl: external_exports.url(),
   envKey: external_exports.string().regex(/^[A-Za-z_][A-Za-z0-9_]*$/),
+  httpHeaders: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  requiresOpenaiAuth: external_exports.boolean().optional(),
   wireApi: external_exports.literal("responses"),
   supportsWebsockets: external_exports.boolean(),
   modelCatalog: external_exports.record(external_exports.string(), external_exports.unknown()).optional()
@@ -16096,8 +16098,13 @@ var MODEL_PROVIDER_TYPES = {
       OPENAI_BASE_URL: "https://openrouter.ai/api/v1",
       OPENAI_MODEL: "$model"
     },
-    models: ["openai/gpt-5.5"],
-    defaultModel: "openai/gpt-5.5"
+    models: [
+      "openai/gpt-5.6-sol",
+      "openai/gpt-5.6-terra",
+      "openai/gpt-5.6-luna",
+      "openai/gpt-5.5"
+    ],
+    defaultModel: "openai/gpt-5.6-luna"
   },
   // Codex-framework twin of vercel-ai-gateway. Vercel exposes both
   // Anthropic Messages and OpenAI Chat Completions / Responses on the same
@@ -16115,8 +16122,13 @@ var MODEL_PROVIDER_TYPES = {
       OPENAI_BASE_URL: "https://ai-gateway.vercel.sh/v1",
       OPENAI_MODEL: "$model"
     },
-    models: ["openai/gpt-5.5"],
-    defaultModel: "openai/gpt-5.5"
+    models: [
+      "openai/gpt-5.6-sol",
+      "openai/gpt-5.6-terra",
+      "openai/gpt-5.6-luna",
+      "openai/gpt-5.5"
+    ],
+    defaultModel: "openai/gpt-5.6-luna"
   },
   "openai-api-key": {
     framework: "codex",
@@ -16363,9 +16375,27 @@ var MODEL_FIRST_PROVIDER_COMPATIBILITY = {
     "openrouter-api-key",
     "vercel-ai-gateway"
   ],
-  "gpt-5.6-sol": ["vm0", "openai-api-key", "codex-oauth-token"],
-  "gpt-5.6-terra": ["vm0", "openai-api-key", "codex-oauth-token"],
-  "gpt-5.6-luna": ["vm0", "openai-api-key", "codex-oauth-token"],
+  "gpt-5.6-sol": [
+    "vm0",
+    "openai-api-key",
+    "codex-oauth-token",
+    "openrouter-codex",
+    "vercel-ai-gateway-codex"
+  ],
+  "gpt-5.6-terra": [
+    "vm0",
+    "openai-api-key",
+    "codex-oauth-token",
+    "openrouter-codex",
+    "vercel-ai-gateway-codex"
+  ],
+  "gpt-5.6-luna": [
+    "vm0",
+    "openai-api-key",
+    "codex-oauth-token",
+    "openrouter-codex",
+    "vercel-ai-gateway-codex"
+  ],
   "gpt-5.5": [
     "vm0",
     "openai-api-key",
@@ -16518,6 +16548,7 @@ var orgModelPolicySchema = external_exports.object({
   defaultProviderType: modelProviderTypeSchema,
   credentialScope: modelProviderCredentialScopeSchema,
   modelProviderId: external_exports.uuid().nullable(),
+  modelProviderSurfaceId: external_exports.uuid().nullable().optional(),
   routeStatus: orgModelPolicyRouteStatusSchema,
   routeStatusReason: external_exports.string().nullable(),
   createdAt: external_exports.string(),
@@ -16528,7 +16559,8 @@ var updateOrgModelPolicySchema = external_exports.object({
   isDefault: external_exports.boolean(),
   defaultProviderType: modelProviderTypeSchema,
   credentialScope: modelProviderCredentialScopeSchema,
-  modelProviderId: external_exports.uuid().nullable()
+  modelProviderId: external_exports.uuid().nullable(),
+  modelProviderSurfaceId: external_exports.uuid().nullable().optional()
 });
 var requestedOrgModelPolicySchema = updateOrgModelPolicySchema.extend({
   model: external_exports.union([supportedRunModelSchema, retiredRunModelSchema])
@@ -16555,7 +16587,8 @@ var updateOrgModelPoliciesRequestSchema = external_exports.object({
           isDefault: policy.isDefault,
           defaultProviderType: policy.defaultProviderType,
           credentialScope: policy.credentialScope,
-          modelProviderId: policy.modelProviderId
+          modelProviderId: policy.modelProviderId,
+          ...policy.modelProviderSurfaceId === void 0 ? {} : { modelProviderSurfaceId: policy.modelProviderSurfaceId }
         }
       ];
     }
@@ -16573,11 +16606,13 @@ var updateOrgModelPoliciesRequestSchema = external_exports.object({
   ) ? {
     defaultProviderType: replacementRouteSource.defaultProviderType,
     credentialScope: replacementRouteSource.credentialScope,
-    modelProviderId: replacementRouteSource.modelProviderId
+    modelProviderId: replacementRouteSource.modelProviderId,
+    modelProviderSurfaceId: replacementRouteSource.modelProviderSurfaceId ?? null
   } : {
     defaultProviderType: "vm0",
     credentialScope: "org",
-    modelProviderId: null
+    modelProviderId: null,
+    modelProviderSurfaceId: null
   };
   const replacementExists = activePolicies.some((policy) => {
     return policy.model === DEFAULT_ORG_MODEL_POLICY_DEFAULT_MODEL;
@@ -16778,4 +16813,4 @@ export {
   apiErrorSchema,
   withErrorHandler
 };
-//# sourceMappingURL=chunk-D7TEG7WN.js.map
+//# sourceMappingURL=chunk-F7O355AV.js.map