@vm0/cli 9.80.0 → 9.82.0

package/{chunk-QKXNL42S.js → chunk-RGS2GO4Q.js}

@@ -47,7 +47,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.80.0",
+    release: "9.82.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -66,7 +66,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.80.0",
+    version: "9.82.0",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -187,7 +187,7 @@ async function getApiUrl() {
   }
   return config.apiUrl ?? "https://www.vm0.ai";
 }
-function decodeOrgIdFromZeroToken() {
+function decodeZeroTokenPayload() {
   const token = process.env.ZERO_TOKEN;
   if (!token) return void 0;
   const prefix = "vm0_sandbox_";
@@ -199,16 +199,14 @@ function decodeOrgIdFromZeroToken() {
     const payload = JSON.parse(
       Buffer.from(parts[1], "base64url").toString()
     );
-    if (payload.scope === "zero" && typeof payload.orgId === "string") {
-      return payload.orgId;
-    }
+    if (payload.scope === "zero") return payload;
   } catch {
   }
   return void 0;
 }
 async function getActiveOrg() {
-  const zeroOrgId = decodeOrgIdFromZeroToken();
-  if (zeroOrgId) return zeroOrgId;
+  const zeroPayload = decodeZeroTokenPayload();
+  if (zeroPayload) return zeroPayload.orgId;
   if (process.env.VM0_ACTIVE_ORG) {
     return process.env.VM0_ACTIVE_ORG;
   }
@@ -1194,6 +1192,34 @@ var confluenceFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/cronlytic.generated.ts
+var cronlyticFirewall = {
+  name: "cronlytic",
+  description: "Cronlytic API",
+  placeholders: {
+    CRONLYTIC_API_KEY: "vm0placeholderCronlyticApiKey000000000000000000000000a",
+    CRONLYTIC_USER_ID: "vm0placeholderCronlyticUserId000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.cronlytic.com",
+      auth: {
+        headers: {
+          "x-api-key": "${{ secrets.CRONLYTIC_API_KEY }}",
+          "x-user-id": "${{ secrets.CRONLYTIC_USER_ID }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Cronlytic API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/customer-io.generated.ts
 var customerIoFirewall = {
   name: "customer-io",
@@ -1391,6 +1417,32 @@ var elevenlabsFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/explorium.generated.ts
+var exploriumFirewall = {
+  name: "explorium",
+  description: "Explorium API",
+  placeholders: {
+    EXPLORIUM_TOKEN: "vm0placeholderExploriumToken0000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.explorium.ai",
+      auth: {
+        headers: {
+          api_key: "${{ secrets.EXPLORIUM_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Explorium API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/fal.generated.ts
 var falFirewall = {
   name: "fal",
@@ -5355,6 +5407,32 @@ var intercomFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/intervals-icu.generated.ts
+var intervalsIcuFirewall = {
+  name: "intervals-icu",
+  description: "Intervals.icu Training API",
+  placeholders: {
+    INTERVALS_ICU_TOKEN: "vm0placeholderIntervalsIcuToken0000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://intervals.icu",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.INTERVALS_ICU_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Intervals.icu API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/jira.generated.ts
 var jiraFirewall = {
   name: "jira",
@@ -6189,6 +6267,32 @@ var loopsFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/mailsac.generated.ts
+var mailsacFirewall = {
+  name: "mailsac",
+  description: "Mailsac Email API",
+  placeholders: {
+    MAILSAC_TOKEN: "vm0placeholderMailsacToken0000000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://mailsac.com",
+      auth: {
+        headers: {
+          "Mailsac-Key": "${{ secrets.MAILSAC_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Mailsac API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/mercury.generated.ts
 var mercuryFirewall = {
   name: "mercury",
@@ -6412,6 +6516,84 @@ var openaiFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/pdf4me.generated.ts
+var pdf4meFirewall = {
+  name: "pdf4me",
+  description: "PDF4me Document API",
+  placeholders: {
+    PDF4ME_TOKEN: "vm0placeholderPdf4meToken000000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.pdf4me.com",
+      auth: {
+        headers: {
+          Authorization: "${{ secrets.PDF4ME_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all PDF4me API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
+// ../../packages/core/src/firewalls/pdfco.generated.ts
+var pdfcoFirewall = {
+  name: "pdfco",
+  description: "PDF.co API",
+  placeholders: {
+    PDFCO_TOKEN: "vm0placeholderPdfcoToken0000000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.pdf.co/v1",
+      auth: {
+        headers: {
+          "x-api-key": "${{ secrets.PDFCO_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all PDF.co API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
+// ../../packages/core/src/firewalls/pdforge.generated.ts
+var pdforgeFirewall = {
+  name: "pdforge",
+  description: "PDForge PDF Generation API",
+  placeholders: {
+    PDFORGE_API_KEY: "vm0placeholderPdforgeApiKey00000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.pdforge.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PDFORGE_API_KEY }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all PDForge API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/perplexity.generated.ts
 var perplexityFirewall = {
   name: "perplexity",
@@ -6464,6 +6646,32 @@ var plausibleFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/podchaser.generated.ts
+var podchaserFirewall = {
+  name: "podchaser",
+  description: "Podchaser Podcast API",
+  placeholders: {
+    PODCHASER_TOKEN: "vm0placeholderPodchaserToken00000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.podchaser.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PODCHASER_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Podchaser API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/posthog.generated.ts
 var posthogFirewall = {
   name: "posthog",
@@ -6505,6 +6713,58 @@ var posthogFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/productlane.generated.ts
+var productlaneFirewall = {
+  name: "productlane",
+  description: "Productlane API",
+  placeholders: {
+    PRODUCTLANE_TOKEN: "vm0placeholderProductlaneToken0000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://productlane.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PRODUCTLANE_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Productlane API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
+// ../../packages/core/src/firewalls/pushinator.generated.ts
+var pushinatorFirewall = {
+  name: "pushinator",
+  description: "Pushinator API",
+  placeholders: {
+    PUSHINATOR_TOKEN: "vm0placeholderPushinatorToken000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.pushinator.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PUSHINATOR_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Pushinator API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/qiita.generated.ts
 var qiitaFirewall = {
   name: "qiita",
@@ -6557,6 +6817,32 @@ var redditFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/reportei.generated.ts
+var reporteiFirewall = {
+  name: "reportei",
+  description: "Reportei API",
+  placeholders: {
+    REPORTEI_TOKEN: "vm0placeholderReporteiToken00000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://app.reportei.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.REPORTEI_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Reportei API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/resend.generated.ts
 var resendFirewall = {
   name: "resend",
@@ -6583,6 +6869,32 @@ var resendFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/revenuecat.generated.ts
+var revenuecatFirewall = {
+  name: "revenuecat",
+  description: "RevenueCat API",
+  placeholders: {
+    REVENUECAT_TOKEN: "vm0placeholderRevenuecatToken000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.revenuecat.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.REVENUECAT_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all RevenueCat API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/runway.generated.ts
 var runwayFirewall = {
   name: "runway",
@@ -6609,6 +6921,32 @@ var runwayFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/scrapeninja.generated.ts
+var scrapeninjaFirewall = {
+  name: "scrapeninja",
+  description: "ScrapeNinja Web Scraping API",
+  placeholders: {
+    SCRAPENINJA_TOKEN: "vm0placeholderScrapeninjaToken0000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://scrapeninja.p.rapidapi.com",
+      auth: {
+        headers: {
+          "X-RapidAPI-Key": "${{ secrets.SCRAPENINJA_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all ScrapeNinja API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/sentry.generated.ts
 var sentryFirewall = {
   name: "sentry",
@@ -6687,6 +7025,32 @@ var shortioFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/similarweb.generated.ts
+var similarwebFirewall = {
+  name: "similarweb",
+  description: "SimilarWeb API",
+  placeholders: {
+    SIMILARWEB_TOKEN: "vm0placeholderSimilarwebToken00000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.similarweb.com",
+      auth: {
+        headers: {
+          "api-key": "${{ secrets.SIMILARWEB_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all SimilarWeb API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/slack.generated.ts
 var slackFirewall = {
   name: "slack",
@@ -7697,6 +8061,32 @@ var todoistFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/v0.generated.ts
+var v0Firewall = {
+  name: "v0",
+  description: "v0 API",
+  placeholders: {
+    V0_TOKEN: "vm0placeholderV0Token00000000000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.v0.dev",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.V0_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all v0 API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/vercel.generated.ts
 var vercelFirewall = {
   name: "vercel",
@@ -8517,6 +8907,7 @@ var builtinFirewalls = {
   close: closeFirewall,
   cloudflare: cloudflareFirewall,
   confluence: confluenceFirewall,
+  cronlytic: cronlyticFirewall,
   "customer-io": customerIoFirewall,
   deepseek: deepseekFirewall,
   deel: deelFirewall,
@@ -8524,6 +8915,7 @@ var builtinFirewalls = {
   discord: discordFirewall,
   dropbox: dropboxFirewall,
   elevenlabs: elevenlabsFirewall,
+  explorium: exploriumFirewall,
   fal: falFirewall,
   figma: figmaFirewall,
   firecrawl: firecrawlFirewall,
@@ -8543,28 +8935,40 @@ var builtinFirewalls = {
   imgur: imgurFirewall,
   instantly: instantlyFirewall,
   intercom: intercomFirewall,
+  "intervals-icu": intervalsIcuFirewall,
   jira: jiraFirewall,
   jotform: jotformFirewall,
   lark: larkFirewall,
   line: lineFirewall,
   linear: linearFirewall,
   loops: loopsFirewall,
+  mailsac: mailsacFirewall,
   mercury: mercuryFirewall,
   minimax: minimaxFirewall,
   monday: mondayFirewall,
   neon: neonFirewall,
   notion: notionFirewall,
   openai: openaiFirewall,
+  pdf4me: pdf4meFirewall,
+  pdfco: pdfcoFirewall,
+  pdforge: pdforgeFirewall,
   perplexity: perplexityFirewall,
   plausible: plausibleFirewall,
+  podchaser: podchaserFirewall,
   posthog: posthogFirewall,
+  productlane: productlaneFirewall,
+  pushinator: pushinatorFirewall,
   qiita: qiitaFirewall,
   reddit: redditFirewall,
+  reportei: reporteiFirewall,
   resend: resendFirewall,
+  revenuecat: revenuecatFirewall,
   runway: runwayFirewall,
+  scrapeninja: scrapeninjaFirewall,
   sentry: sentryFirewall,
   serpapi: serpapiFirewall,
   shortio: shortioFirewall,
+  similarweb: similarwebFirewall,
   slack: slackFirewall,
   strava: stravaFirewall,
   stripe: stripeFirewall,
@@ -8573,6 +8977,7 @@ var builtinFirewalls = {
   tavily: tavilyFirewall,
   tldv: tldvFirewall,
   todoist: todoistFirewall,
+  v0: v0Firewall,
   vercel: vercelFirewall,
   webflow: webflowFirewall,
   wix: wixFirewall,
@@ -11351,8 +11756,6 @@ var storedExecutionContextSchema = z19.object({
   apiStartTime: z19.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: z19.string().optional(),
-  // Org slug for agent — used for VM0_ACTIVE_ORG
-  agentOrgSlug: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
   // Experimental firewall for proxy-side token replacement
@@ -11391,8 +11794,6 @@ var executionContextSchema = z19.object({
   apiStartTime: z19.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: z19.string().optional(),
-  // Org slug for agent — used for VM0_ACTIVE_ORG
-  agentOrgSlug: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
   // Experimental firewall for proxy-side token replacement
@@ -12732,7 +13133,53 @@ var CONNECTOR_TYPES_DEF = {
     oauth: {
       authorizationUrl: "https://twitter.com/i/oauth2/authorize",
       tokenUrl: "https://api.twitter.com/2/oauth2/token",
-      scopes: ["tweet.read", "users.read", "follows.read", "offline.access"],
+      // https://docs.x.com/fundamentals/authentication/oauth-2-0/authorization-code
+      scopes: [
+        "tweet.read",
+        // All the Tweets you can view, including Tweets from protected accounts.
+        "tweet.write",
+        // Tweet and Retweet for you.
+        "tweet.moderate.write",
+        // Hide and unhide replies to your Tweets.
+        "users.email",
+        // Email from an authenticated user.
+        "users.read",
+        // Any account you can view, including protected accounts.
+        "follows.read",
+        // People who follow you and people who you follow.
+        "follows.write",
+        // Follow and unfollow people for you.
+        "offline.access",
+        // Stay connected to your account until you revoke access.
+        "space.read",
+        // All the Spaces you can view.
+        "mute.read",
+        // Accounts you've muted.
+        "mute.write",
+        // Mute and unmute accounts for you.
+        "like.read",
+        // Tweets you've liked and likes you can view.
+        "like.write",
+        // Like and un-like Tweets for you.
+        "list.read",
+        // Lists, list members, and list followers of lists you've created or are a member of, including private lists.
+        "list.write",
+        // Create and manage Lists for you.
+        "block.read",
+        // Accounts you've blocked.
+        "block.write",
+        // Block and unblock accounts for you.
+        "bookmark.read",
+        // Get Bookmarked Tweets from an authenticated user.
+        "bookmark.write",
+        // Bookmark and remove Bookmarks from Tweets.
+        "dm.read",
+        // All the Direct Messages you can view, including Direct Messages from protected accounts.
+        "dm.write",
+        // Send and manage Direct Messages for you.
+        "media.write"
+        // Upload media.
+      ],
       environmentMapping: {
         X_ACCESS_TOKEN: "$secrets.X_ACCESS_TOKEN"
       }
@@ -14725,19 +15172,15 @@ var c14 = initContract();
 var sendModeSchema = z22.enum(["enter", "cmd-enter"]);
 var userPreferencesResponseSchema = z22.object({
   timezone: z22.string().nullable(),
-  notifyEmail: z22.boolean(),
-  notifySlack: z22.boolean(),
   pinnedAgentIds: z22.array(z22.string()),
   sendMode: sendModeSchema
 });
 var updateUserPreferencesRequestSchema = z22.object({
   timezone: z22.string().min(1).optional(),
-  notifyEmail: z22.boolean().optional(),
-  notifySlack: z22.boolean().optional(),
   pinnedAgentIds: z22.array(z22.string()).optional(),
   sendMode: sendModeSchema.optional()
 }).refine(
-  (data) => data.timezone !== void 0 || data.notifyEmail !== void 0 || data.notifySlack !== void 0 || data.pinnedAgentIds !== void 0 || data.sendMode !== void 0,
+  (data) => data.timezone !== void 0 || data.pinnedAgentIds !== void 0 || data.sendMode !== void 0,
   {
     message: "At least one preference must be provided"
   }
@@ -14882,6 +15325,7 @@ var zeroAgentsMainContract = c17.router({
       201: zeroAgentResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       422: apiErrorSchema
     },
     summary: "Create zero agent"
@@ -14892,7 +15336,8 @@ var zeroAgentsMainContract = c17.router({
     headers: authHeadersSchema,
     responses: {
       200: z26.array(zeroAgentResponseSchema),
-      401: apiErrorSchema
+      401: apiErrorSchema,
+      403: apiErrorSchema
     },
     summary: "List zero agents"
   }
@@ -14902,10 +15347,11 @@ var zeroAgentsByIdContract = c17.router({
     method: "GET",
     path: "/api/zero/agents/:id",
     headers: authHeadersSchema,
-    pathParams: z26.object({ id: z26.string() }),
+    pathParams: z26.object({ id: z26.string().uuid() }),
     responses: {
       200: zeroAgentResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get zero agent by id"
@@ -14914,12 +15360,13 @@ var zeroAgentsByIdContract = c17.router({
     method: "PUT",
     path: "/api/zero/agents/:id",
     headers: authHeadersSchema,
-    pathParams: z26.object({ id: z26.string() }),
+    pathParams: z26.object({ id: z26.string().uuid() }),
     body: zeroAgentRequestSchema,
     responses: {
       200: zeroAgentResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema,
       422: apiErrorSchema
     },
@@ -14929,11 +15376,12 @@ var zeroAgentsByIdContract = c17.router({
     method: "PATCH",
     path: "/api/zero/agents/:id",
     headers: authHeadersSchema,
-    pathParams: z26.object({ id: z26.string() }),
+    pathParams: z26.object({ id: z26.string().uuid() }),
     body: zeroAgentMetadataRequestSchema,
     responses: {
       200: zeroAgentResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Update zero agent metadata"
@@ -14942,18 +15390,19 @@ var zeroAgentsByIdContract = c17.router({
     method: "DELETE",
     path: "/api/zero/agents/:id",
     headers: authHeadersSchema,
-    pathParams: z26.object({ id: z26.string() }),
+    pathParams: z26.object({ id: z26.string().uuid() }),
     body: c17.noBody(),
     responses: {
       204: c17.noBody(),
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Delete zero agent by id"
   }
 });
 var zeroAgentFirewallPoliciesRequestSchema = z26.object({
-  agentId: z26.string(),
+  agentId: z26.string().uuid(),
   policies: firewallPoliciesSchema
 });
 var zeroAgentFirewallPoliciesContract = c17.router({
@@ -14977,10 +15426,11 @@ var zeroAgentInstructionsContract = c17.router({
     method: "GET",
     path: "/api/zero/agents/:id/instructions",
     headers: authHeadersSchema,
-    pathParams: z26.object({ id: z26.string() }),
+    pathParams: z26.object({ id: z26.string().uuid() }),
     responses: {
       200: zeroAgentInstructionsResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get zero agent instructions"
@@ -14989,11 +15439,12 @@ var zeroAgentInstructionsContract = c17.router({
     method: "PUT",
     path: "/api/zero/agents/:id/instructions",
     headers: authHeadersSchema,
-    pathParams: z26.object({ id: z26.string() }),
+    pathParams: z26.object({ id: z26.string().uuid() }),
     body: zeroAgentInstructionsRequestSchema,
     responses: {
       200: zeroAgentResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema,
       422: apiErrorSchema
     },
@@ -15845,23 +16296,25 @@ var zeroSessionsByIdContract = c27.router({
 // ../../packages/core/src/contracts/integrations.ts
 import { z as z35 } from "zod";
 var c28 = initContract();
+var sendSlackMessageBodySchema = z35.object({
+  channel: z35.string().min(1, "Channel ID is required"),
+  text: z35.string().optional(),
+  threadTs: z35.string().optional(),
+  blocks: z35.array(z35.object({ type: z35.string() }).passthrough()).optional()
+});
+var sendSlackMessageResponseSchema = z35.object({
+  ok: z35.literal(true),
+  ts: z35.string().optional(),
+  channel: z35.string().optional()
+});
 var integrationsSlackMessageContract = c28.router({
   sendMessage: {
     method: "POST",
     path: "/api/zero/integrations/slack/message",
     headers: authHeadersSchema,
-    body: z35.object({
-      channel: z35.string().min(1, "Channel ID is required"),
-      text: z35.string().optional(),
-      threadTs: z35.string().optional(),
-      blocks: z35.array(z35.object({ type: z35.string() }).passthrough()).optional()
-    }),
+    body: sendSlackMessageBodySchema,
     responses: {
-      200: z35.object({
-        ok: z35.literal(true),
-        ts: z35.string().optional(),
-        channel: z35.string().optional()
-      }),
+      200: sendSlackMessageResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -16076,11 +16529,16 @@ var STAFF_USER_HASHES = [
   "67a65740246389d7fecf7702f8b7d6914ad38dc5",
   "55651a8b2c85b35ff0629fa3d4718b9476069d0f"
 ];
+var STAFF_ORG_ID_HASHES = [
+  "65de87977d6d1712cd88d7768209f33f7ed12e0b"
+  // org_3ANttyrbWYJk6JKRSTRLEsbsDLe
+];
 var FEATURE_SWITCHES = {
   ["pricing" /* Pricing */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["dummy" /* Dummy */]: {
     maintainer: "ethan@vm0.ai",
@@ -16105,152 +16563,183 @@ var FEATURE_SWITCHES = {
   ["ahrefsConnector" /* AhrefsConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["canvaConnector" /* CanvaConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["computerConnector" /* ComputerConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["deelConnector" /* DeelConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["docusignConnector" /* DocuSignConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["dropboxConnector" /* DropboxConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["figmaConnector" /* FigmaConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["mercuryConnector" /* MercuryConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["neonConnector" /* NeonConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["garminConnectConnector" /* GarminConnectConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["redditConnector" /* RedditConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["intervalsIcuConnector" /* IntervalsIcuConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["supabaseConnector" /* SupabaseConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["closeConnector" /* CloseConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["webflowConnector" /* WebflowConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["outlookMailConnector" /* OutlookMailConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["outlookCalendarConnector" /* OutlookCalendarConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["metaAdsConnector" /* MetaAdsConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["stripeConnector" /* StripeConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["posthogConnector" /* PosthogConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["mailchimpConnector" /* MailchimpConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["resendConnector" /* ResendConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["githubIntegration" /* GitHubIntegration */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["telegramIntegration" /* TelegramIntegration */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["dataExport" /* DataExport */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["showSystemPrompt" /* ShowSystemPrompt */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["usage" /* Usage */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   }
 };
-async function isFeatureEnabled(key, userId, email) {
+async function isFeatureEnabled(key, ctx) {
   const featureSwitch = FEATURE_SWITCHES[key];
   if (featureSwitch.enabled) {
     return true;
   }
-  if (userId && featureSwitch.enabledUserHashes?.length) {
-    const hash = await sha1(userId);
+  if (ctx?.userId && featureSwitch.enabledUserHashes?.length) {
+    const hash = await sha1(ctx.userId);
     if (featureSwitch.enabledUserHashes.includes(hash)) return true;
   }
-  if (email && featureSwitch.enabledEmailHashes?.length) {
-    const hash = await sha1(email.toLowerCase());
+  if (ctx?.email && featureSwitch.enabledEmailHashes?.length) {
+    const hash = await sha1(ctx.email.toLowerCase());
     if (featureSwitch.enabledEmailHashes.includes(hash)) return true;
   }
+  if (ctx?.orgId && featureSwitch.enabledOrgIdHashes?.length) {
+    const hash = await sha1(ctx.orgId);
+    if (featureSwitch.enabledOrgIdHashes.includes(hash)) return true;
+  }
   return false;
 }
 
@@ -17081,11 +17570,23 @@ async function updateZeroAgentInstructions(id, content) {
   handleError(result, `Failed to update instructions for zero agent "${id}"`);
 }
 
-// src/lib/api/domains/zero-schedules.ts
+// src/lib/api/domains/integrations-slack.ts
 import { initClient as initClient14 } from "@ts-rest/core";
+async function sendSlackMessage(body) {
+  const config = await getClientConfig();
+  const client = initClient14(integrationsSlackMessageContract, config);
+  const result = await client.sendMessage({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to send Slack message");
+}
+
+// src/lib/api/domains/zero-schedules.ts
+import { initClient as initClient15 } from "@ts-rest/core";
 async function deployZeroSchedule(body) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesMainContract, config);
+  const client = initClient15(zeroSchedulesMainContract, config);
   const result = await client.deploy({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -17094,7 +17595,7 @@ async function deployZeroSchedule(body) {
 }
 async function listZeroSchedules() {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesMainContract, config);
+  const client = initClient15(zeroSchedulesMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -17103,7 +17604,7 @@ async function listZeroSchedules() {
 }
 async function deleteZeroSchedule(params) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesByNameContract, config);
+  const client = initClient15(zeroSchedulesByNameContract, config);
   const result = await client.delete({
     params: { name: params.name },
     query: { agentId: params.agentId }
@@ -17115,7 +17616,7 @@ async function deleteZeroSchedule(params) {
 }
 async function enableZeroSchedule(params) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesEnableContract, config);
+  const client = initClient15(zeroSchedulesEnableContract, config);
   const result = await client.enable({
     params: { name: params.name },
     body: { agentId: params.agentId }
@@ -17127,7 +17628,7 @@ async function enableZeroSchedule(params) {
 }
 async function disableZeroSchedule(params) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesEnableContract, config);
+  const client = initClient15(zeroSchedulesEnableContract, config);
   const result = await client.disable({
     params: { name: params.name },
     body: { agentId: params.agentId }
@@ -17256,6 +17757,7 @@ export {
   getToken,
   getActiveToken,
   getApiUrl,
+  decodeZeroTokenPayload,
   getActiveOrg,
   clearConfig,
   extractAndGroupVariables,
@@ -17367,6 +17869,7 @@ export {
   getZeroConnectorSession,
   createZeroComputerConnector,
   deleteZeroComputerConnector,
+  sendSlackMessage,
   deployZeroSchedule,
   listZeroSchedules,
   deleteZeroSchedule,
@@ -17379,4 +17882,4 @@ export {
   promptSelect,
   promptPassword
 };
-//# sourceMappingURL=chunk-QKXNL42S.js.map
+//# sourceMappingURL=chunk-RGS2GO4Q.js.map