@vm0/cli 9.81.0 → 9.82.1

package/{chunk-3EOIDO3I.js → chunk-2KN52BP2.js}

@@ -47,7 +47,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.81.0",
+    release: "9.82.1",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -66,7 +66,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.81.0",
+    version: "9.82.1",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -139,6 +139,27 @@ function configureGlobalProxyFromEnv() {
   }
 }
 
+// src/lib/api/zero-token.ts
+function decodeZeroTokenPayload(token) {
+  const raw = token ?? process.env.ZERO_TOKEN;
+  if (!raw) return void 0;
+  const prefix = "vm0_sandbox_";
+  if (!raw.startsWith(prefix)) return void 0;
+  const jwt = raw.slice(prefix.length);
+  const parts = jwt.split(".");
+  if (parts.length !== 3) return void 0;
+  try {
+    const payload = JSON.parse(
+      Buffer.from(parts[1], "base64url").toString()
+    );
+    if (payload.scope === "zero" && Array.isArray(payload.capabilities)) {
+      return payload;
+    }
+  } catch {
+  }
+  return void 0;
+}
+
 // src/lib/api/config.ts
 import { homedir } from "os";
 import { join } from "path";
@@ -187,23 +208,6 @@ async function getApiUrl() {
   }
   return config.apiUrl ?? "https://www.vm0.ai";
 }
-function decodeZeroTokenPayload() {
-  const token = process.env.ZERO_TOKEN;
-  if (!token) return void 0;
-  const prefix = "vm0_sandbox_";
-  if (!token.startsWith(prefix)) return void 0;
-  const jwt = token.slice(prefix.length);
-  const parts = jwt.split(".");
-  if (parts.length !== 3) return void 0;
-  try {
-    const payload = JSON.parse(
-      Buffer.from(parts[1], "base64url").toString()
-    );
-    if (payload.scope === "zero") return payload;
-  } catch {
-  }
-  return void 0;
-}
 async function getActiveOrg() {
   const zeroPayload = decodeZeroTokenPayload();
   if (zeroPayload) return zeroPayload.orgId;
@@ -1717,6 +1721,32 @@ var firefliesFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/garmin-connect.generated.ts
+var garminConnectFirewall = {
+  name: "garmin-connect",
+  description: "Garmin Connect API",
+  placeholders: {
+    GARMIN_CONNECT_TOKEN: "vm0placeholderGarminConnectToken000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://apis.garmin.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.GARMIN_CONNECT_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Garmin Connect API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/github.generated.ts
 var githubFirewall = {
   name: "github",
@@ -5407,6 +5437,32 @@ var intercomFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/intervals-icu.generated.ts
+var intervalsIcuFirewall = {
+  name: "intervals-icu",
+  description: "Intervals.icu Training API",
+  placeholders: {
+    INTERVALS_ICU_TOKEN: "vm0placeholderIntervalsIcuToken0000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://intervals.icu",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.INTERVALS_ICU_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Intervals.icu API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/jira.generated.ts
 var jiraFirewall = {
   name: "jira",
@@ -6241,6 +6297,32 @@ var loopsFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/mailsac.generated.ts
+var mailsacFirewall = {
+  name: "mailsac",
+  description: "Mailsac Email API",
+  placeholders: {
+    MAILSAC_TOKEN: "vm0placeholderMailsacToken0000000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://mailsac.com",
+      auth: {
+        headers: {
+          "Mailsac-Key": "${{ secrets.MAILSAC_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Mailsac API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/mercury.generated.ts
 var mercuryFirewall = {
   name: "mercury",
@@ -6464,6 +6546,32 @@ var openaiFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/pdf4me.generated.ts
+var pdf4meFirewall = {
+  name: "pdf4me",
+  description: "PDF4me Document API",
+  placeholders: {
+    PDF4ME_TOKEN: "vm0placeholderPdf4meToken000000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.pdf4me.com",
+      auth: {
+        headers: {
+          Authorization: "${{ secrets.PDF4ME_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all PDF4me API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/pdfco.generated.ts
 var pdfcoFirewall = {
   name: "pdfco",
@@ -6490,6 +6598,32 @@ var pdfcoFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/pdforge.generated.ts
+var pdforgeFirewall = {
+  name: "pdforge",
+  description: "PDForge PDF Generation API",
+  placeholders: {
+    PDFORGE_API_KEY: "vm0placeholderPdforgeApiKey00000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.pdforge.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PDFORGE_API_KEY }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all PDForge API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/perplexity.generated.ts
 var perplexityFirewall = {
   name: "perplexity",
@@ -6542,6 +6676,32 @@ var plausibleFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/podchaser.generated.ts
+var podchaserFirewall = {
+  name: "podchaser",
+  description: "Podchaser Podcast API",
+  placeholders: {
+    PODCHASER_TOKEN: "vm0placeholderPodchaserToken00000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://api.podchaser.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PODCHASER_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Podchaser API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/posthog.generated.ts
 var posthogFirewall = {
   name: "posthog",
@@ -6583,6 +6743,32 @@ var posthogFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/productlane.generated.ts
+var productlaneFirewall = {
+  name: "productlane",
+  description: "Productlane API",
+  placeholders: {
+    PRODUCTLANE_TOKEN: "vm0placeholderProductlaneToken0000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://productlane.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.PRODUCTLANE_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Productlane API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/pushinator.generated.ts
 var pushinatorFirewall = {
   name: "pushinator",
@@ -6661,6 +6847,32 @@ var redditFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/reportei.generated.ts
+var reporteiFirewall = {
+  name: "reportei",
+  description: "Reportei API",
+  placeholders: {
+    REPORTEI_TOKEN: "vm0placeholderReporteiToken00000000000000000000000000a"
+  },
+  apis: [
+    {
+      base: "https://app.reportei.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.REPORTEI_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all Reportei API endpoints",
+          rules: ["ANY /{path*}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/resend.generated.ts
 var resendFirewall = {
   name: "resend",
@@ -8554,14 +8766,14 @@ var xFirewall = {
   name: "x",
   description: "X (Twitter) API",
   placeholders: {
-    X_ACCESS_TOKEN: "AAAAAAAAAAAAAAAAAAAAAAVm0PlaceHolder0000000000000000000000000000000000000000000000000000000000000000000000"
+    X_TOKEN: "AAAAAAAAAAAAAAAAAAAAAAVm0PlaceHolder0000000000000000000000000000000000000000000000000000000000000000000000"
   },
   apis: [
     {
       base: "https://api.x.com",
       auth: {
         headers: {
-          Authorization: "Bearer ${{ secrets.X_ACCESS_TOKEN }}"
+          Authorization: "Bearer ${{ secrets.X_TOKEN }}"
         }
       },
       permissions: [
@@ -8738,6 +8950,7 @@ var builtinFirewalls = {
   figma: figmaFirewall,
   firecrawl: firecrawlFirewall,
   fireflies: firefliesFirewall,
+  "garmin-connect": garminConnectFirewall,
   github: githubFirewall,
   gitlab: gitlabFirewall,
   gmail: gmailFirewall,
@@ -8753,25 +8966,32 @@ var builtinFirewalls = {
   imgur: imgurFirewall,
   instantly: instantlyFirewall,
   intercom: intercomFirewall,
+  "intervals-icu": intervalsIcuFirewall,
   jira: jiraFirewall,
   jotform: jotformFirewall,
   lark: larkFirewall,
   line: lineFirewall,
   linear: linearFirewall,
   loops: loopsFirewall,
+  mailsac: mailsacFirewall,
   mercury: mercuryFirewall,
   minimax: minimaxFirewall,
   monday: mondayFirewall,
   neon: neonFirewall,
   notion: notionFirewall,
   openai: openaiFirewall,
+  pdf4me: pdf4meFirewall,
   pdfco: pdfcoFirewall,
+  pdforge: pdforgeFirewall,
   perplexity: perplexityFirewall,
   plausible: plausibleFirewall,
+  podchaser: podchaserFirewall,
   posthog: posthogFirewall,
+  productlane: productlaneFirewall,
   pushinator: pushinatorFirewall,
   qiita: qiitaFirewall,
   reddit: redditFirewall,
+  reportei: reporteiFirewall,
   resend: resendFirewall,
   revenuecat: revenuecatFirewall,
   runway: runwayFirewall,
@@ -11567,8 +11787,6 @@ var storedExecutionContextSchema = z19.object({
   apiStartTime: z19.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: z19.string().optional(),
-  // Org slug for agent — used for VM0_ACTIVE_ORG
-  agentOrgSlug: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
   // Experimental firewall for proxy-side token replacement
@@ -11607,8 +11825,6 @@ var executionContextSchema = z19.object({
   apiStartTime: z19.number().optional(),
   // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
   userTimezone: z19.string().optional(),
-  // Org slug for agent — used for VM0_ACTIVE_ORG
-  agentOrgSlug: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
   // Experimental firewall for proxy-side token replacement
@@ -12948,9 +13164,55 @@ var CONNECTOR_TYPES_DEF = {
     oauth: {
       authorizationUrl: "https://twitter.com/i/oauth2/authorize",
       tokenUrl: "https://api.twitter.com/2/oauth2/token",
-      scopes: ["tweet.read", "users.read", "follows.read", "offline.access"],
+      // https://docs.x.com/fundamentals/authentication/oauth-2-0/authorization-code
+      scopes: [
+        "tweet.read",
+        // All the Tweets you can view, including Tweets from protected accounts.
+        "tweet.write",
+        // Tweet and Retweet for you.
+        "tweet.moderate.write",
+        // Hide and unhide replies to your Tweets.
+        "users.email",
+        // Email from an authenticated user.
+        "users.read",
+        // Any account you can view, including protected accounts.
+        "follows.read",
+        // People who follow you and people who you follow.
+        "follows.write",
+        // Follow and unfollow people for you.
+        "offline.access",
+        // Stay connected to your account until you revoke access.
+        "space.read",
+        // All the Spaces you can view.
+        "mute.read",
+        // Accounts you've muted.
+        "mute.write",
+        // Mute and unmute accounts for you.
+        "like.read",
+        // Tweets you've liked and likes you can view.
+        "like.write",
+        // Like and un-like Tweets for you.
+        "list.read",
+        // Lists, list members, and list followers of lists you've created or are a member of, including private lists.
+        "list.write",
+        // Create and manage Lists for you.
+        "block.read",
+        // Accounts you've blocked.
+        "block.write",
+        // Block and unblock accounts for you.
+        "bookmark.read",
+        // Get Bookmarked Tweets from an authenticated user.
+        "bookmark.write",
+        // Bookmark and remove Bookmarks from Tweets.
+        "dm.read",
+        // All the Direct Messages you can view, including Direct Messages from protected accounts.
+        "dm.write",
+        // Send and manage Direct Messages for you.
+        "media.write"
+        // Upload media.
+      ],
       environmentMapping: {
-        X_ACCESS_TOKEN: "$secrets.X_ACCESS_TOKEN"
+        X_TOKEN: "$secrets.X_ACCESS_TOKEN"
       }
     }
   },
@@ -14941,19 +15203,15 @@ var c14 = initContract();
 var sendModeSchema = z22.enum(["enter", "cmd-enter"]);
 var userPreferencesResponseSchema = z22.object({
   timezone: z22.string().nullable(),
-  notifyEmail: z22.boolean(),
-  notifySlack: z22.boolean(),
   pinnedAgentIds: z22.array(z22.string()),
   sendMode: sendModeSchema
 });
 var updateUserPreferencesRequestSchema = z22.object({
   timezone: z22.string().min(1).optional(),
-  notifyEmail: z22.boolean().optional(),
-  notifySlack: z22.boolean().optional(),
   pinnedAgentIds: z22.array(z22.string()).optional(),
   sendMode: sendModeSchema.optional()
 }).refine(
-  (data) => data.timezone !== void 0 || data.notifyEmail !== void 0 || data.notifySlack !== void 0 || data.pinnedAgentIds !== void 0 || data.sendMode !== void 0,
+  (data) => data.timezone !== void 0 || data.pinnedAgentIds !== void 0 || data.sendMode !== void 0,
   {
     message: "At least one preference must be provided"
   }
@@ -15098,6 +15356,7 @@ var zeroAgentsMainContract = c17.router({
       201: zeroAgentResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       422: apiErrorSchema
     },
     summary: "Create zero agent"
@@ -15108,7 +15367,8 @@ var zeroAgentsMainContract = c17.router({
     headers: authHeadersSchema,
     responses: {
       200: z26.array(zeroAgentResponseSchema),
-      401: apiErrorSchema
+      401: apiErrorSchema,
+      403: apiErrorSchema
     },
     summary: "List zero agents"
   }
@@ -15122,6 +15382,7 @@ var zeroAgentsByIdContract = c17.router({
     responses: {
       200: zeroAgentResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get zero agent by id"
@@ -15136,6 +15397,7 @@ var zeroAgentsByIdContract = c17.router({
       200: zeroAgentResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema,
       422: apiErrorSchema
     },
@@ -15150,6 +15412,7 @@ var zeroAgentsByIdContract = c17.router({
     responses: {
       200: zeroAgentResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Update zero agent metadata"
@@ -15163,6 +15426,7 @@ var zeroAgentsByIdContract = c17.router({
     responses: {
       204: c17.noBody(),
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Delete zero agent by id"
@@ -15197,6 +15461,7 @@ var zeroAgentInstructionsContract = c17.router({
     responses: {
       200: zeroAgentInstructionsResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Get zero agent instructions"
@@ -15210,6 +15475,7 @@ var zeroAgentInstructionsContract = c17.router({
     responses: {
       200: zeroAgentResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       404: apiErrorSchema,
       422: apiErrorSchema
     },
@@ -16061,23 +16327,25 @@ var zeroSessionsByIdContract = c27.router({
 // ../../packages/core/src/contracts/integrations.ts
 import { z as z35 } from "zod";
 var c28 = initContract();
+var sendSlackMessageBodySchema = z35.object({
+  channel: z35.string().min(1, "Channel ID is required"),
+  text: z35.string().optional(),
+  threadTs: z35.string().optional(),
+  blocks: z35.array(z35.object({ type: z35.string() }).passthrough()).optional()
+});
+var sendSlackMessageResponseSchema = z35.object({
+  ok: z35.literal(true),
+  ts: z35.string().optional(),
+  channel: z35.string().optional()
+});
 var integrationsSlackMessageContract = c28.router({
   sendMessage: {
     method: "POST",
     path: "/api/zero/integrations/slack/message",
     headers: authHeadersSchema,
-    body: z35.object({
-      channel: z35.string().min(1, "Channel ID is required"),
-      text: z35.string().optional(),
-      threadTs: z35.string().optional(),
-      blocks: z35.array(z35.object({ type: z35.string() }).passthrough()).optional()
-    }),
+    body: sendSlackMessageBodySchema,
     responses: {
-      200: z35.object({
-        ok: z35.literal(true),
-        ts: z35.string().optional(),
-        channel: z35.string().optional()
-      }),
+      200: sendSlackMessageResponseSchema,
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -16292,11 +16560,16 @@ var STAFF_USER_HASHES = [
   "67a65740246389d7fecf7702f8b7d6914ad38dc5",
   "55651a8b2c85b35ff0629fa3d4718b9476069d0f"
 ];
+var STAFF_ORG_ID_HASHES = [
+  "65de87977d6d1712cd88d7768209f33f7ed12e0b"
+  // org_3ANttyrbWYJk6JKRSTRLEsbsDLe
+];
 var FEATURE_SWITCHES = {
   ["pricing" /* Pricing */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["dummy" /* Dummy */]: {
     maintainer: "ethan@vm0.ai",
@@ -16321,152 +16594,183 @@ var FEATURE_SWITCHES = {
   ["ahrefsConnector" /* AhrefsConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["canvaConnector" /* CanvaConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["computerConnector" /* ComputerConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["deelConnector" /* DeelConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["docusignConnector" /* DocuSignConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["dropboxConnector" /* DropboxConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["figmaConnector" /* FigmaConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["mercuryConnector" /* MercuryConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["neonConnector" /* NeonConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["garminConnectConnector" /* GarminConnectConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["redditConnector" /* RedditConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["intervalsIcuConnector" /* IntervalsIcuConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["supabaseConnector" /* SupabaseConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["closeConnector" /* CloseConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["webflowConnector" /* WebflowConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["outlookMailConnector" /* OutlookMailConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["outlookCalendarConnector" /* OutlookCalendarConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["metaAdsConnector" /* MetaAdsConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["stripeConnector" /* StripeConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["posthogConnector" /* PosthogConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["mailchimpConnector" /* MailchimpConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["resendConnector" /* ResendConnector */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["githubIntegration" /* GitHubIntegration */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["telegramIntegration" /* TelegramIntegration */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["dataExport" /* DataExport */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["showSystemPrompt" /* ShowSystemPrompt */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
   ["usage" /* Usage */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
-    enabledUserHashes: STAFF_USER_HASHES
+    enabledUserHashes: STAFF_USER_HASHES,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   }
 };
-async function isFeatureEnabled(key, userId, email) {
+async function isFeatureEnabled(key, ctx) {
   const featureSwitch = FEATURE_SWITCHES[key];
   if (featureSwitch.enabled) {
     return true;
   }
-  if (userId && featureSwitch.enabledUserHashes?.length) {
-    const hash = await sha1(userId);
+  if (ctx?.userId && featureSwitch.enabledUserHashes?.length) {
+    const hash = await sha1(ctx.userId);
     if (featureSwitch.enabledUserHashes.includes(hash)) return true;
   }
-  if (email && featureSwitch.enabledEmailHashes?.length) {
-    const hash = await sha1(email.toLowerCase());
+  if (ctx?.email && featureSwitch.enabledEmailHashes?.length) {
+    const hash = await sha1(ctx.email.toLowerCase());
     if (featureSwitch.enabledEmailHashes.includes(hash)) return true;
   }
+  if (ctx?.orgId && featureSwitch.enabledOrgIdHashes?.length) {
+    const hash = await sha1(ctx.orgId);
+    if (featureSwitch.enabledOrgIdHashes.includes(hash)) return true;
+  }
   return false;
 }
 
@@ -17297,11 +17601,23 @@ async function updateZeroAgentInstructions(id, content) {
   handleError(result, `Failed to update instructions for zero agent "${id}"`);
 }
 
-// src/lib/api/domains/zero-schedules.ts
+// src/lib/api/domains/integrations-slack.ts
 import { initClient as initClient14 } from "@ts-rest/core";
+async function sendSlackMessage(body) {
+  const config = await getClientConfig();
+  const client = initClient14(integrationsSlackMessageContract, config);
+  const result = await client.sendMessage({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to send Slack message");
+}
+
+// src/lib/api/domains/zero-schedules.ts
+import { initClient as initClient15 } from "@ts-rest/core";
 async function deployZeroSchedule(body) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesMainContract, config);
+  const client = initClient15(zeroSchedulesMainContract, config);
   const result = await client.deploy({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -17310,7 +17626,7 @@ async function deployZeroSchedule(body) {
 }
 async function listZeroSchedules() {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesMainContract, config);
+  const client = initClient15(zeroSchedulesMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -17319,7 +17635,7 @@ async function listZeroSchedules() {
 }
 async function deleteZeroSchedule(params) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesByNameContract, config);
+  const client = initClient15(zeroSchedulesByNameContract, config);
   const result = await client.delete({
     params: { name: params.name },
     query: { agentId: params.agentId }
@@ -17331,7 +17647,7 @@ async function deleteZeroSchedule(params) {
 }
 async function enableZeroSchedule(params) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesEnableContract, config);
+  const client = initClient15(zeroSchedulesEnableContract, config);
   const result = await client.enable({
     params: { name: params.name },
     body: { agentId: params.agentId }
@@ -17343,7 +17659,7 @@ async function enableZeroSchedule(params) {
 }
 async function disableZeroSchedule(params) {
   const config = await getClientConfig();
-  const client = initClient14(zeroSchedulesEnableContract, config);
+  const client = initClient15(zeroSchedulesEnableContract, config);
   const result = await client.disable({
     params: { name: params.name },
     body: { agentId: params.agentId }
@@ -17467,12 +17783,12 @@ async function promptPassword(message) {
 
 export {
   configureGlobalProxyFromEnv,
+  decodeZeroTokenPayload,
   loadConfig,
   saveConfig,
   getToken,
   getActiveToken,
   getApiUrl,
-  decodeZeroTokenPayload,
   getActiveOrg,
   clearConfig,
   extractAndGroupVariables,
@@ -17584,6 +17900,7 @@ export {
   getZeroConnectorSession,
   createZeroComputerConnector,
   deleteZeroComputerConnector,
+  sendSlackMessage,
   deployZeroSchedule,
   listZeroSchedules,
   deleteZeroSchedule,
@@ -17596,4 +17913,4 @@ export {
   promptSelect,
   promptPassword
 };
-//# sourceMappingURL=chunk-3EOIDO3I.js.map
+//# sourceMappingURL=chunk-2KN52BP2.js.map