@vm0/cli 9.213.7 → 9.214.0

package/{web-CCVDAUYP.js → web-UUM7QCLI.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
-import "./chunk-3WC7YF42.js";
+import "./chunk-IZJCDQVH.js";
 import "./chunk-LTDQISD7.js";
 import {
   downloadWebFile,
@@ -106,4 +106,4 @@ Examples:
 export {
   zeroWebCommand
 };
-//# sourceMappingURL=web-CCVDAUYP.js.map
+//# sourceMappingURL=web-UUM7QCLI.js.map

package/{whoami-ZZZUZIL7.js → whoami-SDUJGSRT.js}

@@ -4,15 +4,15 @@ const require = __createRequire(import.meta.url);
 import {
   loadConnectorPermissionInfos,
   policyIcon
-} from "./chunk-IMJM4MSF.js";
+} from "./chunk-73XD3BHA.js";
 import {
   permissionGrantsToFirewallPolicies
-} from "./chunk-C3WSLFCZ.js";
+} from "./chunk-TIVKO5OM.js";
 import {
   getZeroAgentUserConnectors,
   listZeroConnectors,
   listZeroUserPermissionGrants
-} from "./chunk-3WC7YF42.js";
+} from "./chunk-IZJCDQVH.js";
 import "./chunk-LTDQISD7.js";
 import {
   getActiveOrg,
@@ -192,4 +192,4 @@ Notes:
 export {
   zeroWhoamiCommand
 };
-//# sourceMappingURL=whoami-ZZZUZIL7.js.map
+//# sourceMappingURL=whoami-SDUJGSRT.js.map

package/{workflow-DR5N3QR7.js → workflow-33CNJGIN.js}

@@ -27,7 +27,7 @@ import {
   runWorkflow,
   updateWorkflow,
   updateWorkflowTrigger
-} from "./chunk-3WC7YF42.js";
+} from "./chunk-IZJCDQVH.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -462,6 +462,12 @@ function formatGmailMatchSummary(config) {
   }
   return parts.length > 0 ? parts.join("; ") : "all inbound messages";
 }
+function formatGithubSubject(subject) {
+  if (subject === "pull_requests") {
+    return "pull requests";
+  }
+  return subject;
+}
 function formatWorkflowTriggerEntry(trigger) {
   if (trigger.kind === "event" && trigger.eventType === "gmail-new-message") {
     return `Gmail new message: ${formatGmailMatchSummary(trigger.eventConfig)}`;
@@ -469,6 +475,11 @@ function formatWorkflowTriggerEntry(trigger) {
   if (trigger.kind === "event" && trigger.eventType === "gmail-label-applied") {
     return `Gmail label applied: ${quote(trigger.eventConfig.labelName)}`;
   }
+  if (trigger.kind === "event" && trigger.eventType === "github-label-applied") {
+    return `GitHub label applied: ${quote(trigger.eventConfig.labelName)} (${formatGithubSubject(
+      trigger.eventConfig.filters.subject
+    )}, actor ${trigger.eventConfig.filters.actor.type})`;
+  }
   if (isWebhookTrigger(trigger)) {
     return `Webhook: ${trigger.webhookUrl}`;
   }
@@ -542,7 +553,7 @@ function printWorkflowTriggerDetails(trigger, options) {
   }
   console.log(`${"Status:".padEnd(14)}${status}`);
   console.log(
-    `${"Trigger:".padEnd(14)}${trigger.kind === "event" ? trigger.eventType === "gmail-new-message" ? "Gmail new message" : trigger.eventType === "gmail-label-applied" ? "Gmail label applied" : "Webhook" : formatWorkflowTriggerEntry(trigger)}`
+    `${"Trigger:".padEnd(14)}${trigger.kind === "event" ? trigger.eventType === "gmail-new-message" ? "Gmail new message" : trigger.eventType === "gmail-label-applied" ? "Gmail label applied" : trigger.eventType === "github-label-applied" ? "GitHub label applied" : "Webhook" : formatWorkflowTriggerEntry(trigger)}`
   );
   if (trigger.kind === "event" && trigger.eventType === "gmail-new-message") {
     console.log(
@@ -552,6 +563,17 @@ function printWorkflowTriggerDetails(trigger, options) {
   if (trigger.kind === "event" && trigger.eventType === "gmail-label-applied") {
     console.log(`${"Label:".padEnd(14)}${trigger.eventConfig.labelName}`);
   }
+  if (trigger.kind === "event" && trigger.eventType === "github-label-applied") {
+    console.log(`${"Label:".padEnd(14)}${trigger.eventConfig.labelName}`);
+    console.log(
+      `${"Subject:".padEnd(14)}${formatGithubSubject(
+        trigger.eventConfig.filters.subject
+      )}`
+    );
+    console.log(
+      `${"Actor:".padEnd(14)}${trigger.eventConfig.filters.actor.type}`
+    );
+  }
   if (isWebhookTrigger(trigger)) {
     console.log(`${"Webhook URL:".padEnd(14)}${trigger.webhookUrl}`);
     console.log(
@@ -794,15 +816,16 @@ var SCHEDULE_KINDS = ["cron", "once", "loop"];
 var EVENT_KINDS = [
   "gmail-new-message",
   "gmail-label-applied",
+  "github-label-applied",
   "webhook"
 ];
 var TRIGGER_KINDS = [...SCHEDULE_KINDS, ...EVENT_KINDS];
-var EXACTLY_ONE_FLAG_MESSAGE = "Provide exactly one of --expr (cron), --at (once), --every (loop), Gmail match options, or --label";
+var EXACTLY_ONE_FLAG_MESSAGE = "Provide exactly one of --expr (cron), --at (once), --every (loop), Gmail match options, --label, --subject, or --actor";
 function addGmailTriggerOptions(command) {
   return command.option(
     "--config <path>",
     "Path to a Gmail new message trigger config JSON"
-  ).option("--label <name>", "Gmail label name for label-applied triggers").option("--from-contains <text>", "Require the From header to contain text").option(
+  ).option("--label <name>", "Label name for label-applied triggers").option("--from-contains <text>", "Require the From header to contain text").option(
     "--from-not-contains <text>",
     "Require the From header not to contain text"
   ).option(
@@ -825,6 +848,15 @@ function addGmailTriggerOptions(command) {
     "Require the Cc header not to contain text"
   );
 }
+function addGithubTriggerOptions(command) {
+  return command.option(
+    "--subject <subject>",
+    "GitHub subject filter for github-label-applied: both | issues | pull-requests"
+  ).option(
+    "--actor <actor>",
+    "GitHub actor filter for github-label-applied: me | anyone"
+  );
+}
 function timezoneOrUtc(timezone) {
   return timezone ?? "UTC";
 }
@@ -964,6 +996,67 @@ function buildSchedule(kind, options) {
 function hasScheduleAddOptions(options) {
   return options.expr !== void 0 || options.at !== void 0 || options.every !== void 0 || options.timezone !== void 0;
 }
+function hasGithubTriggerOptions(options) {
+  return options.subject !== void 0 || options.actor !== void 0;
+}
+function scheduleUpdateFlagCount(options) {
+  return [options.expr, options.at, options.every].filter((value) => {
+    return value !== void 0;
+  }).length;
+}
+function hasScheduleUpdateOptions(options) {
+  return scheduleUpdateFlagCount(options) > 0 || options.timezone !== void 0;
+}
+function parseGithubSubject(value, fallback = "both") {
+  if (value === void 0) {
+    return fallback;
+  }
+  switch (value) {
+    case "both":
+    case "issues":
+      return value;
+    case "pull-requests":
+      return "pull_requests";
+    default:
+      throw new Error(
+        `Invalid --subject "${value}". Use one of: both, issues, pull-requests`
+      );
+  }
+}
+function parseGithubActor(value, fallback = "me") {
+  if (value === void 0) {
+    return fallback;
+  }
+  if (value === "me" || value === "anyone") {
+    return value;
+  }
+  throw new Error(`Invalid --actor "${value}". Use one of: me, anyone`);
+}
+function buildGithubLabelAppliedEventConfig(options, existing) {
+  const labelName = options.label?.trim() ?? existing?.eventConfig.labelName;
+  if (!labelName) {
+    throw new Error(
+      'github-label-applied triggers require --label "Label name"'
+    );
+  }
+  return {
+    provider: "github",
+    event: "label_applied",
+    labelName,
+    filters: {
+      subject: parseGithubSubject(
+        options.subject,
+        existing?.eventConfig.filters.subject ?? "both"
+      ),
+      actor: {
+        type: parseGithubActor(
+          options.actor,
+          existing?.eventConfig.filters.actor.type ?? "me"
+        )
+      }
+    }
+  };
+}
 function buildCreateRequest(kind, options) {
   if (kind === "gmail-new-message") {
     if (hasScheduleAddOptions(options)) {
@@ -972,7 +1065,12 @@ function buildCreateRequest(kind, options) {
       );
     }
     if (hasGmailLabelOption(options)) {
-      throw new Error("--label only applies to gmail-label-applied triggers");
+      throw new Error("--label only applies to label-applied event triggers");
+    }
+    if (hasGithubTriggerOptions(options)) {
+      throw new Error(
+        "GitHub trigger flags only apply to GitHub event triggers"
+      );
     }
     return {
       kind: "event",
@@ -991,20 +1089,42 @@ function buildCreateRequest(kind, options) {
         "Gmail match flags and --config only apply to gmail-new-message triggers"
       );
     }
+    if (hasGithubTriggerOptions(options)) {
+      throw new Error(
+        "GitHub trigger flags only apply to GitHub event triggers"
+      );
+    }
     return {
       kind: "event",
       eventType: "gmail-label-applied",
       eventConfig: buildGmailLabelAppliedEventConfig(options)
     };
   }
+  if (kind === "github-label-applied") {
+    if (hasScheduleAddOptions(options)) {
+      throw new Error(
+        "--expr, --at, --every, and --timezone only apply to schedule triggers"
+      );
+    }
+    if (hasGmailTriggerOptions(options)) {
+      throw new Error(
+        "Gmail match flags and --config only apply to Gmail event triggers"
+      );
+    }
+    return {
+      kind: "event",
+      eventType: "github-label-applied",
+      eventConfig: buildGithubLabelAppliedEventConfig(options)
+    };
+  }
   if (kind === "webhook") {
     if (hasScheduleAddOptions(options)) {
       throw new Error(
         "--expr, --at, --every, and --timezone only apply to schedule triggers"
       );
     }
-    if (hasGmailTriggerOptions(options) || hasGmailLabelOption(options)) {
-      throw new Error("Gmail trigger flags only apply to Gmail event triggers");
+    if (hasGmailTriggerOptions(options) || hasGmailLabelOption(options) || hasGithubTriggerOptions(options)) {
+      throw new Error("Event trigger flags only apply to event triggers");
     }
     return {
       kind: "event",
@@ -1016,34 +1136,49 @@ function buildCreateRequest(kind, options) {
       }
     };
   }
-  if (hasGmailTriggerOptions(options) || hasGmailLabelOption(options)) {
-    throw new Error("Gmail trigger flags only apply to Gmail event triggers");
+  if (hasGmailTriggerOptions(options) || hasGmailLabelOption(options) || hasGithubTriggerOptions(options)) {
+    throw new Error("Event trigger flags only apply to event triggers");
   }
   return { schedule: buildSchedule(kind, options) };
 }
-function buildUpdate(options) {
-  const flagCount = [options.expr, options.at, options.every].filter(
-    (value) => {
-      return value !== void 0;
-    }
-  ).length;
+function buildEventUpdate(options, existing) {
   const hasGmailOptions = hasGmailTriggerOptions(options);
   const hasLabelOption = hasGmailLabelOption(options);
-  if (hasGmailOptions && hasLabelOption) {
-    throw new Error("Use either Gmail match options or --label");
+  const hasGithubOptions = hasGithubTriggerOptions(options);
+  if (existing.eventType === "github-label-applied") {
+    if (hasGmailOptions) {
+      throw new Error("Gmail match flags only apply to Gmail event triggers");
+    }
+    if (!hasLabelOption && !hasGithubOptions) {
+      throw new Error(
+        "Provide --label, --subject, or --actor for github-label-applied triggers"
+      );
+    }
+    return {
+      eventConfig: buildGithubLabelAppliedEventConfig(options, existing)
+    };
+  }
+  if (hasGithubOptions) {
+    throw new Error("GitHub trigger flags only apply to GitHub event triggers");
   }
-  if (hasLabelOption) {
-    if (flagCount > 0 || options.timezone !== void 0) {
-      throw new Error("Use either schedule flags or --label");
+  if (existing.eventType === "gmail-label-applied") {
+    if (!hasLabelOption || hasGmailOptions) {
+      throw new Error("Use --label for gmail-label-applied triggers");
     }
     return { eventConfig: buildGmailLabelAppliedEventConfig(options) };
   }
-  if (hasGmailOptions) {
-    if (flagCount > 0 || options.timezone !== void 0) {
-      throw new Error("Use either schedule flags or Gmail match options");
-    }
-    return { eventConfig: buildGmailNewMessageEventConfig(options) };
+  if (!hasGmailOptions || hasLabelOption) {
+    throw new Error("Use Gmail match options for gmail-new-message triggers");
+  }
+  return { eventConfig: buildGmailNewMessageEventConfig(options) };
+}
+function buildScheduleUpdate(options) {
+  const hasGmailOptions = hasGmailTriggerOptions(options);
+  const hasLabelOption = hasGmailLabelOption(options);
+  if (hasGmailOptions || hasLabelOption) {
+    throw new Error("Gmail trigger flags only apply to Gmail event triggers");
   }
+  const flagCount = scheduleUpdateFlagCount(options);
   if (flagCount !== 1) {
     throw new Error(EXACTLY_ONE_FLAG_MESSAGE);
   }
@@ -1058,6 +1193,25 @@ function buildUpdate(options) {
   }
   return { schedule: buildSchedule("loop", options) };
 }
+function buildUpdate(options, existing) {
+  const hasEventOptions = hasGmailTriggerOptions(options) || hasGmailLabelOption(options) || hasGithubTriggerOptions(options);
+  if (hasScheduleUpdateOptions(options) && hasEventOptions) {
+    throw new Error("Use either schedule flags or event trigger options");
+  }
+  if (hasGmailTriggerOptions(options) && hasGmailLabelOption(options)) {
+    throw new Error("Use either Gmail match options or --label");
+  }
+  if (existing.kind === "event") {
+    if (hasScheduleUpdateOptions(options)) {
+      throw new Error("Schedule flags only apply to schedule triggers");
+    }
+    return buildEventUpdate(options, existing);
+  }
+  if (hasGithubTriggerOptions(options)) {
+    throw new Error("GitHub trigger flags only apply to GitHub event triggers");
+  }
+  return buildScheduleUpdate(options);
+}
 async function resolveWorkflowId(ref, options) {
   if (UUID_RE.test(ref)) {
     return ref;
@@ -1078,13 +1232,15 @@ async function resolveWorkflowId(ref, options) {
   }
   return matches[0].id;
 }
-var addCommand = addGmailTriggerOptions(
-  new Command().name("add").description("Add a trigger to a workflow").argument("<workflow>", "Workflow ID or name").argument("<kind>", `Trigger type: ${TRIGGER_KINDS.join(" | ")}`).option("--expr <expression>", 'Cron expression for kind "cron"').option("--at <iso-time>", 'Fire time for kind "once"').option(
-    "--every <duration>",
-    'Interval for kind "loop" (e.g. 15m, 1h, 90s)'
-  ).option(
-    "-z, --timezone <tz>",
-    "IANA timezone for cron/once (default: UTC)"
+var addCommand = addGithubTriggerOptions(
+  addGmailTriggerOptions(
+    new Command().name("add").description("Add a trigger to a workflow").argument("<workflow>", "Workflow ID or name").argument("<kind>", `Trigger type: ${TRIGGER_KINDS.join(" | ")}`).option("--expr <expression>", 'Cron expression for kind "cron"').option("--at <iso-time>", 'Fire time for kind "once"').option(
+      "--every <duration>",
+      'Interval for kind "loop" (e.g. 15m, 1h, 90s)'
+    ).option(
+      "-z, --timezone <tz>",
+      "IANA timezone for cron/once (default: UTC)"
+    )
   )
 ).option("--agent <id>", "Agent ID for resolving a workflow name").addHelpText(
   "after",
@@ -1096,11 +1252,13 @@ Examples:
   zero workflow trigger add triage gmail-new-message --from-contains "@example.com"
   zero workflow trigger add triage gmail-new-message --config ./gmail-trigger.json
   zero workflow trigger add triage gmail-label-applied --label "Support"
+  zero workflow trigger add triage github-label-applied --label "triage" --subject both --actor me
   zero workflow trigger add triage webhook
 
 Notes:
   - Workflow names resolve under --agent, then ZERO_AGENT_ID, then all visible workflows
   - Gmail triggers match all inbound messages when no text match rules are provided
+  - GitHub label triggers require the GitHub App installation in the workspace
   - Webhook triggers print the signing secret only once after creation
   - Use the workflow ID when a name is ambiguous`
 ).action(
@@ -1119,8 +1277,12 @@ Notes:
     }
   )
 );
-var updateCommand = addGmailTriggerOptions(
-  new Command().name("update").description("Replace a workflow trigger's schedule or Gmail match config").argument("<trigger>", "Workflow trigger ID").option("--expr <expression>", 'New cron schedule (e.g. "0 9 * * *")').option("--at <iso-time>", 'New one-time fire (e.g. "2026-06-10T09:00")').option("--every <duration>", "New loop interval (e.g. 15m, 1h, 90s)").option("-z, --timezone <tz>", "IANA timezone for --expr / --at")
+var updateCommand = addGithubTriggerOptions(
+  addGmailTriggerOptions(
+    new Command().name("update").description(
+      "Replace a workflow trigger's schedule or Gmail match config"
+    ).argument("<trigger>", "Workflow trigger ID").option("--expr <expression>", 'New cron schedule (e.g. "0 9 * * *")').option("--at <iso-time>", 'New one-time fire (e.g. "2026-06-10T09:00")').option("--every <duration>", "New loop interval (e.g. 15m, 1h, 90s)").option("-z, --timezone <tz>", "IANA timezone for --expr / --at")
+  )
 ).addHelpText(
   "after",
   `
@@ -1130,10 +1292,15 @@ Examples:
   zero workflow trigger update 22222222-2222-4222-8222-222222222222 --every 10m
   zero workflow trigger update 22222222-2222-4222-8222-222222222222 --from-contains "@example.com"
   zero workflow trigger update 22222222-2222-4222-8222-222222222222 --config ./gmail-trigger.json
-  zero workflow trigger update 22222222-2222-4222-8222-222222222222 --label "Support"`
+  zero workflow trigger update 22222222-2222-4222-8222-222222222222 --label "Support"
+  zero workflow trigger update 22222222-2222-4222-8222-222222222222 --actor anyone`
 ).action(
   withErrorHandler(async (id, options) => {
-    const trigger = await updateWorkflowTrigger(id, buildUpdate(options));
+    const existing = await getWorkflowTrigger(id);
+    const trigger = await updateWorkflowTrigger(
+      id,
+      buildUpdate(options, existing)
+    );
     console.log(source_default.green(`\u2713 Trigger ${trigger.id} updated`));
     printWorkflowTriggerDetails(trigger);
   })
@@ -1215,4 +1382,4 @@ Examples:
 export {
   zeroWorkflowCommand
 };
-//# sourceMappingURL=workflow-DR5N3QR7.js.map
+//# sourceMappingURL=workflow-33CNJGIN.js.map