@vm0/cli 9.238.0 → 9.238.2

package/whoami-7CSFUXGZ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/commands/zero/whoami.ts"],"sourcesContent":["import { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport {\n  getApiUrl,\n  getActiveOrg,\n  getToken,\n  decodeZeroTokenPayload,\n} from \"../../lib/api/config\";\nimport {\n  listZeroConnectors,\n  getZeroAgentUserConnectors,\n  listZeroUserPermissionGrants,\n} from \"../../lib/api\";\nimport { withErrorHandler } from \"../../lib/command\";\nimport { permissionGrantsToFirewallPolicies } from \"@vm0/connectors/firewall-metadata\";\nimport { policyIcon } from \"../../lib/utils/format-utils\";\nimport {\n  loadConnectorPermissionInfos,\n  type ConnectorPermissionInfo,\n} from \"./shared/firewall-permissions\";\n\n/**\n * Detect if running inside a zero sandbox (agent runtime).\n * Uses ZERO_AGENT_ID (not VM0_RUN_ID) because the zero CLI operates in the\n * zero agent context where ZERO_AGENT_ID is the canonical sandbox indicator.\n */\nfunction isInsideSandbox(): boolean {\n  return !!process.env.ZERO_AGENT_ID;\n}\n\nfunction formatConnectorIdentity(connector: {\n  externalUsername: string | null;\n  externalEmail: string | null;\n  connectionStatus: \"connected\" | \"reconnect-required\";\n}): string {\n  let identity = \"\";\n  if (connector.externalUsername && connector.externalEmail) {\n    identity = `@${connector.externalUsername} (${connector.externalEmail})`;\n  } else if (connector.externalUsername) {\n    identity = `@${connector.externalUsername}`;\n  } else if (connector.externalEmail) {\n    identity = connector.externalEmail;\n  }\n  if (connector.connectionStatus === \"reconnect-required\") {\n    identity += ` ${chalk.yellow(\"(needs reconnect)\")}`;\n  }\n  return identity;\n}\n\nfunction printConnectorPermissions(info: ConnectorPermissionInfo): void {\n  if (!info.hasPermissions) return;\n\n  if (!info.hasPolicyEntry) {\n    console.log(chalk.dim(\"    full access — no permission rules configured\"));\n    return;\n  }\n\n  if (\n    info.permissions.length === 0 &&\n    (!info.policies || Object.keys(info.policies).length === 0)\n  ) {\n    const unknownIcon = policyIcon(info.unknownPolicy);\n    console.log(`    ${unknownIcon} unknown endpoints`);\n    return;\n  }\n\n  const nameWidth = Math.max(\n    \"unknown endpoints\".length,\n    ...info.permissions.map((p) => {\n      return p.name.length;\n    }),\n  );\n\n  for (const perm of info.permissions) {\n    const policy = info.policies?.[perm.name] ?? \"deny\";\n    const icon = policyIcon(policy);\n    const desc = perm.description ?? \"\";\n    console.log(`    ${icon} ${perm.name.padEnd(nameWidth)}  ${desc}`);\n  }\n\n  const unknownIcon = policyIcon(info.unknownPolicy);\n  console.log(\n    `    ${unknownIcon} ${\"unknown endpoints\".padEnd(nameWidth)}  Endpoints not matching any rule`,\n  );\n}\n\nasync function showSandboxInfo(showPermissions: boolean): Promise<void> {\n  const agentId = process.env.ZERO_AGENT_ID;\n  const payload = decodeZeroTokenPayload();\n\n  console.log(`Agent ID:   ${agentId}`);\n  console.log(`Run ID:     ${payload?.runId ?? chalk.dim(\"unavailable\")}`);\n  console.log(`Org ID:     ${payload?.orgId ?? chalk.dim(\"unavailable\")}`);\n\n  // Capabilities section\n  if (payload?.capabilities?.length) {\n    console.log();\n    console.log(chalk.bold(\"Capabilities:\"));\n    console.log(`  ${payload.capabilities.join(\", \")}`);\n  }\n\n  // Connected Services section\n  try {\n    if (showPermissions) {\n      // Full mode: fetch connector identities, current-user grants, and agent connector access.\n      const [connectorsResult, grantsResult, enabledResult] =\n        await Promise.allSettled([\n          listZeroConnectors(),\n          listZeroUserPermissionGrants(agentId!),\n          getZeroAgentUserConnectors(agentId!),\n        ]);\n\n      if (connectorsResult.status === \"rejected\") return;\n\n      const identities = connectorsResult.value.connectors.filter((c) => {\n        return c.externalUsername !== null || c.externalEmail !== null;\n      });\n\n      if (identities.length === 0) return;\n\n      let permissionInfoByType = new Map<string, ConnectorPermissionInfo>();\n      const permissionDataAvailable =\n        grantsResult.status === \"fulfilled\" &&\n        enabledResult.status === \"fulfilled\";\n      if (permissionDataAvailable) {\n        const permissionInfos = await loadConnectorPermissionInfos({\n          displayTypes: identities.map((connector) => {\n            return connector.type;\n          }),\n          defaultPolicyTypes: enabledResult.value,\n          storedPolicies: permissionGrantsToFirewallPolicies(\n            grantsResult.value,\n          ),\n        });\n        permissionInfoByType = new Map(\n          permissionInfos.map((info) => {\n            return [info.type, info];\n          }),\n        );\n      }\n\n      console.log();\n      console.log(chalk.bold(\"Connectors:\"));\n      for (const connector of identities) {\n        const identity = formatConnectorIdentity(connector);\n        console.log(`  ${connector.type.padEnd(14)}${identity}`);\n\n        if (permissionDataAvailable) {\n          const info = permissionInfoByType.get(connector.type);\n          if (info) {\n            printConnectorPermissions(info);\n          }\n        }\n      }\n    } else {\n      // Default mode: only fetch connector identities (1 API call)\n      const connectors = await listZeroConnectors();\n      const identities = connectors.connectors.filter((c) => {\n        return c.externalUsername !== null || c.externalEmail !== null;\n      });\n\n      if (identities.length === 0) return;\n\n      console.log();\n      console.log(chalk.bold(\"Connectors:\"));\n      for (const connector of identities) {\n        const identity = formatConnectorIdentity(connector);\n        console.log(`  ${connector.type.padEnd(14)}${identity}`);\n      }\n    }\n  } catch {\n    // Silently skip — connector info is supplementary\n  }\n}\n\nasync function showLocalInfo(): Promise<void> {\n  const token = await getToken();\n  const apiUrl = await getApiUrl();\n  const activeOrg = await getActiveOrg();\n\n  // Auth section\n  console.log(chalk.bold(\"Auth:\"));\n  if (token) {\n    const tokenSource = process.env.ZERO_TOKEN\n      ? \"ZERO_TOKEN env var\"\n      : process.env.VM0_TOKEN\n        ? \"VM0_TOKEN env var\"\n        : \"config file\";\n    console.log(\n      `  Status:     ${chalk.green(\"Authenticated\")} (via ${tokenSource})`,\n    );\n  } else {\n    console.log(`  Status:     ${chalk.dim(\"Not authenticated\")}`);\n  }\n  console.log(`  API:        ${apiUrl}`);\n  console.log();\n\n  // Org section\n  if (activeOrg) {\n    console.log(chalk.bold(\"Org:\"));\n    console.log(`  Active:     ${activeOrg}`);\n  }\n}\n\nexport const zeroWhoamiCommand = new Command()\n  .name(\"whoami\")\n  .description(\"Show agent identity, run ID, and capabilities\")\n  .option(\"--permissions\", \"Show full permission details for each connector\")\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  zero whoami\n  zero whoami --permissions\n\nNotes:\n  - Inside sandbox: shows agent ID, run ID, org ID, and granted capabilities\n  - Use --permissions to see detailed permission breakdown per connector\n  - Your agent ID is also available as $ZERO_AGENT_ID`,\n  )\n  .action(\n    withErrorHandler(async (options: { permissions?: boolean }) => {\n      if (isInsideSandbox()) {\n        await showSandboxInfo(options.permissions ?? false);\n      } else {\n        await showLocalInfo();\n      }\n    }),\n  );\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AA0BA,SAAS,kBAA2B;AAClC,SAAO,CAAC,CAAC,QAAQ,IAAI;AACvB;AAEA,SAAS,wBAAwB,WAItB;AACT,MAAI,WAAW;AACf,MAAI,UAAU,oBAAoB,UAAU,eAAe;AACzD,eAAW,IAAI,UAAU,gBAAgB,KAAK,UAAU,aAAa;AAAA,EACvE,WAAW,UAAU,kBAAkB;AACrC,eAAW,IAAI,UAAU,gBAAgB;AAAA,EAC3C,WAAW,UAAU,eAAe;AAClC,eAAW,UAAU;AAAA,EACvB;AACA,MAAI,UAAU,qBAAqB,sBAAsB;AACvD,gBAAY,IAAI,eAAM,OAAO,mBAAmB,CAAC;AAAA,EACnD;AACA,SAAO;AACT;AAEA,SAAS,0BAA0B,MAAqC;AACtE,MAAI,CAAC,KAAK,eAAgB;AAE1B,MAAI,CAAC,KAAK,gBAAgB;AACxB,YAAQ,IAAI,eAAM,IAAI,uDAAkD,CAAC;AACzE;AAAA,EACF;AAEA,MACE,KAAK,YAAY,WAAW,MAC3B,CAAC,KAAK,YAAY,OAAO,KAAK,KAAK,QAAQ,EAAE,WAAW,IACzD;AACA,UAAMA,eAAc,WAAW,KAAK,aAAa;AACjD,YAAQ,IAAI,OAAOA,YAAW,oBAAoB;AAClD;AAAA,EACF;AAEA,QAAM,YAAY,KAAK;AAAA,IACrB,oBAAoB;AAAA,IACpB,GAAG,KAAK,YAAY,IAAI,CAAC,MAAM;AAC7B,aAAO,EAAE,KAAK;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,aAAW,QAAQ,KAAK,aAAa;AACnC,UAAM,SAAS,KAAK,WAAW,KAAK,IAAI,KAAK;AAC7C,UAAM,OAAO,WAAW,MAAM;AAC9B,UAAM,OAAO,KAAK,eAAe;AACjC,YAAQ,IAAI,OAAO,IAAI,IAAI,KAAK,KAAK,OAAO,SAAS,CAAC,KAAK,IAAI,EAAE;AAAA,EACnE;AAEA,QAAM,cAAc,WAAW,KAAK,aAAa;AACjD,UAAQ;AAAA,IACN,OAAO,WAAW,IAAI,oBAAoB,OAAO,SAAS,CAAC;AAAA,EAC7D;AACF;AAEA,eAAe,gBAAgB,iBAAyC;AACtE,QAAM,UAAU,QAAQ,IAAI;AAC5B,QAAM,UAAU,uBAAuB;AAEvC,UAAQ,IAAI,eAAe,OAAO,EAAE;AACpC,UAAQ,IAAI,eAAe,SAAS,SAAS,eAAM,IAAI,aAAa,CAAC,EAAE;AACvE,UAAQ,IAAI,eAAe,SAAS,SAAS,eAAM,IAAI,aAAa,CAAC,EAAE;AAGvE,MAAI,SAAS,cAAc,QAAQ;AACjC,YAAQ,IAAI;AACZ,YAAQ,IAAI,eAAM,KAAK,eAAe,CAAC;AACvC,YAAQ,IAAI,KAAK,QAAQ,aAAa,KAAK,IAAI,CAAC,EAAE;AAAA,EACpD;AAGA,MAAI;AACF,QAAI,iBAAiB;AAEnB,YAAM,CAAC,kBAAkB,cAAc,aAAa,IAClD,MAAM,QAAQ,WAAW;AAAA,QACvB,mBAAmB;AAAA,QACnB,6BAA6B,OAAQ;AAAA,QACrC,2BAA2B,OAAQ;AAAA,MACrC,CAAC;AAEH,UAAI,iBAAiB,WAAW,WAAY;AAE5C,YAAM,aAAa,iBAAiB,MAAM,WAAW,OAAO,CAAC,MAAM;AACjE,eAAO,EAAE,qBAAqB,QAAQ,EAAE,kBAAkB;AAAA,MAC5D,CAAC;AAED,UAAI,WAAW,WAAW,EAAG;AAE7B,UAAI,uBAAuB,oBAAI,IAAqC;AACpE,YAAM,0BACJ,aAAa,WAAW,eACxB,cAAc,WAAW;AAC3B,UAAI,yBAAyB;AAC3B,cAAM,kBAAkB,MAAM,6BAA6B;AAAA,UACzD,cAAc,WAAW,IAAI,CAAC,cAAc;AAC1C,mBAAO,UAAU;AAAA,UACnB,CAAC;AAAA,UACD,oBAAoB,cAAc;AAAA,UAClC,gBAAgB;AAAA,YACd,aAAa;AAAA,UACf;AAAA,QACF,CAAC;AACD,+BAAuB,IAAI;AAAA,UACzB,gBAAgB,IAAI,CAAC,SAAS;AAC5B,mBAAO,CAAC,KAAK,MAAM,IAAI;AAAA,UACzB,CAAC;AAAA,QACH;AAAA,MACF;AAEA,cAAQ,IAAI;AACZ,cAAQ,IAAI,eAAM,KAAK,aAAa,CAAC;AACrC,iBAAW,aAAa,YAAY;AAClC,cAAM,WAAW,wBAAwB,SAAS;AAClD,gBAAQ,IAAI,KAAK,UAAU,KAAK,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE;AAEvD,YAAI,yBAAyB;AAC3B,gBAAM,OAAO,qBAAqB,IAAI,UAAU,IAAI;AACpD,cAAI,MAAM;AACR,sCAA0B,IAAI;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,IACF,OAAO;AAEL,YAAM,aAAa,MAAM,mBAAmB;AAC5C,YAAM,aAAa,WAAW,WAAW,OAAO,CAAC,MAAM;AACrD,eAAO,EAAE,qBAAqB,QAAQ,EAAE,kBAAkB;AAAA,MAC5D,CAAC;AAED,UAAI,WAAW,WAAW,EAAG;AAE7B,cAAQ,IAAI;AACZ,cAAQ,IAAI,eAAM,KAAK,aAAa,CAAC;AACrC,iBAAW,aAAa,YAAY;AAClC,cAAM,WAAW,wBAAwB,SAAS;AAClD,gBAAQ,IAAI,KAAK,UAAU,KAAK,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE;AAAA,MACzD;AAAA,IACF;AAAA,EACF,QAAQ;AAAA,EAER;AACF;AAEA,eAAe,gBAA+B;AAC5C,QAAM,QAAQ,MAAM,SAAS;AAC7B,QAAM,SAAS,MAAM,UAAU;AAC/B,QAAM,YAAY,MAAM,aAAa;AAGrC,UAAQ,IAAI,eAAM,KAAK,OAAO,CAAC;AAC/B,MAAI,OAAO;AACT,UAAM,cAAc,QAAQ,IAAI,aAC5B,uBACA,QAAQ,IAAI,YACV,sBACA;AACN,YAAQ;AAAA,MACN,iBAAiB,eAAM,MAAM,eAAe,CAAC,SAAS,WAAW;AAAA,IACnE;AAAA,EACF,OAAO;AACL,YAAQ,IAAI,iBAAiB,eAAM,IAAI,mBAAmB,CAAC,EAAE;AAAA,EAC/D;AACA,UAAQ,IAAI,iBAAiB,MAAM,EAAE;AACrC,UAAQ,IAAI;AAGZ,MAAI,WAAW;AACb,YAAQ,IAAI,eAAM,KAAK,MAAM,CAAC;AAC9B,YAAQ,IAAI,iBAAiB,SAAS,EAAE;AAAA,EAC1C;AACF;AAEO,IAAM,oBAAoB,IAAI,QAAQ,EAC1C,KAAK,QAAQ,EACb,YAAY,+CAA+C,EAC3D,OAAO,iBAAiB,iDAAiD,EACzE;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AASF,EACC;AAAA,EACC,iBAAiB,OAAO,YAAuC;AAC7D,QAAI,gBAAgB,GAAG;AACrB,YAAM,gBAAgB,QAAQ,eAAe,KAAK;AAAA,IACpD,OAAO;AACL,YAAM,cAAc;AAAA,IACtB;AAAA,EACF,CAAC;AACH;","names":["unknownIcon"]}