@vm0/cli 9.238.1 → 9.238.2

package/{agent-6OA2V3OO.js → agent-232YB3UW.js}

@@ -4,10 +4,10 @@ const require = __createRequire(import.meta.url);
 import {
   loadConnectorPermissionInfos,
   policyIcon
-} from "./chunk-FKRO4PMB.js";
+} from "./chunk-H3PJLBYQ.js";
 import {
   permissionGrantsToFirewallPolicies
-} from "./chunk-GU2OYDJY.js";
+} from "./chunk-63SY7N6Y.js";
 import {
   isInteractive,
   promptConfirm
@@ -23,11 +23,11 @@ import {
   listZeroUserPermissionGrants,
   updateZeroAgent,
   updateZeroAgentInstructions
-} from "./chunk-37U2ZGBH.js";
+} from "./chunk-HVKP7UPZ.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
-} from "./chunk-VBI53K3Q.js";
+} from "./chunk-LSV2VNTU.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -595,4 +595,4 @@ Notes:
 export {
   zeroAgentCommand
 };
-//# sourceMappingURL=agent-6OA2V3OO.js.map
+//# sourceMappingURL=agent-232YB3UW.js.map

package/agent-232YB3UW.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/zero/agent/index.ts","../src/commands/zero/agent/create.ts","../src/commands/zero/agent/avatar.ts","../src/commands/zero/agent/edit.ts","../src/commands/zero/agent/view.ts","../src/commands/zero/agent/list.ts","../src/commands/zero/agent/delete.ts"],"sourcesContent":["import { Command } from \"commander\";\nimport { createCommand } from \"./create\";\nimport { editCommand } from \"./edit\";\nimport { viewCommand } from \"./view\";\nimport { listCommand } from \"./list\";\nimport { deleteCommand } from \"./delete\";\n\nexport const zeroAgentCommand = new Command(\"agent\")\n  .description(\"View or manage zero agents\")\n  .addCommand(createCommand)\n  .addCommand(editCommand)\n  .addCommand(viewCommand)\n  .addCommand(listCommand)\n  .addCommand(deleteCommand)\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  Your agent ID is in $ZERO_AGENT_ID (or run: zero whoami)\n  View your config:      zero agent view $ZERO_AGENT_ID --instructions\n  Update description:    zero agent edit $ZERO_AGENT_ID --description \"new role\"\n  Update tone:           zero agent edit $ZERO_AGENT_ID --sound friendly\n  Update instructions:   zero agent edit $ZERO_AGENT_ID --instructions-file <path>\n  Attach a workflow:     zero workflow attach <name> --agent $ZERO_AGENT_ID\n\nNotes:\n  Manage workflows with 'zero workflow --help'`,\n  );\n","import { Command } from \"commander\";\nimport { readFileSync } from \"node:fs\";\nimport chalk from \"chalk\";\nimport { createZeroAgent, updateZeroAgentInstructions } from \"../../../lib/api\";\nimport { withErrorHandler } from \"../../../lib/command\";\nimport { resolveAvatarUrl } from \"./avatar\";\n\nexport const createCommand = new Command()\n  .name(\"create\")\n  .description(\"Create a new zero agent\")\n  .option(\"--display-name <name>\", \"Agent display name\")\n  .option(\"--description <text>\", \"Agent description\")\n  .option(\n    \"--sound <tone>\",\n    \"Agent tone: professional, friendly, direct, supportive\",\n  )\n  .option(\"--avatar <preset>\", \"Avatar preset: preset:0 through preset:4\")\n  .option(\n    \"--avatar-rotation <1-5>\",\n    \"Head angle: 1=far-left  3=center  5=far-right\",\n  )\n  .option(\n    \"--avatar-skin <tone>\",\n    \"Skin tone: light | light-medium | medium | medium-dark | dark\",\n  )\n  .option(\"--avatar-hair-style <1-5>\", \"Hair style: 1–5\")\n  .option(\n    \"--avatar-hair-color <color>\",\n    \"Hair color: blonde | teal | grey | pink | brown\",\n  )\n  .option(\n    \"--avatar-expression <expr>\",\n    \"Expression: calm | content | neutral | pleasant | excited\",\n  )\n  .option(\"--avatar-intensity <level>\", \"Intensity: chill | normal | hyped\")\n  .option(\"--instructions-file <path>\", \"Path to instructions file\")\n  .addHelpText(\n    \"after\",\n    `\nAvatar:\n  Quick presets (--avatar):\n    preset:0  light skin, brown hair, calm, hyped\n    preset:1  light-medium skin, grey hair, calm, normal\n    preset:2  medium skin, pink hair, neutral, chill\n    preset:3  medium-dark skin, blonde hair, pleasant, hyped\n    preset:4  dark skin, teal hair, excited, normal\n\n  Custom attributes (--avatar-* flags, omitted fields use defaults):\n    --avatar-rotation    1=far-left  3=center(default)  5=far-right\n    --avatar-skin        light / light-medium / medium(default) / medium-dark / dark\n    --avatar-hair-style  1–5 (default: 1)\n    --avatar-hair-color  blonde / teal / grey / pink / brown(default)\n    --avatar-expression  calm(default) / content / neutral / pleasant / excited\n    --avatar-intensity   chill / normal(default) / hyped\n\n  Note: --avatar and --avatar-* cannot be used together.\n\nExamples:\n  Minimal:               zero agent create --display-name \"My Agent\"\n  Quick preset:          zero agent create --display-name \"My Agent\" --avatar preset:2\n  Custom avatar:         zero agent create --display-name \"My Agent\" --avatar-skin dark --avatar-hair-color teal --avatar-intensity hyped\n  With instructions:     zero agent create --display-name \"My Agent\" --instructions-file ./instructions.md`,\n  )\n  .action(\n    withErrorHandler(\n      async (options: {\n        displayName?: string;\n        description?: string;\n        sound?: string;\n        avatar?: string;\n        avatarRotation?: string;\n        avatarSkin?: string;\n        avatarHairStyle?: string;\n        avatarHairColor?: string;\n        avatarExpression?: string;\n        avatarIntensity?: string;\n        instructionsFile?: string;\n      }) => {\n        const avatarUrl = resolveAvatarUrl(options);\n\n        const agent = await createZeroAgent({\n          displayName: options.displayName,\n          description: options.description,\n          sound: options.sound,\n          avatarUrl,\n        });\n\n        if (options.instructionsFile) {\n          const content = readFileSync(options.instructionsFile, \"utf-8\");\n          await updateZeroAgentInstructions(agent.agentId, content);\n        }\n\n        console.log(chalk.green(`✓ Agent \"${agent.agentId}\" created`));\n        console.log(`  Agent ID:     ${agent.agentId}`);\n        if (agent.displayName) {\n          console.log(`  Display Name: ${agent.displayName}`);\n        }\n\n        console.log();\n        console.log(\"Next steps to authorize connectors for this agent:\");\n        console.log(\"  - Search connectors this agent needs:\");\n        console.log(\n          `      zero connector search <keyword> --agent ${agent.agentId}`,\n        );\n        console.log(\n          \"  - Check authorization status (prints an authorize URL if not authorized):\",\n        );\n        console.log(\n          `      zero connector status <type> --agent ${agent.agentId}`,\n        );\n      },\n    ),\n  );\n","const SKIN_MAP: Record<string, number> = {\n  light: 0,\n  \"light-medium\": 1,\n  medium: 2,\n  \"medium-dark\": 3,\n  dark: 4,\n};\n\nconst HAIR_COLOR_MAP: Record<string, number> = {\n  blonde: 1,\n  teal: 2,\n  grey: 3,\n  pink: 4,\n  brown: 5,\n};\n\nconst EXPRESSION_MAP: Record<string, number> = {\n  calm: 1,\n  content: 2,\n  neutral: 3,\n  pleasant: 4,\n  excited: 5,\n};\n\nconst INTENSITY_MAP: Record<string, \"d\" | \"m\" | \"h\"> = {\n  chill: \"d\",\n  normal: \"m\",\n  hyped: \"h\",\n};\n\nfunction lookupRequired<T>(\n  value: string,\n  map: Readonly<Record<string, T>>,\n  flag: string,\n): T {\n  if (!(value in map)) {\n    throw new Error(\n      `Invalid ${flag} \"${value}\". Must be one of: ${Object.keys(map).join(\", \")}`,\n    );\n  }\n  return map[value]!;\n}\n\nfunction parseIntRange(\n  value: string,\n  flag: string,\n  min: number,\n  max: number,\n): number {\n  const n = Number(value);\n  if (!Number.isInteger(n) || n < min || n > max) {\n    throw new Error(`Invalid ${flag} \"${value}\". Must be ${min}–${max}`);\n  }\n  return n;\n}\n\nfunction buildCustomSvgAvatar(opts: AvatarOptions): string {\n  const r =\n    opts.avatarRotation !== undefined\n      ? parseIntRange(opts.avatarRotation, \"--avatar-rotation\", 1, 5)\n      : 3;\n  const h =\n    opts.avatarHairStyle !== undefined\n      ? parseIntRange(opts.avatarHairStyle, \"--avatar-hair-style\", 1, 5)\n      : 1;\n  const s =\n    opts.avatarSkin !== undefined\n      ? lookupRequired(opts.avatarSkin, SKIN_MAP, \"--avatar-skin\")\n      : 2;\n  const c =\n    opts.avatarHairColor !== undefined\n      ? lookupRequired(\n          opts.avatarHairColor,\n          HAIR_COLOR_MAP,\n          \"--avatar-hair-color\",\n        )\n      : 5;\n  const f =\n    opts.avatarExpression !== undefined\n      ? lookupRequired(\n          opts.avatarExpression,\n          EXPRESSION_MAP,\n          \"--avatar-expression\",\n        )\n      : 1;\n  const i =\n    opts.avatarIntensity !== undefined\n      ? lookupRequired(\n          opts.avatarIntensity,\n          INTENSITY_MAP,\n          \"--avatar-intensity\",\n        )\n      : \"m\";\n  return `svg:r${r}s${s}h${h}c${c}f${f}${i}`;\n}\n\nexport interface AvatarOptions {\n  avatar?: string;\n  avatarRotation?: string;\n  avatarSkin?: string;\n  avatarHairStyle?: string;\n  avatarHairColor?: string;\n  avatarExpression?: string;\n  avatarIntensity?: string;\n}\n\nexport function resolveAvatarUrl(opts: AvatarOptions): string | undefined {\n  const hasPreset = opts.avatar !== undefined;\n  const hasCustom =\n    opts.avatarRotation !== undefined ||\n    opts.avatarSkin !== undefined ||\n    opts.avatarHairStyle !== undefined ||\n    opts.avatarHairColor !== undefined ||\n    opts.avatarExpression !== undefined ||\n    opts.avatarIntensity !== undefined;\n\n  if (!hasPreset && !hasCustom) return undefined;\n\n  if (hasPreset && hasCustom) {\n    throw new Error(\n      \"--avatar cannot be combined with --avatar-* attribute options\",\n    );\n  }\n\n  if (hasPreset) {\n    if (!/^preset:[0-4]$/.test(opts.avatar!)) {\n      throw new Error(\n        `Invalid --avatar \"${opts.avatar}\". Use preset:0 through preset:4`,\n      );\n    }\n    return opts.avatar;\n  }\n\n  return buildCustomSvgAvatar(opts);\n}\n\nconst REVERSE_SKIN_MAP: Record<number, string> = {\n  0: \"light\",\n  1: \"light-medium\",\n  2: \"medium\",\n  3: \"medium-dark\",\n  4: \"dark\",\n};\n\nconst REVERSE_HAIR_COLOR_MAP: Record<number, string> = {\n  1: \"blonde\",\n  2: \"teal\",\n  3: \"grey\",\n  4: \"pink\",\n  5: \"brown\",\n};\n\nconst REVERSE_EXPRESSION_MAP: Record<number, string> = {\n  1: \"calm\",\n  2: \"content\",\n  3: \"neutral\",\n  4: \"pleasant\",\n  5: \"excited\",\n};\n\nconst REVERSE_INTENSITY_MAP: Record<string, string> = {\n  d: \"chill\",\n  m: \"normal\",\n  h: \"hyped\",\n};\n\nconst PRESET_DESCRIPTIONS: Record<string, string> = {\n  \"preset:0\": \"light skin, brown hair, calm, hyped\",\n  \"preset:1\": \"light-medium skin, grey hair, calm, normal\",\n  \"preset:2\": \"medium skin, pink hair, neutral, chill\",\n  \"preset:3\": \"medium-dark skin, blonde hair, pleasant, hyped\",\n  \"preset:4\": \"dark skin, teal hair, excited, normal\",\n};\n\nfunction parseSvgAvatar(svg: string): string | undefined {\n  const match = svg.match(/^svg:r(\\d)s(\\d)h(\\d)c(\\d)f(\\d)([dmh])$/);\n  if (!match) return undefined;\n\n  const [, r, s, h, c, f, i] = match as RegExpExecArray;\n  const parts: string[] = [];\n\n  const skin = REVERSE_SKIN_MAP[Number(s)];\n  if (skin) parts.push(`${skin} skin`);\n\n  const hairColor = REVERSE_HAIR_COLOR_MAP[Number(c)];\n  if (hairColor) parts.push(`${hairColor} hair`);\n\n  const expression = REVERSE_EXPRESSION_MAP[Number(f)];\n  if (expression) parts.push(expression);\n\n  const intensity = REVERSE_INTENSITY_MAP[i!];\n  if (intensity) parts.push(intensity);\n\n  if (parts.length === 0) return undefined;\n\n  let desc = parts.join(\", \");\n  if (r !== \"3\") {\n    const rotationLabels: Record<string, string> = {\n      \"1\": \"far-left\",\n      \"2\": \"left\",\n      \"4\": \"right\",\n      \"5\": \"far-right\",\n    };\n    const rot = rotationLabels[r!];\n    if (rot) desc += `, ${rot}`;\n  }\n  if (h !== \"1\") {\n    desc += `, hair style ${h}`;\n  }\n\n  return desc;\n}\n\nexport function formatAvatar(\n  avatarUrl: string | null | undefined,\n): string | undefined {\n  if (!avatarUrl) return undefined;\n\n  if (avatarUrl.startsWith(\"preset:\")) {\n    const desc = PRESET_DESCRIPTIONS[avatarUrl];\n    return desc ? `${avatarUrl} (${desc})` : avatarUrl;\n  }\n\n  if (avatarUrl.startsWith(\"svg:\")) {\n    const desc = parseSvgAvatar(avatarUrl);\n    return desc ? `custom (${desc})` : avatarUrl;\n  }\n\n  return avatarUrl;\n}\n","import { Command } from \"commander\";\nimport { readFileSync } from \"node:fs\";\nimport chalk from \"chalk\";\nimport {\n  getZeroAgent,\n  updateZeroAgent,\n  updateZeroAgentInstructions,\n} from \"../../../lib/api\";\nimport { withErrorHandler } from \"../../../lib/command\";\nimport { type AvatarOptions, resolveAvatarUrl } from \"./avatar\";\n\ninterface AgentEditOptions extends AvatarOptions {\n  displayName?: string;\n  description?: string;\n  sound?: string;\n  instructionsFile?: string;\n}\n\nfunction hasAvatarUpdate(options: AvatarOptions): boolean {\n  return (\n    options.avatar !== undefined ||\n    options.avatarRotation !== undefined ||\n    options.avatarSkin !== undefined ||\n    options.avatarHairStyle !== undefined ||\n    options.avatarHairColor !== undefined ||\n    options.avatarExpression !== undefined ||\n    options.avatarIntensity !== undefined\n  );\n}\n\nfunction hasAgentFieldUpdate(options: AgentEditOptions): boolean {\n  return (\n    options.displayName !== undefined ||\n    options.description !== undefined ||\n    options.sound !== undefined ||\n    hasAvatarUpdate(options)\n  );\n}\n\nasync function applyAgentUpdate(\n  agentId: string,\n  options: AgentEditOptions,\n): Promise<void> {\n  const hasAvatar = hasAvatarUpdate(options);\n  const resolvedAvatarUrl = hasAvatar ? resolveAvatarUrl(options) : undefined;\n\n  const current = await getZeroAgent(agentId);\n\n  const avatarUrl = hasAvatar\n    ? resolvedAvatarUrl\n    : (current.avatarUrl ?? undefined);\n\n  await updateZeroAgent(agentId, {\n    displayName:\n      options.displayName !== undefined\n        ? options.displayName\n        : (current.displayName ?? undefined),\n    description:\n      options.description !== undefined\n        ? options.description\n        : (current.description ?? undefined),\n    sound:\n      options.sound !== undefined\n        ? options.sound\n        : (current.sound ?? undefined),\n    avatarUrl,\n  });\n}\n\nexport const editCommand = new Command()\n  .name(\"edit\")\n  .description(\"Edit a zero agent\")\n  .argument(\"<agent-id>\", \"Agent ID\")\n  .option(\"--display-name <name>\", \"New display name\")\n  .option(\"--description <text>\", \"New description\")\n  .option(\n    \"--sound <tone>\",\n    \"New tone: professional, friendly, direct, supportive\",\n  )\n  .option(\"--avatar <preset>\", \"Avatar preset: preset:0 through preset:4\")\n  .option(\n    \"--avatar-rotation <1-5>\",\n    \"Head angle: 1=far-left  3=center  5=far-right\",\n  )\n  .option(\n    \"--avatar-skin <tone>\",\n    \"Skin tone: light | light-medium | medium | medium-dark | dark\",\n  )\n  .option(\"--avatar-hair-style <1-5>\", \"Hair style: 1–5\")\n  .option(\n    \"--avatar-hair-color <color>\",\n    \"Hair color: blonde | teal | grey | pink | brown\",\n  )\n  .option(\n    \"--avatar-expression <expr>\",\n    \"Expression: calm | content | neutral | pleasant | excited\",\n  )\n  .option(\"--avatar-intensity <level>\", \"Intensity: chill | normal | hyped\")\n  .option(\"--instructions-file <path>\", \"Path to new instructions file\")\n  .addHelpText(\n    \"after\",\n    `\nAvatar:\n  Quick presets (--avatar):\n    preset:0  light skin, brown hair, calm, hyped\n    preset:1  light-medium skin, grey hair, calm, normal\n    preset:2  medium skin, pink hair, neutral, chill\n    preset:3  medium-dark skin, blonde hair, pleasant, hyped\n    preset:4  dark skin, teal hair, excited, normal\n\n  Custom attributes (--avatar-* flags, replace the entire avatar):\n    --avatar-rotation    1=far-left  3=center(default)  5=far-right\n    --avatar-skin        light / light-medium / medium(default) / medium-dark / dark\n    --avatar-hair-style  1–5 (default: 1)\n    --avatar-hair-color  blonde / teal / grey / pink / brown(default)\n    --avatar-expression  calm(default) / content / neutral / pleasant / excited\n    --avatar-intensity   chill / normal(default) / hyped\n\n  Note: --avatar and --avatar-* cannot be used together.\n\nExamples:\n  Update description:      zero agent edit <agent-id> --description \"new role\"\n  Update tone:             zero agent edit <agent-id> --sound friendly\n  Quick preset avatar:     zero agent edit <agent-id> --avatar preset:2\n  Custom avatar:           zero agent edit <agent-id> --avatar-skin dark --avatar-hair-color teal --avatar-intensity hyped\n  Update instructions:     zero agent edit <agent-id> --instructions-file ./instructions.md\n  Update yourself:         zero agent edit $ZERO_AGENT_ID --description \"new role\"\n\nNotes:\n  - At least one option is required\n  - Unspecified fields are preserved (not cleared)\n  - To attach workflows to agents, use: zero workflow attach --help`,\n  )\n  .action(\n    withErrorHandler(async (agentId: string, options: AgentEditOptions) => {\n      const hasAgentUpdate = hasAgentFieldUpdate(options);\n\n      if (!hasAgentUpdate && !options.instructionsFile) {\n        throw new Error(\n          \"At least one option is required (--display-name, --description, --sound, --avatar, --avatar-*, --instructions-file)\",\n        );\n      }\n\n      if (hasAgentUpdate) {\n        await applyAgentUpdate(agentId, options);\n      }\n\n      if (options.instructionsFile) {\n        const content = readFileSync(options.instructionsFile, \"utf-8\");\n        await updateZeroAgentInstructions(agentId, content);\n      }\n\n      console.log(chalk.green(`✓ Agent \"${agentId}\" updated`));\n    }),\n  );\n","import { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport {\n  getZeroAgent,\n  getZeroAgentInstructions,\n  getZeroAgentUserConnectors,\n  listZeroUserPermissionGrants,\n  listZeroConnectors,\n} from \"../../../lib/api\";\nimport { withErrorHandler } from \"../../../lib/command\";\nimport { permissionGrantsToFirewallPolicies } from \"@vm0/connectors/firewall-metadata/policy\";\nimport type { ConnectorResponse } from \"@vm0/api-contracts/contracts/connector-schemas\";\nimport { policyIcon } from \"../../../lib/utils/format-utils\";\nimport { formatAvatar } from \"./avatar\";\nimport {\n  loadConnectorPermissionInfos,\n  type ConnectorPermissionInfo,\n} from \"../shared/firewall-permissions\";\n\nfunction printDetailedPermissions(info: ConnectorPermissionInfo): void {\n  if (!info.policies) {\n    const icon = policyIcon(info.unknownPolicy);\n    console.log(`    ${icon} unknown endpoints`);\n    return;\n  }\n\n  const nameWidth = Math.max(\n    \"unknown endpoints\".length,\n    ...info.permissions.map((p) => {\n      return p.name.length;\n    }),\n  );\n\n  for (const perm of info.permissions) {\n    const policy = info.policies[perm.name] ?? \"deny\";\n    const desc = perm.description ?? \"\";\n    console.log(\n      `    ${policyIcon(policy)} ${perm.name.padEnd(nameWidth)}  ${desc}`,\n    );\n  }\n\n  const unknownIcon = policyIcon(info.unknownPolicy);\n  console.log(\n    `    ${unknownIcon} ${\"unknown endpoints\".padEnd(nameWidth)}  Endpoints not matching any rule`,\n  );\n}\n\nfunction formatConnectorIdentity(\n  connector: ConnectorResponse | undefined,\n): string {\n  if (!connector) return \"\";\n  if (connector.externalUsername) return `@${connector.externalUsername}`;\n  if (connector.externalEmail) return connector.externalEmail;\n  return \"\";\n}\n\nfunction formatConnectorSummary(\n  info: ConnectorPermissionInfo,\n  identity?: ConnectorResponse,\n): string {\n  const id = formatConnectorIdentity(identity);\n  const idStr = id ? ` ${id}` : \"\";\n  if (!info.hasPermissions) return `${info.type}${idStr}`;\n  if (!info.policies) return `${info.type}${idStr} (full access)`;\n  return `${info.type}${idStr} (${info.allowed}/${info.total} allowed)`;\n}\n\nfunction formatDetailIdentity(\n  connector: ConnectorResponse | undefined,\n): string {\n  if (!connector) return \"\";\n  let identity = \"\";\n  if (connector.externalUsername && connector.externalEmail) {\n    identity = `@${connector.externalUsername} (${connector.externalEmail})`;\n  } else if (connector.externalUsername) {\n    identity = `@${connector.externalUsername}`;\n  } else if (connector.externalEmail) {\n    identity = connector.externalEmail;\n  }\n  if (!identity) return \"\";\n  if (connector.connectionStatus === \"reconnect-required\") {\n    identity += ` ${chalk.yellow(\"(needs reconnect)\")}`;\n  }\n  return identity;\n}\n\nexport const viewCommand = new Command()\n  .name(\"view\")\n  .description(\"View a zero agent\")\n  .argument(\"<agent-id>\", \"Agent ID\")\n  .option(\"--instructions\", \"Also show instructions content\")\n  .option(\"--permissions\", \"Show full permission details for each connector\")\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  View basic info:         zero agent view <agent-id>\n  Include instructions:    zero agent view <agent-id> --instructions\n  Show permissions:        zero agent view <agent-id> --permissions\n  View yourself:           zero agent view $ZERO_AGENT_ID --instructions`,\n  )\n  .action(\n    withErrorHandler(\n      async (\n        agentId: string,\n        options: { instructions?: boolean; permissions?: boolean },\n      ) => {\n        const [agent, connectorTypes, connectorIdentities] = await Promise.all([\n          getZeroAgent(agentId),\n          getZeroAgentUserConnectors(agentId),\n          listZeroConnectors().catch(() => {\n            return { connectors: [] as ConnectorResponse[] };\n          }),\n        ]);\n\n        const identityMap = new Map<string, ConnectorResponse>(\n          connectorIdentities.connectors.map((c) => {\n            return [c.type, c];\n          }),\n        );\n\n        console.log(chalk.bold(agent.agentId));\n        if (agent.displayName) console.log(chalk.dim(agent.displayName));\n        console.log();\n        console.log(`Agent ID:     ${agent.agentId}`);\n\n        const storedPolicies = options.permissions\n          ? permissionGrantsToFirewallPolicies(\n              await listZeroUserPermissionGrants(agent.agentId),\n            )\n          : null;\n        const connectorInfos = await loadConnectorPermissionInfos({\n          displayTypes: connectorTypes,\n          defaultPolicyTypes: connectorTypes,\n          storedPolicies,\n        });\n\n        if (connectorInfos.length > 0) {\n          const summaries = connectorInfos.map((info) => {\n            return formatConnectorSummary(info, identityMap.get(info.type));\n          });\n          console.log(`Connectors:   ${summaries.join(\", \")}`);\n        }\n\n        if (agent.description)\n          console.log(`Description:  ${agent.description}`);\n        if (agent.sound) console.log(`Sound:        ${agent.sound}`);\n        const avatar = formatAvatar(agent.avatarUrl);\n        if (avatar) console.log(`Avatar:       ${avatar}`);\n\n        if (options.permissions && connectorInfos.length > 0) {\n          console.log();\n          console.log(chalk.bold(\"Connectors:\"));\n          for (const info of connectorInfos) {\n            const identity = formatDetailIdentity(identityMap.get(info.type));\n            console.log(`  ${info.type.padEnd(14)}${identity}`);\n            if (info.hasPermissions) {\n              printDetailedPermissions(info);\n            }\n          }\n        }\n\n        if (options.instructions) {\n          console.log();\n          const result = await getZeroAgentInstructions(agentId);\n          if (result.content) {\n            console.log(chalk.dim(\"── Instructions ──\"));\n            console.log(result.content);\n          } else {\n            console.log(chalk.dim(\"No instructions set\"));\n          }\n        }\n      },\n    ),\n  );\n","import { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport { listZeroAgents } from \"../../../lib/api\";\nimport { withErrorHandler } from \"../../../lib/command\";\n\nexport const listCommand = new Command()\n  .name(\"list\")\n  .alias(\"ls\")\n  .description(\"List all zero agents\")\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  zero agent list\n\nNotes:\n  - Use this to discover teammate agent IDs`,\n  )\n  .action(\n    withErrorHandler(async () => {\n      const agents = await listZeroAgents();\n\n      if (agents.length === 0) {\n        console.log(chalk.dim(\"No zero agents found\"));\n        console.log(\n          chalk.dim(\n            '  Create one with: zero agent create --display-name \"My Agent\"',\n          ),\n        );\n        return;\n      }\n\n      const idWidth = Math.max(\n        8,\n        ...agents.map((a) => {\n          return a.agentId.length;\n        }),\n      );\n      const displayWidth = Math.max(\n        12,\n        ...agents.map((a) => {\n          return (a.displayName ?? \"\").length;\n        }),\n      );\n\n      const header = [\n        \"AGENT ID\".padEnd(idWidth),\n        \"DISPLAY NAME\".padEnd(displayWidth),\n      ].join(\"  \");\n      console.log(chalk.dim(header));\n\n      for (const agent of agents) {\n        const row = [\n          agent.agentId.padEnd(idWidth),\n          (agent.displayName ?? \"-\").padEnd(displayWidth),\n        ].join(\"  \");\n        console.log(row);\n      }\n    }),\n  );\n","import { Command } from \"commander\";\nimport chalk from \"chalk\";\nimport { getZeroAgent, deleteZeroAgent } from \"../../../lib/api\";\nimport { isInteractive, promptConfirm } from \"../../../lib/utils/prompt-utils\";\nimport { withErrorHandler } from \"../../../lib/command\";\n\nexport const deleteCommand = new Command()\n  .name(\"delete\")\n  .alias(\"rm\")\n  .description(\"Delete a zero agent\")\n  .argument(\"<agent-id>\", \"Agent ID\")\n  .option(\"-y, --yes\", \"Skip confirmation prompt\")\n  .addHelpText(\n    \"after\",\n    `\nExamples:\n  zero agent delete <agent-id>\n  zero agent delete <agent-id> -y\n\nNotes:\n  - Use -y to skip confirmation in non-interactive mode`,\n  )\n  .action(\n    withErrorHandler(async (agentId: string, options: { yes?: boolean }) => {\n      await getZeroAgent(agentId);\n\n      if (!options.yes) {\n        if (!isInteractive()) {\n          throw new Error(\"--yes flag is required in non-interactive mode\");\n        }\n        const confirmed = await promptConfirm(\n          `Delete zero agent '${agentId}'?`,\n          false,\n        );\n        if (!confirmed) {\n          console.log(chalk.dim(\"Cancelled\"));\n          return;\n        }\n      }\n\n      await deleteZeroAgent(agentId);\n      console.log(chalk.green(`✓ Agent \"${agentId}\" deleted`));\n    }),\n  );\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;;;ACAA;AACA,SAAS,oBAAoB;;;ACD7B;AAAA,IAAM,WAAmC;AAAA,EACvC,OAAO;AAAA,EACP,gBAAgB;AAAA,EAChB,QAAQ;AAAA,EACR,eAAe;AAAA,EACf,MAAM;AACR;AAEA,IAAM,iBAAyC;AAAA,EAC7C,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,MAAM;AAAA,EACN,MAAM;AAAA,EACN,OAAO;AACT;AAEA,IAAM,iBAAyC;AAAA,EAC7C,MAAM;AAAA,EACN,SAAS;AAAA,EACT,SAAS;AAAA,EACT,UAAU;AAAA,EACV,SAAS;AACX;AAEA,IAAM,gBAAiD;AAAA,EACrD,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AACT;AAEA,SAAS,eACP,OACA,KACA,MACG;AACH,MAAI,EAAE,SAAS,MAAM;AACnB,UAAM,IAAI;AAAA,MACR,WAAW,IAAI,KAAK,KAAK,sBAAsB,OAAO,KAAK,GAAG,EAAE,KAAK,IAAI,CAAC;AAAA,IAC5E;AAAA,EACF;AACA,SAAO,IAAI,KAAK;AAClB;AAEA,SAAS,cACP,OACA,MACA,KACA,KACQ;AACR,QAAM,IAAI,OAAO,KAAK;AACtB,MAAI,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,OAAO,IAAI,KAAK;AAC9C,UAAM,IAAI,MAAM,WAAW,IAAI,KAAK,KAAK,cAAc,GAAG,SAAI,GAAG,EAAE;AAAA,EACrE;AACA,SAAO;AACT;AAEA,SAAS,qBAAqB,MAA6B;AACzD,QAAM,IACJ,KAAK,mBAAmB,SACpB,cAAc,KAAK,gBAAgB,qBAAqB,GAAG,CAAC,IAC5D;AACN,QAAM,IACJ,KAAK,oBAAoB,SACrB,cAAc,KAAK,iBAAiB,uBAAuB,GAAG,CAAC,IAC/D;AACN,QAAM,IACJ,KAAK,eAAe,SAChB,eAAe,KAAK,YAAY,UAAU,eAAe,IACzD;AACN,QAAM,IACJ,KAAK,oBAAoB,SACrB;AAAA,IACE,KAAK;AAAA,IACL;AAAA,IACA;AAAA,EACF,IACA;AACN,QAAM,IACJ,KAAK,qBAAqB,SACtB;AAAA,IACE,KAAK;AAAA,IACL;AAAA,IACA;AAAA,EACF,IACA;AACN,QAAM,IACJ,KAAK,oBAAoB,SACrB;AAAA,IACE,KAAK;AAAA,IACL;AAAA,IACA;AAAA,EACF,IACA;AACN,SAAO,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;AAC1C;AAYO,SAAS,iBAAiB,MAAyC;AACxE,QAAM,YAAY,KAAK,WAAW;AAClC,QAAM,YACJ,KAAK,mBAAmB,UACxB,KAAK,eAAe,UACpB,KAAK,oBAAoB,UACzB,KAAK,oBAAoB,UACzB,KAAK,qBAAqB,UAC1B,KAAK,oBAAoB;AAE3B,MAAI,CAAC,aAAa,CAAC,UAAW,QAAO;AAErC,MAAI,aAAa,WAAW;AAC1B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,MAAI,WAAW;AACb,QAAI,CAAC,iBAAiB,KAAK,KAAK,MAAO,GAAG;AACxC,YAAM,IAAI;AAAA,QACR,qBAAqB,KAAK,MAAM;AAAA,MAClC;AAAA,IACF;AACA,WAAO,KAAK;AAAA,EACd;AAEA,SAAO,qBAAqB,IAAI;AAClC;AAEA,IAAM,mBAA2C;AAAA,EAC/C,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL;AAEA,IAAM,yBAAiD;AAAA,EACrD,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL;AAEA,IAAM,yBAAiD;AAAA,EACrD,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL;AAEA,IAAM,wBAAgD;AAAA,EACpD,GAAG;AAAA,EACH,GAAG;AAAA,EACH,GAAG;AACL;AAEA,IAAM,sBAA8C;AAAA,EAClD,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,YAAY;AAAA,EACZ,YAAY;AACd;AAEA,SAAS,eAAe,KAAiC;AACvD,QAAM,QAAQ,IAAI,MAAM,wCAAwC;AAChE,MAAI,CAAC,MAAO,QAAO;AAEnB,QAAM,CAAC,EAAE,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,IAAI;AAC7B,QAAM,QAAkB,CAAC;AAEzB,QAAM,OAAO,iBAAiB,OAAO,CAAC,CAAC;AACvC,MAAI,KAAM,OAAM,KAAK,GAAG,IAAI,OAAO;AAEnC,QAAM,YAAY,uBAAuB,OAAO,CAAC,CAAC;AAClD,MAAI,UAAW,OAAM,KAAK,GAAG,SAAS,OAAO;AAE7C,QAAM,aAAa,uBAAuB,OAAO,CAAC,CAAC;AACnD,MAAI,WAAY,OAAM,KAAK,UAAU;AAErC,QAAM,YAAY,sBAAsB,CAAE;AAC1C,MAAI,UAAW,OAAM,KAAK,SAAS;AAEnC,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI,OAAO,MAAM,KAAK,IAAI;AAC1B,MAAI,MAAM,KAAK;AACb,UAAM,iBAAyC;AAAA,MAC7C,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,IACP;AACA,UAAM,MAAM,eAAe,CAAE;AAC7B,QAAI,IAAK,SAAQ,KAAK,GAAG;AAAA,EAC3B;AACA,MAAI,MAAM,KAAK;AACb,YAAQ,gBAAgB,CAAC;AAAA,EAC3B;AAEA,SAAO;AACT;AAEO,SAAS,aACd,WACoB;AACpB,MAAI,CAAC,UAAW,QAAO;AAEvB,MAAI,UAAU,WAAW,SAAS,GAAG;AACnC,UAAM,OAAO,oBAAoB,SAAS;AAC1C,WAAO,OAAO,GAAG,SAAS,KAAK,IAAI,MAAM;AAAA,EAC3C;AAEA,MAAI,UAAU,WAAW,MAAM,GAAG;AAChC,UAAM,OAAO,eAAe,SAAS;AACrC,WAAO,OAAO,WAAW,IAAI,MAAM;AAAA,EACrC;AAEA,SAAO;AACT;;;AD9NO,IAAM,gBAAgB,IAAI,QAAQ,EACtC,KAAK,QAAQ,EACb,YAAY,yBAAyB,EACrC,OAAO,yBAAyB,oBAAoB,EACpD,OAAO,wBAAwB,mBAAmB,EAClD;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,qBAAqB,0CAA0C,EACtE;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,6BAA6B,sBAAiB,EACrD;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,8BAA8B,mCAAmC,EACxE,OAAO,8BAA8B,2BAA2B,EAChE;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAwBF,EACC;AAAA,EACC;AAAA,IACE,OAAO,YAYD;AACJ,YAAM,YAAY,iBAAiB,OAAO;AAE1C,YAAM,QAAQ,MAAM,gBAAgB;AAAA,QAClC,aAAa,QAAQ;AAAA,QACrB,aAAa,QAAQ;AAAA,QACrB,OAAO,QAAQ;AAAA,QACf;AAAA,MACF,CAAC;AAED,UAAI,QAAQ,kBAAkB;AAC5B,cAAM,UAAU,aAAa,QAAQ,kBAAkB,OAAO;AAC9D,cAAM,4BAA4B,MAAM,SAAS,OAAO;AAAA,MAC1D;AAEA,cAAQ,IAAI,eAAM,MAAM,iBAAY,MAAM,OAAO,WAAW,CAAC;AAC7D,cAAQ,IAAI,mBAAmB,MAAM,OAAO,EAAE;AAC9C,UAAI,MAAM,aAAa;AACrB,gBAAQ,IAAI,mBAAmB,MAAM,WAAW,EAAE;AAAA,MACpD;AAEA,cAAQ,IAAI;AACZ,cAAQ,IAAI,oDAAoD;AAChE,cAAQ,IAAI,yCAAyC;AACrD,cAAQ;AAAA,QACN,iDAAiD,MAAM,OAAO;AAAA,MAChE;AACA,cAAQ;AAAA,QACN;AAAA,MACF;AACA,cAAQ;AAAA,QACN,8CAA8C,MAAM,OAAO;AAAA,MAC7D;AAAA,IACF;AAAA,EACF;AACF;;;AEhHF;AACA,SAAS,gBAAAA,qBAAoB;AAiB7B,SAAS,gBAAgB,SAAiC;AACxD,SACE,QAAQ,WAAW,UACnB,QAAQ,mBAAmB,UAC3B,QAAQ,eAAe,UACvB,QAAQ,oBAAoB,UAC5B,QAAQ,oBAAoB,UAC5B,QAAQ,qBAAqB,UAC7B,QAAQ,oBAAoB;AAEhC;AAEA,SAAS,oBAAoB,SAAoC;AAC/D,SACE,QAAQ,gBAAgB,UACxB,QAAQ,gBAAgB,UACxB,QAAQ,UAAU,UAClB,gBAAgB,OAAO;AAE3B;AAEA,eAAe,iBACb,SACA,SACe;AACf,QAAM,YAAY,gBAAgB,OAAO;AACzC,QAAM,oBAAoB,YAAY,iBAAiB,OAAO,IAAI;AAElE,QAAM,UAAU,MAAM,aAAa,OAAO;AAE1C,QAAM,YAAY,YACd,oBACC,QAAQ,aAAa;AAE1B,QAAM,gBAAgB,SAAS;AAAA,IAC7B,aACE,QAAQ,gBAAgB,SACpB,QAAQ,cACP,QAAQ,eAAe;AAAA,IAC9B,aACE,QAAQ,gBAAgB,SACpB,QAAQ,cACP,QAAQ,eAAe;AAAA,IAC9B,OACE,QAAQ,UAAU,SACd,QAAQ,QACP,QAAQ,SAAS;AAAA,IACxB;AAAA,EACF,CAAC;AACH;AAEO,IAAM,cAAc,IAAI,QAAQ,EACpC,KAAK,MAAM,EACX,YAAY,mBAAmB,EAC/B,SAAS,cAAc,UAAU,EACjC,OAAO,yBAAyB,kBAAkB,EAClD,OAAO,wBAAwB,iBAAiB,EAChD;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,qBAAqB,0CAA0C,EACtE;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,6BAA6B,sBAAiB,EACrD;AAAA,EACC;AAAA,EACA;AACF,EACC;AAAA,EACC;AAAA,EACA;AACF,EACC,OAAO,8BAA8B,mCAAmC,EACxE,OAAO,8BAA8B,+BAA+B,EACpE;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA+BF,EACC;AAAA,EACC,iBAAiB,OAAO,SAAiB,YAA8B;AACrE,UAAM,iBAAiB,oBAAoB,OAAO;AAElD,QAAI,CAAC,kBAAkB,CAAC,QAAQ,kBAAkB;AAChD,YAAM,IAAI;AAAA,QACR;AAAA,MACF;AAAA,IACF;AAEA,QAAI,gBAAgB;AAClB,YAAM,iBAAiB,SAAS,OAAO;AAAA,IACzC;AAEA,QAAI,QAAQ,kBAAkB;AAC5B,YAAM,UAAUC,cAAa,QAAQ,kBAAkB,OAAO;AAC9D,YAAM,4BAA4B,SAAS,OAAO;AAAA,IACpD;AAEA,YAAQ,IAAI,eAAM,MAAM,iBAAY,OAAO,WAAW,CAAC;AAAA,EACzD,CAAC;AACH;;;AC1JF;AAmBA,SAAS,yBAAyB,MAAqC;AACrE,MAAI,CAAC,KAAK,UAAU;AAClB,UAAM,OAAO,WAAW,KAAK,aAAa;AAC1C,YAAQ,IAAI,OAAO,IAAI,oBAAoB;AAC3C;AAAA,EACF;AAEA,QAAM,YAAY,KAAK;AAAA,IACrB,oBAAoB;AAAA,IACpB,GAAG,KAAK,YAAY,IAAI,CAAC,MAAM;AAC7B,aAAO,EAAE,KAAK;AAAA,IAChB,CAAC;AAAA,EACH;AAEA,aAAW,QAAQ,KAAK,aAAa;AACnC,UAAM,SAAS,KAAK,SAAS,KAAK,IAAI,KAAK;AAC3C,UAAM,OAAO,KAAK,eAAe;AACjC,YAAQ;AAAA,MACN,OAAO,WAAW,MAAM,CAAC,IAAI,KAAK,KAAK,OAAO,SAAS,CAAC,KAAK,IAAI;AAAA,IACnE;AAAA,EACF;AAEA,QAAM,cAAc,WAAW,KAAK,aAAa;AACjD,UAAQ;AAAA,IACN,OAAO,WAAW,IAAI,oBAAoB,OAAO,SAAS,CAAC;AAAA,EAC7D;AACF;AAEA,SAAS,wBACP,WACQ;AACR,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI,UAAU,iBAAkB,QAAO,IAAI,UAAU,gBAAgB;AACrE,MAAI,UAAU,cAAe,QAAO,UAAU;AAC9C,SAAO;AACT;AAEA,SAAS,uBACP,MACA,UACQ;AACR,QAAM,KAAK,wBAAwB,QAAQ;AAC3C,QAAM,QAAQ,KAAK,IAAI,EAAE,KAAK;AAC9B,MAAI,CAAC,KAAK,eAAgB,QAAO,GAAG,KAAK,IAAI,GAAG,KAAK;AACrD,MAAI,CAAC,KAAK,SAAU,QAAO,GAAG,KAAK,IAAI,GAAG,KAAK;AAC/C,SAAO,GAAG,KAAK,IAAI,GAAG,KAAK,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK;AAC5D;AAEA,SAAS,qBACP,WACQ;AACR,MAAI,CAAC,UAAW,QAAO;AACvB,MAAI,WAAW;AACf,MAAI,UAAU,oBAAoB,UAAU,eAAe;AACzD,eAAW,IAAI,UAAU,gBAAgB,KAAK,UAAU,aAAa;AAAA,EACvE,WAAW,UAAU,kBAAkB;AACrC,eAAW,IAAI,UAAU,gBAAgB;AAAA,EAC3C,WAAW,UAAU,eAAe;AAClC,eAAW,UAAU;AAAA,EACvB;AACA,MAAI,CAAC,SAAU,QAAO;AACtB,MAAI,UAAU,qBAAqB,sBAAsB;AACvD,gBAAY,IAAI,eAAM,OAAO,mBAAmB,CAAC;AAAA,EACnD;AACA,SAAO;AACT;AAEO,IAAM,cAAc,IAAI,QAAQ,EACpC,KAAK,MAAM,EACX,YAAY,mBAAmB,EAC/B,SAAS,cAAc,UAAU,EACjC,OAAO,kBAAkB,gCAAgC,EACzD,OAAO,iBAAiB,iDAAiD,EACzE;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMF,EACC;AAAA,EACC;AAAA,IACE,OACE,SACA,YACG;AACH,YAAM,CAAC,OAAO,gBAAgB,mBAAmB,IAAI,MAAM,QAAQ,IAAI;AAAA,QACrE,aAAa,OAAO;AAAA,QACpB,2BAA2B,OAAO;AAAA,QAClC,mBAAmB,EAAE,MAAM,MAAM;AAC/B,iBAAO,EAAE,YAAY,CAAC,EAAyB;AAAA,QACjD,CAAC;AAAA,MACH,CAAC;AAED,YAAM,cAAc,IAAI;AAAA,QACtB,oBAAoB,WAAW,IAAI,CAAC,MAAM;AACxC,iBAAO,CAAC,EAAE,MAAM,CAAC;AAAA,QACnB,CAAC;AAAA,MACH;AAEA,cAAQ,IAAI,eAAM,KAAK,MAAM,OAAO,CAAC;AACrC,UAAI,MAAM,YAAa,SAAQ,IAAI,eAAM,IAAI,MAAM,WAAW,CAAC;AAC/D,cAAQ,IAAI;AACZ,cAAQ,IAAI,iBAAiB,MAAM,OAAO,EAAE;AAE5C,YAAM,iBAAiB,QAAQ,cAC3B;AAAA,QACE,MAAM,6BAA6B,MAAM,OAAO;AAAA,MAClD,IACA;AACJ,YAAM,iBAAiB,MAAM,6BAA6B;AAAA,QACxD,cAAc;AAAA,QACd,oBAAoB;AAAA,QACpB;AAAA,MACF,CAAC;AAED,UAAI,eAAe,SAAS,GAAG;AAC7B,cAAM,YAAY,eAAe,IAAI,CAAC,SAAS;AAC7C,iBAAO,uBAAuB,MAAM,YAAY,IAAI,KAAK,IAAI,CAAC;AAAA,QAChE,CAAC;AACD,gBAAQ,IAAI,iBAAiB,UAAU,KAAK,IAAI,CAAC,EAAE;AAAA,MACrD;AAEA,UAAI,MAAM;AACR,gBAAQ,IAAI,iBAAiB,MAAM,WAAW,EAAE;AAClD,UAAI,MAAM,MAAO,SAAQ,IAAI,iBAAiB,MAAM,KAAK,EAAE;AAC3D,YAAM,SAAS,aAAa,MAAM,SAAS;AAC3C,UAAI,OAAQ,SAAQ,IAAI,iBAAiB,MAAM,EAAE;AAEjD,UAAI,QAAQ,eAAe,eAAe,SAAS,GAAG;AACpD,gBAAQ,IAAI;AACZ,gBAAQ,IAAI,eAAM,KAAK,aAAa,CAAC;AACrC,mBAAW,QAAQ,gBAAgB;AACjC,gBAAM,WAAW,qBAAqB,YAAY,IAAI,KAAK,IAAI,CAAC;AAChE,kBAAQ,IAAI,KAAK,KAAK,KAAK,OAAO,EAAE,CAAC,GAAG,QAAQ,EAAE;AAClD,cAAI,KAAK,gBAAgB;AACvB,qCAAyB,IAAI;AAAA,UAC/B;AAAA,QACF;AAAA,MACF;AAEA,UAAI,QAAQ,cAAc;AACxB,gBAAQ,IAAI;AACZ,cAAM,SAAS,MAAM,yBAAyB,OAAO;AACrD,YAAI,OAAO,SAAS;AAClB,kBAAQ,IAAI,eAAM,IAAI,wCAAoB,CAAC;AAC3C,kBAAQ,IAAI,OAAO,OAAO;AAAA,QAC5B,OAAO;AACL,kBAAQ,IAAI,eAAM,IAAI,qBAAqB,CAAC;AAAA,QAC9C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AC9KF;AAKO,IAAM,cAAc,IAAI,QAAQ,EACpC,KAAK,MAAM,EACX,MAAM,IAAI,EACV,YAAY,sBAAsB,EAClC;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAMF,EACC;AAAA,EACC,iBAAiB,YAAY;AAC3B,UAAM,SAAS,MAAM,eAAe;AAEpC,QAAI,OAAO,WAAW,GAAG;AACvB,cAAQ,IAAI,eAAM,IAAI,sBAAsB,CAAC;AAC7C,cAAQ;AAAA,QACN,eAAM;AAAA,UACJ;AAAA,QACF;AAAA,MACF;AACA;AAAA,IACF;AAEA,UAAM,UAAU,KAAK;AAAA,MACnB;AAAA,MACA,GAAG,OAAO,IAAI,CAAC,MAAM;AACnB,eAAO,EAAE,QAAQ;AAAA,MACnB,CAAC;AAAA,IACH;AACA,UAAM,eAAe,KAAK;AAAA,MACxB;AAAA,MACA,GAAG,OAAO,IAAI,CAAC,MAAM;AACnB,gBAAQ,EAAE,eAAe,IAAI;AAAA,MAC/B,CAAC;AAAA,IACH;AAEA,UAAM,SAAS;AAAA,MACb,WAAW,OAAO,OAAO;AAAA,MACzB,eAAe,OAAO,YAAY;AAAA,IACpC,EAAE,KAAK,IAAI;AACX,YAAQ,IAAI,eAAM,IAAI,MAAM,CAAC;AAE7B,eAAW,SAAS,QAAQ;AAC1B,YAAM,MAAM;AAAA,QACV,MAAM,QAAQ,OAAO,OAAO;AAAA,SAC3B,MAAM,eAAe,KAAK,OAAO,YAAY;AAAA,MAChD,EAAE,KAAK,IAAI;AACX,cAAQ,IAAI,GAAG;AAAA,IACjB;AAAA,EACF,CAAC;AACH;;;AC3DF;AAMO,IAAM,gBAAgB,IAAI,QAAQ,EACtC,KAAK,QAAQ,EACb,MAAM,IAAI,EACV,YAAY,qBAAqB,EACjC,SAAS,cAAc,UAAU,EACjC,OAAO,aAAa,0BAA0B,EAC9C;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAOF,EACC;AAAA,EACC,iBAAiB,OAAO,SAAiB,YAA+B;AACtE,UAAM,aAAa,OAAO;AAE1B,QAAI,CAAC,QAAQ,KAAK;AAChB,UAAI,CAAC,cAAc,GAAG;AACpB,cAAM,IAAI,MAAM,gDAAgD;AAAA,MAClE;AACA,YAAM,YAAY,MAAM;AAAA,QACtB,sBAAsB,OAAO;AAAA,QAC7B;AAAA,MACF;AACA,UAAI,CAAC,WAAW;AACd,gBAAQ,IAAI,eAAM,IAAI,WAAW,CAAC;AAClC;AAAA,MACF;AAAA,IACF;AAEA,UAAM,gBAAgB,OAAO;AAC7B,YAAQ,IAAI,eAAM,MAAM,iBAAY,OAAO,WAAW,CAAC;AAAA,EACzD,CAAC;AACH;;;ANpCK,IAAM,mBAAmB,IAAI,QAAQ,OAAO,EAChD,YAAY,4BAA4B,EACxC,WAAW,aAAa,EACxB,WAAW,WAAW,EACtB,WAAW,WAAW,EACtB,WAAW,WAAW,EACtB,WAAW,aAAa,EACxB;AAAA,EACC;AAAA,EACA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAWF;","names":["readFileSync","readFileSync"]}

package/{banking-WWVG2CP7.js → banking-W4YOUOGR.js}

@@ -3,11 +3,11 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   callZeroBanking
-} from "./chunk-37U2ZGBH.js";
+} from "./chunk-HVKP7UPZ.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
-} from "./chunk-VBI53K3Q.js";
+} from "./chunk-LSV2VNTU.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -115,4 +115,4 @@ Notes:
 export {
   zeroBankingCommand
 };
-//# sourceMappingURL=banking-WWVG2CP7.js.map
+//# sourceMappingURL=banking-W4YOUOGR.js.map

package/{chat-D475VWGE.js → chat-U7IY4EFM.js}

@@ -3,17 +3,17 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   formatModelProviderRoute
-} from "./chunk-L6RCBAZE.js";
+} from "./chunk-TDHY3N5U.js";
 import {
   getZeroChatThread,
   listZeroModelPolicies,
   renameZeroChatThread,
   updateZeroChatThreadModelSelection
-} from "./chunk-37U2ZGBH.js";
+} from "./chunk-HVKP7UPZ.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
-} from "./chunk-VBI53K3Q.js";
+} from "./chunk-LSV2VNTU.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -244,4 +244,4 @@ Examples:
 export {
   zeroChatCommand
 };
-//# sourceMappingURL=chat-D475VWGE.js.map
+//# sourceMappingURL=chat-U7IY4EFM.js.map

package/{chunk-YCG6O3ZK.js → chunk-5BTPFZG2.js}

@@ -10,7 +10,7 @@ import {
   splitPathSegments,
   validateAuthBaseUrl,
   validateBaseUrl
-} from "./chunk-37U2ZGBH.js";
+} from "./chunk-HVKP7UPZ.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -1298,4 +1298,4 @@ export {
   matchFirewallBaseUrl,
   matchFirewallRequestDecision
 };
-//# sourceMappingURL=chunk-YCG6O3ZK.js.map
+//# sourceMappingURL=chunk-5BTPFZG2.js.map

package/{chunk-SZJIY7B5.js → chunk-5IL2HDF6.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   external_exports
-} from "./chunk-VBI53K3Q.js";
+} from "./chunk-LSV2VNTU.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -14555,4 +14555,4 @@ export {
   getConnectorStoredSecretDisplayInfo,
   getDiagnosticConnectorTypeForRuntimeEnvName
 };
-//# sourceMappingURL=chunk-SZJIY7B5.js.map
+//# sourceMappingURL=chunk-5IL2HDF6.js.map

package/chunk-63SY7N6Y.js

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+import { createRequire as __createRequire } from "node:module";
+const require = __createRequire(import.meta.url);
+import {
+  UNKNOWN_PERMISSION_GRANT
+} from "./chunk-HVKP7UPZ.js";
+import {
+  init_esm_shims
+} from "./chunk-DIRAZ3YX.js";
+
+// ../../packages/connectors/src/firewall-metadata/policy.ts
+init_esm_shims();
+
+// ../../packages/connectors/src/firewall-metadata/policy-resolver.ts
+init_esm_shims();
+function buildMetadataOverrideLookup(metadata) {
+  const overrides = metadata.defaultPolicy.permissionOverrides;
+  const lookup = /* @__PURE__ */ new Map();
+  if (!overrides) {
+    return lookup;
+  }
+  for (const permission of overrides.allow ?? []) {
+    lookup.set(permission, "allow");
+  }
+  for (const permission of overrides.deny ?? []) {
+    lookup.set(permission, "deny");
+  }
+  for (const permission of overrides.ask ?? []) {
+    lookup.set(permission, "ask");
+  }
+  return lookup;
+}
+function getOwnPermissionOverride(overrides, name) {
+  if (!overrides || !Object.prototype.hasOwnProperty.call(overrides, name)) {
+    return void 0;
+  }
+  return overrides[name];
+}
+function createFirewallMetadataPolicyResolver(metadata, overlay) {
+  const metadataOverrides = buildMetadataOverrideLookup(metadata);
+  function metadataPermission(name) {
+    return metadataOverrides.get(name) ?? metadata.defaultPolicy.permissionDefault;
+  }
+  function permission(name) {
+    return getOwnPermissionOverride(overlay?.permissionOverrides, name) ?? overlay?.permissionDefault ?? metadataPermission(name);
+  }
+  return {
+    permission,
+    unknown: () => {
+      return overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy;
+    },
+    list: (permissionNames) => {
+      let first = null;
+      for (const name of permissionNames) {
+        const current = permission(name);
+        if (first === null) {
+          first = current;
+          continue;
+        }
+        if (first !== current) {
+          return "mixed";
+        }
+      }
+      return first ?? "mixed";
+    },
+    isPermissionOverridden: (name) => {
+      return permission(name) !== metadataPermission(name);
+    },
+    isUnknownOverridden: () => {
+      return (overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy) !== metadata.defaultPolicy.unknownPolicy;
+    }
+  };
+}
+
+// ../../packages/connectors/src/firewall-metadata/policy.ts
+function metadataConnectorRef(metadata) {
+  return metadata.connectorRef ?? metadata.type;
+}
+function expandFirewallMetadataDefaultPolicy(metadata) {
+  const resolver = createFirewallMetadataPolicyResolver(metadata);
+  const policies = {};
+  for (const permission of metadata.permissions) {
+    policies[permission.name] = resolver.permission(permission.name);
+  }
+  return {
+    policies,
+    unknownPolicy: resolver.unknown()
+  };
+}
+function findFirewallMetadataPermission(metadata, name) {
+  return metadata.permissions.find((permission) => {
+    return permission.name === name;
+  }) ?? null;
+}
+function resolveFirewallMetadataPolicies(stored, metadata) {
+  let resolved = stored;
+  for (const detail of metadata) {
+    const connectorRef = metadataConnectorRef(detail);
+    const defaults = expandFirewallMetadataDefaultPolicy(detail);
+    const existing = resolved?.[connectorRef];
+    resolved = {
+      ...resolved,
+      [connectorRef]: {
+        policies: { ...defaults.policies, ...existing?.policies },
+        ...existing?.unknownPolicy !== void 0 ? { unknownPolicy: existing.unknownPolicy } : { unknownPolicy: defaults.unknownPolicy }
+      }
+    };
+  }
+  return resolved;
+}
+function permissionGrantsToFirewallPolicies(grants) {
+  const policies = {};
+  for (const grant of grants) {
+    const current = policies[grant.connectorRef] ?? { policies: {} };
+    if (grant.permission === UNKNOWN_PERMISSION_GRANT) {
+      policies[grant.connectorRef] = {
+        ...current,
+        unknownPolicy: grant.action
+      };
+      continue;
+    }
+    current.policies[grant.permission] = grant.action;
+    policies[grant.connectorRef] = current;
+  }
+  return Object.keys(policies).length > 0 ? policies : null;
+}
+
+export {
+  findFirewallMetadataPermission,
+  resolveFirewallMetadataPolicies,
+  permissionGrantsToFirewallPolicies
+};
+//# sourceMappingURL=chunk-63SY7N6Y.js.map

package/chunk-63SY7N6Y.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../packages/connectors/src/firewall-metadata/policy.ts","../../../packages/connectors/src/firewall-metadata/policy-resolver.ts"],"sourcesContent":["import {\n  UNKNOWN_PERMISSION_GRANT,\n  type FirewallPolicies,\n  type FirewallPolicy,\n  type FirewallPolicyValue,\n} from \"../firewall-types\";\nimport { createFirewallMetadataPolicyResolver } from \"./policy-resolver\";\n\nexport type {\n  FirewallMetadataPolicyListState,\n  FirewallMetadataPolicyOverlay,\n  FirewallMetadataPolicyResolver,\n} from \"./policy-resolver\";\n\nexport interface FirewallPermissionPolicyMetadataPermission {\n  readonly name: string;\n  readonly description?: string;\n}\n\nexport interface FirewallPermissionPolicyCategoryMetadata {\n  readonly categories: Readonly<Record<string, string>>;\n  readonly displayOrder: readonly string[];\n}\n\nexport type FirewallPermissionPolicyDefaultOverrides = Readonly<\n  Partial<Record<FirewallPolicyValue, readonly string[]>>\n>;\n\nexport interface FirewallPermissionPolicyDefaultMetadata {\n  readonly permissionDefault: FirewallPolicyValue;\n  readonly permissionOverrides?: FirewallPermissionPolicyDefaultOverrides;\n  readonly unknownPolicy: FirewallPolicyValue;\n}\n\ninterface FirewallPermissionPolicyMetadataBase {\n  readonly label: string;\n  readonly permissionCount: number;\n  readonly permissions: readonly FirewallPermissionPolicyMetadataPermission[];\n  readonly categories?: FirewallPermissionPolicyCategoryMetadata | null;\n  readonly defaultPolicy: FirewallPermissionPolicyDefaultMetadata;\n}\n\nexport type FirewallPermissionPolicyMetadata =\n  FirewallPermissionPolicyMetadataBase &\n    (\n      | { readonly connectorRef: string; readonly type?: string }\n      | { readonly connectorRef?: undefined; readonly type: string }\n    );\n\nexport interface FirewallMetadataPermissionGroup<T extends { name: string }> {\n  readonly category: string;\n  readonly permissions: T[];\n}\n\nexport type FirewallPermissionGrantAction = Extract<\n  FirewallPolicyValue,\n  \"allow\" | \"deny\"\n>;\n\nexport interface FirewallPermissionGrant {\n  readonly connectorRef: string;\n  readonly permission: string;\n  readonly action: FirewallPermissionGrantAction;\n}\n\nfunction metadataConnectorRef(\n  metadata: FirewallPermissionPolicyMetadata,\n): string {\n  return metadata.connectorRef ?? metadata.type;\n}\n\nexport { createFirewallMetadataPolicyResolver };\n\nexport function expandFirewallMetadataDefaultPolicy(\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallPolicy {\n  const resolver = createFirewallMetadataPolicyResolver(metadata);\n  const policies: Record<string, FirewallPolicyValue> = {};\n\n  for (const permission of metadata.permissions) {\n    policies[permission.name] = resolver.permission(permission.name);\n  }\n\n  return {\n    policies,\n    unknownPolicy: resolver.unknown(),\n  };\n}\n\nexport function findFirewallMetadataPermission(\n  metadata: FirewallPermissionPolicyMetadata,\n  name: string,\n): FirewallPermissionPolicyMetadata[\"permissions\"][number] | null {\n  return (\n    metadata.permissions.find((permission) => {\n      return permission.name === name;\n    }) ?? null\n  );\n}\n\nexport function groupFirewallMetadataPermissionsByCategory<\n  T extends { name: string },\n>(\n  permissions: readonly T[],\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallMetadataPermissionGroup<T>[] | null {\n  if (!metadata.categories) {\n    return null;\n  }\n\n  const grouped = new Map<string, T[]>();\n  for (const category of metadata.categories.displayOrder) {\n    grouped.set(category, []);\n  }\n\n  for (const permission of permissions) {\n    const category = metadata.categories.categories[permission.name];\n    if (!category) {\n      continue;\n    }\n    grouped.get(category)?.push(permission);\n  }\n\n  return [...grouped.entries()]\n    .filter(([, groupPermissions]) => {\n      return groupPermissions.length > 0;\n    })\n    .map(([category, groupPermissions]) => {\n      return { category, permissions: groupPermissions };\n    });\n}\n\nexport function resolveFirewallMetadataPolicies(\n  stored: FirewallPolicies | null,\n  metadata: readonly FirewallPermissionPolicyMetadata[],\n): FirewallPolicies | null {\n  let resolved: FirewallPolicies | null = stored;\n  for (const detail of metadata) {\n    const connectorRef = metadataConnectorRef(detail);\n    const defaults = expandFirewallMetadataDefaultPolicy(detail);\n    const existing = resolved?.[connectorRef];\n    resolved = {\n      ...resolved,\n      [connectorRef]: {\n        policies: { ...defaults.policies, ...existing?.policies },\n        ...(existing?.unknownPolicy !== undefined\n          ? { unknownPolicy: existing.unknownPolicy }\n          : { unknownPolicy: defaults.unknownPolicy }),\n      },\n    };\n  }\n  return resolved;\n}\n\nexport function permissionGrantsToFirewallPolicies(\n  grants: readonly FirewallPermissionGrant[],\n): FirewallPolicies | null {\n  const policies: FirewallPolicies = {};\n  for (const grant of grants) {\n    const current = policies[grant.connectorRef] ?? { policies: {} };\n    if (grant.permission === UNKNOWN_PERMISSION_GRANT) {\n      policies[grant.connectorRef] = {\n        ...current,\n        unknownPolicy: grant.action,\n      };\n      continue;\n    }\n    current.policies[grant.permission] = grant.action;\n    policies[grant.connectorRef] = current;\n  }\n  return Object.keys(policies).length > 0 ? policies : null;\n}\n","import type { FirewallPolicyValue } from \"../firewall-types\";\n\ninterface FirewallMetadataPolicyResolverMetadata {\n  readonly defaultPolicy: {\n    readonly permissionDefault: FirewallPolicyValue;\n    readonly permissionOverrides?: Readonly<\n      Partial<Record<FirewallPolicyValue, readonly string[]>>\n    >;\n    readonly unknownPolicy: FirewallPolicyValue;\n  };\n}\n\nexport interface FirewallMetadataPolicyOverlay {\n  readonly permissionDefault?: FirewallPolicyValue;\n  readonly permissionOverrides?: Readonly<Record<string, FirewallPolicyValue>>;\n  readonly unknownPolicy?: FirewallPolicyValue;\n}\n\nexport type FirewallMetadataPolicyListState = FirewallPolicyValue | \"mixed\";\n\n/**\n * Resolves generated metadata defaults with an optional sparse policy overlay.\n * Permission name validation belongs to callers; unknown endpoints use unknown().\n */\nexport interface FirewallMetadataPolicyResolver {\n  permission(name: string): FirewallPolicyValue;\n  unknown(): FirewallPolicyValue;\n  list(permissionNames: readonly string[]): FirewallMetadataPolicyListState;\n  isPermissionOverridden(name: string): boolean;\n  isUnknownOverridden(): boolean;\n}\n\nfunction buildMetadataOverrideLookup(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n): ReadonlyMap<string, FirewallPolicyValue> {\n  const overrides = metadata.defaultPolicy.permissionOverrides;\n  const lookup = new Map<string, FirewallPolicyValue>();\n  if (!overrides) {\n    return lookup;\n  }\n\n  for (const permission of overrides.allow ?? []) {\n    lookup.set(permission, \"allow\");\n  }\n  for (const permission of overrides.deny ?? []) {\n    lookup.set(permission, \"deny\");\n  }\n  for (const permission of overrides.ask ?? []) {\n    lookup.set(permission, \"ask\");\n  }\n\n  return lookup;\n}\n\nfunction getOwnPermissionOverride(\n  overrides: Readonly<Record<string, FirewallPolicyValue>> | undefined,\n  name: string,\n): FirewallPolicyValue | undefined {\n  if (!overrides || !Object.prototype.hasOwnProperty.call(overrides, name)) {\n    return undefined;\n  }\n  return overrides[name];\n}\n\nexport function createFirewallMetadataPolicyResolver(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n  overlay?: FirewallMetadataPolicyOverlay,\n): FirewallMetadataPolicyResolver {\n  const metadataOverrides = buildMetadataOverrideLookup(metadata);\n\n  function metadataPermission(name: string): FirewallPolicyValue {\n    return (\n      metadataOverrides.get(name) ?? metadata.defaultPolicy.permissionDefault\n    );\n  }\n\n  function permission(name: string): FirewallPolicyValue {\n    return (\n      getOwnPermissionOverride(overlay?.permissionOverrides, name) ??\n      overlay?.permissionDefault ??\n      metadataPermission(name)\n    );\n  }\n\n  return {\n    permission,\n    unknown: () => {\n      return overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy;\n    },\n    list: (permissionNames) => {\n      let first: FirewallPolicyValue | null = null;\n      for (const name of permissionNames) {\n        const current = permission(name);\n        if (first === null) {\n          first = current;\n          continue;\n        }\n        if (first !== current) {\n          return \"mixed\";\n        }\n      }\n      return first ?? \"mixed\";\n    },\n    isPermissionOverridden: (name) => {\n      return permission(name) !== metadataPermission(name);\n    },\n    isUnknownOverridden: () => {\n      return (\n        (overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy) !==\n        metadata.defaultPolicy.unknownPolicy\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA;;;ACAA;AAgCA,SAAS,4BACP,UAC0C;AAC1C,QAAM,YAAY,SAAS,cAAc;AACzC,QAAM,SAAS,oBAAI,IAAiC;AACpD,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,aAAW,cAAc,UAAU,SAAS,CAAC,GAAG;AAC9C,WAAO,IAAI,YAAY,OAAO;AAAA,EAChC;AACA,aAAW,cAAc,UAAU,QAAQ,CAAC,GAAG;AAC7C,WAAO,IAAI,YAAY,MAAM;AAAA,EAC/B;AACA,aAAW,cAAc,UAAU,OAAO,CAAC,GAAG;AAC5C,WAAO,IAAI,YAAY,KAAK;AAAA,EAC9B;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,WACA,MACiC;AACjC,MAAI,CAAC,aAAa,CAAC,OAAO,UAAU,eAAe,KAAK,WAAW,IAAI,GAAG;AACxE,WAAO;AAAA,EACT;AACA,SAAO,UAAU,IAAI;AACvB;AAEO,SAAS,qCACd,UACA,SACgC;AAChC,QAAM,oBAAoB,4BAA4B,QAAQ;AAE9D,WAAS,mBAAmB,MAAmC;AAC7D,WACE,kBAAkB,IAAI,IAAI,KAAK,SAAS,cAAc;AAAA,EAE1D;AAEA,WAAS,WAAW,MAAmC;AACrD,WACE,yBAAyB,SAAS,qBAAqB,IAAI,KAC3D,SAAS,qBACT,mBAAmB,IAAI;AAAA,EAE3B;AAEA,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM;AACb,aAAO,SAAS,iBAAiB,SAAS,cAAc;AAAA,IAC1D;AAAA,IACA,MAAM,CAAC,oBAAoB;AACzB,UAAI,QAAoC;AACxC,iBAAW,QAAQ,iBAAiB;AAClC,cAAM,UAAU,WAAW,IAAI;AAC/B,YAAI,UAAU,MAAM;AAClB,kBAAQ;AACR;AAAA,QACF;AACA,YAAI,UAAU,SAAS;AACrB,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,wBAAwB,CAAC,SAAS;AAChC,aAAO,WAAW,IAAI,MAAM,mBAAmB,IAAI;AAAA,IACrD;AAAA,IACA,qBAAqB,MAAM;AACzB,cACG,SAAS,iBAAiB,SAAS,cAAc,mBAClD,SAAS,cAAc;AAAA,IAE3B;AAAA,EACF;AACF;;;ADhDA,SAAS,qBACP,UACQ;AACR,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAIO,SAAS,oCACd,UACgB;AAChB,QAAM,WAAW,qCAAqC,QAAQ;AAC9D,QAAM,WAAgD,CAAC;AAEvD,aAAW,cAAc,SAAS,aAAa;AAC7C,aAAS,WAAW,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI;AAAA,EACjE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe,SAAS,QAAQ;AAAA,EAClC;AACF;AAEO,SAAS,+BACd,UACA,MACgE;AAChE,SACE,SAAS,YAAY,KAAK,CAAC,eAAe;AACxC,WAAO,WAAW,SAAS;AAAA,EAC7B,CAAC,KAAK;AAEV;AAkCO,SAAS,gCACd,QACA,UACyB;AACzB,MAAI,WAAoC;AACxC,aAAW,UAAU,UAAU;AAC7B,UAAM,eAAe,qBAAqB,MAAM;AAChD,UAAM,WAAW,oCAAoC,MAAM;AAC3D,UAAM,WAAW,WAAW,YAAY;AACxC,eAAW;AAAA,MACT,GAAG;AAAA,MACH,CAAC,YAAY,GAAG;AAAA,QACd,UAAU,EAAE,GAAG,SAAS,UAAU,GAAG,UAAU,SAAS;AAAA,QACxD,GAAI,UAAU,kBAAkB,SAC5B,EAAE,eAAe,SAAS,cAAc,IACxC,EAAE,eAAe,SAAS,cAAc;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mCACd,QACyB;AACzB,QAAM,WAA6B,CAAC;AACpC,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,SAAS,MAAM,YAAY,KAAK,EAAE,UAAU,CAAC,EAAE;AAC/D,QAAI,MAAM,eAAe,0BAA0B;AACjD,eAAS,MAAM,YAAY,IAAI;AAAA,QAC7B,GAAG;AAAA,QACH,eAAe,MAAM;AAAA,MACvB;AACA;AAAA,IACF;AACA,YAAQ,SAAS,MAAM,UAAU,IAAI,MAAM;AAC3C,aAAS,MAAM,YAAY,IAAI;AAAA,EACjC;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;","names":[]}

package/{chunk-FKRO4PMB.js → chunk-H3PJLBYQ.js}

@@ -2,9 +2,11 @@
 import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
-  loadFirewallPermissionMetadata,
   resolveFirewallMetadataPolicies
-} from "./chunk-GU2OYDJY.js";
+} from "./chunk-63SY7N6Y.js";
+import {
+  getZeroConnectorCatalogPermissions
+} from "./chunk-HVKP7UPZ.js";
 import {
   source_default
 } from "./chunk-JUTUEPIR.js";
@@ -26,7 +28,7 @@ async function loadPermissionMetadataByType(types) {
   const uniqueTypes = [...new Set(types)];
   const entries = await Promise.all(
     uniqueTypes.map(async (type) => {
-      return [type, await loadFirewallPermissionMetadata(type)];
+      return [type, await getZeroConnectorCatalogPermissions(type)];
     })
   );
   return new Map(entries);
@@ -44,7 +46,7 @@ function connectorPermissionInfo(args) {
       total: 0
     };
   }
-  const refPolicy = args.resolvedPolicies?.[args.metadata.type];
+  const refPolicy = args.resolvedPolicies?.[args.metadata.connectorRef];
   const policies = refPolicy && Object.keys(refPolicy.policies).length > 0 ? refPolicy.policies : null;
   const total = args.metadata.permissions.length;
   const allowed = policies ? args.metadata.permissions.filter((permission) => {
@@ -87,4 +89,4 @@ export {
   policyIcon,
   loadConnectorPermissionInfos
 };
-//# sourceMappingURL=chunk-FKRO4PMB.js.map
+//# sourceMappingURL=chunk-H3PJLBYQ.js.map

package/chunk-H3PJLBYQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/utils/format-utils.ts","../src/commands/zero/shared/firewall-permissions.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport type { FirewallPolicyValue } from \"@vm0/connectors/firewall-types\";\n\nexport function policyIcon(policy: FirewallPolicyValue): string {\n  if (policy === \"allow\") return chalk.green(\"✓\");\n  if (policy === \"ask\") return chalk.yellow(\"?\");\n  return chalk.dim(\"✗\");\n}\n","import type { PublicConnectorCatalogPermissionDetail } from \"@vm0/api-contracts/contracts/zero-connector-catalog\";\nimport { resolveFirewallMetadataPolicies } from \"@vm0/connectors/firewall-metadata/policy\";\nimport type {\n  FirewallPolicies,\n  FirewallPolicyValue,\n} from \"@vm0/connectors/firewall-types\";\nimport { getZeroConnectorCatalogPermissions } from \"../../../lib/api\";\n\nexport interface ConnectorPermissionInfo {\n  readonly type: string;\n  readonly hasPermissions: boolean;\n  readonly hasPolicyEntry: boolean;\n  readonly permissions: readonly PublicConnectorCatalogPermissionDetail[\"permissions\"][number][];\n  readonly policies: Readonly<Record<string, FirewallPolicyValue>> | null;\n  readonly unknownPolicy: FirewallPolicyValue;\n  readonly allowed: number;\n  readonly total: number;\n}\n\ntype PermissionMetadataByType = Map<\n  string,\n  PublicConnectorCatalogPermissionDetail | null\n>;\n\nasync function loadPermissionMetadataByType(\n  types: readonly string[],\n): Promise<PermissionMetadataByType> {\n  const uniqueTypes = [...new Set(types)];\n  const entries = await Promise.all(\n    uniqueTypes.map(async (type) => {\n      return [type, await getZeroConnectorCatalogPermissions(type)] as const;\n    }),\n  );\n  return new Map(entries);\n}\n\nfunction connectorPermissionInfo(args: {\n  readonly type: string;\n  readonly metadata: PublicConnectorCatalogPermissionDetail | null;\n  readonly resolvedPolicies: FirewallPolicies | null;\n}): ConnectorPermissionInfo {\n  if (!args.metadata) {\n    return {\n      type: args.type,\n      hasPermissions: false,\n      hasPolicyEntry: false,\n      permissions: [],\n      policies: null,\n      unknownPolicy: \"allow\",\n      allowed: 0,\n      total: 0,\n    };\n  }\n\n  const refPolicy = args.resolvedPolicies?.[args.metadata.connectorRef];\n  const policies =\n    refPolicy && Object.keys(refPolicy.policies).length > 0\n      ? refPolicy.policies\n      : null;\n  const total = args.metadata.permissions.length;\n  const allowed = policies\n    ? args.metadata.permissions.filter((permission) => {\n        return policies[permission.name] === \"allow\";\n      }).length\n    : 0;\n\n  return {\n    type: args.type,\n    hasPermissions: true,\n    hasPolicyEntry: refPolicy !== undefined,\n    permissions: args.metadata.permissions,\n    policies,\n    unknownPolicy: refPolicy?.unknownPolicy ?? \"allow\",\n    allowed,\n    total,\n  };\n}\n\nexport async function loadConnectorPermissionInfos(args: {\n  readonly displayTypes: readonly string[];\n  readonly defaultPolicyTypes: readonly string[];\n  readonly storedPolicies: FirewallPolicies | null;\n}): Promise<ConnectorPermissionInfo[]> {\n  const metadataByType = await loadPermissionMetadataByType([\n    ...args.displayTypes,\n    ...args.defaultPolicyTypes,\n  ]);\n  const defaultPolicyMetadata = args.defaultPolicyTypes.flatMap((type) => {\n    const metadata = metadataByType.get(type);\n    return metadata ? [metadata] : [];\n  });\n  const resolvedPolicies = resolveFirewallMetadataPolicies(\n    args.storedPolicies,\n    defaultPolicyMetadata,\n  );\n\n  return args.displayTypes.map((type) => {\n    return connectorPermissionInfo({\n      type,\n      metadata: metadataByType.get(type) ?? null,\n      resolvedPolicies,\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA;AAGO,SAAS,WAAW,QAAqC;AAC9D,MAAI,WAAW,QAAS,QAAO,eAAM,MAAM,QAAG;AAC9C,MAAI,WAAW,MAAO,QAAO,eAAM,OAAO,GAAG;AAC7C,SAAO,eAAM,IAAI,QAAG;AACtB;;;ACPA;AAwBA,eAAe,6BACb,OACmC;AACnC,QAAM,cAAc,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC;AACtC,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,YAAY,IAAI,OAAO,SAAS;AAC9B,aAAO,CAAC,MAAM,MAAM,mCAAmC,IAAI,CAAC;AAAA,IAC9D,CAAC;AAAA,EACH;AACA,SAAO,IAAI,IAAI,OAAO;AACxB;AAEA,SAAS,wBAAwB,MAIL;AAC1B,MAAI,CAAC,KAAK,UAAU;AAClB,WAAO;AAAA,MACL,MAAM,KAAK;AAAA,MACX,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,MAChB,aAAa,CAAC;AAAA,MACd,UAAU;AAAA,MACV,eAAe;AAAA,MACf,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,YAAY,KAAK,mBAAmB,KAAK,SAAS,YAAY;AACpE,QAAM,WACJ,aAAa,OAAO,KAAK,UAAU,QAAQ,EAAE,SAAS,IAClD,UAAU,WACV;AACN,QAAM,QAAQ,KAAK,SAAS,YAAY;AACxC,QAAM,UAAU,WACZ,KAAK,SAAS,YAAY,OAAO,CAAC,eAAe;AAC/C,WAAO,SAAS,WAAW,IAAI,MAAM;AAAA,EACvC,CAAC,EAAE,SACH;AAEJ,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,gBAAgB;AAAA,IAChB,gBAAgB,cAAc;AAAA,IAC9B,aAAa,KAAK,SAAS;AAAA,IAC3B;AAAA,IACA,eAAe,WAAW,iBAAiB;AAAA,IAC3C;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,6BAA6B,MAIZ;AACrC,QAAM,iBAAiB,MAAM,6BAA6B;AAAA,IACxD,GAAG,KAAK;AAAA,IACR,GAAG,KAAK;AAAA,EACV,CAAC;AACD,QAAM,wBAAwB,KAAK,mBAAmB,QAAQ,CAAC,SAAS;AACtE,UAAM,WAAW,eAAe,IAAI,IAAI;AACxC,WAAO,WAAW,CAAC,QAAQ,IAAI,CAAC;AAAA,EAClC,CAAC;AACD,QAAM,mBAAmB;AAAA,IACvB,KAAK;AAAA,IACL;AAAA,EACF;AAEA,SAAO,KAAK,aAAa,IAAI,CAAC,SAAS;AACrC,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA,UAAU,eAAe,IAAI,IAAI,KAAK;AAAA,MACtC;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}

package/{chunk-37U2ZGBH.js → chunk-HVKP7UPZ.js}

@@ -14,7 +14,7 @@ import {
   headersWithCliClientHeaders,
   initClient,
   initContract
-} from "./chunk-VBI53K3Q.js";
+} from "./chunk-LSV2VNTU.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -6437,7 +6437,7 @@ var artifactsContract = c15.router({
       401: apiErrorSchema,
       403: apiErrorSchema
     },
-    summary: "List generated artifacts for the caller's current organization (keyset-paginated)"
+    summary: "List artifacts for the caller's current organization (keyset-paginated)"
   },
   favorite: {
     method: "POST",
@@ -6451,7 +6451,7 @@ var artifactsContract = c15.router({
       403: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Favorite a generated artifact for the caller"
+    summary: "Favorite an artifact for the caller"
   },
   unfavorite: {
     method: "POST",
@@ -6465,7 +6465,7 @@ var artifactsContract = c15.router({
       403: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Remove a generated artifact favorite for the caller"
+    summary: "Remove an artifact favorite for the caller"
   }
 });
 
@@ -7817,6 +7817,28 @@ async function listZeroConnectorCatalogStatus() {
   }
   handleError(result, "Failed to list connector catalog status");
 }
+async function getZeroConnectorCatalogPermissions(connectorRef) {
+  const config = await getClientConfig();
+  const client = initClient(zeroConnectorCatalogContract, config);
+  const result = await client.permissions({
+    params: { connectorRef }
+  });
+  if (result.status === 200) {
+    if (result.body.permissions.connectorRef !== connectorRef) {
+      throw new Error(
+        `Permission metadata connectorRef mismatch: expected ${connectorRef}, got ${result.body.permissions.connectorRef}`
+      );
+    }
+    return result.body.permissions;
+  }
+  if (result.status === 404) {
+    return null;
+  }
+  handleError(
+    result,
+    `Failed to get connector permission metadata for "${connectorRef}"`
+  );
+}
 async function getZeroConnector(type) {
   const config = await getClientConfig();
   const client = initClient(zeroConnectorsByTypeContract, config);
@@ -15292,6 +15314,7 @@ export {
   searchZeroConnectors,
   listZeroConnectorCatalog,
   listZeroConnectorCatalogStatus,
+  getZeroConnectorCatalogPermissions,
   getZeroConnector,
   connectZeroConnectorManualGrant,
   listZeroCustomConnectors,
@@ -15361,4 +15384,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-37U2ZGBH.js.map
+//# sourceMappingURL=chunk-HVKP7UPZ.js.map