@vm0/cli 9.244.6 → 9.244.7

package/{model-provider-6B54DC7X.js → model-provider-T4VN4HNU.js}

@@ -5,15 +5,15 @@ import {
   formatModelPolicyStatus,
   getModelProviderRouteKind,
   getModelProviderTypeLabel
-} from "./chunk-RPQMDXP2.js";
+} from "./chunk-JWDLLCI3.js";
 import {
   listZeroModelPolicies
-} from "./chunk-OPYEYUSY.js";
+} from "./chunk-NR6ANGRK.js";
 import "./chunk-LTDQISD7.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-MWXV2NJK.js";
+} from "./chunk-26BGLMA3.js";
 import "./chunk-LRHXR7JT.js";
 import {
   Command
@@ -72,4 +72,4 @@ export {
   setCommand,
   zeroModelProviderCommand
 };
-//# sourceMappingURL=model-provider-6B54DC7X.js.map
+//# sourceMappingURL=model-provider-T4VN4HNU.js.map

package/{org-JEJIR4XQ.js → org-GNNU77Y5.js}

@@ -26,7 +26,7 @@ import {
   switchZeroOrg,
   updateZeroOrg,
   upsertZeroOrgModelProvider
-} from "./chunk-OPYEYUSY.js";
+} from "./chunk-NR6ANGRK.js";
 import "./chunk-LTDQISD7.js";
 import {
   ApiRequestError,
@@ -40,7 +40,7 @@ import {
   saveConfig,
   source_default,
   withErrorHandler
-} from "./chunk-MWXV2NJK.js";
+} from "./chunk-26BGLMA3.js";
 import "./chunk-LRHXR7JT.js";
 import {
   Command
@@ -917,4 +917,4 @@ var zeroOrgCommand = new Command().name("org").description("Manage organization
 export {
   zeroOrgCommand
 };
-//# sourceMappingURL=org-JEJIR4XQ.js.map
+//# sourceMappingURL=org-GNNU77Y5.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.244.6",
+  "version": "9.244.7",
   "description": "Zero command-line interface for vm0",
   "repository": {
     "type": "git",

package/{phone-CI77EG37.js → phone-EQ4R2GBO.js}

@@ -6,12 +6,12 @@ import {
   downloadPhoneFile,
   initPhoneFileUpload,
   sendPhoneMessage
-} from "./chunk-OPYEYUSY.js";
+} from "./chunk-NR6ANGRK.js";
 import "./chunk-LTDQISD7.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-MWXV2NJK.js";
+} from "./chunk-26BGLMA3.js";
 import "./chunk-LRHXR7JT.js";
 import {
   Command
@@ -199,4 +199,4 @@ Examples:
 export {
   zeroPhoneCommand
 };
-//# sourceMappingURL=phone-CI77EG37.js.map
+//# sourceMappingURL=phone-EQ4R2GBO.js.map

package/{preference-546TA23L.js → preference-3FHEQPKG.js}

@@ -8,12 +8,12 @@ import {
 import {
   getZeroUserPreferences,
   updateZeroUserPreferences
-} from "./chunk-OPYEYUSY.js";
+} from "./chunk-NR6ANGRK.js";
 import "./chunk-LTDQISD7.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-MWXV2NJK.js";
+} from "./chunk-26BGLMA3.js";
 import "./chunk-LRHXR7JT.js";
 import {
   Command
@@ -105,4 +105,4 @@ var zeroPreferenceCommand = new Command().name("preference").description("View o
 export {
   zeroPreferenceCommand
 };
-//# sourceMappingURL=preference-546TA23L.js.map
+//# sourceMappingURL=preference-3FHEQPKG.js.map

package/{chunk-HEAUPGDO.js → resource-EOO2VATC.js}

@@ -1,10 +1,39 @@
 #!/usr/bin/env node
 import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
+import {
+  findColorSystem,
+  findDesignSystem,
+  findImageStyle,
+  findPresentationRunbookResource,
+  findTemplate,
+  findTool,
+  findVideoTemplate,
+  findWebsiteTemplateResource
+} from "./chunk-DWWE7STW.js";
+import {
+  getRegistryResourceDownload
+} from "./chunk-NR6ANGRK.js";
+import "./chunk-LTDQISD7.js";
+import {
+  source_default,
+  withErrorHandler
+} from "./chunk-26BGLMA3.js";
+import "./chunk-LRHXR7JT.js";
+import {
+  Command
+} from "./chunk-B3W2RUBP.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
 
+// src/commands/zero/resource/index.ts
+init_esm_shims();
+import { createHash } from "crypto";
+import { mkdir, mkdtemp, rm, writeFile } from "fs/promises";
+import { tmpdir } from "os";
+import path from "path";
+
 // ../../node_modules/.pnpm/tar@7.5.20/node_modules/tar/dist/esm/index.min.js
 init_esm_shims();
 import Qr from "events";
@@ -2974,8 +3003,109 @@ var To = (s3) => {
   s3.mtimeCache || (s3.mtimeCache = /* @__PURE__ */ new Map()), s3.filter = t ? (e, i) => t(e, i) && !((s3.mtimeCache?.get(e) ?? i.mtime ?? 0) > (i.mtime ?? 0)) : (e, i) => !((s3.mtimeCache?.get(e) ?? i.mtime ?? 0) > (i.mtime ?? 0));
 };
 
+// src/commands/zero/resource/index.ts
+function candidateIds(id) {
+  if (id.includes(":")) {
+    return [id];
+  }
+  return [
+    `template:${id}`,
+    `design-system:${id}`,
+    `color-system:${id}`,
+    `tool:${id}`,
+    `image-style:${id}`,
+    `video-template:${id}`
+  ];
+}
+function findRegistryResourceForPull(id) {
+  for (const candidate of candidateIds(id)) {
+    const entry = findTemplate(candidate) ?? findDesignSystem(candidate) ?? findColorSystem(candidate) ?? findTool(candidate) ?? findImageStyle(candidate) ?? findVideoTemplate(candidate) ?? findPresentationRunbookResource(candidate) ?? findWebsiteTemplateResource(candidate);
+    if (entry) {
+      return entry;
+    }
+  }
+  return void 0;
+}
+function isSafeTarPath(entryPath) {
+  const normalized = entryPath.replace(/\\/gu, "/");
+  return !path.isAbsolute(normalized) && !normalized.split("/").some((segment) => {
+    return segment === "..";
+  });
+}
+async function downloadArchive(url) {
+  const response = await fetch(url);
+  if (!response.ok) {
+    throw new Error(`Resource archive download failed: ${response.status}`);
+  }
+  return Buffer.from(await response.arrayBuffer());
+}
+function verifyArchive(buffer, expectedSha256) {
+  const actual = createHash("sha256").update(buffer).digest("hex");
+  if (actual !== expectedSha256) {
+    throw new Error(
+      `Resource archive digest mismatch: expected ${expectedSha256}, got ${actual}`
+    );
+  }
+}
+var zeroResourceCommand = new Command().name("resource").description("Pull registry resources from private R2-backed archives").addCommand(
+  new Command().name("pull").description("Download and extract a private registry resource archive").argument(
+    "<id>",
+    "Registry resource id, such as template:html-ppt-playful-launch-runbook"
+  ).option(
+    "--dir <path>",
+    "Directory to extract into",
+    "./generated/resources"
+  ).action(
+    withErrorHandler(async (id, options) => {
+      const entry = findRegistryResourceForPull(id);
+      if (!entry) {
+        throw new Error(`Unknown registry resource: ${id}`);
+      }
+      const archive = entry.source.archive;
+      if (!archive) {
+        throw new Error(
+          `Registry resource ${entry.id} does not provide an R2 archive source`
+        );
+      }
+      console.log(source_default.dim(`Pulling ${entry.id}...`));
+      const download = await getRegistryResourceDownload({
+        id: entry.id,
+        expectedSha256: archive.sha256
+      });
+      if (download.sha256 !== archive.sha256) {
+        throw new Error(
+          `Resource archive digest metadata mismatch: expected ${archive.sha256}, got ${download.sha256}`
+        );
+      }
+      const buffer = await downloadArchive(download.url);
+      verifyArchive(buffer, archive.sha256);
+      const outputDir = path.resolve(options.dir);
+      const tmpDir = await mkdtemp(path.join(tmpdir(), "zero-resource-"));
+      const archivePath = path.join(tmpDir, "resource.tar.gz");
+      await mkdir(outputDir, { recursive: true });
+      await writeFile(archivePath, buffer);
+      try {
+        await So({
+          file: archivePath,
+          cwd: outputDir,
+          gzip: true,
+          filter: isSafeTarPath
+        });
+      } finally {
+        await rm(tmpDir, { recursive: true, force: true });
+      }
+      console.log(source_default.green(`\u2713 Pulled ${entry.id}`));
+      console.log(source_default.dim(`  Extracted to: ${outputDir}`));
+      console.log(
+        source_default.dim(
+          `  Source path:  ${path.join(outputDir, entry.source.path)}`
+        )
+      );
+    })
+  )
+);
 export {
-  Qn,
-  So
+  findRegistryResourceForPull,
+  zeroResourceCommand
 };
-//# sourceMappingURL=chunk-HEAUPGDO.js.map
+//# sourceMappingURL=resource-EOO2VATC.js.map