@vm0/cli 9.255.0 → 9.257.0

package/{chunk-BKR7J5QP.js → chunk-GF22PXYF.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   decodeZeroTokenPayload
-} from "./chunk-H4LRAOOF.js";
+} from "./chunk-X5FAOKYK.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -29,4 +29,4 @@ export {
   currentPlanAllowsVideo,
   currentTokenCanReadBilling
 };
-//# sourceMappingURL=chunk-BKR7J5QP.js.map
+//# sourceMappingURL=chunk-GF22PXYF.js.map

package/{chunk-RKXDWJW5.js → chunk-KDNGT5NT.js}

@@ -6,7 +6,7 @@ import {
   getActiveToken,
   getBaseUrl,
   headersWithCliClientHeaders
-} from "./chunk-DQB537B5.js";
+} from "./chunk-AXPECIRA.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -120,10 +120,6 @@ async function downloadWebFile(fileId, outPath) {
   const headers = {
     Authorization: `Bearer ${token}`
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
   const response = await fetch(url, {
     headers: headersWithCliClientHeaders(headers)
   });
@@ -202,10 +198,6 @@ function authenticatedJsonHeaders(token) {
     Authorization: `Bearer ${token}`,
     "Content-Type": "application/json"
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
   return headersWithCliClientHeaders(headers);
 }
 function isRecord(value) {
@@ -446,10 +438,6 @@ async function uploadWebFile(localPath, options) {
     Authorization: `Bearer ${token}`,
     "Content-Type": "application/json"
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    prepareHeaders["x-vercel-protection-bypass"] = bypassSecret;
-  }
   const prepareUrl = new URL("/api/zero/uploads/prepare", baseUrl);
   const prepareRes = await fetch(prepareUrl, {
     method: "POST",
@@ -512,10 +500,6 @@ async function generateWebVoice(options) {
     Authorization: `Bearer ${token}`,
     "Content-Type": "application/json"
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
   const response = await fetch(new URL("/api/zero/voice-io/speech", baseUrl), {
     method: "POST",
     headers: headersWithCliClientHeaders(headers),
@@ -544,10 +528,6 @@ async function generateWebImage(options) {
     Authorization: `Bearer ${token}`,
     "Content-Type": "application/json"
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
   const response = await fetch(
     new URL("/api/zero/image-io/generate", baseUrl),
     {
@@ -596,10 +576,6 @@ async function generateWebVideo(options) {
     Authorization: `Bearer ${token}`,
     "Content-Type": "application/json"
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
   const response = await fetch(
     new URL("/api/zero/video-io/generate", baseUrl),
     {
@@ -631,10 +607,6 @@ async function transcribeAudio(audioPath, options = {}) {
   const headers = {
     Authorization: `Bearer ${token}`
   };
-  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
-  if (bypassSecret) {
-    headers["x-vercel-protection-bypass"] = bypassSecret;
-  }
   const url = new URL("/api/zero/voice-io/stt", baseUrl);
   if (options.verbose) {
     url.searchParams.set("verbose", "true");
@@ -676,4 +648,4 @@ export {
   generateWebVideo,
   transcribeAudio
 };
-//# sourceMappingURL=chunk-RKXDWJW5.js.map
+//# sourceMappingURL=chunk-KDNGT5NT.js.map

package/chunk-KDNGT5NT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/api/domains/web.ts"],"sourcesContent":["import { createWriteStream, readFileSync, statSync } from \"node:fs\";\nimport { basename, extname } from \"node:path\";\nimport { Readable } from \"node:stream\";\nimport { pipeline } from \"node:stream/promises\";\nimport { setTimeout as delay } from \"node:timers/promises\";\nimport { Realtime, type AuthOptions, type InboundMessage } from \"ably\";\nimport type {\n  ZeroBuiltInGenerationAcceptedResponse,\n  ZeroBuiltInGenerationResponse,\n} from \"@vm0/api-contracts/contracts/zero-built-in-generation\";\nimport { ApiRequestError, getBaseUrl } from \"../core/client-factory\";\nimport { getActiveToken } from \"../config\";\nimport { headersWithCliClientHeaders } from \"../client-headers\";\n\nconst BUILT_IN_GENERATION_POLL_INTERVAL_MS = 2_000;\nconst BUILT_IN_GENERATION_WAIT_TIMEOUT_MS_BY_TYPE = {\n  image: 15 * 60 * 1000,\n  video: 30 * 60 * 1000,\n  presentation: 60 * 60 * 1000,\n  website: 60 * 60 * 1000,\n} as const satisfies Record<\n  ZeroBuiltInGenerationAcceptedResponse[\"type\"],\n  number\n>;\nconst ABLY_CONNECT_TIMEOUT_MS = 10_000;\n\n/**\n * Minimal extension → MIME map covering the server allowlist for\n * `/api/zero/uploads/prepare`. Kept in this file rather than a shared module\n * to match the YAGNI pattern used elsewhere in the CLI.\n */\nconst MIME_BY_EXTENSION: Record<string, string> = {\n  \".png\": \"image/png\",\n  \".jpg\": \"image/jpeg\",\n  \".jpeg\": \"image/jpeg\",\n  \".gif\": \"image/gif\",\n  \".webp\": \"image/webp\",\n  \".avif\": \"image/avif\",\n  \".svg\": \"image/svg+xml\",\n  \".bmp\": \"image/bmp\",\n  \".heic\": \"image/heic\",\n  \".heif\": \"image/heif\",\n  \".tif\": \"image/tiff\",\n  \".tiff\": \"image/tiff\",\n  \".psd\": \"image/vnd.adobe.photoshop\",\n  \".mp4\": \"video/mp4\",\n  \".webm\": \"video/webm\",\n  \".mov\": \"video/quicktime\",\n  \".aac\": \"audio/aac\",\n  \".flac\": \"audio/flac\",\n  \".m4a\": \"audio/mp4\",\n  \".mp3\": \"audio/mpeg\",\n  \".mpga\": \"audio/mpga\",\n  \".oga\": \"audio/ogg\",\n  \".ogg\": \"audio/ogg\",\n  \".opus\": \"audio/opus\",\n  \".wav\": \"audio/wav\",\n  \".wave\": \"audio/wave\",\n  \".pdf\": \"application/pdf\",\n  \".txt\": \"text/plain\",\n  \".csv\": \"text/csv\",\n  \".md\": \"text/markdown\",\n  \".html\": \"text/html\",\n  \".htm\": \"text/html\",\n  \".json\": \"application/json\",\n  \".xml\": \"application/xml\",\n  \".yaml\": \"application/yaml\",\n  \".yml\": \"application/yaml\",\n  \".tsv\": \"text/tab-separated-values\",\n  \".doc\": \"application/msword\",\n  \".docx\":\n    \"application/vnd.openxmlformats-officedocument.wordprocessingml.document\",\n  \".docm\": \"application/vnd.ms-word.document.macroenabled.12\",\n  \".dotm\": \"application/vnd.ms-word.template.macroenabled.12\",\n  \".dotx\":\n    \"application/vnd.openxmlformats-officedocument.wordprocessingml.template\",\n  \".odt\": \"application/vnd.oasis.opendocument.text\",\n  \".rtf\": \"application/rtf\",\n  \".xls\": \"application/vnd.ms-excel\",\n  \".xlsx\": \"application/vnd.openxmlformats-officedocument.spreadsheetml.sheet\",\n  \".xlsb\": \"application/vnd.ms-excel.sheet.binary.macroenabled.12\",\n  \".xlsm\": \"application/vnd.ms-excel.sheet.macroenabled.12\",\n  \".xltm\": \"application/vnd.ms-excel.template.macroenabled.12\",\n  \".xltx\":\n    \"application/vnd.openxmlformats-officedocument.spreadsheetml.template\",\n  \".ods\": \"application/vnd.oasis.opendocument.spreadsheet\",\n  \".ppt\": \"application/vnd.ms-powerpoint\",\n  \".pptx\":\n    \"application/vnd.openxmlformats-officedocument.presentationml.presentation\",\n  \".potm\": \"application/vnd.ms-powerpoint.template.macroenabled.12\",\n  \".potx\":\n    \"application/vnd.openxmlformats-officedocument.presentationml.template\",\n  \".odp\": \"application/vnd.oasis.opendocument.presentation\",\n  \".ppsx\":\n    \"application/vnd.openxmlformats-officedocument.presentationml.slideshow\",\n  \".ppsm\": \"application/vnd.ms-powerpoint.slideshow.macroenabled.12\",\n  \".pptm\": \"application/vnd.ms-powerpoint.presentation.macroenabled.12\",\n  \".zip\": \"application/zip\",\n  \".rar\": \"application/vnd.rar\",\n  \".7z\": \"application/x-7z-compressed\",\n  \".tar\": \"application/x-tar\",\n  \".gz\": \"application/gzip\",\n  \".tgz\": \"application/gzip\",\n  \".bz2\": \"application/x-bzip2\",\n  \".xz\": \"application/x-xz\",\n  \".pages\": \"application/vnd.apple.pages\",\n  \".numbers\": \"application/vnd.apple.numbers\",\n  \".key\": \"application/vnd.apple.keynote\",\n  \".parquet\": \"application/vnd.apache.parquet\",\n  \".sqlite\": \"application/vnd.sqlite3\",\n  \".sqlite3\": \"application/vnd.sqlite3\",\n  \".db\": \"application/vnd.sqlite3\",\n  \".epub\": \"application/epub+zip\",\n  \".ai\": \"application/postscript\",\n};\n\nexport function inferWebUploadContentType(localPath: string): string {\n  const ext = extname(localPath).toLowerCase();\n  return MIME_BY_EXTENSION[ext] ?? \"application/octet-stream\";\n}\n\ninterface DownloadWebFileResult {\n  path: string;\n  mimetype: string;\n  size: number;\n}\n\n/**\n * Download a web-uploaded file to a local path, streaming the response body\n * to disk. Authenticates via ZERO_TOKEN. Response is binary, so this bypasses\n * the typed contract client.\n */\nexport async function downloadWebFile(\n  fileId: string,\n  outPath: string,\n): Promise<DownloadWebFileResult> {\n  const baseUrl = await getBaseUrl();\n  const token = await getActiveToken();\n  if (!token) {\n    throw new ApiRequestError(\"Not authenticated\", \"UNAUTHORIZED\", 401);\n  }\n\n  const url = new URL(\"/api/zero/web/download-file\", baseUrl);\n  url.searchParams.set(\"file_id\", fileId);\n\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n  };\n\n  const response = await fetch(url, {\n    headers: headersWithCliClientHeaders(headers),\n  });\n\n  if (!response.ok) {\n    let message = `Failed to download web file (HTTP ${response.status})`;\n    let code = \"UNKNOWN\";\n    try {\n      const body = (await response.json()) as {\n        error?: { message?: string; code?: string };\n      };\n      if (body.error?.message) message = body.error.message;\n      if (body.error?.code) code = body.error.code;\n    } catch {\n      // ignore parse errors — keep generic message\n    }\n    throw new ApiRequestError(message, code, response.status);\n  }\n\n  if (!response.body) {\n    throw new ApiRequestError(\n      \"Web download response has no body\",\n      \"EMPTY_BODY\",\n      502,\n    );\n  }\n\n  const mimetype =\n    response.headers.get(\"x-file-mimetype\") ??\n    response.headers.get(\"content-type\") ??\n    \"application/octet-stream\";\n\n  // Cast required: Web API ReadableStream and Node.js ReadableStream are\n  // structurally compatible but have incompatible type declarations.\n  await pipeline(\n    Readable.fromWeb(response.body as never),\n    createWriteStream(outPath),\n  );\n\n  const contentLengthHeader = response.headers.get(\"content-length\");\n  const size = contentLengthHeader ? Number(contentLengthHeader) : 0;\n\n  return { path: outPath, mimetype, size };\n}\n\ninterface UploadWebFileResult {\n  id: string;\n  filename: string;\n  contentType: string;\n  size: number;\n  url: string;\n}\n\ninterface GenerateWebVoiceOptions {\n  text: string;\n  voice?: string;\n  instructions?: string;\n}\n\ninterface GenerateWebVoiceResult {\n  id: string;\n  filename: string;\n  contentType: string;\n  size: number;\n  url: string;\n  durationSeconds: number;\n  creditsCharged: number;\n  model: string;\n  voice: string;\n}\n\ninterface GenerateWebImageOptions {\n  prompt: string;\n  model?: string;\n  size?: string;\n  quality?: string;\n  background?: string;\n  outputFormat?: string;\n  outputCompression?: number;\n  moderation?: string;\n  seed?: number;\n  safetyTolerance?: string;\n  enhancePrompt?: boolean;\n  imageUrls?: readonly string[];\n  maskImageUrl?: string;\n  inputFidelity?: string;\n  imagePromptStrength?: number;\n}\n\ninterface GenerateWebImageResult {\n  id: string;\n  filename: string;\n  contentType: string;\n  size: number;\n  url: string;\n  creditsCharged: number;\n  model: string;\n  provider: string;\n  imageSize: string;\n  quality: string;\n  background: string;\n  outputFormat: string;\n  outputCompression?: number;\n  moderation?: string;\n  safetyTolerance?: string;\n  revisedPrompt?: string;\n  usage?: {\n    textInputTokens: number;\n    imageInputTokens: number;\n    imageOutputTokens: number;\n    totalTokens: number;\n  };\n  billingCategory?: string;\n  billingQuantity?: number;\n  sourceUrl?: string;\n  seed?: number;\n  sourceImageUrls?: string[];\n  maskImageUrl?: string;\n  inputFidelity?: string;\n  imagePromptStrength?: number;\n}\n\ninterface GenerateWebVideoOptions {\n  prompt: string;\n  model?: string;\n  aspectRatio?: string;\n  duration?: string;\n  resolution?: string;\n  generateAudio?: boolean;\n  negativePrompt?: string;\n  seed?: number;\n  autoFix?: boolean;\n  safetyTolerance?: string;\n  imageUrls?: string[];\n  videoUrls?: string[];\n  audioUrls?: string[];\n  firstFrameImageUrl?: string;\n  lastFrameImageUrl?: string;\n}\n\ninterface GenerateWebVideoResult {\n  id: string;\n  filename: string;\n  contentType: string;\n  size: number;\n  url: string;\n  durationSeconds: number;\n  creditsCharged: number;\n  model: string;\n  aspectRatio: string;\n  duration: string;\n  resolution: string;\n  generateAudio: boolean;\n  sourceUrl: string;\n  requestId?: string;\n}\n\nfunction shouldIncludePayloadValue(value: unknown): boolean {\n  if (value === undefined) {\n    return false;\n  }\n  return !Array.isArray(value) || value.length > 0;\n}\n\nfunction compactPayload(\n  entries: readonly (readonly [string, unknown])[],\n): Record<string, unknown> {\n  return Object.fromEntries(\n    entries.filter(([, value]) => {\n      return shouldIncludePayloadValue(value);\n    }),\n  );\n}\n\nfunction generateWebVideoPayload(\n  options: GenerateWebVideoOptions,\n): Record<string, unknown> {\n  return compactPayload([\n    [\"prompt\", options.prompt],\n    [\"model\", options.model],\n    [\"aspectRatio\", options.aspectRatio],\n    [\"duration\", options.duration],\n    [\"resolution\", options.resolution],\n    [\"generateAudio\", options.generateAudio],\n    [\"negativePrompt\", options.negativePrompt],\n    [\"seed\", options.seed],\n    [\"autoFix\", options.autoFix],\n    [\"safetyTolerance\", options.safetyTolerance],\n    [\"imageUrls\", options.imageUrls],\n    [\"videoUrls\", options.videoUrls],\n    [\"audioUrls\", options.audioUrls],\n    [\"firstFrameImageUrl\", options.firstFrameImageUrl],\n    [\"lastFrameImageUrl\", options.lastFrameImageUrl],\n  ]);\n}\n\ninterface PrepareUploadResponse {\n  id: string;\n  filename: string;\n  contentType: string;\n  size: number;\n  uploadUrl: string;\n  url: string;\n}\n\ninterface CompleteUploadResponse {\n  id: string;\n  filename: string;\n  contentType: string;\n  size: number;\n  url: string;\n}\n\nasync function parseErrorBody(\n  response: Response,\n  fallback: string,\n): Promise<{ message: string; code: string }> {\n  let message = `${fallback} (HTTP ${response.status})`;\n  let code = \"UNKNOWN\";\n  try {\n    const body = (await response.json()) as {\n      error?: { message?: string; code?: string };\n    };\n    if (body.error?.message) message = body.error.message;\n    if (body.error?.code) code = body.error.code;\n  } catch {\n    // ignore parse errors — keep generic message\n  }\n  return { message, code };\n}\n\nfunction authenticatedJsonHeaders(token: string): Headers {\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n    \"Content-Type\": \"application/json\",\n  };\n  return headersWithCliClientHeaders(headers);\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isBuiltInGenerationAcceptedResponse(\n  value: unknown,\n): value is ZeroBuiltInGenerationAcceptedResponse {\n  if (!isRecord(value)) {\n    return false;\n  }\n  return (\n    typeof value.generationId === \"string\" &&\n    value.status === \"queued\" &&\n    (value.type === \"image\" ||\n      value.type === \"video\" ||\n      value.type === \"presentation\" ||\n      value.type === \"website\") &&\n    isRecord(value.realtime)\n  );\n}\n\ninterface BuiltInGenerationNotifier {\n  wait(timeoutMs: number): Promise<void>;\n  close(): void;\n}\n\nfunction createBuiltInGenerationRealtime(\n  accepted: ZeroBuiltInGenerationAcceptedResponse,\n): Realtime {\n  let nextAuthRequest = accepted.realtime.tokenRequest;\n  const authCallback: NonNullable<AuthOptions[\"authCallback\"]> = (\n    _params,\n    callback,\n  ) => {\n    const current = nextAuthRequest;\n    nextAuthRequest = accepted.realtime.tokenRequest;\n    callback(null, current);\n  };\n\n  return new Realtime({\n    authCallback,\n    autoConnect: true,\n    disconnectedRetryTimeout: 5000,\n    suspendedRetryTimeout: 15_000,\n  });\n}\n\nfunction waitForRealtimeConnected(\n  ably: Realtime,\n  timeoutMs = ABLY_CONNECT_TIMEOUT_MS,\n): Promise<void> {\n  if (ably.connection.state === \"connected\") {\n    return Promise.resolve();\n  }\n  if (ably.connection.state === \"failed\") {\n    return Promise.reject(new Error(\"Ably connection failed\"));\n  }\n\n  return new Promise((resolve, reject) => {\n    const timer = setTimeout(() => {\n      reject(new Error(\"Timed out connecting to Ably\"));\n    }, timeoutMs);\n\n    ably.connection.once(\"connected\", () => {\n      clearTimeout(timer);\n      resolve();\n    });\n    ably.connection.once(\"failed\", (stateChange) => {\n      clearTimeout(timer);\n      reject(\n        new Error(\n          `Ably connection failed: ${stateChange?.reason?.message ?? \"unknown\"}`,\n        ),\n      );\n    });\n  });\n}\n\nasync function createBuiltInGenerationNotifier(\n  accepted: ZeroBuiltInGenerationAcceptedResponse,\n): Promise<BuiltInGenerationNotifier | null> {\n  const ably = createBuiltInGenerationRealtime(accepted);\n\n  try {\n    await waitForRealtimeConnected(ably);\n    const channel = ably.channels.get(accepted.realtime.channelName);\n\n    let pendingEvent = false;\n    let closed = false;\n    let wake: (() => void) | null = null;\n\n    const wakeWaiter = () => {\n      const current = wake;\n      wake = null;\n      current?.();\n    };\n\n    const onMessage = (_message: InboundMessage) => {\n      if (wake) {\n        wakeWaiter();\n        return;\n      }\n      pendingEvent = true;\n    };\n\n    await channel.subscribe(accepted.realtime.eventName, onMessage);\n\n    return {\n      wait(timeoutMs: number): Promise<void> {\n        if (pendingEvent || closed || timeoutMs <= 0) {\n          pendingEvent = false;\n          return Promise.resolve();\n        }\n\n        return new Promise((resolve) => {\n          function done() {\n            clearTimeout(timer);\n            if (wake === done) {\n              wake = null;\n            }\n            resolve();\n          }\n          const timer = setTimeout(done, timeoutMs);\n          wake = done;\n        });\n      },\n      close(): void {\n        if (closed) {\n          return;\n        }\n        closed = true;\n        channel.unsubscribe(accepted.realtime.eventName, onMessage);\n        wakeWaiter();\n        ably.close();\n      },\n    };\n  } catch {\n    ably.close();\n    return null;\n  }\n}\n\nasync function getBuiltInGenerationStatus(\n  baseUrl: string,\n  token: string,\n  generationId: string,\n): Promise<ZeroBuiltInGenerationResponse> {\n  const response = await fetch(\n    new URL(`/api/zero/built-in-generations/${generationId}`, baseUrl),\n    { headers: authenticatedJsonHeaders(token) },\n  );\n\n  if (!response.ok) {\n    const { message, code } = await parseErrorBody(\n      response,\n      \"Failed to get generation status\",\n    );\n    throw new ApiRequestError(message, code, response.status);\n  }\n\n  return (await response.json()) as ZeroBuiltInGenerationResponse;\n}\n\nfunction readBuiltInGenerationResult<T>(\n  status: ZeroBuiltInGenerationResponse,\n  fallback: string,\n): T | undefined {\n  if (status.status === \"completed\") {\n    if (!status.result) {\n      throw new ApiRequestError(\n        `${fallback} returned no result`,\n        \"EMPTY_RESULT\",\n        502,\n      );\n    }\n    return status.result as T;\n  }\n\n  if (status.status === \"failed\") {\n    const code = status.error?.code ?? \"GENERATION_FAILED\";\n    throw new ApiRequestError(\n      status.error?.message ?? `${fallback} failed`,\n      code,\n      statusForBuiltInGenerationError(code),\n    );\n  }\n\n  return undefined;\n}\n\nfunction statusForBuiltInGenerationError(code: string): number {\n  if (code === \"BAD_REQUEST\") {\n    return 400;\n  }\n  if (code === \"INSUFFICIENT_CREDITS\") {\n    return 402;\n  }\n  if (code === \"NOT_CONFIGURED\") {\n    return 503;\n  }\n  if (code === \"GENERATION_TIMEOUT\") {\n    return 504;\n  }\n  if (\n    code.startsWith(\"BYTEPLUS_INVALID_PARAMETER\") ||\n    code.startsWith(\"BYTEPLUS_INPUT_\")\n  ) {\n    return 400;\n  }\n  if (code.startsWith(\"BYTEPLUS_\")) {\n    return 502;\n  }\n  if (code.startsWith(\"NO_\") || code.endsWith(\"_FAILED\")) {\n    return 502;\n  }\n  return 500;\n}\n\nasync function waitForBuiltInGenerationResult<T>(args: {\n  readonly accepted: ZeroBuiltInGenerationAcceptedResponse;\n  readonly baseUrl: string;\n  readonly token: string;\n  readonly fallback: string;\n}): Promise<T> {\n  let notifier: BuiltInGenerationNotifier | null = null;\n  let notifierCreated = false;\n  const startedAt = Date.now();\n  const timeoutMs =\n    BUILT_IN_GENERATION_WAIT_TIMEOUT_MS_BY_TYPE[args.accepted.type];\n\n  try {\n    while (Date.now() - startedAt < timeoutMs) {\n      const status = await getBuiltInGenerationStatus(\n        args.baseUrl,\n        args.token,\n        args.accepted.generationId,\n      );\n      const result = readBuiltInGenerationResult<T>(status, args.fallback);\n      if (result) {\n        return result;\n      }\n\n      const elapsed = Date.now() - startedAt;\n      const remaining = timeoutMs - elapsed;\n      const waitMs = Math.min(BUILT_IN_GENERATION_POLL_INTERVAL_MS, remaining);\n      if (!notifierCreated) {\n        notifier = await createBuiltInGenerationNotifier(args.accepted);\n        notifierCreated = true;\n      }\n      if (notifier) {\n        await notifier.wait(waitMs);\n      } else {\n        await delay(waitMs);\n      }\n    }\n  } finally {\n    notifier?.close();\n  }\n\n  throw new ApiRequestError(\n    `${args.fallback} timed out (generationId: ${args.accepted.generationId})`,\n    \"GENERATION_TIMEOUT\",\n    504,\n  );\n}\n\nasync function readBuiltInGenerationResponse<T>(args: {\n  readonly response: Response;\n  readonly baseUrl: string;\n  readonly token: string;\n  readonly fallback: string;\n}): Promise<T> {\n  const body: unknown = await args.response.json();\n  if (isBuiltInGenerationAcceptedResponse(body)) {\n    return waitForBuiltInGenerationResult<T>({\n      accepted: body,\n      baseUrl: args.baseUrl,\n      token: args.token,\n      fallback: args.fallback,\n    });\n  }\n  if (args.response.status === 202) {\n    throw new ApiRequestError(\n      `${args.fallback} returned an invalid generation response`,\n      \"INVALID_GENERATION_RESPONSE\",\n      502,\n    );\n  }\n  return body as T;\n}\n\n/**\n * Upload a local file and receive back metadata including a public CDN URL.\n * Authenticates via ZERO_TOKEN (`file:write` capability) or a CLI\n * PAT / Clerk session.\n *\n * Three-step flow:\n *   1. POST /api/zero/uploads/prepare — server signs a PUT URL for R2\n *   2. PUT the file bytes directly to R2\n *   3. POST /api/zero/uploads/complete — server verifies the object and\n *      records any run-scoped upload association\n *\n * Step 2 never touches the Next.js runtime, which lifts the cap from\n * Vercel's ~4.5 MB body limit up to R2's 5 GB single-PUT limit.\n */\nexport async function uploadWebFile(\n  localPath: string,\n  options?: { contentType?: string },\n): Promise<UploadWebFileResult> {\n  const stats = statSync(localPath);\n  if (!stats.isFile()) {\n    throw new ApiRequestError(\n      `Not a regular file: ${localPath}`,\n      \"BAD_REQUEST\",\n      400,\n    );\n  }\n\n  const baseUrl = await getBaseUrl();\n  const token = await getActiveToken();\n  if (!token) {\n    throw new ApiRequestError(\"Not authenticated\", \"UNAUTHORIZED\", 401);\n  }\n\n  const filename = basename(localPath);\n  const contentType =\n    options?.contentType ?? inferWebUploadContentType(localPath);\n\n  const prepareHeaders: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n    \"Content-Type\": \"application/json\",\n  };\n\n  const prepareUrl = new URL(\"/api/zero/uploads/prepare\", baseUrl);\n  const prepareRes = await fetch(prepareUrl, {\n    method: \"POST\",\n    headers: headersWithCliClientHeaders(prepareHeaders),\n    body: JSON.stringify({ filename, contentType, size: stats.size }),\n  });\n\n  if (!prepareRes.ok) {\n    const { message, code } = await parseErrorBody(\n      prepareRes,\n      \"Failed to prepare upload\",\n    );\n    throw new ApiRequestError(message, code, prepareRes.status);\n  }\n\n  const prepared = (await prepareRes.json()) as PrepareUploadResponse;\n\n  const bytes = readFileSync(localPath);\n  const putRes = await fetch(prepared.uploadUrl, {\n    method: \"PUT\",\n    headers: { \"Content-Type\": prepared.contentType },\n    body: new Uint8Array(bytes),\n  });\n\n  if (!putRes.ok) {\n    throw new ApiRequestError(\n      `Failed to upload file to storage (HTTP ${putRes.status})`,\n      \"UPLOAD_FAILED\",\n      putRes.status,\n    );\n  }\n\n  const completeUrl = new URL(\"/api/zero/uploads/complete\", baseUrl);\n  const completeRes = await fetch(completeUrl, {\n    method: \"POST\",\n    headers: headersWithCliClientHeaders(prepareHeaders),\n    body: JSON.stringify({\n      id: prepared.id,\n      contentType: prepared.contentType,\n    }),\n  });\n\n  if (!completeRes.ok) {\n    const { message, code } = await parseErrorBody(\n      completeRes,\n      \"Failed to complete upload\",\n    );\n    throw new ApiRequestError(message, code, completeRes.status);\n  }\n\n  const completed = (await completeRes.json()) as CompleteUploadResponse;\n\n  return {\n    id: completed.id,\n    filename: completed.filename,\n    contentType: completed.contentType,\n    size: completed.size,\n    url: completed.url,\n  };\n}\n\n/**\n * Generate billed speech audio from text and receive the public CDN URL.\n * Authenticates via ZERO_TOKEN (`file:write` capability) or a CLI PAT /\n * Clerk session.\n */\nexport async function generateWebVoice(\n  options: GenerateWebVoiceOptions,\n): Promise<GenerateWebVoiceResult> {\n  const baseUrl = await getBaseUrl();\n  const token = await getActiveToken();\n  if (!token) {\n    throw new ApiRequestError(\"Not authenticated\", \"UNAUTHORIZED\", 401);\n  }\n\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n    \"Content-Type\": \"application/json\",\n  };\n\n  const response = await fetch(new URL(\"/api/zero/voice-io/speech\", baseUrl), {\n    method: \"POST\",\n    headers: headersWithCliClientHeaders(headers),\n    body: JSON.stringify({\n      text: options.text,\n      ...(options.voice ? { voice: options.voice } : {}),\n      ...(options.instructions ? { instructions: options.instructions } : {}),\n    }),\n  });\n\n  if (!response.ok) {\n    const { message, code } = await parseErrorBody(\n      response,\n      \"Failed to generate voice\",\n    );\n    throw new ApiRequestError(message, code, response.status);\n  }\n\n  return (await response.json()) as GenerateWebVoiceResult;\n}\n\n/**\n * Generate a billed image from a prompt and receive the public CDN URL.\n * Authenticates via ZERO_TOKEN (`file:write` capability) or a CLI PAT /\n * Clerk session.\n */\nexport async function generateWebImage(\n  options: GenerateWebImageOptions,\n): Promise<GenerateWebImageResult> {\n  const baseUrl = await getBaseUrl();\n  const token = await getActiveToken();\n  if (!token) {\n    throw new ApiRequestError(\"Not authenticated\", \"UNAUTHORIZED\", 401);\n  }\n\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n    \"Content-Type\": \"application/json\",\n  };\n\n  const response = await fetch(\n    new URL(\"/api/zero/image-io/generate\", baseUrl),\n    {\n      method: \"POST\",\n      headers: headersWithCliClientHeaders(headers),\n      body: JSON.stringify({\n        prompt: options.prompt,\n        ...(options.model ? { model: options.model } : {}),\n        ...(options.size ? { size: options.size } : {}),\n        ...(options.quality ? { quality: options.quality } : {}),\n        ...(options.background ? { background: options.background } : {}),\n        ...(options.outputFormat ? { outputFormat: options.outputFormat } : {}),\n        ...(options.outputCompression !== undefined\n          ? { outputCompression: options.outputCompression }\n          : {}),\n        ...(options.moderation ? { moderation: options.moderation } : {}),\n        ...(options.seed !== undefined ? { seed: options.seed } : {}),\n        ...(options.safetyTolerance\n          ? { safetyTolerance: options.safetyTolerance }\n          : {}),\n        ...(options.enhancePrompt !== undefined\n          ? { enhancePrompt: options.enhancePrompt }\n          : {}),\n        ...(options.imageUrls && options.imageUrls.length > 0\n          ? { imageUrls: options.imageUrls }\n          : {}),\n        ...(options.maskImageUrl ? { maskImageUrl: options.maskImageUrl } : {}),\n        ...(options.inputFidelity\n          ? { inputFidelity: options.inputFidelity }\n          : {}),\n        ...(options.imagePromptStrength !== undefined\n          ? { imagePromptStrength: options.imagePromptStrength }\n          : {}),\n      }),\n    },\n  );\n\n  if (!response.ok) {\n    const { message, code } = await parseErrorBody(\n      response,\n      \"Failed to generate image\",\n    );\n    throw new ApiRequestError(message, code, response.status);\n  }\n\n  return readBuiltInGenerationResponse<GenerateWebImageResult>({\n    response,\n    baseUrl,\n    token,\n    fallback: \"Failed to generate image\",\n  });\n}\n\n/**\n * Generate a billed video from a prompt and receive the public CDN URL.\n * Authenticates via ZERO_TOKEN (`file:write` capability) or a CLI PAT /\n * Clerk session.\n */\nexport async function generateWebVideo(\n  options: GenerateWebVideoOptions,\n): Promise<GenerateWebVideoResult> {\n  const baseUrl = await getBaseUrl();\n  const token = await getActiveToken();\n  if (!token) {\n    throw new ApiRequestError(\"Not authenticated\", \"UNAUTHORIZED\", 401);\n  }\n\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n    \"Content-Type\": \"application/json\",\n  };\n\n  const response = await fetch(\n    new URL(\"/api/zero/video-io/generate\", baseUrl),\n    {\n      method: \"POST\",\n      headers: headersWithCliClientHeaders(headers),\n      body: JSON.stringify(generateWebVideoPayload(options)),\n    },\n  );\n\n  if (!response.ok) {\n    const { message, code } = await parseErrorBody(\n      response,\n      \"Failed to generate video\",\n    );\n    throw new ApiRequestError(message, code, response.status);\n  }\n\n  return readBuiltInGenerationResponse<GenerateWebVideoResult>({\n    response,\n    baseUrl,\n    token,\n    fallback: \"Failed to generate video\",\n  });\n}\n\nexport interface TranscribeAudioSegment {\n  readonly start: number;\n  readonly end: number;\n  readonly text: string;\n}\n\ninterface TranscribeAudioResult {\n  readonly text: string;\n  readonly segments?: readonly TranscribeAudioSegment[];\n}\n\nexport async function transcribeAudio(\n  audioPath: string,\n  options: { readonly verbose?: boolean } = {},\n): Promise<TranscribeAudioResult> {\n  const baseUrl = await getBaseUrl();\n  const token = await getActiveToken();\n  if (!token) {\n    throw new ApiRequestError(\"Not authenticated\", \"UNAUTHORIZED\", 401);\n  }\n\n  const headers: Record<string, string> = {\n    Authorization: `Bearer ${token}`,\n  };\n\n  const url = new URL(\"/api/zero/voice-io/stt\", baseUrl);\n  if (options.verbose) {\n    url.searchParams.set(\"verbose\", \"true\");\n  }\n\n  const audioData = readFileSync(audioPath);\n  const filename = basename(audioPath);\n  const ext = extname(filename).toLowerCase();\n  const mimeMap: Record<string, string> = {\n    \".mp3\": \"audio/mpeg\",\n    \".mp4\": \"audio/mp4\",\n    \".m4a\": \"audio/m4a\",\n    \".wav\": \"audio/wav\",\n    \".webm\": \"audio/webm\",\n  };\n  const mimeType = mimeMap[ext] ?? \"audio/mpeg\";\n\n  const formData = new FormData();\n  formData.append(\"file\", new Blob([audioData], { type: mimeType }), filename);\n\n  const response = await fetch(url, {\n    method: \"POST\",\n    headers: headersWithCliClientHeaders(headers),\n    body: formData,\n  });\n\n  if (!response.ok) {\n    const { message, code } = await parseErrorBody(\n      response,\n      \"Transcription failed\",\n    );\n    throw new ApiRequestError(message, code, response.status);\n  }\n\n  return (await response.json()) as TranscribeAudioResult;\n}\n"],"mappings":";;;;;;;;;;;;;;AAAA;AAAA,SAAS,mBAAmB,cAAc,gBAAgB;AAC1D,SAAS,UAAU,eAAe;AAClC,SAAS,gBAAgB;AACzB,SAAS,gBAAgB;AACzB,SAAS,cAAc,aAAa;AACpC,SAAS,gBAAuD;AAShE,IAAM,uCAAuC;AAC7C,IAAM,8CAA8C;AAAA,EAClD,OAAO,KAAK,KAAK;AAAA,EACjB,OAAO,KAAK,KAAK;AAAA,EACjB,cAAc,KAAK,KAAK;AAAA,EACxB,SAAS,KAAK,KAAK;AACrB;AAIA,IAAM,0BAA0B;AAOhC,IAAM,oBAA4C;AAAA,EAChD,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SACE;AAAA,EACF,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SACE;AAAA,EACF,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SAAS;AAAA,EACT,SACE;AAAA,EACF,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,SACE;AAAA,EACF,SAAS;AAAA,EACT,SACE;AAAA,EACF,QAAQ;AAAA,EACR,SACE;AAAA,EACF,SAAS;AAAA,EACT,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,QAAQ;AAAA,EACR,OAAO;AAAA,EACP,UAAU;AAAA,EACV,YAAY;AAAA,EACZ,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,SAAS;AAAA,EACT,OAAO;AACT;AAEO,SAAS,0BAA0B,WAA2B;AACnE,QAAM,MAAM,QAAQ,SAAS,EAAE,YAAY;AAC3C,SAAO,kBAAkB,GAAG,KAAK;AACnC;AAaA,eAAsB,gBACpB,QACA,SACgC;AAChC,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,gBAAgB,qBAAqB,gBAAgB,GAAG;AAAA,EACpE;AAEA,QAAM,MAAM,IAAI,IAAI,+BAA+B,OAAO;AAC1D,MAAI,aAAa,IAAI,WAAW,MAAM;AAEtC,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,KAAK;AAAA,EAChC;AAEA,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,SAAS,4BAA4B,OAAO;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,QAAI,UAAU,qCAAqC,SAAS,MAAM;AAClE,QAAI,OAAO;AACX,QAAI;AACF,YAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,UAAI,KAAK,OAAO,QAAS,WAAU,KAAK,MAAM;AAC9C,UAAI,KAAK,OAAO,KAAM,QAAO,KAAK,MAAM;AAAA,IAC1C,QAAQ;AAAA,IAER;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,SAAS,MAAM;AAAA,EAC1D;AAEA,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,WACJ,SAAS,QAAQ,IAAI,iBAAiB,KACtC,SAAS,QAAQ,IAAI,cAAc,KACnC;AAIF,QAAM;AAAA,IACJ,SAAS,QAAQ,SAAS,IAAa;AAAA,IACvC,kBAAkB,OAAO;AAAA,EAC3B;AAEA,QAAM,sBAAsB,SAAS,QAAQ,IAAI,gBAAgB;AACjE,QAAM,OAAO,sBAAsB,OAAO,mBAAmB,IAAI;AAEjE,SAAO,EAAE,MAAM,SAAS,UAAU,KAAK;AACzC;AAkHA,SAAS,0BAA0B,OAAyB;AAC1D,MAAI,UAAU,QAAW;AACvB,WAAO;AAAA,EACT;AACA,SAAO,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS;AACjD;AAEA,SAAS,eACP,SACyB;AACzB,SAAO,OAAO;AAAA,IACZ,QAAQ,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM;AAC5B,aAAO,0BAA0B,KAAK;AAAA,IACxC,CAAC;AAAA,EACH;AACF;AAEA,SAAS,wBACP,SACyB;AACzB,SAAO,eAAe;AAAA,IACpB,CAAC,UAAU,QAAQ,MAAM;AAAA,IACzB,CAAC,SAAS,QAAQ,KAAK;AAAA,IACvB,CAAC,eAAe,QAAQ,WAAW;AAAA,IACnC,CAAC,YAAY,QAAQ,QAAQ;AAAA,IAC7B,CAAC,cAAc,QAAQ,UAAU;AAAA,IACjC,CAAC,iBAAiB,QAAQ,aAAa;AAAA,IACvC,CAAC,kBAAkB,QAAQ,cAAc;AAAA,IACzC,CAAC,QAAQ,QAAQ,IAAI;AAAA,IACrB,CAAC,WAAW,QAAQ,OAAO;AAAA,IAC3B,CAAC,mBAAmB,QAAQ,eAAe;AAAA,IAC3C,CAAC,aAAa,QAAQ,SAAS;AAAA,IAC/B,CAAC,aAAa,QAAQ,SAAS;AAAA,IAC/B,CAAC,aAAa,QAAQ,SAAS;AAAA,IAC/B,CAAC,sBAAsB,QAAQ,kBAAkB;AAAA,IACjD,CAAC,qBAAqB,QAAQ,iBAAiB;AAAA,EACjD,CAAC;AACH;AAmBA,eAAe,eACb,UACA,UAC4C;AAC5C,MAAI,UAAU,GAAG,QAAQ,UAAU,SAAS,MAAM;AAClD,MAAI,OAAO;AACX,MAAI;AACF,UAAM,OAAQ,MAAM,SAAS,KAAK;AAGlC,QAAI,KAAK,OAAO,QAAS,WAAU,KAAK,MAAM;AAC9C,QAAI,KAAK,OAAO,KAAM,QAAO,KAAK,MAAM;AAAA,EAC1C,QAAQ;AAAA,EAER;AACA,SAAO,EAAE,SAAS,KAAK;AACzB;AAEA,SAAS,yBAAyB,OAAwB;AACxD,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,KAAK;AAAA,IAC9B,gBAAgB;AAAA,EAClB;AACA,SAAO,4BAA4B,OAAO;AAC5C;AAEA,SAAS,SAAS,OAAkD;AAClE,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,oCACP,OACgD;AAChD,MAAI,CAAC,SAAS,KAAK,GAAG;AACpB,WAAO;AAAA,EACT;AACA,SACE,OAAO,MAAM,iBAAiB,YAC9B,MAAM,WAAW,aAChB,MAAM,SAAS,WACd,MAAM,SAAS,WACf,MAAM,SAAS,kBACf,MAAM,SAAS,cACjB,SAAS,MAAM,QAAQ;AAE3B;AAOA,SAAS,gCACP,UACU;AACV,MAAI,kBAAkB,SAAS,SAAS;AACxC,QAAM,eAAyD,CAC7D,SACA,aACG;AACH,UAAM,UAAU;AAChB,sBAAkB,SAAS,SAAS;AACpC,aAAS,MAAM,OAAO;AAAA,EACxB;AAEA,SAAO,IAAI,SAAS;AAAA,IAClB;AAAA,IACA,aAAa;AAAA,IACb,0BAA0B;AAAA,IAC1B,uBAAuB;AAAA,EACzB,CAAC;AACH;AAEA,SAAS,yBACP,MACA,YAAY,yBACG;AACf,MAAI,KAAK,WAAW,UAAU,aAAa;AACzC,WAAO,QAAQ,QAAQ;AAAA,EACzB;AACA,MAAI,KAAK,WAAW,UAAU,UAAU;AACtC,WAAO,QAAQ,OAAO,IAAI,MAAM,wBAAwB,CAAC;AAAA,EAC3D;AAEA,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,QAAQ,WAAW,MAAM;AAC7B,aAAO,IAAI,MAAM,8BAA8B,CAAC;AAAA,IAClD,GAAG,SAAS;AAEZ,SAAK,WAAW,KAAK,aAAa,MAAM;AACtC,mBAAa,KAAK;AAClB,cAAQ;AAAA,IACV,CAAC;AACD,SAAK,WAAW,KAAK,UAAU,CAAC,gBAAgB;AAC9C,mBAAa,KAAK;AAClB;AAAA,QACE,IAAI;AAAA,UACF,2BAA2B,aAAa,QAAQ,WAAW,SAAS;AAAA,QACtE;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;AAEA,eAAe,gCACb,UAC2C;AAC3C,QAAM,OAAO,gCAAgC,QAAQ;AAErD,MAAI;AACF,UAAM,yBAAyB,IAAI;AACnC,UAAM,UAAU,KAAK,SAAS,IAAI,SAAS,SAAS,WAAW;AAE/D,QAAI,eAAe;AACnB,QAAI,SAAS;AACb,QAAI,OAA4B;AAEhC,UAAM,aAAa,MAAM;AACvB,YAAM,UAAU;AAChB,aAAO;AACP,gBAAU;AAAA,IACZ;AAEA,UAAM,YAAY,CAAC,aAA6B;AAC9C,UAAI,MAAM;AACR,mBAAW;AACX;AAAA,MACF;AACA,qBAAe;AAAA,IACjB;AAEA,UAAM,QAAQ,UAAU,SAAS,SAAS,WAAW,SAAS;AAE9D,WAAO;AAAA,MACL,KAAK,WAAkC;AACrC,YAAI,gBAAgB,UAAU,aAAa,GAAG;AAC5C,yBAAe;AACf,iBAAO,QAAQ,QAAQ;AAAA,QACzB;AAEA,eAAO,IAAI,QAAQ,CAAC,YAAY;AAC9B,mBAAS,OAAO;AACd,yBAAa,KAAK;AAClB,gBAAI,SAAS,MAAM;AACjB,qBAAO;AAAA,YACT;AACA,oBAAQ;AAAA,UACV;AACA,gBAAM,QAAQ,WAAW,MAAM,SAAS;AACxC,iBAAO;AAAA,QACT,CAAC;AAAA,MACH;AAAA,MACA,QAAc;AACZ,YAAI,QAAQ;AACV;AAAA,QACF;AACA,iBAAS;AACT,gBAAQ,YAAY,SAAS,SAAS,WAAW,SAAS;AAC1D,mBAAW;AACX,aAAK,MAAM;AAAA,MACb;AAAA,IACF;AAAA,EACF,QAAQ;AACN,SAAK,MAAM;AACX,WAAO;AAAA,EACT;AACF;AAEA,eAAe,2BACb,SACA,OACA,cACwC;AACxC,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI,IAAI,kCAAkC,YAAY,IAAI,OAAO;AAAA,IACjE,EAAE,SAAS,yBAAyB,KAAK,EAAE;AAAA,EAC7C;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,SAAS,MAAM;AAAA,EAC1D;AAEA,SAAQ,MAAM,SAAS,KAAK;AAC9B;AAEA,SAAS,4BACP,QACA,UACe;AACf,MAAI,OAAO,WAAW,aAAa;AACjC,QAAI,CAAC,OAAO,QAAQ;AAClB,YAAM,IAAI;AAAA,QACR,GAAG,QAAQ;AAAA,QACX;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,OAAO;AAAA,EAChB;AAEA,MAAI,OAAO,WAAW,UAAU;AAC9B,UAAM,OAAO,OAAO,OAAO,QAAQ;AACnC,UAAM,IAAI;AAAA,MACR,OAAO,OAAO,WAAW,GAAG,QAAQ;AAAA,MACpC;AAAA,MACA,gCAAgC,IAAI;AAAA,IACtC;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,gCAAgC,MAAsB;AAC7D,MAAI,SAAS,eAAe;AAC1B,WAAO;AAAA,EACT;AACA,MAAI,SAAS,wBAAwB;AACnC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,kBAAkB;AAC7B,WAAO;AAAA,EACT;AACA,MAAI,SAAS,sBAAsB;AACjC,WAAO;AAAA,EACT;AACA,MACE,KAAK,WAAW,4BAA4B,KAC5C,KAAK,WAAW,iBAAiB,GACjC;AACA,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,WAAW,GAAG;AAChC,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,KAAK,KAAK,KAAK,SAAS,SAAS,GAAG;AACtD,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAe,+BAAkC,MAKlC;AACb,MAAI,WAA6C;AACjD,MAAI,kBAAkB;AACtB,QAAM,YAAY,KAAK,IAAI;AAC3B,QAAM,YACJ,4CAA4C,KAAK,SAAS,IAAI;AAEhE,MAAI;AACF,WAAO,KAAK,IAAI,IAAI,YAAY,WAAW;AACzC,YAAM,SAAS,MAAM;AAAA,QACnB,KAAK;AAAA,QACL,KAAK;AAAA,QACL,KAAK,SAAS;AAAA,MAChB;AACA,YAAM,SAAS,4BAA+B,QAAQ,KAAK,QAAQ;AACnE,UAAI,QAAQ;AACV,eAAO;AAAA,MACT;AAEA,YAAM,UAAU,KAAK,IAAI,IAAI;AAC7B,YAAM,YAAY,YAAY;AAC9B,YAAM,SAAS,KAAK,IAAI,sCAAsC,SAAS;AACvE,UAAI,CAAC,iBAAiB;AACpB,mBAAW,MAAM,gCAAgC,KAAK,QAAQ;AAC9D,0BAAkB;AAAA,MACpB;AACA,UAAI,UAAU;AACZ,cAAM,SAAS,KAAK,MAAM;AAAA,MAC5B,OAAO;AACL,cAAM,MAAM,MAAM;AAAA,MACpB;AAAA,IACF;AAAA,EACF,UAAE;AACA,cAAU,MAAM;AAAA,EAClB;AAEA,QAAM,IAAI;AAAA,IACR,GAAG,KAAK,QAAQ,6BAA6B,KAAK,SAAS,YAAY;AAAA,IACvE;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAe,8BAAiC,MAKjC;AACb,QAAM,OAAgB,MAAM,KAAK,SAAS,KAAK;AAC/C,MAAI,oCAAoC,IAAI,GAAG;AAC7C,WAAO,+BAAkC;AAAA,MACvC,UAAU;AAAA,MACV,SAAS,KAAK;AAAA,MACd,OAAO,KAAK;AAAA,MACZ,UAAU,KAAK;AAAA,IACjB,CAAC;AAAA,EACH;AACA,MAAI,KAAK,SAAS,WAAW,KAAK;AAChC,UAAM,IAAI;AAAA,MACR,GAAG,KAAK,QAAQ;AAAA,MAChB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAgBA,eAAsB,cACpB,WACA,SAC8B;AAC9B,QAAM,QAAQ,SAAS,SAAS;AAChC,MAAI,CAAC,MAAM,OAAO,GAAG;AACnB,UAAM,IAAI;AAAA,MACR,uBAAuB,SAAS;AAAA,MAChC;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAEA,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,gBAAgB,qBAAqB,gBAAgB,GAAG;AAAA,EACpE;AAEA,QAAM,WAAW,SAAS,SAAS;AACnC,QAAM,cACJ,SAAS,eAAe,0BAA0B,SAAS;AAE7D,QAAM,iBAAyC;AAAA,IAC7C,eAAe,UAAU,KAAK;AAAA,IAC9B,gBAAgB;AAAA,EAClB;AAEA,QAAM,aAAa,IAAI,IAAI,6BAA6B,OAAO;AAC/D,QAAM,aAAa,MAAM,MAAM,YAAY;AAAA,IACzC,QAAQ;AAAA,IACR,SAAS,4BAA4B,cAAc;AAAA,IACnD,MAAM,KAAK,UAAU,EAAE,UAAU,aAAa,MAAM,MAAM,KAAK,CAAC;AAAA,EAClE,CAAC;AAED,MAAI,CAAC,WAAW,IAAI;AAClB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,WAAW,MAAM;AAAA,EAC5D;AAEA,QAAM,WAAY,MAAM,WAAW,KAAK;AAExC,QAAM,QAAQ,aAAa,SAAS;AACpC,QAAM,SAAS,MAAM,MAAM,SAAS,WAAW;AAAA,IAC7C,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,SAAS,YAAY;AAAA,IAChD,MAAM,IAAI,WAAW,KAAK;AAAA,EAC5B,CAAC;AAED,MAAI,CAAC,OAAO,IAAI;AACd,UAAM,IAAI;AAAA,MACR,0CAA0C,OAAO,MAAM;AAAA,MACvD;AAAA,MACA,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,cAAc,IAAI,IAAI,8BAA8B,OAAO;AACjE,QAAM,cAAc,MAAM,MAAM,aAAa;AAAA,IAC3C,QAAQ;AAAA,IACR,SAAS,4BAA4B,cAAc;AAAA,IACnD,MAAM,KAAK,UAAU;AAAA,MACnB,IAAI,SAAS;AAAA,MACb,aAAa,SAAS;AAAA,IACxB,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,YAAY,IAAI;AACnB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,YAAY,MAAM;AAAA,EAC7D;AAEA,QAAM,YAAa,MAAM,YAAY,KAAK;AAE1C,SAAO;AAAA,IACL,IAAI,UAAU;AAAA,IACd,UAAU,UAAU;AAAA,IACpB,aAAa,UAAU;AAAA,IACvB,MAAM,UAAU;AAAA,IAChB,KAAK,UAAU;AAAA,EACjB;AACF;AAOA,eAAsB,iBACpB,SACiC;AACjC,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,gBAAgB,qBAAqB,gBAAgB,GAAG;AAAA,EACpE;AAEA,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,KAAK;AAAA,IAC9B,gBAAgB;AAAA,EAClB;AAEA,QAAM,WAAW,MAAM,MAAM,IAAI,IAAI,6BAA6B,OAAO,GAAG;AAAA,IAC1E,QAAQ;AAAA,IACR,SAAS,4BAA4B,OAAO;AAAA,IAC5C,MAAM,KAAK,UAAU;AAAA,MACnB,MAAM,QAAQ;AAAA,MACd,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,MAChD,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,IACvE,CAAC;AAAA,EACH,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,SAAS,MAAM;AAAA,EAC1D;AAEA,SAAQ,MAAM,SAAS,KAAK;AAC9B;AAOA,eAAsB,iBACpB,SACiC;AACjC,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,gBAAgB,qBAAqB,gBAAgB,GAAG;AAAA,EACpE;AAEA,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,KAAK;AAAA,IAC9B,gBAAgB;AAAA,EAClB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI,IAAI,+BAA+B,OAAO;AAAA,IAC9C;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,4BAA4B,OAAO;AAAA,MAC5C,MAAM,KAAK,UAAU;AAAA,QACnB,QAAQ,QAAQ;AAAA,QAChB,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,QAChD,GAAI,QAAQ,OAAO,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,QAC7C,GAAI,QAAQ,UAAU,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,QACtD,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,QAC/D,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,QACrE,GAAI,QAAQ,sBAAsB,SAC9B,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C,CAAC;AAAA,QACL,GAAI,QAAQ,aAAa,EAAE,YAAY,QAAQ,WAAW,IAAI,CAAC;AAAA,QAC/D,GAAI,QAAQ,SAAS,SAAY,EAAE,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,QAC3D,GAAI,QAAQ,kBACR,EAAE,iBAAiB,QAAQ,gBAAgB,IAC3C,CAAC;AAAA,QACL,GAAI,QAAQ,kBAAkB,SAC1B,EAAE,eAAe,QAAQ,cAAc,IACvC,CAAC;AAAA,QACL,GAAI,QAAQ,aAAa,QAAQ,UAAU,SAAS,IAChD,EAAE,WAAW,QAAQ,UAAU,IAC/B,CAAC;AAAA,QACL,GAAI,QAAQ,eAAe,EAAE,cAAc,QAAQ,aAAa,IAAI,CAAC;AAAA,QACrE,GAAI,QAAQ,gBACR,EAAE,eAAe,QAAQ,cAAc,IACvC,CAAC;AAAA,QACL,GAAI,QAAQ,wBAAwB,SAChC,EAAE,qBAAqB,QAAQ,oBAAoB,IACnD,CAAC;AAAA,MACP,CAAC;AAAA,IACH;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,SAAS,MAAM;AAAA,EAC1D;AAEA,SAAO,8BAAsD;AAAA,IAC3D;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACH;AAOA,eAAsB,iBACpB,SACiC;AACjC,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,gBAAgB,qBAAqB,gBAAgB,GAAG;AAAA,EACpE;AAEA,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,KAAK;AAAA,IAC9B,gBAAgB;AAAA,EAClB;AAEA,QAAM,WAAW,MAAM;AAAA,IACrB,IAAI,IAAI,+BAA+B,OAAO;AAAA,IAC9C;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,4BAA4B,OAAO;AAAA,MAC5C,MAAM,KAAK,UAAU,wBAAwB,OAAO,CAAC;AAAA,IACvD;AAAA,EACF;AAEA,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,SAAS,MAAM;AAAA,EAC1D;AAEA,SAAO,8BAAsD;AAAA,IAC3D;AAAA,IACA;AAAA,IACA;AAAA,IACA,UAAU;AAAA,EACZ,CAAC;AACH;AAaA,eAAsB,gBACpB,WACA,UAA0C,CAAC,GACX;AAChC,QAAM,UAAU,MAAM,WAAW;AACjC,QAAM,QAAQ,MAAM,eAAe;AACnC,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,gBAAgB,qBAAqB,gBAAgB,GAAG;AAAA,EACpE;AAEA,QAAM,UAAkC;AAAA,IACtC,eAAe,UAAU,KAAK;AAAA,EAChC;AAEA,QAAM,MAAM,IAAI,IAAI,0BAA0B,OAAO;AACrD,MAAI,QAAQ,SAAS;AACnB,QAAI,aAAa,IAAI,WAAW,MAAM;AAAA,EACxC;AAEA,QAAM,YAAY,aAAa,SAAS;AACxC,QAAM,WAAW,SAAS,SAAS;AACnC,QAAM,MAAM,QAAQ,QAAQ,EAAE,YAAY;AAC1C,QAAM,UAAkC;AAAA,IACtC,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,SAAS;AAAA,EACX;AACA,QAAM,WAAW,QAAQ,GAAG,KAAK;AAEjC,QAAM,WAAW,IAAI,SAAS;AAC9B,WAAS,OAAO,QAAQ,IAAI,KAAK,CAAC,SAAS,GAAG,EAAE,MAAM,SAAS,CAAC,GAAG,QAAQ;AAE3E,QAAM,WAAW,MAAM,MAAM,KAAK;AAAA,IAChC,QAAQ;AAAA,IACR,SAAS,4BAA4B,OAAO;AAAA,IAC5C,MAAM;AAAA,EACR,CAAC;AAED,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,EAAE,SAAS,KAAK,IAAI,MAAM;AAAA,MAC9B;AAAA,MACA;AAAA,IACF;AACA,UAAM,IAAI,gBAAgB,SAAS,MAAM,SAAS,MAAM;AAAA,EAC1D;AAEA,SAAQ,MAAM,SAAS,KAAK;AAC9B;","names":[]}

package/{chunk-24QJ7H5R.js → chunk-NAXSTGVS.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   getApiUrl
-} from "./chunk-DQB537B5.js";
+} from "./chunk-AXPECIRA.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -42,4 +42,4 @@ export {
   toPlatformUrl,
   getPlatformOrigin
 };
-//# sourceMappingURL=chunk-24QJ7H5R.js.map
+//# sourceMappingURL=chunk-NAXSTGVS.js.map

package/{chunk-UKQRMBLJ.js → chunk-OMZ7JNGC.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   MODEL_PROVIDER_TYPES
-} from "./chunk-DQB537B5.js";
+} from "./chunk-AXPECIRA.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -40,4 +40,4 @@ export {
   formatModelProviderRoute,
   formatModelPolicyStatus
 };
-//# sourceMappingURL=chunk-UKQRMBLJ.js.map
+//# sourceMappingURL=chunk-OMZ7JNGC.js.map

package/{chunk-7PFY5Y77.js → chunk-RKOGVYZD.js}

@@ -17,7 +17,7 @@ import {
   runnerGroupSchema,
   searchZeroLogs,
   zeroAgentVisibilitySchema
-} from "./chunk-MDKQRZ7S.js";
+} from "./chunk-DIK5B4ZQ.js";
 import {
   apiErrorSchema,
   external_exports,
@@ -31,7 +31,7 @@ import {
   upsertModelProviderRequestSchema,
   upsertModelProviderResponseSchema,
   withErrorHandler
-} from "./chunk-DQB537B5.js";
+} from "./chunk-AXPECIRA.js";
 import {
   Command
 } from "./chunk-LD4ZVU4O.js";
@@ -33399,4 +33399,4 @@ export {
   runLogsSearch,
   searchCommand
 };
-//# sourceMappingURL=chunk-7PFY5Y77.js.map
+//# sourceMappingURL=chunk-RKOGVYZD.js.map

package/{chunk-ZLP3TODB.js → chunk-RLKJ2XNZ.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   getZeroAgent,
   getZeroAgentUserConnectors
-} from "./chunk-MDKQRZ7S.js";
+} from "./chunk-DIK5B4ZQ.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -347,4 +347,4 @@ export {
   resolveManualGrantAuthMethod,
   resolveAgentContext
 };
-//# sourceMappingURL=chunk-ZLP3TODB.js.map
+//# sourceMappingURL=chunk-RLKJ2XNZ.js.map

package/{chunk-45FQJCB2.js → chunk-TP7AVH5K.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   UNKNOWN_PERMISSION_GRANT
-} from "./chunk-MDKQRZ7S.js";
+} from "./chunk-DIK5B4ZQ.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -130,4 +130,4 @@ export {
   resolveFirewallMetadataPolicies,
   permissionGrantsToFirewallPolicies
 };
-//# sourceMappingURL=chunk-45FQJCB2.js.map
+//# sourceMappingURL=chunk-TP7AVH5K.js.map

package/{chunk-H4LRAOOF.js → chunk-X5FAOKYK.js}

@@ -445,8 +445,7 @@ var FEATURE_SWITCHES = {
   ["planUpgradeGuidance" /* PlanUpgradeGuidance */]: {
     maintainer: "ethan@vm0.ai",
     description: "Show plan-upgrade guidance in Zero CLI help and render billing plan links as rich chat cards.",
-    enabled: false,
-    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,
+    enabled: true,
     userOverridable: false
   },
   ["orgPlanEntitlementReads" /* OrgPlanEntitlementReads */]: {
@@ -530,4 +529,4 @@ export {
   isFeatureEnabled,
   decodeZeroTokenPayload
 };
-//# sourceMappingURL=chunk-H4LRAOOF.js.map
+//# sourceMappingURL=chunk-X5FAOKYK.js.map

package/{chunk-H4LRAOOF.js.map → chunk-X5FAOKYK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../../../packages/connectors/src/feature-switch-key.ts","../../../packages/core/src/feature-switch.ts","../../../packages/core/src/feature-switch-key.ts","../../../packages/core/src/identity-hash.ts","../src/lib/api/zero-token.ts"],"sourcesContent":["/**\n * Feature switch keys\n *\n * Defines all available feature switch identifiers.\n */\nexport enum FeatureSwitchKey {\n  Dummy = \"dummy\",\n  ExternalConnectorCatalog = \"externalConnectorCatalog\",\n  AhrefsConnector = \"ahrefsConnector\",\n  BillConnector = \"billConnector\",\n  BentomlConnector = \"bentomlConnector\",\n  BoxConnector = \"boxConnector\",\n  CanvaConnector = \"canvaConnector\",\n  CalComConnector = \"calComConnector\",\n  CopperConnector = \"copperConnector\",\n  DatadogConnector = \"datadogConnector\",\n  DeelConnector = \"deelConnector\",\n  DocuSignConnector = \"docusignConnector\",\n  DropboxConnector = \"dropboxConnector\",\n  FigmaConnector = \"figmaConnector\",\n  ExpensifyConnector = \"expensifyConnector\",\n  GoogleContactsConnector = \"googleContactsConnector\",\n  GoogleFormsConnector = \"googleFormsConnector\",\n  MercuryConnector = \"mercuryConnector\",\n  NeonConnector = \"neonConnector\",\n  NetSuiteConnector = \"netSuiteConnector\",\n  GarminConnectConnector = \"garminConnectConnector\",\n  QuickBooksConnector = \"quickbooksConnector\",\n  RedditConnector = \"redditConnector\",\n  SupabaseConnector = \"supabaseConnector\",\n  WebflowConnector = \"webflowConnector\",\n  CloseConnector = \"closeConnector\",\n  MetaAdsConnector = \"metaAdsConnector\",\n  TikTokAdsConnector = \"tiktokAdsConnector\",\n  AwsConnector = \"awsConnector\",\n  PosthogConnector = \"posthogConnector\",\n  PayPalConnector = \"payPalConnector\",\n  RampConnector = \"rampConnector\",\n  MailchimpConnector = \"mailchimpConnector\",\n  ResendConnector = \"resendConnector\",\n  PexelsConnector = \"pexelsConnector\",\n  SpotifyConnector = \"spotifyConnector\",\n  ZeroDebug = \"zeroDebug\",\n  CanonicalSlackIngress = \"canonicalSlackIngress\",\n  CanonicalSlackWebVisibility = \"canonicalSlackWebVisibility\",\n  CanonicalSlackAssets = \"canonicalSlackAssets\",\n  ZeroWeather = \"zeroWeather\",\n  ZeroFinance = \"zeroFinance\",\n  ZeroPeopleSearch = \"zeroPeopleSearch\",\n  ZeroBrowser = \"zeroBrowser\",\n  Banking = \"banking\",\n  Lab = \"lab\",\n  NotionWorkflowAutomations = \"notionWorkflowAutomations\",\n  GithubWebhookAutomations = \"githubWebhookAutomations\",\n  GithubWorkflowRunAutomations = \"githubWorkflowRunAutomations\",\n  MorningBrief = \"morningBrief\",\n  ManualMorningBrief = \"manualMorningBrief\",\n  TestOauthConnector = \"testOauthConnector\",\n  FreshdeskConnector = \"freshdeskConnector\",\n  StabilityAiConnector = \"stabilityAiConnector\",\n  ZoomConnector = \"zoomConnector\",\n  WorkdayConnector = \"workdayConnector\",\n  CodexFastMode = \"codexFastMode\",\n  RealAgentInPreview = \"realAgentInPreview\",\n  ComposerUploadPopover = \"composerUploadPopover\",\n  StructuredPrompt = \"structuredPrompt\",\n\n  ZapierConnector = \"zapierConnector\",\n  HtmlArtifactCommentEditing = \"htmlArtifactCommentEditing\",\n  ComputerUseDesktopPlugins = \"computerUseDesktopPlugins\",\n  AgentUnreadIndicators = \"agentUnreadIndicators\",\n  ChatThreadUnifiedSearch = \"chatThreadUnifiedSearch\",\n  ComposerChatThreadSuggestions = \"composerChatThreadSuggestions\",\n  SidebarSubscriptionUsage = \"sidebarSubscriptionUsage\",\n  TeamsIntegration = \"teamsIntegration\",\n  FeishuIntegration = \"feishuIntegration\",\n  PresentationExport = \"presentationExport\",\n  Artifacts = \"artifacts\",\n  HostedArtifactVersions = \"hostedArtifactVersions\",\n  VideoArtifactPosters = \"videoArtifactPosters\",\n  WebsiteTemplateV2 = \"websiteTemplateV2\",\n  PlanUpgradeGuidance = \"planUpgradeGuidance\",\n  OrgPlanEntitlementReads = \"orgPlanEntitlementReads\",\n  WorkflowConnectorReadiness = \"workflowConnectorReadiness\",\n  ZeroMail = \"zeroMail\",\n  ComposerConnectorPermissions = \"composerConnectorPermissions\",\n  ThreeColumnNav = \"threeColumnNav\",\n  ChatHistoryBackfillProgress = \"chatHistoryBackfillProgress\",\n}\n","/**\n * Feature switch system\n *\n * Provides centralized feature flag management with user-identity based overrides.\n * User IDs are stored as FNV-1a hashes to avoid exposing plain-text identifiers in source code.\n *\n * NOT AN AUTHORIZATION BOUNDARY. User-overridable switches can be self-enabled\n * through `POST /api/zero/feature-switches`, and `userOverridable: false` only\n * excludes a switch from that API. For money-granting, credential, or\n * privilege-escalation endpoints, gate with a hard identity check (e.g.\n * `isStaffOrg()` from `./staff-org`) instead of this system.\n */\n\nimport { FeatureSwitchKey } from \"./feature-switch-key\";\nimport { STAFF_ORG_ID_HASHES, fnv1a } from \"./identity-hash\";\n\nexport interface FeatureSwitch {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly enabled: boolean;\n  readonly enabledUserHashes?: readonly string[];\n  readonly enabledEmailHashes?: readonly string[];\n  readonly enabledOrgIdHashes?: readonly string[];\n  readonly userOverridable?: boolean;\n}\n\nexport interface FeatureSwitchMetadata {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly userOverridable: boolean;\n}\n\nexport interface FeatureSwitchContext {\n  readonly userId?: string;\n  readonly email?: string;\n  readonly orgId?: string;\n  readonly overrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n}\n\n/**\n * Registry of all feature switches\n */\nconst FEATURE_SWITCHES: Record<FeatureSwitchKey, FeatureSwitch> = {\n  [FeatureSwitchKey.Dummy]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Test-only feature switch for flag system validation\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ExternalConnectorCatalog]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Use the accepted external catalog as the global source for official connectors\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.AhrefsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ahrefs SEO connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BillConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BILL Spend & Expense connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BentomlConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BentoML model serving connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BoxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Box file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CanvaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Canva design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CalComConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Cal.com scheduling connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CopperConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Copper CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DatadogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Datadog observability connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DeelConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Deel HR connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DocuSignConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the DocuSign e-signature connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DropboxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Dropbox file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FigmaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Figma design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ExpensifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Expensify accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleContactsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Contacts connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleFormsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Forms connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MercuryConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mercury banking connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NeonConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Neon serverless Postgres connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NetSuiteConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Oracle NetSuite ERP connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GarminConnectConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Garmin Connect wellness connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.QuickBooksConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the QuickBooks accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RedditConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Reddit connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SupabaseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Supabase database connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CloseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Close CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WebflowConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Webflow site management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MetaAdsConnector]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Enable the Meta Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.TikTokAdsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the TikTok Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.AwsConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Enable the temporary AWS remote login connector\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PosthogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PostHog analytics connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PayPalConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PayPal payments connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RampConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ramp spend management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MailchimpConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mailchimp email marketing connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ResendConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Resend email service connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PexelsConnector]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description: \"Enable the Pexels stock photo and video connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SpotifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Spotify connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZeroDebug]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Reveal activity debug surfaces, activity log navigation, appended system prompts, and Debug preferences\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CanonicalSlackIngress]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Route newly admitted per-user Slack threads through canonical chat ingress.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.CanonicalSlackWebVisibility]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Show canonical Slack chat threads in Web chat surfaces for enrolled users.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.CanonicalSlackAssets]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Canonicalize direct Slack inputs and run-scoped Slack file publications.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroWeather]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the managed Google-backed Zero Weather and Air Quality APIs and weather:read ZERO_TOKEN capability.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ZeroFinance]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the managed APIDojo-backed Zero Finance API and finance:read ZERO_TOKEN capability.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroPeopleSearch]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable managed Perplexity People Search and the people-search:read ZERO_TOKEN capability.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Banking]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Enable the managed Zero Banking gateway and banking:read ZERO_TOKEN capability for Finicity-backed accounts, balances, and transactions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Lab]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Show the Lab page for toggling experimental features\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.MorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the daily 7:00 local-time Morning Brief email built from GitHub, Gmail, and Google Calendar.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.ManualMorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show a Send now button in Settings that triggers a Morning Brief immediately for testing.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.NotionWorkflowAutomations]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Notion event workflow automations, starting with child pages created under a configured parent page.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.GithubWorkflowRunAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable GitHub Actions workflow run completed event automations.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.GithubWebhookAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show creation entry points for GitHub workflow job, pull request review, deployment status, and issue comment automations.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.TestOauthConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable the test-oauth connector, a synthetic OAuth 2.0 provider used only for automated tests. Off in prod.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FreshdeskConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Freshdesk helpdesk connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.StabilityAiConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Stability AI image generation connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZoomConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zoom connector (OAuth 2.0) for meetings, past participants, and cloud recordings access\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WorkdayConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Workday HCM and finance connector\",\n    enabled: false,\n  },\n\n  [FeatureSwitchKey.CodexFastMode]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Codex fast mode for ChatGPT subscription GPT 5.5 and GPT 5.6 web chat runs.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.RealAgentInPreview]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Send preview chat runs through real agent CLIs instead of preview mock runners.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComposerUploadPopover]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Use the Upload popover in the chat composer instead of the legacy paperclip attachment button.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.StructuredPrompt]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable structured user prompt rendering, sends, and drafts while preserving the legacy content fallback.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZapierConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zapier connector. When disabled, Zapier is hidden from the connectors list and cannot be connected.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.HtmlArtifactCommentEditing]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable the HTML artifact comment-editing workflow for collecting DOM comments and preparing instrumented working-copy edits.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComputerUseDesktopPlugins]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Zero Desktop Computer Use plugins for local resources, starting with the bundled filesystem plugin gateway.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.AgentUnreadIndicators]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat unread indicators in sidebar pinned agent lists and the conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatThreadUnifiedSearch]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat thread title results from the local event-driven thread cache in the command-shift-a conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComposerChatThreadSuggestions]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Suggest titled chat threads from the current agent when typing @ in the chat composer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatHistoryBackfillProgress]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Progress bar under the chat thread header showing history backfill progress while older messages load.\",\n    // Not rolled out to anyone yet; enable per-user via the Lab page.\n    enabled: false,\n  },\n  [FeatureSwitchKey.ThreeColumnNav]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Slack-style three-column navigation: a labeled icon rail, a pinned-agents and chat-threads list column, and the conversation pane.\",\n    enabled: false,\n    // Ming only for the first pass; widen to staff once it settles.\n    enabledEmailHashes: [\"54757055\"], // fnv1a(\"ming@vm0.ai\")\n  },\n  [FeatureSwitchKey.SidebarSubscriptionUsage]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show Codex and Claude Code personal subscription usage in the Zero sidebar footer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.TeamsIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show standalone Microsoft Teams integration settings, connect flows, and Works page entry points.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.FeishuIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show the Feishu direct-message integration and Works page entry point.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PresentationExport]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable downloading presentation artifacts as PPTX files and uploading them as native, editable Google Slides decks.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Artifacts]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Show the Artifacts manage page for generated artifacts in the current organization.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.HostedArtifactVersions]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Create immutable hosted artifact versions behind stable site aliases.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.VideoArtifactPosters]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate poster images asynchronously when video artifacts are recorded.\",\n    enabled: false,\n    enabledUserHashes: [\"032a75d8\"],\n  },\n  [FeatureSwitchKey.WebsiteTemplateV2]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate websites from refreshed self-contained template packages. When off, website generation uses the existing package versions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PlanUpgradeGuidance]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show plan-upgrade guidance in Zero CLI help and render billing plan links as rich chat cards.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.OrgPlanEntitlementReads]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Read runtime plan capability limits from org_plan_entitlements instead of deriving them from org_metadata.tier.\",\n    enabled: true,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.WorkflowConnectorReadiness]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Show the manual connector readiness check on workflow settings pages.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ZeroMail]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable persistent Gmail and Outlook draft cards created through the Zero Mail CLI.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroBrowser]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Show the Zero Browser command in the Zero CLI.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComposerConnectorPermissions]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Show the configure-permissions entry in the chat composer connector popover, opening the agent×connector firewall dialog inline.\",\n    enabled: false,\n    userOverridable: true,\n  },\n};\n\ninterface ResolvedHashes {\n  readonly userHash?: string;\n  readonly emailHash?: string;\n  readonly orgIdHash?: string;\n}\n\nfunction evaluateSwitch(fs: FeatureSwitch, hashes: ResolvedHashes): boolean {\n  if (fs.enabled) return true;\n  if (hashes.userHash && fs.enabledUserHashes?.includes(hashes.userHash))\n    return true;\n  if (hashes.emailHash && fs.enabledEmailHashes?.includes(hashes.emailHash))\n    return true;\n  if (hashes.orgIdHash && fs.enabledOrgIdHashes?.includes(hashes.orgIdHash))\n    return true;\n  return false;\n}\n\n/**\n * Evaluate all feature switches at once for the given context.\n *\n * Computes identity hashes once and checks all switches synchronously.\n */\nexport function getAllFeatureStates(\n  ctx?: FeatureSwitchContext,\n): Record<FeatureSwitchKey, boolean> {\n  const switches = Object.values(FEATURE_SWITCHES);\n  const hashes: ResolvedHashes = {\n    userHash:\n      ctx?.userId &&\n      switches.some((s) => {\n        return s.enabledUserHashes?.length;\n      })\n        ? fnv1a(ctx.userId)\n        : undefined,\n    emailHash:\n      ctx?.email &&\n      switches.some((s) => {\n        return s.enabledEmailHashes?.length;\n      })\n        ? fnv1a(ctx.email.toLowerCase())\n        : undefined,\n    orgIdHash:\n      ctx?.orgId &&\n      switches.some((s) => {\n        return s.enabledOrgIdHashes?.length;\n      })\n        ? fnv1a(ctx.orgId)\n        : undefined,\n  };\n\n  const result = {} as Record<FeatureSwitchKey, boolean>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = evaluateSwitch(FEATURE_SWITCHES[key], hashes);\n  }\n\n  if (ctx?.overrides) {\n    for (const [key, value] of Object.entries(ctx.overrides)) {\n      if (key in FEATURE_SWITCHES && value !== undefined) {\n        result[key as FeatureSwitchKey] = value;\n      }\n    }\n  }\n\n  return result;\n}\n\n/**\n * Return the description for every feature switch.\n */\nexport function getFeatureSwitchDescriptions(): Record<\n  FeatureSwitchKey,\n  string | undefined\n> {\n  const result = {} as Record<FeatureSwitchKey, string | undefined>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = FEATURE_SWITCHES[key].description;\n  }\n  return result;\n}\n\n/**\n * Return display metadata for every feature switch.\n */\nexport function getFeatureSwitchMetadata(): Record<\n  FeatureSwitchKey,\n  FeatureSwitchMetadata\n> {\n  const result = {} as Record<FeatureSwitchKey, FeatureSwitchMetadata>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    const featureSwitch = FEATURE_SWITCHES[key];\n    result[key] = {\n      maintainer: featureSwitch.maintainer,\n      description: featureSwitch.description,\n      userOverridable: featureSwitch.userOverridable !== false,\n    };\n  }\n  return result;\n}\n\nexport function isUserOverridableFeatureSwitch(\n  key: string,\n): key is FeatureSwitchKey {\n  if (!(key in FEATURE_SWITCHES)) {\n    return false;\n  }\n  return FEATURE_SWITCHES[key as FeatureSwitchKey].userOverridable !== false;\n}\n\nexport function getUserOverridableFeatureSwitchKeys(): readonly FeatureSwitchKey[] {\n  return Object.values(FeatureSwitchKey).filter(isUserOverridableFeatureSwitch);\n}\n\nexport function filterUserOverridableFeatureSwitchOverrides(\n  switches: Record<string, boolean>,\n): Record<string, boolean> {\n  const filtered: Record<string, boolean> = {};\n  for (const [key, value] of Object.entries(switches)) {\n    if (isUserOverridableFeatureSwitch(key)) {\n      filtered[key] = value;\n    }\n  }\n  return filtered;\n}\n\n/**\n * Check if a feature is enabled for the given context.\n *\n * `ctx` is required so callers must pass identity (userId/orgId/email) or an\n * explicit `{}`. A switch gated by `enabledUserHashes` / `enabledOrgIdHashes`\n * silently returns `false` when ctx omits identity, which has caused bugs.\n * Client-side callers should usually read the platform `featureSwitch$` signal\n * instead — it also merges DB overrides on top of identity context.\n */\nexport function isFeatureEnabled(\n  key: FeatureSwitchKey,\n  ctx: FeatureSwitchContext,\n): boolean {\n  const override = ctx.overrides?.[key];\n  if (override !== undefined) {\n    return override;\n  }\n\n  const featureSwitch = FEATURE_SWITCHES[key];\n  if (featureSwitch.enabled) {\n    return true;\n  }\n  if (ctx.userId && featureSwitch.enabledUserHashes?.length) {\n    if (featureSwitch.enabledUserHashes.includes(fnv1a(ctx.userId)))\n      return true;\n  }\n  if (ctx.email && featureSwitch.enabledEmailHashes?.length) {\n    if (\n      featureSwitch.enabledEmailHashes.includes(fnv1a(ctx.email.toLowerCase()))\n    )\n      return true;\n  }\n  if (ctx.orgId && featureSwitch.enabledOrgIdHashes?.length) {\n    if (featureSwitch.enabledOrgIdHashes.includes(fnv1a(ctx.orgId)))\n      return true;\n  }\n  return false;\n}\n","export { FeatureSwitchKey } from \"@vm0/connectors/feature-switch-key\";\n","/**\n * Identity hashing — FNV-1a 32-bit hash used to reference users / orgs / emails\n * without embedding plain-text identifiers in source code.\n *\n * Shared between the feature-switch registry (UI rollout targeting) and\n * `staff-org.ts` (authorization primitive). The hash is deterministic and\n * synchronous; no crypto API needed.\n */\n\nexport function fnv1a(input: string): string {\n  let h = 2166136261 >>> 0;\n  for (let i = 0; i < input.length; i++) {\n    h ^= input.charCodeAt(i);\n    h = Math.imul(h, 16777619) >>> 0;\n  }\n  return h.toString(16).padStart(8, \"0\");\n}\n\n/**\n * Hashes of internal staff org IDs.\n *\n * This list is the source of truth for `isStaffOrg()` — adding an entry here\n * grants that org access to every endpoint that uses `isStaffOrg` as an\n * authorization check. Treat changes with the same care as role grants.\n */\nexport const STAFF_ORG_ID_HASHES: readonly string[] = [\n  \"afce210e\", // org_3ANttyrbWYJk6JKRSTRLEsbsDLe\n];\n","import type { FeatureSwitchKey } from \"@vm0/connectors/feature-switch-key\";\n\nexport interface ZeroTokenPayload {\n  userId: string;\n  runId: string;\n  orgId: string;\n  scope: string;\n  capabilities: string[];\n  featureSwitchOverrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n  iat: number;\n  exp: number;\n}\n\n/**\n * Decode a ZERO_TOKEN JWT payload.\n * Only decodes — does NOT verify signature (server does that).\n * If no token is provided, reads from process.env.ZERO_TOKEN.\n * Returns undefined if token is missing, malformed, or not a zero-scoped token.\n */\nexport function decodeZeroTokenPayload(\n  token?: string,\n): ZeroTokenPayload | undefined {\n  const raw = token ?? process.env.ZERO_TOKEN;\n  if (!raw) return undefined;\n\n  const prefix = \"vm0_sandbox_\";\n  if (!raw.startsWith(prefix)) return undefined;\n  const jwt = raw.slice(prefix.length);\n\n  const parts = jwt.split(\".\");\n  if (parts.length !== 3) return undefined;\n\n  try {\n    const payload = JSON.parse(\n      Buffer.from(parts[1]!, \"base64url\").toString(),\n    ) as ZeroTokenPayload;\n    if (payload.scope === \"zero\" && Array.isArray(payload.capabilities)) {\n      return payload;\n    }\n  } catch {\n    // Malformed token — fall through\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;AAAA;;;ACAA;;;ACAA;;;ACAA;AASO,SAAS,MAAM,OAAuB;AAC3C,MAAI,IAAI,eAAe;AACvB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAQ,MAAM;AAAA,EACjC;AACA,SAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACvC;AASO,IAAM,sBAAyC;AAAA,EACpD;AAAA;AACF;;;AFeA,IAAM,mBAA4D;AAAA,EAChE,oBAAuB,GAAG;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gEAA6C,GAAG;AAAA,IAC9C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wBAAyB,GAAG;AAAA,IAC1B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gBAAqB,GAAG;AAAA,IACtB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EAEA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8DAA4C,GAAG;AAAA,IAC7C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oEAA+C,GAAG;AAAA,IAChD,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gEAA6C,GAAG;AAAA,IAC9C,YAAY;AAAA,IACZ,aACE;AAAA;AAAA,IAEF,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA;AAAA,IAET,oBAAoB,CAAC,UAAU;AAAA;AAAA,EACjC;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,mBAAmB,CAAC,UAAU;AAAA,EAChC;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,8DAA4C,GAAG;AAAA,IAC7C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,0BAA0B,GAAG;AAAA,IAC3B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AACF;AAuIO,SAAS,iBACd,KACA,KACS;AACT,QAAM,WAAW,IAAI,YAAY,GAAG;AACpC,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,iBAAiB,GAAG;AAC1C,MAAI,cAAc,SAAS;AACzB,WAAO;AAAA,EACT;AACA,MAAI,IAAI,UAAU,cAAc,mBAAmB,QAAQ;AACzD,QAAI,cAAc,kBAAkB,SAAS,MAAM,IAAI,MAAM,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QACE,cAAc,mBAAmB,SAAS,MAAM,IAAI,MAAM,YAAY,CAAC,CAAC;AAExE,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QAAI,cAAc,mBAAmB,SAAS,MAAM,IAAI,KAAK,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,SAAO;AACT;;;AGvrBA;AAmBO,SAAS,uBACd,OAC8B;AAC9B,QAAM,MAAM,SAAS,QAAQ,IAAI;AACjC,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAAS;AACf,MAAI,CAAC,IAAI,WAAW,MAAM,EAAG,QAAO;AACpC,QAAM,MAAM,IAAI,MAAM,OAAO,MAAM;AAEnC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,KAAK;AAAA,MACnB,OAAO,KAAK,MAAM,CAAC,GAAI,WAAW,EAAE,SAAS;AAAA,IAC/C;AACA,QAAI,QAAQ,UAAU,UAAU,MAAM,QAAQ,QAAQ,YAAY,GAAG;AACnE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../../packages/connectors/src/feature-switch-key.ts","../../../packages/core/src/feature-switch.ts","../../../packages/core/src/feature-switch-key.ts","../../../packages/core/src/identity-hash.ts","../src/lib/api/zero-token.ts"],"sourcesContent":["/**\n * Feature switch keys\n *\n * Defines all available feature switch identifiers.\n */\nexport enum FeatureSwitchKey {\n  Dummy = \"dummy\",\n  ExternalConnectorCatalog = \"externalConnectorCatalog\",\n  AhrefsConnector = \"ahrefsConnector\",\n  BillConnector = \"billConnector\",\n  BentomlConnector = \"bentomlConnector\",\n  BoxConnector = \"boxConnector\",\n  CanvaConnector = \"canvaConnector\",\n  CalComConnector = \"calComConnector\",\n  CopperConnector = \"copperConnector\",\n  DatadogConnector = \"datadogConnector\",\n  DeelConnector = \"deelConnector\",\n  DocuSignConnector = \"docusignConnector\",\n  DropboxConnector = \"dropboxConnector\",\n  FigmaConnector = \"figmaConnector\",\n  ExpensifyConnector = \"expensifyConnector\",\n  GoogleContactsConnector = \"googleContactsConnector\",\n  GoogleFormsConnector = \"googleFormsConnector\",\n  MercuryConnector = \"mercuryConnector\",\n  NeonConnector = \"neonConnector\",\n  NetSuiteConnector = \"netSuiteConnector\",\n  GarminConnectConnector = \"garminConnectConnector\",\n  QuickBooksConnector = \"quickbooksConnector\",\n  RedditConnector = \"redditConnector\",\n  SupabaseConnector = \"supabaseConnector\",\n  WebflowConnector = \"webflowConnector\",\n  CloseConnector = \"closeConnector\",\n  MetaAdsConnector = \"metaAdsConnector\",\n  TikTokAdsConnector = \"tiktokAdsConnector\",\n  AwsConnector = \"awsConnector\",\n  PosthogConnector = \"posthogConnector\",\n  PayPalConnector = \"payPalConnector\",\n  RampConnector = \"rampConnector\",\n  MailchimpConnector = \"mailchimpConnector\",\n  ResendConnector = \"resendConnector\",\n  PexelsConnector = \"pexelsConnector\",\n  SpotifyConnector = \"spotifyConnector\",\n  ZeroDebug = \"zeroDebug\",\n  CanonicalSlackIngress = \"canonicalSlackIngress\",\n  CanonicalSlackWebVisibility = \"canonicalSlackWebVisibility\",\n  CanonicalSlackAssets = \"canonicalSlackAssets\",\n  ZeroWeather = \"zeroWeather\",\n  ZeroFinance = \"zeroFinance\",\n  ZeroPeopleSearch = \"zeroPeopleSearch\",\n  ZeroBrowser = \"zeroBrowser\",\n  Banking = \"banking\",\n  Lab = \"lab\",\n  NotionWorkflowAutomations = \"notionWorkflowAutomations\",\n  GithubWebhookAutomations = \"githubWebhookAutomations\",\n  GithubWorkflowRunAutomations = \"githubWorkflowRunAutomations\",\n  MorningBrief = \"morningBrief\",\n  ManualMorningBrief = \"manualMorningBrief\",\n  TestOauthConnector = \"testOauthConnector\",\n  FreshdeskConnector = \"freshdeskConnector\",\n  StabilityAiConnector = \"stabilityAiConnector\",\n  ZoomConnector = \"zoomConnector\",\n  WorkdayConnector = \"workdayConnector\",\n  CodexFastMode = \"codexFastMode\",\n  RealAgentInPreview = \"realAgentInPreview\",\n  ComposerUploadPopover = \"composerUploadPopover\",\n  StructuredPrompt = \"structuredPrompt\",\n\n  ZapierConnector = \"zapierConnector\",\n  HtmlArtifactCommentEditing = \"htmlArtifactCommentEditing\",\n  ComputerUseDesktopPlugins = \"computerUseDesktopPlugins\",\n  AgentUnreadIndicators = \"agentUnreadIndicators\",\n  ChatThreadUnifiedSearch = \"chatThreadUnifiedSearch\",\n  ComposerChatThreadSuggestions = \"composerChatThreadSuggestions\",\n  SidebarSubscriptionUsage = \"sidebarSubscriptionUsage\",\n  TeamsIntegration = \"teamsIntegration\",\n  FeishuIntegration = \"feishuIntegration\",\n  PresentationExport = \"presentationExport\",\n  Artifacts = \"artifacts\",\n  HostedArtifactVersions = \"hostedArtifactVersions\",\n  VideoArtifactPosters = \"videoArtifactPosters\",\n  WebsiteTemplateV2 = \"websiteTemplateV2\",\n  PlanUpgradeGuidance = \"planUpgradeGuidance\",\n  OrgPlanEntitlementReads = \"orgPlanEntitlementReads\",\n  WorkflowConnectorReadiness = \"workflowConnectorReadiness\",\n  ZeroMail = \"zeroMail\",\n  ComposerConnectorPermissions = \"composerConnectorPermissions\",\n  ThreeColumnNav = \"threeColumnNav\",\n  ChatHistoryBackfillProgress = \"chatHistoryBackfillProgress\",\n}\n","/**\n * Feature switch system\n *\n * Provides centralized feature flag management with user-identity based overrides.\n * User IDs are stored as FNV-1a hashes to avoid exposing plain-text identifiers in source code.\n *\n * NOT AN AUTHORIZATION BOUNDARY. User-overridable switches can be self-enabled\n * through `POST /api/zero/feature-switches`, and `userOverridable: false` only\n * excludes a switch from that API. For money-granting, credential, or\n * privilege-escalation endpoints, gate with a hard identity check (e.g.\n * `isStaffOrg()` from `./staff-org`) instead of this system.\n */\n\nimport { FeatureSwitchKey } from \"./feature-switch-key\";\nimport { STAFF_ORG_ID_HASHES, fnv1a } from \"./identity-hash\";\n\nexport interface FeatureSwitch {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly enabled: boolean;\n  readonly enabledUserHashes?: readonly string[];\n  readonly enabledEmailHashes?: readonly string[];\n  readonly enabledOrgIdHashes?: readonly string[];\n  readonly userOverridable?: boolean;\n}\n\nexport interface FeatureSwitchMetadata {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly userOverridable: boolean;\n}\n\nexport interface FeatureSwitchContext {\n  readonly userId?: string;\n  readonly email?: string;\n  readonly orgId?: string;\n  readonly overrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n}\n\n/**\n * Registry of all feature switches\n */\nconst FEATURE_SWITCHES: Record<FeatureSwitchKey, FeatureSwitch> = {\n  [FeatureSwitchKey.Dummy]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Test-only feature switch for flag system validation\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ExternalConnectorCatalog]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Use the accepted external catalog as the global source for official connectors\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.AhrefsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ahrefs SEO connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BillConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BILL Spend & Expense connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BentomlConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BentoML model serving connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BoxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Box file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CanvaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Canva design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CalComConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Cal.com scheduling connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CopperConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Copper CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DatadogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Datadog observability connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DeelConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Deel HR connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DocuSignConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the DocuSign e-signature connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DropboxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Dropbox file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FigmaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Figma design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ExpensifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Expensify accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleContactsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Contacts connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleFormsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Forms connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MercuryConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mercury banking connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NeonConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Neon serverless Postgres connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NetSuiteConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Oracle NetSuite ERP connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GarminConnectConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Garmin Connect wellness connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.QuickBooksConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the QuickBooks accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RedditConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Reddit connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SupabaseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Supabase database connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CloseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Close CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WebflowConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Webflow site management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MetaAdsConnector]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Enable the Meta Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.TikTokAdsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the TikTok Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.AwsConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Enable the temporary AWS remote login connector\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PosthogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PostHog analytics connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PayPalConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PayPal payments connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RampConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ramp spend management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MailchimpConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mailchimp email marketing connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ResendConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Resend email service connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PexelsConnector]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description: \"Enable the Pexels stock photo and video connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SpotifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Spotify connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZeroDebug]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Reveal activity debug surfaces, activity log navigation, appended system prompts, and Debug preferences\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CanonicalSlackIngress]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Route newly admitted per-user Slack threads through canonical chat ingress.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.CanonicalSlackWebVisibility]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Show canonical Slack chat threads in Web chat surfaces for enrolled users.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.CanonicalSlackAssets]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Canonicalize direct Slack inputs and run-scoped Slack file publications.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroWeather]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the managed Google-backed Zero Weather and Air Quality APIs and weather:read ZERO_TOKEN capability.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ZeroFinance]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the managed APIDojo-backed Zero Finance API and finance:read ZERO_TOKEN capability.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroPeopleSearch]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable managed Perplexity People Search and the people-search:read ZERO_TOKEN capability.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Banking]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Enable the managed Zero Banking gateway and banking:read ZERO_TOKEN capability for Finicity-backed accounts, balances, and transactions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Lab]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Show the Lab page for toggling experimental features\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.MorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the daily 7:00 local-time Morning Brief email built from GitHub, Gmail, and Google Calendar.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.ManualMorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show a Send now button in Settings that triggers a Morning Brief immediately for testing.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.NotionWorkflowAutomations]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Notion event workflow automations, starting with child pages created under a configured parent page.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.GithubWorkflowRunAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable GitHub Actions workflow run completed event automations.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.GithubWebhookAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show creation entry points for GitHub workflow job, pull request review, deployment status, and issue comment automations.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.TestOauthConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable the test-oauth connector, a synthetic OAuth 2.0 provider used only for automated tests. Off in prod.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FreshdeskConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Freshdesk helpdesk connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.StabilityAiConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Stability AI image generation connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZoomConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zoom connector (OAuth 2.0) for meetings, past participants, and cloud recordings access\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WorkdayConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Workday HCM and finance connector\",\n    enabled: false,\n  },\n\n  [FeatureSwitchKey.CodexFastMode]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Codex fast mode for ChatGPT subscription GPT 5.5 and GPT 5.6 web chat runs.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.RealAgentInPreview]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Send preview chat runs through real agent CLIs instead of preview mock runners.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComposerUploadPopover]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Use the Upload popover in the chat composer instead of the legacy paperclip attachment button.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.StructuredPrompt]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable structured user prompt rendering, sends, and drafts while preserving the legacy content fallback.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZapierConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zapier connector. When disabled, Zapier is hidden from the connectors list and cannot be connected.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.HtmlArtifactCommentEditing]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable the HTML artifact comment-editing workflow for collecting DOM comments and preparing instrumented working-copy edits.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComputerUseDesktopPlugins]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Zero Desktop Computer Use plugins for local resources, starting with the bundled filesystem plugin gateway.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.AgentUnreadIndicators]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat unread indicators in sidebar pinned agent lists and the conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatThreadUnifiedSearch]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat thread title results from the local event-driven thread cache in the command-shift-a conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComposerChatThreadSuggestions]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Suggest titled chat threads from the current agent when typing @ in the chat composer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatHistoryBackfillProgress]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Progress bar under the chat thread header showing history backfill progress while older messages load.\",\n    // Not rolled out to anyone yet; enable per-user via the Lab page.\n    enabled: false,\n  },\n  [FeatureSwitchKey.ThreeColumnNav]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Slack-style three-column navigation: a labeled icon rail, a pinned-agents and chat-threads list column, and the conversation pane.\",\n    enabled: false,\n    // Ming only for the first pass; widen to staff once it settles.\n    enabledEmailHashes: [\"54757055\"], // fnv1a(\"ming@vm0.ai\")\n  },\n  [FeatureSwitchKey.SidebarSubscriptionUsage]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show Codex and Claude Code personal subscription usage in the Zero sidebar footer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.TeamsIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show standalone Microsoft Teams integration settings, connect flows, and Works page entry points.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.FeishuIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show the Feishu direct-message integration and Works page entry point.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PresentationExport]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable downloading presentation artifacts as PPTX files and uploading them as native, editable Google Slides decks.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Artifacts]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Show the Artifacts manage page for generated artifacts in the current organization.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.HostedArtifactVersions]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Create immutable hosted artifact versions behind stable site aliases.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.VideoArtifactPosters]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate poster images asynchronously when video artifacts are recorded.\",\n    enabled: false,\n    enabledUserHashes: [\"032a75d8\"],\n  },\n  [FeatureSwitchKey.WebsiteTemplateV2]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate websites from refreshed self-contained template packages. When off, website generation uses the existing package versions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PlanUpgradeGuidance]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show plan-upgrade guidance in Zero CLI help and render billing plan links as rich chat cards.\",\n    enabled: true,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.OrgPlanEntitlementReads]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Read runtime plan capability limits from org_plan_entitlements instead of deriving them from org_metadata.tier.\",\n    enabled: true,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.WorkflowConnectorReadiness]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Show the manual connector readiness check on workflow settings pages.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ZeroMail]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable persistent Gmail and Outlook draft cards created through the Zero Mail CLI.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroBrowser]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Show the Zero Browser command in the Zero CLI.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComposerConnectorPermissions]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Show the configure-permissions entry in the chat composer connector popover, opening the agent×connector firewall dialog inline.\",\n    enabled: false,\n    userOverridable: true,\n  },\n};\n\ninterface ResolvedHashes {\n  readonly userHash?: string;\n  readonly emailHash?: string;\n  readonly orgIdHash?: string;\n}\n\nfunction evaluateSwitch(fs: FeatureSwitch, hashes: ResolvedHashes): boolean {\n  if (fs.enabled) return true;\n  if (hashes.userHash && fs.enabledUserHashes?.includes(hashes.userHash))\n    return true;\n  if (hashes.emailHash && fs.enabledEmailHashes?.includes(hashes.emailHash))\n    return true;\n  if (hashes.orgIdHash && fs.enabledOrgIdHashes?.includes(hashes.orgIdHash))\n    return true;\n  return false;\n}\n\n/**\n * Evaluate all feature switches at once for the given context.\n *\n * Computes identity hashes once and checks all switches synchronously.\n */\nexport function getAllFeatureStates(\n  ctx?: FeatureSwitchContext,\n): Record<FeatureSwitchKey, boolean> {\n  const switches = Object.values(FEATURE_SWITCHES);\n  const hashes: ResolvedHashes = {\n    userHash:\n      ctx?.userId &&\n      switches.some((s) => {\n        return s.enabledUserHashes?.length;\n      })\n        ? fnv1a(ctx.userId)\n        : undefined,\n    emailHash:\n      ctx?.email &&\n      switches.some((s) => {\n        return s.enabledEmailHashes?.length;\n      })\n        ? fnv1a(ctx.email.toLowerCase())\n        : undefined,\n    orgIdHash:\n      ctx?.orgId &&\n      switches.some((s) => {\n        return s.enabledOrgIdHashes?.length;\n      })\n        ? fnv1a(ctx.orgId)\n        : undefined,\n  };\n\n  const result = {} as Record<FeatureSwitchKey, boolean>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = evaluateSwitch(FEATURE_SWITCHES[key], hashes);\n  }\n\n  if (ctx?.overrides) {\n    for (const [key, value] of Object.entries(ctx.overrides)) {\n      if (key in FEATURE_SWITCHES && value !== undefined) {\n        result[key as FeatureSwitchKey] = value;\n      }\n    }\n  }\n\n  return result;\n}\n\n/**\n * Return the description for every feature switch.\n */\nexport function getFeatureSwitchDescriptions(): Record<\n  FeatureSwitchKey,\n  string | undefined\n> {\n  const result = {} as Record<FeatureSwitchKey, string | undefined>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = FEATURE_SWITCHES[key].description;\n  }\n  return result;\n}\n\n/**\n * Return display metadata for every feature switch.\n */\nexport function getFeatureSwitchMetadata(): Record<\n  FeatureSwitchKey,\n  FeatureSwitchMetadata\n> {\n  const result = {} as Record<FeatureSwitchKey, FeatureSwitchMetadata>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    const featureSwitch = FEATURE_SWITCHES[key];\n    result[key] = {\n      maintainer: featureSwitch.maintainer,\n      description: featureSwitch.description,\n      userOverridable: featureSwitch.userOverridable !== false,\n    };\n  }\n  return result;\n}\n\nexport function isUserOverridableFeatureSwitch(\n  key: string,\n): key is FeatureSwitchKey {\n  if (!(key in FEATURE_SWITCHES)) {\n    return false;\n  }\n  return FEATURE_SWITCHES[key as FeatureSwitchKey].userOverridable !== false;\n}\n\nexport function getUserOverridableFeatureSwitchKeys(): readonly FeatureSwitchKey[] {\n  return Object.values(FeatureSwitchKey).filter(isUserOverridableFeatureSwitch);\n}\n\nexport function filterUserOverridableFeatureSwitchOverrides(\n  switches: Record<string, boolean>,\n): Record<string, boolean> {\n  const filtered: Record<string, boolean> = {};\n  for (const [key, value] of Object.entries(switches)) {\n    if (isUserOverridableFeatureSwitch(key)) {\n      filtered[key] = value;\n    }\n  }\n  return filtered;\n}\n\n/**\n * Check if a feature is enabled for the given context.\n *\n * `ctx` is required so callers must pass identity (userId/orgId/email) or an\n * explicit `{}`. A switch gated by `enabledUserHashes` / `enabledOrgIdHashes`\n * silently returns `false` when ctx omits identity, which has caused bugs.\n * Client-side callers should usually read the platform `featureSwitch$` signal\n * instead — it also merges DB overrides on top of identity context.\n */\nexport function isFeatureEnabled(\n  key: FeatureSwitchKey,\n  ctx: FeatureSwitchContext,\n): boolean {\n  const override = ctx.overrides?.[key];\n  if (override !== undefined) {\n    return override;\n  }\n\n  const featureSwitch = FEATURE_SWITCHES[key];\n  if (featureSwitch.enabled) {\n    return true;\n  }\n  if (ctx.userId && featureSwitch.enabledUserHashes?.length) {\n    if (featureSwitch.enabledUserHashes.includes(fnv1a(ctx.userId)))\n      return true;\n  }\n  if (ctx.email && featureSwitch.enabledEmailHashes?.length) {\n    if (\n      featureSwitch.enabledEmailHashes.includes(fnv1a(ctx.email.toLowerCase()))\n    )\n      return true;\n  }\n  if (ctx.orgId && featureSwitch.enabledOrgIdHashes?.length) {\n    if (featureSwitch.enabledOrgIdHashes.includes(fnv1a(ctx.orgId)))\n      return true;\n  }\n  return false;\n}\n","export { FeatureSwitchKey } from \"@vm0/connectors/feature-switch-key\";\n","/**\n * Identity hashing — FNV-1a 32-bit hash used to reference users / orgs / emails\n * without embedding plain-text identifiers in source code.\n *\n * Shared between the feature-switch registry (UI rollout targeting) and\n * `staff-org.ts` (authorization primitive). The hash is deterministic and\n * synchronous; no crypto API needed.\n */\n\nexport function fnv1a(input: string): string {\n  let h = 2166136261 >>> 0;\n  for (let i = 0; i < input.length; i++) {\n    h ^= input.charCodeAt(i);\n    h = Math.imul(h, 16777619) >>> 0;\n  }\n  return h.toString(16).padStart(8, \"0\");\n}\n\n/**\n * Hashes of internal staff org IDs.\n *\n * This list is the source of truth for `isStaffOrg()` — adding an entry here\n * grants that org access to every endpoint that uses `isStaffOrg` as an\n * authorization check. Treat changes with the same care as role grants.\n */\nexport const STAFF_ORG_ID_HASHES: readonly string[] = [\n  \"afce210e\", // org_3ANttyrbWYJk6JKRSTRLEsbsDLe\n];\n","import type { FeatureSwitchKey } from \"@vm0/connectors/feature-switch-key\";\n\nexport interface ZeroTokenPayload {\n  userId: string;\n  runId: string;\n  orgId: string;\n  scope: string;\n  capabilities: string[];\n  featureSwitchOverrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n  iat: number;\n  exp: number;\n}\n\n/**\n * Decode a ZERO_TOKEN JWT payload.\n * Only decodes — does NOT verify signature (server does that).\n * If no token is provided, reads from process.env.ZERO_TOKEN.\n * Returns undefined if token is missing, malformed, or not a zero-scoped token.\n */\nexport function decodeZeroTokenPayload(\n  token?: string,\n): ZeroTokenPayload | undefined {\n  const raw = token ?? process.env.ZERO_TOKEN;\n  if (!raw) return undefined;\n\n  const prefix = \"vm0_sandbox_\";\n  if (!raw.startsWith(prefix)) return undefined;\n  const jwt = raw.slice(prefix.length);\n\n  const parts = jwt.split(\".\");\n  if (parts.length !== 3) return undefined;\n\n  try {\n    const payload = JSON.parse(\n      Buffer.from(parts[1]!, \"base64url\").toString(),\n    ) as ZeroTokenPayload;\n    if (payload.scope === \"zero\" && Array.isArray(payload.capabilities)) {\n      return payload;\n    }\n  } catch {\n    // Malformed token — fall through\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;AAAA;;;ACAA;;;ACAA;;;ACAA;AASO,SAAS,MAAM,OAAuB;AAC3C,MAAI,IAAI,eAAe;AACvB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAQ,MAAM;AAAA,EACjC;AACA,SAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACvC;AASO,IAAM,sBAAyC;AAAA,EACpD;AAAA;AACF;;;AFeA,IAAM,mBAA4D;AAAA,EAChE,oBAAuB,GAAG;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gEAA6C,GAAG;AAAA,IAC9C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wBAAyB,GAAG;AAAA,IAC1B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gBAAqB,GAAG;AAAA,IACtB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EAEA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8DAA4C,GAAG;AAAA,IAC7C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oEAA+C,GAAG;AAAA,IAChD,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gEAA6C,GAAG;AAAA,IAC9C,YAAY;AAAA,IACZ,aACE;AAAA;AAAA,IAEF,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA;AAAA,IAET,oBAAoB,CAAC,UAAU;AAAA;AAAA,EACjC;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,mBAAmB,CAAC,UAAU;AAAA,EAChC;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,8DAA4C,GAAG;AAAA,IAC7C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,0BAA0B,GAAG;AAAA,IAC3B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AACF;AAuIO,SAAS,iBACd,KACA,KACS;AACT,QAAM,WAAW,IAAI,YAAY,GAAG;AACpC,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,iBAAiB,GAAG;AAC1C,MAAI,cAAc,SAAS;AACzB,WAAO;AAAA,EACT;AACA,MAAI,IAAI,UAAU,cAAc,mBAAmB,QAAQ;AACzD,QAAI,cAAc,kBAAkB,SAAS,MAAM,IAAI,MAAM,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QACE,cAAc,mBAAmB,SAAS,MAAM,IAAI,MAAM,YAAY,CAAC,CAAC;AAExE,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QAAI,cAAc,mBAAmB,SAAS,MAAM,IAAI,KAAK,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,SAAO;AACT;;;AGtrBA;AAmBO,SAAS,uBACd,OAC8B;AAC9B,QAAM,MAAM,SAAS,QAAQ,IAAI;AACjC,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAAS;AACf,MAAI,CAAC,IAAI,WAAW,MAAM,EAAG,QAAO;AACpC,QAAM,MAAM,IAAI,MAAM,OAAO,MAAM;AAEnC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,KAAK;AAAA,MACnB,OAAO,KAAK,MAAM,CAAC,GAAI,WAAW,EAAE,SAAS;AAAA,IAC/C;AACA,QAAI,QAAQ,UAAU,UAAU,MAAM,QAAQ,QAAQ,YAAY,GAAG;AACnE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;","names":[]}

package/{chunk-BYD553JQ.js → chunk-ZQOFNY34.js}

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   resolveFirewallMetadataPolicies
-} from "./chunk-45FQJCB2.js";
+} from "./chunk-TP7AVH5K.js";
 import {
   getZeroConnectorCatalogPermissions
-} from "./chunk-MDKQRZ7S.js";
+} from "./chunk-DIK5B4ZQ.js";
 import {
   source_default
-} from "./chunk-DQB537B5.js";
+} from "./chunk-AXPECIRA.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -89,4 +89,4 @@ export {
   policyIcon,
   loadConnectorPermissionInfos
 };
-//# sourceMappingURL=chunk-BYD553JQ.js.map
+//# sourceMappingURL=chunk-ZQOFNY34.js.map

package/{computer-use-OVYDVFLM.js → computer-use-54M26ZHL.js}

@@ -12,13 +12,13 @@ import {
   fetchComputerUseScreenshot,
   getComputerUseCommand,
   listComputerUseHosts
-} from "./chunk-MDKQRZ7S.js";
-import "./chunk-RKXDWJW5.js";
+} from "./chunk-DIK5B4ZQ.js";
+import "./chunk-KDNGT5NT.js";
 import {
   ApiRequestError,
   withErrorHandler
-} from "./chunk-DQB537B5.js";
-import "./chunk-H4LRAOOF.js";
+} from "./chunk-AXPECIRA.js";
+import "./chunk-X5FAOKYK.js";
 import {
   Command
 } from "./chunk-LD4ZVU4O.js";
@@ -970,4 +970,4 @@ export {
   formatComputerUseResultForConsole,
   zeroComputerUseCommand
 };
-//# sourceMappingURL=computer-use-OVYDVFLM.js.map
+//# sourceMappingURL=computer-use-54M26ZHL.js.map

package/{connector-ZJ4GNXOR.js → connector-NQP2OC55.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   findFirewallMetadataPermission
-} from "./chunk-45FQJCB2.js";
+} from "./chunk-TP7AVH5K.js";
 import {
   CALLBACK_PROMPT_PLACEHOLDER,
   addRequestedCallbackSearchParams,
@@ -17,7 +17,7 @@ import {
   resolveAgentContext,
   resolveManualGrantAuthMethod,
   searchPublicConnectorCatalog
-} from "./chunk-ZLP3TODB.js";
+} from "./chunk-RLKJ2XNZ.js";
 import {
   UNKNOWN_PERMISSION_GRANT,
   connectZeroConnectorManualGrant,
@@ -32,20 +32,20 @@ import {
   getZeroCustomConnector,
   listZeroConnectorCatalogStatus,
   listZeroCustomConnectors
-} from "./chunk-MDKQRZ7S.js";
-import "./chunk-RKXDWJW5.js";
+} from "./chunk-DIK5B4ZQ.js";
+import "./chunk-KDNGT5NT.js";
 import {
   getPlatformOrigin,
   toPlatformUrl
-} from "./chunk-24QJ7H5R.js";
+} from "./chunk-NAXSTGVS.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   ApiRequestError,
   getApiUrl,
   source_default,
   withErrorHandler
-} from "./chunk-DQB537B5.js";
-import "./chunk-H4LRAOOF.js";
+} from "./chunk-AXPECIRA.js";
+import "./chunk-X5FAOKYK.js";
 import {
   Command,
   Option
@@ -1489,4 +1489,4 @@ var zeroConnectorCommand = new Command().name("connector").description("Manage a
 export {
   zeroConnectorCommand
 };
-//# sourceMappingURL=connector-ZJ4GNXOR.js.map
+//# sourceMappingURL=connector-NQP2OC55.js.map