@vm0/cli 9.257.9 → 9.258.1

package/{chunk-HSLYLYDU.js → chunk-QFS7VMDL.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   getApiUrl
-} from "./chunk-QDB53R4O.js";
+} from "./chunk-MHNXUHV2.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -42,4 +42,4 @@ export {
   toPlatformUrl,
   getPlatformOrigin
 };
-//# sourceMappingURL=chunk-HSLYLYDU.js.map
+//# sourceMappingURL=chunk-QFS7VMDL.js.map

package/{chunk-OCWAE6QB.js → chunk-REI7CJHF.js}

@@ -418,6 +418,11 @@ var FEATURE_SWITCHES = {
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
+  ["imageStyleR2" /* ImageStyleR2 */]: {
+    maintainer: "bingjie@vm0.ai",
+    description: "Resolve archive-enabled image styles from private R2 packages. When off, image style authoring continues reading vm0-skills from GitHub.",
+    enabled: false
+  },
   ["planUpgradeGuidance" /* PlanUpgradeGuidance */]: {
     maintainer: "ethan@vm0.ai",
     description: "Show plan-upgrade guidance in Zero CLI help and render billing plan links as rich chat cards.",
@@ -506,4 +511,4 @@ export {
   isFeatureEnabled,
   decodeZeroTokenPayload
 };
-//# sourceMappingURL=chunk-OCWAE6QB.js.map
+//# sourceMappingURL=chunk-REI7CJHF.js.map

package/chunk-REI7CJHF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../packages/connectors/src/feature-switch-key.ts","../../../packages/core/src/feature-switch.ts","../../../packages/core/src/feature-switch-key.ts","../../../packages/core/src/identity-hash.ts","../src/lib/api/zero-token.ts"],"sourcesContent":["/**\n * Feature switch keys\n *\n * Defines all available feature switch identifiers.\n */\nexport enum FeatureSwitchKey {\n  Dummy = \"dummy\",\n  ExternalConnectorCatalog = \"externalConnectorCatalog\",\n  AhrefsConnector = \"ahrefsConnector\",\n  BillConnector = \"billConnector\",\n  BentomlConnector = \"bentomlConnector\",\n  BoxConnector = \"boxConnector\",\n  CanvaConnector = \"canvaConnector\",\n  CalComConnector = \"calComConnector\",\n  CopperConnector = \"copperConnector\",\n  DatadogConnector = \"datadogConnector\",\n  DeelConnector = \"deelConnector\",\n  DocuSignConnector = \"docusignConnector\",\n  DropboxConnector = \"dropboxConnector\",\n  FigmaConnector = \"figmaConnector\",\n  ExpensifyConnector = \"expensifyConnector\",\n  GoogleContactsConnector = \"googleContactsConnector\",\n  GoogleFormsConnector = \"googleFormsConnector\",\n  MercuryConnector = \"mercuryConnector\",\n  NeonConnector = \"neonConnector\",\n  NetSuiteConnector = \"netSuiteConnector\",\n  GarminConnectConnector = \"garminConnectConnector\",\n  QuickBooksConnector = \"quickbooksConnector\",\n  RedditConnector = \"redditConnector\",\n  SupabaseConnector = \"supabaseConnector\",\n  WebflowConnector = \"webflowConnector\",\n  CloseConnector = \"closeConnector\",\n  MetaAdsConnector = \"metaAdsConnector\",\n  TikTokAdsConnector = \"tiktokAdsConnector\",\n  AwsConnector = \"awsConnector\",\n  PosthogConnector = \"posthogConnector\",\n  PayPalConnector = \"payPalConnector\",\n  RampConnector = \"rampConnector\",\n  MailchimpConnector = \"mailchimpConnector\",\n  ResendConnector = \"resendConnector\",\n  PexelsConnector = \"pexelsConnector\",\n  SpotifyConnector = \"spotifyConnector\",\n  ZeroDebug = \"zeroDebug\",\n  ZeroWeather = \"zeroWeather\",\n  ZeroFinance = \"zeroFinance\",\n  ZeroPeopleSearch = \"zeroPeopleSearch\",\n  ZeroBrowser = \"zeroBrowser\",\n  Banking = \"banking\",\n  Lab = \"lab\",\n  NotionWorkflowAutomations = \"notionWorkflowAutomations\",\n  GithubWebhookAutomations = \"githubWebhookAutomations\",\n  GithubWorkflowRunAutomations = \"githubWorkflowRunAutomations\",\n  MorningBrief = \"morningBrief\",\n  ManualMorningBrief = \"manualMorningBrief\",\n  TestOauthConnector = \"testOauthConnector\",\n  FreshdeskConnector = \"freshdeskConnector\",\n  StabilityAiConnector = \"stabilityAiConnector\",\n  ZoomConnector = \"zoomConnector\",\n  WorkdayConnector = \"workdayConnector\",\n  CodexFastMode = \"codexFastMode\",\n  ClaudeSessionPruning = \"claudeSessionPruning\",\n  RealAgentInPreview = \"realAgentInPreview\",\n  ComposerUploadPopover = \"composerUploadPopover\",\n  StructuredPrompt = \"structuredPrompt\",\n\n  ZapierConnector = \"zapierConnector\",\n  ComputerUseDesktopPlugins = \"computerUseDesktopPlugins\",\n  AgentUnreadIndicators = \"agentUnreadIndicators\",\n  ChatThreadUnifiedSearch = \"chatThreadUnifiedSearch\",\n  ComposerChatThreadSuggestions = \"composerChatThreadSuggestions\",\n  SidebarSubscriptionUsage = \"sidebarSubscriptionUsage\",\n  TeamsIntegration = \"teamsIntegration\",\n  FeishuIntegration = \"feishuIntegration\",\n  Artifacts = \"artifacts\",\n  HostedArtifactVersions = \"hostedArtifactVersions\",\n  VideoArtifactPosters = \"videoArtifactPosters\",\n  WebsiteTemplateV2 = \"websiteTemplateV2\",\n  ImageStyleR2 = \"imageStyleR2\",\n  PlanUpgradeGuidance = \"planUpgradeGuidance\",\n  OrgPlanEntitlementReads = \"orgPlanEntitlementReads\",\n  WorkflowConnectorReadiness = \"workflowConnectorReadiness\",\n  ZeroMail = \"zeroMail\",\n  ComposerConnectorPermissions = \"composerConnectorPermissions\",\n  ThreeColumnNav = \"threeColumnNav\",\n  ChatHistoryBackfillProgress = \"chatHistoryBackfillProgress\",\n}\n","/**\n * Feature switch system\n *\n * Provides centralized feature flag management with user-identity based overrides.\n * User IDs are stored as FNV-1a hashes to avoid exposing plain-text identifiers in source code.\n *\n * NOT AN AUTHORIZATION BOUNDARY. User-overridable switches can be self-enabled\n * through `POST /api/zero/feature-switches`, and `userOverridable: false` only\n * excludes a switch from that API. For money-granting, credential, or\n * privilege-escalation endpoints, gate with a hard identity check (e.g.\n * `isStaffOrg()` from `./staff-org`) instead of this system.\n */\n\nimport { FeatureSwitchKey } from \"./feature-switch-key\";\nimport { STAFF_ORG_ID_HASHES, fnv1a } from \"./identity-hash\";\n\nexport interface FeatureSwitch {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly enabled: boolean;\n  readonly enabledUserHashes?: readonly string[];\n  readonly enabledEmailHashes?: readonly string[];\n  readonly enabledOrgIdHashes?: readonly string[];\n  readonly userOverridable?: boolean;\n}\n\nexport interface FeatureSwitchMetadata {\n  readonly maintainer: string;\n  readonly description?: string;\n  readonly userOverridable: boolean;\n}\n\nexport interface FeatureSwitchContext {\n  readonly userId?: string;\n  readonly email?: string;\n  readonly orgId?: string;\n  readonly overrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n}\n\n/**\n * Registry of all feature switches\n */\nconst FEATURE_SWITCHES: Record<FeatureSwitchKey, FeatureSwitch> = {\n  [FeatureSwitchKey.Dummy]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Test-only feature switch for flag system validation\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ExternalConnectorCatalog]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Use the accepted external catalog as the global source for official connectors\",\n    enabled: true,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.AhrefsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ahrefs SEO connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BillConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BILL Spend & Expense connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BentomlConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the BentoML model serving connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.BoxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Box file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CanvaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Canva design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CalComConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Cal.com scheduling connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CopperConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Copper CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DatadogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Datadog observability connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DeelConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Deel HR connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DocuSignConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the DocuSign e-signature connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.DropboxConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Dropbox file storage connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FigmaConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Figma design connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ExpensifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Expensify accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleContactsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Contacts connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GoogleFormsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Google Forms connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MercuryConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mercury banking connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NeonConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Neon serverless Postgres connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.NetSuiteConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Oracle NetSuite ERP connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.GarminConnectConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Garmin Connect wellness connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.QuickBooksConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the QuickBooks accounting connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RedditConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Reddit connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SupabaseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Supabase database connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.CloseConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Close CRM connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WebflowConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Webflow site management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MetaAdsConnector]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Enable the Meta Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.TikTokAdsConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the TikTok Ads Manager connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.AwsConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Enable the temporary AWS remote login connector\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.PosthogConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PostHog analytics connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PayPalConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the PayPal payments connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.RampConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Ramp spend management connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.MailchimpConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Mailchimp email marketing connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ResendConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Resend email service connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PexelsConnector]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description: \"Enable the Pexels stock photo and video connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.SpotifyConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Spotify connector integration\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZeroDebug]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Reveal activity debug surfaces, activity log navigation, appended system prompts, and Debug preferences\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZeroWeather]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the managed Google-backed Zero Weather and Air Quality APIs and weather:read ZERO_TOKEN capability.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.ZeroFinance]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the managed APIDojo-backed Zero Finance API and finance:read ZERO_TOKEN capability.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroPeopleSearch]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable managed Perplexity People Search and the people-search:read ZERO_TOKEN capability.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Banking]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Enable the managed Zero Banking gateway and banking:read ZERO_TOKEN capability for Finicity-backed accounts, balances, and transactions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Lab]: {\n    maintainer: \"ethan@vm0.ai\",\n    description: \"Show the Lab page for toggling experimental features\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.MorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable the daily 7:00 local-time Morning Brief email built from GitHub, Gmail, and Google Calendar.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.ManualMorningBrief]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show a Send now button in Settings that triggers a Morning Brief immediately for testing.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: true,\n  },\n  [FeatureSwitchKey.NotionWorkflowAutomations]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Notion event workflow automations, starting with child pages created under a configured parent page.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.GithubWorkflowRunAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable GitHub Actions workflow run completed event automations.\",\n    enabled: true,\n  },\n  [FeatureSwitchKey.GithubWebhookAutomations]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show creation entry points for GitHub workflow job, pull request review, deployment status, and issue comment automations.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.TestOauthConnector]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Enable the test-oauth connector, a synthetic OAuth 2.0 provider used only for automated tests. Off in prod.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.FreshdeskConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Freshdesk helpdesk connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.StabilityAiConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Stability AI image generation connector\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ZoomConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zoom connector (OAuth 2.0) for meetings, past participants, and cloud recordings access\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.WorkdayConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description: \"Enable the Workday HCM and finance connector\",\n    enabled: false,\n  },\n\n  [FeatureSwitchKey.CodexFastMode]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Codex fast mode for ChatGPT subscription GPT 5.5 and GPT 5.6 web chat runs.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ClaudeSessionPruning]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description:\n      \"Prune oversized Claude Code checkpoint histories to the latest native compact generation.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.RealAgentInPreview]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Send preview chat runs through real agent CLIs instead of preview mock runners.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComposerUploadPopover]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Use the Upload popover in the chat composer instead of the legacy paperclip attachment button.\",\n    enabled: false,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.StructuredPrompt]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Enable structured user prompt rendering, sends, and drafts while preserving the legacy content fallback.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZapierConnector]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Enable the Zapier connector. When disabled, Zapier is hidden from the connectors list and cannot be connected.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.ComputerUseDesktopPlugins]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Enable Zero Desktop Computer Use plugins for local resources, starting with the bundled filesystem plugin gateway.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.AgentUnreadIndicators]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat unread indicators in sidebar pinned agent lists and the conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatThreadUnifiedSearch]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show chat thread title results from the local event-driven thread cache in the command-shift-a conversation picker.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComposerChatThreadSuggestions]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Suggest titled chat threads from the current agent when typing @ in the chat composer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ChatHistoryBackfillProgress]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Progress bar under the chat thread header showing history backfill progress while older messages load.\",\n    // Not rolled out to anyone yet; enable per-user via the Lab page.\n    enabled: false,\n  },\n  [FeatureSwitchKey.ThreeColumnNav]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Slack-style three-column navigation: a labeled icon rail, a pinned-agents and chat-threads list column, and the conversation pane.\",\n    enabled: false,\n    // Ming only for the first pass; widen to staff once it settles.\n    enabledEmailHashes: [\"54757055\"], // fnv1a(\"ming@vm0.ai\")\n  },\n  [FeatureSwitchKey.SidebarSubscriptionUsage]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show Codex and Claude Code personal subscription usage in the Zero sidebar footer.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.TeamsIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show standalone Microsoft Teams integration settings, connect flows, and Works page entry points.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.FeishuIntegration]: {\n    maintainer: \"linghan@vm0.ai\",\n    description:\n      \"Show the Feishu direct-message integration and Works page entry point.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.Artifacts]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Show the Artifacts manage page for generated artifacts in the current organization.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.HostedArtifactVersions]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Create immutable hosted artifact versions behind stable site aliases.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.VideoArtifactPosters]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate poster images asynchronously when video artifacts are recorded.\",\n    enabled: false,\n    enabledUserHashes: [\"032a75d8\"],\n  },\n  [FeatureSwitchKey.WebsiteTemplateV2]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Generate websites from refreshed self-contained template packages. When off, website generation uses the existing package versions.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ImageStyleR2]: {\n    maintainer: \"bingjie@vm0.ai\",\n    description:\n      \"Resolve archive-enabled image styles from private R2 packages. When off, image style authoring continues reading vm0-skills from GitHub.\",\n    enabled: false,\n  },\n  [FeatureSwitchKey.PlanUpgradeGuidance]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Show plan-upgrade guidance in Zero CLI help and render billing plan links as rich chat cards.\",\n    enabled: true,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.OrgPlanEntitlementReads]: {\n    maintainer: \"yuma@vm0.ai\",\n    description:\n      \"Read runtime plan capability limits from org_plan_entitlements instead of deriving them from org_metadata.tier.\",\n    enabled: true,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.WorkflowConnectorReadiness]: {\n    maintainer: \"lancy@vm0.ai\",\n    description:\n      \"Show the manual connector readiness check on workflow settings pages.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n    userOverridable: false,\n  },\n  [FeatureSwitchKey.ZeroMail]: {\n    maintainer: \"ethan@vm0.ai\",\n    description:\n      \"Enable persistent Gmail and Outlook draft cards created through the Zero Mail CLI.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ZeroBrowser]: {\n    maintainer: \"liangyou@vm0.ai\",\n    description: \"Show the Zero Browser command in the Zero CLI.\",\n    enabled: false,\n    enabledOrgIdHashes: STAFF_ORG_ID_HASHES,\n  },\n  [FeatureSwitchKey.ComposerConnectorPermissions]: {\n    maintainer: \"ming@vm0.ai\",\n    description:\n      \"Show the configure-permissions entry in the chat composer connector popover, opening the agent×connector firewall dialog inline.\",\n    enabled: false,\n    userOverridable: true,\n  },\n};\n\ninterface ResolvedHashes {\n  readonly userHash?: string;\n  readonly emailHash?: string;\n  readonly orgIdHash?: string;\n}\n\nfunction evaluateSwitch(fs: FeatureSwitch, hashes: ResolvedHashes): boolean {\n  if (fs.enabled) return true;\n  if (hashes.userHash && fs.enabledUserHashes?.includes(hashes.userHash))\n    return true;\n  if (hashes.emailHash && fs.enabledEmailHashes?.includes(hashes.emailHash))\n    return true;\n  if (hashes.orgIdHash && fs.enabledOrgIdHashes?.includes(hashes.orgIdHash))\n    return true;\n  return false;\n}\n\n/**\n * Evaluate all feature switches at once for the given context.\n *\n * Computes identity hashes once and checks all switches synchronously.\n */\nexport function getAllFeatureStates(\n  ctx?: FeatureSwitchContext,\n): Record<FeatureSwitchKey, boolean> {\n  const switches = Object.values(FEATURE_SWITCHES);\n  const hashes: ResolvedHashes = {\n    userHash:\n      ctx?.userId &&\n      switches.some((s) => {\n        return s.enabledUserHashes?.length;\n      })\n        ? fnv1a(ctx.userId)\n        : undefined,\n    emailHash:\n      ctx?.email &&\n      switches.some((s) => {\n        return s.enabledEmailHashes?.length;\n      })\n        ? fnv1a(ctx.email.toLowerCase())\n        : undefined,\n    orgIdHash:\n      ctx?.orgId &&\n      switches.some((s) => {\n        return s.enabledOrgIdHashes?.length;\n      })\n        ? fnv1a(ctx.orgId)\n        : undefined,\n  };\n\n  const result = {} as Record<FeatureSwitchKey, boolean>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = evaluateSwitch(FEATURE_SWITCHES[key], hashes);\n  }\n\n  if (ctx?.overrides) {\n    for (const [key, value] of Object.entries(ctx.overrides)) {\n      if (key in FEATURE_SWITCHES && value !== undefined) {\n        result[key as FeatureSwitchKey] = value;\n      }\n    }\n  }\n\n  return result;\n}\n\n/**\n * Return the description for every feature switch.\n */\nexport function getFeatureSwitchDescriptions(): Record<\n  FeatureSwitchKey,\n  string | undefined\n> {\n  const result = {} as Record<FeatureSwitchKey, string | undefined>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    result[key] = FEATURE_SWITCHES[key].description;\n  }\n  return result;\n}\n\n/**\n * Return display metadata for every feature switch.\n */\nexport function getFeatureSwitchMetadata(): Record<\n  FeatureSwitchKey,\n  FeatureSwitchMetadata\n> {\n  const result = {} as Record<FeatureSwitchKey, FeatureSwitchMetadata>;\n  for (const key of Object.values(FeatureSwitchKey)) {\n    const featureSwitch = FEATURE_SWITCHES[key];\n    result[key] = {\n      maintainer: featureSwitch.maintainer,\n      description: featureSwitch.description,\n      userOverridable: featureSwitch.userOverridable !== false,\n    };\n  }\n  return result;\n}\n\nexport function isUserOverridableFeatureSwitch(\n  key: string,\n): key is FeatureSwitchKey {\n  if (!(key in FEATURE_SWITCHES)) {\n    return false;\n  }\n  return FEATURE_SWITCHES[key as FeatureSwitchKey].userOverridable !== false;\n}\n\nexport function getUserOverridableFeatureSwitchKeys(): readonly FeatureSwitchKey[] {\n  return Object.values(FeatureSwitchKey).filter(isUserOverridableFeatureSwitch);\n}\n\nexport function filterUserOverridableFeatureSwitchOverrides(\n  switches: Record<string, boolean>,\n): Record<string, boolean> {\n  const filtered: Record<string, boolean> = {};\n  for (const [key, value] of Object.entries(switches)) {\n    if (isUserOverridableFeatureSwitch(key)) {\n      filtered[key] = value;\n    }\n  }\n  return filtered;\n}\n\n/**\n * Check if a feature is enabled for the given context.\n *\n * `ctx` is required so callers must pass identity (userId/orgId/email) or an\n * explicit `{}`. A switch gated by `enabledUserHashes` / `enabledOrgIdHashes`\n * silently returns `false` when ctx omits identity, which has caused bugs.\n * Client-side callers should usually read the platform `featureSwitch$` signal\n * instead — it also merges DB overrides on top of identity context.\n */\nexport function isFeatureEnabled(\n  key: FeatureSwitchKey,\n  ctx: FeatureSwitchContext,\n): boolean {\n  const override = ctx.overrides?.[key];\n  if (override !== undefined) {\n    return override;\n  }\n\n  const featureSwitch = FEATURE_SWITCHES[key];\n  if (featureSwitch.enabled) {\n    return true;\n  }\n  if (ctx.userId && featureSwitch.enabledUserHashes?.length) {\n    if (featureSwitch.enabledUserHashes.includes(fnv1a(ctx.userId)))\n      return true;\n  }\n  if (ctx.email && featureSwitch.enabledEmailHashes?.length) {\n    if (\n      featureSwitch.enabledEmailHashes.includes(fnv1a(ctx.email.toLowerCase()))\n    )\n      return true;\n  }\n  if (ctx.orgId && featureSwitch.enabledOrgIdHashes?.length) {\n    if (featureSwitch.enabledOrgIdHashes.includes(fnv1a(ctx.orgId)))\n      return true;\n  }\n  return false;\n}\n","export { FeatureSwitchKey } from \"@vm0/connectors/feature-switch-key\";\n","/**\n * Identity hashing — FNV-1a 32-bit hash used to reference users / orgs / emails\n * without embedding plain-text identifiers in source code.\n *\n * Shared between the feature-switch registry (UI rollout targeting) and\n * `staff-org.ts` (authorization primitive). The hash is deterministic and\n * synchronous; no crypto API needed.\n */\n\nexport function fnv1a(input: string): string {\n  let h = 2166136261 >>> 0;\n  for (let i = 0; i < input.length; i++) {\n    h ^= input.charCodeAt(i);\n    h = Math.imul(h, 16777619) >>> 0;\n  }\n  return h.toString(16).padStart(8, \"0\");\n}\n\n/**\n * Hashes of internal staff org IDs.\n *\n * This list is the source of truth for `isStaffOrg()` — adding an entry here\n * grants that org access to every endpoint that uses `isStaffOrg` as an\n * authorization check. Treat changes with the same care as role grants.\n */\nexport const STAFF_ORG_ID_HASHES: readonly string[] = [\n  \"afce210e\", // org_3ANttyrbWYJk6JKRSTRLEsbsDLe\n];\n","import type { FeatureSwitchKey } from \"@vm0/connectors/feature-switch-key\";\n\nexport interface ZeroTokenPayload {\n  userId: string;\n  runId: string;\n  orgId: string;\n  scope: string;\n  capabilities: string[];\n  featureSwitchOverrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n  iat: number;\n  exp: number;\n}\n\n/**\n * Decode a ZERO_TOKEN JWT payload.\n * Only decodes — does NOT verify signature (server does that).\n * If no token is provided, reads from process.env.ZERO_TOKEN.\n * Returns undefined if token is missing, malformed, or not a zero-scoped token.\n */\nexport function decodeZeroTokenPayload(\n  token?: string,\n): ZeroTokenPayload | undefined {\n  const raw = token ?? process.env.ZERO_TOKEN;\n  if (!raw) return undefined;\n\n  const prefix = \"vm0_sandbox_\";\n  if (!raw.startsWith(prefix)) return undefined;\n  const jwt = raw.slice(prefix.length);\n\n  const parts = jwt.split(\".\");\n  if (parts.length !== 3) return undefined;\n\n  try {\n    const payload = JSON.parse(\n      Buffer.from(parts[1]!, \"base64url\").toString(),\n    ) as ZeroTokenPayload;\n    if (payload.scope === \"zero\" && Array.isArray(payload.capabilities)) {\n      return payload;\n    }\n  } catch {\n    // Malformed token — fall through\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;AAAA;;;ACAA;;;ACAA;;;ACAA;AASO,SAAS,MAAM,OAAuB;AAC3C,MAAI,IAAI,eAAe;AACvB,WAAS,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,SAAK,MAAM,WAAW,CAAC;AACvB,QAAI,KAAK,KAAK,GAAG,QAAQ,MAAM;AAAA,EACjC;AACA,SAAO,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACvC;AASO,IAAM,sBAAyC;AAAA,EACpD;AAAA;AACF;;;AFeA,IAAM,mBAA4D;AAAA,EAChE,oBAAuB,GAAG;AAAA,IACxB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wBAAyB,GAAG;AAAA,IAC1B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gBAAqB,GAAG;AAAA,IACtB,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EACA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,EACX;AAAA,EAEA,oCAA+B,GAAG;AAAA,IAChC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,8CAAoC,GAAG;AAAA,IACrC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wCAAiC,GAAG;AAAA,IAClC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,4DAA2C,GAAG;AAAA,IAC5C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oDAAuC,GAAG;AAAA,IACxC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,oEAA+C,GAAG;AAAA,IAChD,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gEAA6C,GAAG;AAAA,IAC9C,YAAY;AAAA,IACZ,aACE;AAAA;AAAA,IAEF,SAAS;AAAA,EACX;AAAA,EACA,sCAAgC,GAAG;AAAA,IACjC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA;AAAA,IAET,oBAAoB,CAAC,UAAU;AAAA;AAAA,EACjC;AAAA,EACA,0DAA0C,GAAG;AAAA,IAC3C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,0CAAkC,GAAG;AAAA,IACnC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,4BAA2B,GAAG;AAAA,IAC5B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,sDAAwC,GAAG;AAAA,IACzC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kDAAsC,GAAG;AAAA,IACvC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,mBAAmB,CAAC,UAAU;AAAA,EAChC;AAAA,EACA,4CAAmC,GAAG;AAAA,IACpC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kCAA8B,GAAG;AAAA,IAC/B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,EACX;AAAA,EACA,gDAAqC,GAAG;AAAA,IACtC,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,wDAAyC,GAAG;AAAA,IAC1C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AAAA,EACA,8DAA4C,GAAG;AAAA,IAC7C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,IACpB,iBAAiB;AAAA,EACnB;AAAA,EACA,0BAA0B,GAAG;AAAA,IAC3B,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,gCAA6B,GAAG;AAAA,IAC9B,YAAY;AAAA,IACZ,aAAa;AAAA,IACb,SAAS;AAAA,IACT,oBAAoB;AAAA,EACtB;AAAA,EACA,kEAA8C,GAAG;AAAA,IAC/C,YAAY;AAAA,IACZ,aACE;AAAA,IACF,SAAS;AAAA,IACT,iBAAiB;AAAA,EACnB;AACF;AAuIO,SAAS,iBACd,KACA,KACS;AACT,QAAM,WAAW,IAAI,YAAY,GAAG;AACpC,MAAI,aAAa,QAAW;AAC1B,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB,iBAAiB,GAAG;AAC1C,MAAI,cAAc,SAAS;AACzB,WAAO;AAAA,EACT;AACA,MAAI,IAAI,UAAU,cAAc,mBAAmB,QAAQ;AACzD,QAAI,cAAc,kBAAkB,SAAS,MAAM,IAAI,MAAM,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QACE,cAAc,mBAAmB,SAAS,MAAM,IAAI,MAAM,YAAY,CAAC,CAAC;AAExE,aAAO;AAAA,EACX;AACA,MAAI,IAAI,SAAS,cAAc,oBAAoB,QAAQ;AACzD,QAAI,cAAc,mBAAmB,SAAS,MAAM,IAAI,KAAK,CAAC;AAC5D,aAAO;AAAA,EACX;AACA,SAAO;AACT;;;AGjqBA;AAmBO,SAAS,uBACd,OAC8B;AAC9B,QAAM,MAAM,SAAS,QAAQ,IAAI;AACjC,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAAS;AACf,MAAI,CAAC,IAAI,WAAW,MAAM,EAAG,QAAO;AACpC,QAAM,MAAM,IAAI,MAAM,OAAO,MAAM;AAEnC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,KAAK;AAAA,MACnB,OAAO,KAAK,MAAM,CAAC,GAAI,WAAW,EAAE,SAAS;AAAA,IAC/C;AACA,QAAI,QAAQ,UAAU,UAAU,MAAM,QAAQ,QAAQ,YAAY,GAAG;AACnE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;","names":[]}

package/{chunk-SCOFJV42.js → chunk-Z4CHUO26.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   MODEL_PROVIDER_TYPES
-} from "./chunk-QDB53R4O.js";
+} from "./chunk-MHNXUHV2.js";
 import {
   init_esm_shims
 } from "./chunk-3VVCUQPB.js";
@@ -40,4 +40,4 @@ export {
   formatModelProviderRoute,
   formatModelPolicyStatus
 };
-//# sourceMappingURL=chunk-SCOFJV42.js.map
+//# sourceMappingURL=chunk-Z4CHUO26.js.map

package/{computer-use-DAU5YBDC.js → computer-use-PCHEY5DP.js}

@@ -12,13 +12,13 @@ import {
   fetchComputerUseScreenshot,
   getComputerUseCommand,
   listComputerUseHosts
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import {
   ApiRequestError,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command
 } from "./chunk-LD4ZVU4O.js";
@@ -970,4 +970,4 @@ export {
   formatComputerUseResultForConsole,
   zeroComputerUseCommand
 };
-//# sourceMappingURL=computer-use-DAU5YBDC.js.map
+//# sourceMappingURL=computer-use-PCHEY5DP.js.map

package/{connector-ZCJJZMNY.js → connector-P3I5QRR4.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   findFirewallMetadataPermission
-} from "./chunk-RJMR6Y5N.js";
+} from "./chunk-MLNWKSAO.js";
 import {
   CALLBACK_PROMPT_PLACEHOLDER,
   addRequestedCallbackSearchParams,
@@ -17,7 +17,7 @@ import {
   resolveAgentContext,
   resolveManualGrantAuthMethod,
   searchPublicConnectorCatalog
-} from "./chunk-7YLSF557.js";
+} from "./chunk-JKMJ57VN.js";
 import {
   UNKNOWN_PERMISSION_GRANT,
   connectZeroConnectorManualGrant,
@@ -32,20 +32,20 @@ import {
   getZeroCustomConnector,
   listZeroConnectorCatalogStatus,
   listZeroCustomConnectors
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import {
   getPlatformOrigin,
   toPlatformUrl
-} from "./chunk-HSLYLYDU.js";
+} from "./chunk-QFS7VMDL.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   ApiRequestError,
   getApiUrl,
   source_default,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command,
   Option
@@ -1489,4 +1489,4 @@ var zeroConnectorCommand = new Command().name("connector").description("Manage a
 export {
   zeroConnectorCommand
 };
-//# sourceMappingURL=connector-ZCJJZMNY.js.map
+//# sourceMappingURL=connector-P3I5QRR4.js.map

package/{credit-F6RELVX2.js → credit-PT6NHEVU.js}

@@ -5,27 +5,27 @@ import {
   currentPlanAllowsVideo,
   currentPlanCanBuyCredits,
   currentTokenCanReadBilling
-} from "./chunk-ASVXKSAO.js";
+} from "./chunk-6GX52NUE.js";
 import {
   createZeroCreditCheckout,
   getZeroBillingStatus,
   getZeroOrgMembers
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import {
   planUpgradeUrl
 } from "./chunk-W75R7EZF.js";
 import {
   getPlatformOrigin
-} from "./chunk-HSLYLYDU.js";
+} from "./chunk-QFS7VMDL.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
+} from "./chunk-MHNXUHV2.js";
 import {
   decodeZeroTokenPayload
-} from "./chunk-OCWAE6QB.js";
+} from "./chunk-REI7CJHF.js";
 import {
   Command,
   Option
@@ -163,4 +163,4 @@ var zeroCreditCommand = new Command().name("credit").description("View credit ba
 export {
   zeroCreditCommand
 };
-//# sourceMappingURL=credit-F6RELVX2.js.map
+//# sourceMappingURL=credit-PT6NHEVU.js.map

package/{developer-support-S62VEL5N.js → developer-support-Q6HYBHPP.js}

@@ -4,13 +4,13 @@ const require = __createRequire(import.meta.url);
 import {
   requestDeveloperSupportConsent,
   submitDeveloperSupport
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command
 } from "./chunk-LD4ZVU4O.js";
@@ -61,4 +61,4 @@ Notes:
 export {
   zeroDeveloperSupportCommand
 };
-//# sourceMappingURL=developer-support-S62VEL5N.js.map
+//# sourceMappingURL=developer-support-Q6HYBHPP.js.map

package/{doctor-DG23A6AN.js → doctor-7P3E6R26.js}

@@ -4,25 +4,25 @@ const require = __createRequire(import.meta.url);
 import {
   currentPlanAllowsVideo,
   currentPlanCanBuyCredits
-} from "./chunk-ASVXKSAO.js";
+} from "./chunk-6GX52NUE.js";
 import {
   getZeroBillingStatus,
   getZeroOrg,
   getZeroOrgMembers
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import {
   planUpgradeUrl
 } from "./chunk-W75R7EZF.js";
 import {
   getPlatformOrigin
-} from "./chunk-HSLYLYDU.js";
+} from "./chunk-QFS7VMDL.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command
 } from "./chunk-LD4ZVU4O.js";
@@ -122,4 +122,4 @@ Notes:
 export {
   zeroDoctorCommand
 };
-//# sourceMappingURL=doctor-DG23A6AN.js.map
+//# sourceMappingURL=doctor-7P3E6R26.js.map

package/{feishu-AC5V3CE4.js → feishu-FZWNPA6Q.js}

@@ -7,14 +7,14 @@ import {
   downloadFeishuFile,
   initFeishuFileUpload,
   sendFeishuMessage
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command
 } from "./chunk-LD4ZVU4O.js";
@@ -274,4 +274,4 @@ Examples:
 export {
   zeroFeishuCommand
 };
-//# sourceMappingURL=feishu-AC5V3CE4.js.map
+//# sourceMappingURL=feishu-FZWNPA6Q.js.map

package/{finance-T6XTNPN2.js → finance-ZNTOJKOX.js}

@@ -14,14 +14,14 @@ import {
   zeroFinanceQuoteRequestSchema,
   zeroFinanceRangeSchema,
   zeroFinanceSearchRequestSchema
-} from "./chunk-7ZYZWFTO.js";
-import "./chunk-ZH5JMQT6.js";
+} from "./chunk-4I4BFNV6.js";
+import "./chunk-HEUU2ZF4.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   source_default,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command,
   InvalidArgumentError,
@@ -125,4 +125,4 @@ Notes:
 export {
   zeroFinanceCommand
 };
-//# sourceMappingURL=finance-T6XTNPN2.js.map
+//# sourceMappingURL=finance-ZNTOJKOX.js.map

package/{generate-WOBMDE7H.js → generate-RBQBW44W.js}

@@ -9,6 +9,7 @@ import {
   findTemplate,
   findVideoTemplate,
   findWebsiteTemplateResource,
+  hasR2Archive,
   listDesignSystems,
   listImageStyles,
   listPresentationRunbookPackages,
@@ -17,35 +18,35 @@ import {
   resolvePresentationRunbookColorToken,
   selectResourceCandidates,
   toGenerationTarget
-} from "./chunk-SJHAHK6L.js";
+} from "./chunk-NA7HNSSZ.js";
 import {
   currentPlanAllowsVideo,
   currentTokenCanReadBilling
-} from "./chunk-ASVXKSAO.js";
+} from "./chunk-6GX52NUE.js";
 import {
   getZeroAgentUserConnectors,
   getZeroBillingStatus,
   listZeroConnectorCatalog,
   listZeroConnectorCatalogStatus
-} from "./chunk-7ZYZWFTO.js";
+} from "./chunk-4I4BFNV6.js";
 import {
   generateWebImage,
   generateWebVideo,
   generateWebVoice
-} from "./chunk-ZH5JMQT6.js";
+} from "./chunk-HEUU2ZF4.js";
 import {
   planUpgradeUrl
 } from "./chunk-W75R7EZF.js";
 import {
   getPlatformOrigin
-} from "./chunk-HSLYLYDU.js";
+} from "./chunk-QFS7VMDL.js";
 import "./chunk-SB7EZ2ZO.js";
 import {
   ApiRequestError,
   source_default,
   withErrorHandler
-} from "./chunk-QDB53R4O.js";
-import "./chunk-OCWAE6QB.js";
+} from "./chunk-MHNXUHV2.js";
+import "./chunk-REI7CJHF.js";
 import {
   Command,
   InvalidArgumentError,
@@ -66,14 +67,24 @@ init_esm_shims();
 
 // src/commands/zero/shared/image-style-authoring.ts
 init_esm_shims();
-function formatStyleSource(source) {
-  if ("repo" in source) {
+function formatStyleSource(style, sourceMode) {
+  const source = style.source;
+  if (sourceMode === "github" && source.repo && source.ref) {
     return [
       `- Repository: \`${source.repo}@${source.ref}\``,
       `- Path: \`${source.path}\``
     ];
   }
-  return [`- Path: \`${source.path}\``];
+  if (sourceMode === "r2" && source.archive) {
+    return [
+      `- Registry resource: \`${style.id}\``,
+      `- Pull command: \`zero resource pull ${style.id} --dir ./generated/resources\``,
+      `- Path after pull: \`./generated/resources/${source.path}\``
+    ];
+  }
+  throw new Error(
+    `Image style ${style.id} does not support ${sourceMode} source resolution`
+  );
 }
 var outputDir = "./generated/images";
 var artifactRules = [
@@ -99,6 +110,7 @@ function createStyledImageCompilationPacket(options) {
     previewKind: "image",
     outputDir
   };
+  const sourceResolutionRule = options.sourceMode === "r2" ? "Run the listed `zero resource pull` command once, then read the extracted style package before compiling." : "Read the selected GitHub style source before compiling.";
   const instructions = [
     `# Zero generate image prompt compile ${options.style.id}`,
     "",
@@ -113,9 +125,10 @@ function createStyledImageCompilationPacket(options) {
     `- ${options.style.description}`,
     "",
     "## Style Source",
-    ...formatStyleSource(options.style.source),
+    ...formatStyleSource(options.style, options.sourceMode),
     "",
     "## Prompt Compiler Task",
+    `- ${sourceResolutionRule}`,
     "- Read the selected style source before compiling, especially `SKILL.md`, references, examples, and templates. If unavailable, stop without generating.",
     "- Rewrite the user prompt into one final image-generation prompt that obeys the selected style.",
     "- Include style-specific composition, medium, palette, subject handling, reference usage, and must-avoid constraints in the final prompt.",
@@ -821,6 +834,12 @@ function parseSeed(value) {
 function collectString(value, previous) {
   return [...previous, value];
 }
+function parseStyleSource(value) {
+  if (value !== "github" && value !== "r2") {
+    throw new InvalidArgumentError("style source must be github or r2");
+  }
+  return value;
+}
 function parseInputFidelity(value) {
   if (value === void 0) {
     return void 0;
@@ -853,6 +872,9 @@ function resolveImagePromptMode(options, usageCommand) {
   if (!compile && options.style) {
     throw new Error("--style can only be used with --compile");
   }
+  if (!compile && options.styleSource !== "github") {
+    throw new Error("--style-source can only be used with --compile");
+  }
   if ([compile, hasCompiledPrompt, hasRawPrompt].filter(Boolean).length !== 1) {
     throw requireImageModeError(usageCommand);
   }
@@ -925,6 +947,11 @@ function createImageGenerateCommand(config) {
   ).option(
     "--style <id>",
     "Image style id to compile from the registry (see Image Styles below)"
+  ).option(
+    "--style-source <source>",
+    "Style package source for compile mode: github or r2",
+    parseStyleSource,
+    "github"
   ).option(
     "--compile",
     "Resolve the selected style and print a prompt-compilation packet"
@@ -1001,9 +1028,15 @@ ${formatRegistryListing(styles, "image styles")}`;
         if (!style) {
           throw unknownStyleError(styleId, config.usageCommand);
         }
+        if (options.styleSource === "r2" && !hasR2Archive(style)) {
+          throw new Error(
+            `Image style ${style.id} does not provide an R2 archive`
+          );
+        }
         const packet = createStyledImageCompilationPacket({
           prompt: resolvedPrompt,
           style,
+          sourceMode: options.styleSource,
           details: [
             `Model preference if direct image generation is used: ${options.model}`,
             `Requested size: ${options.size}`,
@@ -2751,4 +2784,4 @@ var generateCommand = new Command().name("generate").description(
 export {
   generateCommand
 };
-//# sourceMappingURL=generate-WOBMDE7H.js.map
+//# sourceMappingURL=generate-RBQBW44W.js.map