@vm0/cli 9.264.7 → 9.264.9

package/{chunk-CTAGNU3W.js → chunk-IOJHMLKT.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   getApiUrl
-} from "./chunk-MIVNAXCC.js";
+} from "./chunk-DOYP2C2B.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -42,4 +42,4 @@ export {
   toPlatformUrl,
   getPlatformOrigin
 };
-//# sourceMappingURL=chunk-CTAGNU3W.js.map
+//# sourceMappingURL=chunk-IOJHMLKT.js.map

package/{chunk-R6EQANV5.js → chunk-JUMGFS6V.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   UNKNOWN_PERMISSION_GRANT
-} from "./chunk-JQSR2FQW.js";
+} from "./chunk-FLWE2Q4D.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -73,7 +73,7 @@ function createFirewallMetadataPolicyResolver(metadata, overlay) {
 }
 
 // ../../packages/connectors/src/firewall-metadata/policy.ts
-function metadataConnectorRef(metadata) {
+function metadataConnectorSlug(metadata) {
   return metadata.connectorRef ?? metadata.type;
 }
 function expandFirewallMetadataDefaultPolicy(metadata) {
@@ -95,12 +95,12 @@ function findFirewallMetadataPermission(metadata, name) {
 function resolveFirewallMetadataPolicies(stored, metadata) {
   let resolved = stored;
   for (const detail of metadata) {
-    const connectorRef = metadataConnectorRef(detail);
+    const connectorSlug = metadataConnectorSlug(detail);
     const defaults = expandFirewallMetadataDefaultPolicy(detail);
-    const existing = resolved?.[connectorRef];
+    const existing = resolved?.[connectorSlug];
     resolved = {
       ...resolved,
-      [connectorRef]: {
+      [connectorSlug]: {
         policies: { ...defaults.policies, ...existing?.policies },
         ...existing?.unknownPolicy !== void 0 ? { unknownPolicy: existing.unknownPolicy } : { unknownPolicy: defaults.unknownPolicy }
       }
@@ -130,4 +130,4 @@ export {
   resolveFirewallMetadataPolicies,
   permissionGrantsToFirewallPolicies
 };
-//# sourceMappingURL=chunk-R6EQANV5.js.map
+//# sourceMappingURL=chunk-JUMGFS6V.js.map

package/chunk-JUMGFS6V.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../packages/connectors/src/firewall-metadata/policy.ts","../../../packages/connectors/src/firewall-metadata/policy-resolver.ts"],"sourcesContent":["import {\n  UNKNOWN_PERMISSION_GRANT,\n  type FirewallPolicies,\n  type FirewallPolicy,\n  type FirewallPolicyValue,\n} from \"../firewall-types\";\nimport { createFirewallMetadataPolicyResolver } from \"./policy-resolver\";\n\nexport type {\n  FirewallMetadataPolicyListState,\n  FirewallMetadataPolicyOverlay,\n  FirewallMetadataPolicyResolver,\n} from \"./policy-resolver\";\n\nexport interface FirewallPermissionPolicyMetadataPermission {\n  readonly name: string;\n  readonly description?: string;\n}\n\nexport interface FirewallPermissionPolicyCategoryMetadata {\n  readonly categories: Readonly<Record<string, string>>;\n  readonly displayOrder: readonly string[];\n}\n\nexport type FirewallPermissionPolicyDefaultOverrides = Readonly<\n  Partial<Record<FirewallPolicyValue, readonly string[]>>\n>;\n\nexport interface FirewallPermissionPolicyDefaultMetadata {\n  readonly permissionDefault: FirewallPolicyValue;\n  readonly permissionOverrides?: FirewallPermissionPolicyDefaultOverrides;\n  readonly unknownPolicy: FirewallPolicyValue;\n}\n\ninterface FirewallPermissionPolicyMetadataBase {\n  readonly label: string;\n  readonly permissionCount: number;\n  readonly permissions: readonly FirewallPermissionPolicyMetadataPermission[];\n  readonly categories?: FirewallPermissionPolicyCategoryMetadata | null;\n  readonly defaultPolicy: FirewallPermissionPolicyDefaultMetadata;\n}\n\nexport type FirewallPermissionPolicyMetadata =\n  FirewallPermissionPolicyMetadataBase &\n    // TODO(#23619): Rename with the catalog artifact metadata contract.\n    (| { readonly connectorRef: string; readonly type?: string }\n      | { readonly connectorRef?: undefined; readonly type: string }\n    );\n\nexport interface FirewallMetadataPermissionGroup<T extends { name: string }> {\n  readonly category: string;\n  readonly permissions: T[];\n}\n\nexport type FirewallPermissionGrantAction = Extract<\n  FirewallPolicyValue,\n  \"allow\" | \"deny\"\n>;\n\nexport interface FirewallPermissionGrant {\n  // TODO(#23619): Rename with the permission-grant wire and storage fields.\n  readonly connectorRef: string;\n  readonly permission: string;\n  readonly action: FirewallPermissionGrantAction;\n}\n\nfunction metadataConnectorSlug(\n  metadata: FirewallPermissionPolicyMetadata,\n): string {\n  return metadata.connectorRef ?? metadata.type;\n}\n\nexport { createFirewallMetadataPolicyResolver };\n\nexport function expandFirewallMetadataDefaultPolicy(\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallPolicy {\n  const resolver = createFirewallMetadataPolicyResolver(metadata);\n  const policies: Record<string, FirewallPolicyValue> = {};\n\n  for (const permission of metadata.permissions) {\n    policies[permission.name] = resolver.permission(permission.name);\n  }\n\n  return {\n    policies,\n    unknownPolicy: resolver.unknown(),\n  };\n}\n\nexport function findFirewallMetadataPermission(\n  metadata: FirewallPermissionPolicyMetadata,\n  name: string,\n): FirewallPermissionPolicyMetadata[\"permissions\"][number] | null {\n  return (\n    metadata.permissions.find((permission) => {\n      return permission.name === name;\n    }) ?? null\n  );\n}\n\nexport function groupFirewallMetadataPermissionsByCategory<\n  T extends { name: string },\n>(\n  permissions: readonly T[],\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallMetadataPermissionGroup<T>[] | null {\n  if (!metadata.categories) {\n    return null;\n  }\n\n  const grouped = new Map<string, T[]>();\n  for (const category of metadata.categories.displayOrder) {\n    grouped.set(category, []);\n  }\n\n  for (const permission of permissions) {\n    const category = metadata.categories.categories[permission.name];\n    if (!category) {\n      continue;\n    }\n    grouped.get(category)?.push(permission);\n  }\n\n  return [...grouped.entries()]\n    .filter(([, groupPermissions]) => {\n      return groupPermissions.length > 0;\n    })\n    .map(([category, groupPermissions]) => {\n      return { category, permissions: groupPermissions };\n    });\n}\n\nexport function resolveFirewallMetadataPolicies(\n  stored: FirewallPolicies | null,\n  metadata: readonly FirewallPermissionPolicyMetadata[],\n): FirewallPolicies | null {\n  let resolved: FirewallPolicies | null = stored;\n  for (const detail of metadata) {\n    const connectorSlug = metadataConnectorSlug(detail);\n    const defaults = expandFirewallMetadataDefaultPolicy(detail);\n    const existing = resolved?.[connectorSlug];\n    resolved = {\n      ...resolved,\n      [connectorSlug]: {\n        policies: { ...defaults.policies, ...existing?.policies },\n        ...(existing?.unknownPolicy !== undefined\n          ? { unknownPolicy: existing.unknownPolicy }\n          : { unknownPolicy: defaults.unknownPolicy }),\n      },\n    };\n  }\n  return resolved;\n}\n\nexport function permissionGrantsToFirewallPolicies(\n  grants: readonly FirewallPermissionGrant[],\n): FirewallPolicies | null {\n  const policies: FirewallPolicies = {};\n  for (const grant of grants) {\n    const current = policies[grant.connectorRef] ?? { policies: {} };\n    if (grant.permission === UNKNOWN_PERMISSION_GRANT) {\n      policies[grant.connectorRef] = {\n        ...current,\n        unknownPolicy: grant.action,\n      };\n      continue;\n    }\n    current.policies[grant.permission] = grant.action;\n    policies[grant.connectorRef] = current;\n  }\n  return Object.keys(policies).length > 0 ? policies : null;\n}\n","import type { FirewallPolicyValue } from \"../firewall-types\";\n\ninterface FirewallMetadataPolicyResolverMetadata {\n  readonly defaultPolicy: {\n    readonly permissionDefault: FirewallPolicyValue;\n    readonly permissionOverrides?: Readonly<\n      Partial<Record<FirewallPolicyValue, readonly string[]>>\n    >;\n    readonly unknownPolicy: FirewallPolicyValue;\n  };\n}\n\nexport interface FirewallMetadataPolicyOverlay {\n  readonly permissionDefault?: FirewallPolicyValue;\n  readonly permissionOverrides?: Readonly<Record<string, FirewallPolicyValue>>;\n  readonly unknownPolicy?: FirewallPolicyValue;\n}\n\nexport type FirewallMetadataPolicyListState = FirewallPolicyValue | \"mixed\";\n\n/**\n * Resolves generated metadata defaults with an optional sparse policy overlay.\n * Permission name validation belongs to callers; unknown endpoints use unknown().\n */\nexport interface FirewallMetadataPolicyResolver {\n  permission(name: string): FirewallPolicyValue;\n  unknown(): FirewallPolicyValue;\n  list(permissionNames: readonly string[]): FirewallMetadataPolicyListState;\n  isPermissionOverridden(name: string): boolean;\n  isUnknownOverridden(): boolean;\n}\n\nfunction buildMetadataOverrideLookup(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n): ReadonlyMap<string, FirewallPolicyValue> {\n  const overrides = metadata.defaultPolicy.permissionOverrides;\n  const lookup = new Map<string, FirewallPolicyValue>();\n  if (!overrides) {\n    return lookup;\n  }\n\n  for (const permission of overrides.allow ?? []) {\n    lookup.set(permission, \"allow\");\n  }\n  for (const permission of overrides.deny ?? []) {\n    lookup.set(permission, \"deny\");\n  }\n  for (const permission of overrides.ask ?? []) {\n    lookup.set(permission, \"ask\");\n  }\n\n  return lookup;\n}\n\nfunction getOwnPermissionOverride(\n  overrides: Readonly<Record<string, FirewallPolicyValue>> | undefined,\n  name: string,\n): FirewallPolicyValue | undefined {\n  if (!overrides || !Object.prototype.hasOwnProperty.call(overrides, name)) {\n    return undefined;\n  }\n  return overrides[name];\n}\n\nexport function createFirewallMetadataPolicyResolver(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n  overlay?: FirewallMetadataPolicyOverlay,\n): FirewallMetadataPolicyResolver {\n  const metadataOverrides = buildMetadataOverrideLookup(metadata);\n\n  function metadataPermission(name: string): FirewallPolicyValue {\n    return (\n      metadataOverrides.get(name) ?? metadata.defaultPolicy.permissionDefault\n    );\n  }\n\n  function permission(name: string): FirewallPolicyValue {\n    return (\n      getOwnPermissionOverride(overlay?.permissionOverrides, name) ??\n      overlay?.permissionDefault ??\n      metadataPermission(name)\n    );\n  }\n\n  return {\n    permission,\n    unknown: () => {\n      return overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy;\n    },\n    list: (permissionNames) => {\n      let first: FirewallPolicyValue | null = null;\n      for (const name of permissionNames) {\n        const current = permission(name);\n        if (first === null) {\n          first = current;\n          continue;\n        }\n        if (first !== current) {\n          return \"mixed\";\n        }\n      }\n      return first ?? \"mixed\";\n    },\n    isPermissionOverridden: (name) => {\n      return permission(name) !== metadataPermission(name);\n    },\n    isUnknownOverridden: () => {\n      return (\n        (overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy) !==\n        metadata.defaultPolicy.unknownPolicy\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA;;;ACAA;AAgCA,SAAS,4BACP,UAC0C;AAC1C,QAAM,YAAY,SAAS,cAAc;AACzC,QAAM,SAAS,oBAAI,IAAiC;AACpD,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,aAAW,cAAc,UAAU,SAAS,CAAC,GAAG;AAC9C,WAAO,IAAI,YAAY,OAAO;AAAA,EAChC;AACA,aAAW,cAAc,UAAU,QAAQ,CAAC,GAAG;AAC7C,WAAO,IAAI,YAAY,MAAM;AAAA,EAC/B;AACA,aAAW,cAAc,UAAU,OAAO,CAAC,GAAG;AAC5C,WAAO,IAAI,YAAY,KAAK;AAAA,EAC9B;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,WACA,MACiC;AACjC,MAAI,CAAC,aAAa,CAAC,OAAO,UAAU,eAAe,KAAK,WAAW,IAAI,GAAG;AACxE,WAAO;AAAA,EACT;AACA,SAAO,UAAU,IAAI;AACvB;AAEO,SAAS,qCACd,UACA,SACgC;AAChC,QAAM,oBAAoB,4BAA4B,QAAQ;AAE9D,WAAS,mBAAmB,MAAmC;AAC7D,WACE,kBAAkB,IAAI,IAAI,KAAK,SAAS,cAAc;AAAA,EAE1D;AAEA,WAAS,WAAW,MAAmC;AACrD,WACE,yBAAyB,SAAS,qBAAqB,IAAI,KAC3D,SAAS,qBACT,mBAAmB,IAAI;AAAA,EAE3B;AAEA,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM;AACb,aAAO,SAAS,iBAAiB,SAAS,cAAc;AAAA,IAC1D;AAAA,IACA,MAAM,CAAC,oBAAoB;AACzB,UAAI,QAAoC;AACxC,iBAAW,QAAQ,iBAAiB;AAClC,cAAM,UAAU,WAAW,IAAI;AAC/B,YAAI,UAAU,MAAM;AAClB,kBAAQ;AACR;AAAA,QACF;AACA,YAAI,UAAU,SAAS;AACrB,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,wBAAwB,CAAC,SAAS;AAChC,aAAO,WAAW,IAAI,MAAM,mBAAmB,IAAI;AAAA,IACrD;AAAA,IACA,qBAAqB,MAAM;AACzB,cACG,SAAS,iBAAiB,SAAS,cAAc,mBAClD,SAAS,cAAc;AAAA,IAE3B;AAAA,EACF;AACF;;;AD/CA,SAAS,sBACP,UACQ;AACR,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAIO,SAAS,oCACd,UACgB;AAChB,QAAM,WAAW,qCAAqC,QAAQ;AAC9D,QAAM,WAAgD,CAAC;AAEvD,aAAW,cAAc,SAAS,aAAa;AAC7C,aAAS,WAAW,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI;AAAA,EACjE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe,SAAS,QAAQ;AAAA,EAClC;AACF;AAEO,SAAS,+BACd,UACA,MACgE;AAChE,SACE,SAAS,YAAY,KAAK,CAAC,eAAe;AACxC,WAAO,WAAW,SAAS;AAAA,EAC7B,CAAC,KAAK;AAEV;AAkCO,SAAS,gCACd,QACA,UACyB;AACzB,MAAI,WAAoC;AACxC,aAAW,UAAU,UAAU;AAC7B,UAAM,gBAAgB,sBAAsB,MAAM;AAClD,UAAM,WAAW,oCAAoC,MAAM;AAC3D,UAAM,WAAW,WAAW,aAAa;AACzC,eAAW;AAAA,MACT,GAAG;AAAA,MACH,CAAC,aAAa,GAAG;AAAA,QACf,UAAU,EAAE,GAAG,SAAS,UAAU,GAAG,UAAU,SAAS;AAAA,QACxD,GAAI,UAAU,kBAAkB,SAC5B,EAAE,eAAe,SAAS,cAAc,IACxC,EAAE,eAAe,SAAS,cAAc;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mCACd,QACyB;AACzB,QAAM,WAA6B,CAAC;AACpC,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,SAAS,MAAM,YAAY,KAAK,EAAE,UAAU,CAAC,EAAE;AAC/D,QAAI,MAAM,eAAe,0BAA0B;AACjD,eAAS,MAAM,YAAY,IAAI;AAAA,QAC7B,GAAG;AAAA,QACH,eAAe,MAAM;AAAA,MACvB;AACA;AAAA,IACF;AACA,YAAQ,SAAS,MAAM,UAAU,IAAI,MAAM;AAC3C,aAAS,MAAM,YAAY,IAAI;AAAA,EACjC;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;","names":[]}

package/{chunk-SQ4ZYZMV.js → chunk-MTLPPLPH.js}

@@ -3,13 +3,13 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   resolveFirewallMetadataPolicies
-} from "./chunk-R6EQANV5.js";
+} from "./chunk-JUMGFS6V.js";
 import {
   getZeroConnectorCatalogPermissions
-} from "./chunk-JQSR2FQW.js";
+} from "./chunk-FLWE2Q4D.js";
 import {
   source_default
-} from "./chunk-MIVNAXCC.js";
+} from "./chunk-DOYP2C2B.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -24,11 +24,14 @@ function policyIcon(policy) {
 
 // src/commands/zero/shared/firewall-permissions.ts
 init_esm_shims();
-async function loadPermissionMetadataByType(types) {
-  const uniqueTypes = [...new Set(types)];
+async function loadPermissionMetadataBySlug(connectorSlugs) {
+  const uniqueConnectorSlugs = [...new Set(connectorSlugs)];
   const entries = await Promise.all(
-    uniqueTypes.map(async (type) => {
-      return [type, await getZeroConnectorCatalogPermissions(type)];
+    uniqueConnectorSlugs.map(async (connectorSlug) => {
+      return [
+        connectorSlug,
+        await getZeroConnectorCatalogPermissions(connectorSlug)
+      ];
     })
   );
   return new Map(entries);
@@ -36,7 +39,7 @@ async function loadPermissionMetadataByType(types) {
 function connectorPermissionInfo(args) {
   if (!args.metadata) {
     return {
-      type: args.type,
+      connectorSlug: args.connectorSlug,
       hasPermissions: false,
       hasPolicyEntry: false,
       permissions: [],
@@ -46,40 +49,42 @@ function connectorPermissionInfo(args) {
       total: 0
     };
   }
-  const refPolicy = args.resolvedPolicies?.[args.metadata.connectorRef];
-  const policies = refPolicy && Object.keys(refPolicy.policies).length > 0 ? refPolicy.policies : null;
+  const connectorPolicy = args.resolvedPolicies?.[args.metadata.connectorRef];
+  const policies = connectorPolicy && Object.keys(connectorPolicy.policies).length > 0 ? connectorPolicy.policies : null;
   const total = args.metadata.permissions.length;
   const allowed = policies ? args.metadata.permissions.filter((permission) => {
     return policies[permission.name] === "allow";
   }).length : 0;
   return {
-    type: args.type,
+    connectorSlug: args.connectorSlug,
     hasPermissions: true,
-    hasPolicyEntry: refPolicy !== void 0,
+    hasPolicyEntry: connectorPolicy !== void 0,
     permissions: args.metadata.permissions,
     policies,
-    unknownPolicy: refPolicy?.unknownPolicy ?? "allow",
+    unknownPolicy: connectorPolicy?.unknownPolicy ?? "allow",
     allowed,
     total
   };
 }
 async function loadConnectorPermissionInfos(args) {
-  const metadataByType = await loadPermissionMetadataByType([
-    ...args.displayTypes,
-    ...args.defaultPolicyTypes
+  const metadataBySlug = await loadPermissionMetadataBySlug([
+    ...args.displayConnectorSlugs,
+    ...args.defaultPolicyConnectorSlugs
   ]);
-  const defaultPolicyMetadata = args.defaultPolicyTypes.flatMap((type) => {
-    const metadata = metadataByType.get(type);
-    return metadata ? [metadata] : [];
-  });
+  const defaultPolicyMetadata = args.defaultPolicyConnectorSlugs.flatMap(
+    (connectorSlug) => {
+      const metadata = metadataBySlug.get(connectorSlug);
+      return metadata ? [metadata] : [];
+    }
+  );
   const resolvedPolicies = resolveFirewallMetadataPolicies(
     args.storedPolicies,
     defaultPolicyMetadata
   );
-  return args.displayTypes.map((type) => {
+  return args.displayConnectorSlugs.map((connectorSlug) => {
     return connectorPermissionInfo({
-      type,
-      metadata: metadataByType.get(type) ?? null,
+      connectorSlug,
+      metadata: metadataBySlug.get(connectorSlug) ?? null,
       resolvedPolicies
     });
   });
@@ -89,4 +94,4 @@ export {
   policyIcon,
   loadConnectorPermissionInfos
 };
-//# sourceMappingURL=chunk-SQ4ZYZMV.js.map
+//# sourceMappingURL=chunk-MTLPPLPH.js.map

package/chunk-MTLPPLPH.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/utils/format-utils.ts","../src/commands/zero/shared/firewall-permissions.ts"],"sourcesContent":["import chalk from \"chalk\";\nimport type { FirewallPolicyValue } from \"@vm0/connectors/firewall-types\";\n\nexport function policyIcon(policy: FirewallPolicyValue): string {\n  if (policy === \"allow\") return chalk.green(\"✓\");\n  if (policy === \"ask\") return chalk.yellow(\"?\");\n  return chalk.dim(\"✗\");\n}\n","import type { PublicConnectorCatalogPermissionDetail } from \"@vm0/api-contracts/contracts/zero-connector-catalog\";\nimport { resolveFirewallMetadataPolicies } from \"@vm0/connectors/firewall-metadata/policy\";\nimport type {\n  FirewallPolicies,\n  FirewallPolicyValue,\n} from \"@vm0/connectors/firewall-types\";\nimport { getZeroConnectorCatalogPermissions } from \"../../../lib/api\";\n\nexport interface ConnectorPermissionInfo {\n  readonly connectorSlug: string;\n  readonly hasPermissions: boolean;\n  readonly hasPolicyEntry: boolean;\n  readonly permissions: readonly PublicConnectorCatalogPermissionDetail[\"permissions\"][number][];\n  readonly policies: Readonly<Record<string, FirewallPolicyValue>> | null;\n  readonly unknownPolicy: FirewallPolicyValue;\n  readonly allowed: number;\n  readonly total: number;\n}\n\ntype PermissionMetadataBySlug = Map<\n  string,\n  PublicConnectorCatalogPermissionDetail | null\n>;\n\nasync function loadPermissionMetadataBySlug(\n  connectorSlugs: readonly string[],\n): Promise<PermissionMetadataBySlug> {\n  const uniqueConnectorSlugs = [...new Set(connectorSlugs)];\n  const entries = await Promise.all(\n    uniqueConnectorSlugs.map(async (connectorSlug) => {\n      return [\n        connectorSlug,\n        await getZeroConnectorCatalogPermissions(connectorSlug),\n      ] as const;\n    }),\n  );\n  return new Map(entries);\n}\n\nfunction connectorPermissionInfo(args: {\n  readonly connectorSlug: string;\n  readonly metadata: PublicConnectorCatalogPermissionDetail | null;\n  readonly resolvedPolicies: FirewallPolicies | null;\n}): ConnectorPermissionInfo {\n  if (!args.metadata) {\n    return {\n      connectorSlug: args.connectorSlug,\n      hasPermissions: false,\n      hasPolicyEntry: false,\n      permissions: [],\n      policies: null,\n      unknownPolicy: \"allow\",\n      allowed: 0,\n      total: 0,\n    };\n  }\n\n  const connectorPolicy = args.resolvedPolicies?.[args.metadata.connectorRef];\n  const policies =\n    connectorPolicy && Object.keys(connectorPolicy.policies).length > 0\n      ? connectorPolicy.policies\n      : null;\n  const total = args.metadata.permissions.length;\n  const allowed = policies\n    ? args.metadata.permissions.filter((permission) => {\n        return policies[permission.name] === \"allow\";\n      }).length\n    : 0;\n\n  return {\n    connectorSlug: args.connectorSlug,\n    hasPermissions: true,\n    hasPolicyEntry: connectorPolicy !== undefined,\n    permissions: args.metadata.permissions,\n    policies,\n    unknownPolicy: connectorPolicy?.unknownPolicy ?? \"allow\",\n    allowed,\n    total,\n  };\n}\n\nexport async function loadConnectorPermissionInfos(args: {\n  readonly displayConnectorSlugs: readonly string[];\n  readonly defaultPolicyConnectorSlugs: readonly string[];\n  readonly storedPolicies: FirewallPolicies | null;\n}): Promise<ConnectorPermissionInfo[]> {\n  const metadataBySlug = await loadPermissionMetadataBySlug([\n    ...args.displayConnectorSlugs,\n    ...args.defaultPolicyConnectorSlugs,\n  ]);\n  const defaultPolicyMetadata = args.defaultPolicyConnectorSlugs.flatMap(\n    (connectorSlug) => {\n      const metadata = metadataBySlug.get(connectorSlug);\n      return metadata ? [metadata] : [];\n    },\n  );\n  const resolvedPolicies = resolveFirewallMetadataPolicies(\n    args.storedPolicies,\n    defaultPolicyMetadata,\n  );\n\n  return args.displayConnectorSlugs.map((connectorSlug) => {\n    return connectorPermissionInfo({\n      connectorSlug,\n      metadata: metadataBySlug.get(connectorSlug) ?? null,\n      resolvedPolicies,\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAAA;AAGO,SAAS,WAAW,QAAqC;AAC9D,MAAI,WAAW,QAAS,QAAO,eAAM,MAAM,QAAG;AAC9C,MAAI,WAAW,MAAO,QAAO,eAAM,OAAO,GAAG;AAC7C,SAAO,eAAM,IAAI,QAAG;AACtB;;;ACPA;AAwBA,eAAe,6BACb,gBACmC;AACnC,QAAM,uBAAuB,CAAC,GAAG,IAAI,IAAI,cAAc,CAAC;AACxD,QAAM,UAAU,MAAM,QAAQ;AAAA,IAC5B,qBAAqB,IAAI,OAAO,kBAAkB;AAChD,aAAO;AAAA,QACL;AAAA,QACA,MAAM,mCAAmC,aAAa;AAAA,MACxD;AAAA,IACF,CAAC;AAAA,EACH;AACA,SAAO,IAAI,IAAI,OAAO;AACxB;AAEA,SAAS,wBAAwB,MAIL;AAC1B,MAAI,CAAC,KAAK,UAAU;AAClB,WAAO;AAAA,MACL,eAAe,KAAK;AAAA,MACpB,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,MAChB,aAAa,CAAC;AAAA,MACd,UAAU;AAAA,MACV,eAAe;AAAA,MACf,SAAS;AAAA,MACT,OAAO;AAAA,IACT;AAAA,EACF;AAEA,QAAM,kBAAkB,KAAK,mBAAmB,KAAK,SAAS,YAAY;AAC1E,QAAM,WACJ,mBAAmB,OAAO,KAAK,gBAAgB,QAAQ,EAAE,SAAS,IAC9D,gBAAgB,WAChB;AACN,QAAM,QAAQ,KAAK,SAAS,YAAY;AACxC,QAAM,UAAU,WACZ,KAAK,SAAS,YAAY,OAAO,CAAC,eAAe;AAC/C,WAAO,SAAS,WAAW,IAAI,MAAM;AAAA,EACvC,CAAC,EAAE,SACH;AAEJ,SAAO;AAAA,IACL,eAAe,KAAK;AAAA,IACpB,gBAAgB;AAAA,IAChB,gBAAgB,oBAAoB;AAAA,IACpC,aAAa,KAAK,SAAS;AAAA,IAC3B;AAAA,IACA,eAAe,iBAAiB,iBAAiB;AAAA,IACjD;AAAA,IACA;AAAA,EACF;AACF;AAEA,eAAsB,6BAA6B,MAIZ;AACrC,QAAM,iBAAiB,MAAM,6BAA6B;AAAA,IACxD,GAAG,KAAK;AAAA,IACR,GAAG,KAAK;AAAA,EACV,CAAC;AACD,QAAM,wBAAwB,KAAK,4BAA4B;AAAA,IAC7D,CAAC,kBAAkB;AACjB,YAAM,WAAW,eAAe,IAAI,aAAa;AACjD,aAAO,WAAW,CAAC,QAAQ,IAAI,CAAC;AAAA,IAClC;AAAA,EACF;AACA,QAAM,mBAAmB;AAAA,IACvB,KAAK;AAAA,IACL;AAAA,EACF;AAEA,SAAO,KAAK,sBAAsB,IAAI,CAAC,kBAAkB;AACvD,WAAO,wBAAwB;AAAA,MAC7B;AAAA,MACA,UAAU,eAAe,IAAI,aAAa,KAAK;AAAA,MAC/C;AAAA,IACF,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}

package/{chunk-4YEMIZDG.js → chunk-NBF6ONZJ.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   getZeroAgent,
   getZeroAgentUserConnectors
-} from "./chunk-JQSR2FQW.js";
+} from "./chunk-FLWE2Q4D.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -254,17 +254,17 @@ function searchPublicConnectorCatalog(connectors, keyword, limit) {
     total: hits.length
   };
 }
-function findConnectorStatusItem(connectors, connectorRef) {
+function findConnectorStatusItem(connectors, connectorSlug) {
   const exact = connectors.find((connector) => {
-    return connector.connectorRef === connectorRef;
+    return connector.connectorRef === connectorSlug;
   });
   if (exact) return exact;
-  const lower = connectorRef.toLowerCase();
+  const lower = connectorSlug.toLowerCase();
   return connectors.find((connector) => {
     return connector.connectorRef.toLowerCase() === lower;
   }) ?? null;
 }
-function availableConnectorRefs(connectors) {
+function availableConnectorSlugs(connectors) {
   return connectors.map((connector) => {
     return connector.connectorRef;
   }).join(", ");
@@ -322,14 +322,14 @@ init_esm_shims();
 async function resolveAgentContext(flagAgentId) {
   const agentId = flagAgentId ?? process.env.ZERO_AGENT_ID;
   if (!agentId) return null;
-  const [agent, enabledTypes] = await Promise.all([
+  const [agent, enabledConnectorSlugs] = await Promise.all([
     getZeroAgent(agentId),
     getZeroAgentUserConnectors(agentId)
   ]);
   return {
     agentId: agent.agentId,
     displayName: agent.displayName ?? agent.agentId,
-    authorizedTypes: new Set(enabledTypes)
+    authorizedConnectorSlugs: new Set(enabledConnectorSlugs)
   };
 }
 
@@ -343,8 +343,8 @@ export {
   printCallbackTurnInstruction,
   searchPublicConnectorCatalog,
   findConnectorStatusItem,
-  availableConnectorRefs,
+  availableConnectorSlugs,
   resolveManualGrantAuthMethod,
   resolveAgentContext
 };
-//# sourceMappingURL=chunk-4YEMIZDG.js.map
+//# sourceMappingURL=chunk-NBF6ONZJ.js.map

package/{chunk-4YEMIZDG.js.map → chunk-NBF6ONZJ.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/commands/zero/connector/action-url.ts","../src/commands/zero/connector/public-catalog.ts","../src/commands/zero/connector/agent-context.ts"],"sourcesContent":["export const CALLBACK_PROMPT_PLACEHOLDER =\n  \"SOMETHING_AGENT_WANT_TO_BE_CALLBACK\";\n\nexport function connectorActionCallbackAvailable(): boolean {\n  return Boolean(process.env.ZERO_CHAT_THREAD_ID?.trim());\n}\n\nfunction currentChatThreadId(agentId: string | undefined): string | null {\n  const threadId = process.env.ZERO_CHAT_THREAD_ID?.trim();\n  const currentAgentId = process.env.ZERO_AGENT_ID?.trim();\n  if (!threadId || !currentAgentId || agentId !== currentAgentId) {\n    return null;\n  }\n  return threadId;\n}\n\nexport function currentChatSupportsActionCallback(\n  agentId: string | undefined,\n): boolean {\n  return currentChatThreadId(agentId) !== null;\n}\n\nfunction addCallbackSearchParams(\n  params: URLSearchParams,\n  threadId: string,\n  callbackPrompt: string,\n): void {\n  params.set(\"threadId\", threadId);\n  params.set(\"callbackPrompt\", callbackPrompt);\n}\n\nexport function addRequestedCallbackSearchParams(\n  params: URLSearchParams,\n  callbackPrompt: string | undefined,\n  agentId: string | undefined,\n): void {\n  if (callbackPrompt === undefined) {\n    return;\n  }\n\n  const normalizedPrompt = callbackPrompt.trim();\n  if (!normalizedPrompt) {\n    throw new Error(\"--callback-prompt cannot be empty\");\n  }\n\n  const threadId = currentChatThreadId(agentId);\n  if (!threadId) {\n    throw new Error(\n      \"--callback-prompt can only target the current Zero web chat thread and agent\",\n    );\n  }\n  addCallbackSearchParams(params, threadId, normalizedPrompt);\n}\n\nexport function connectorActionUrl(args: {\n  readonly origin: string;\n  readonly path: string;\n  readonly agentId?: string;\n}): string {\n  const url = new URL(args.path, args.origin);\n  if (args.agentId) {\n    url.searchParams.set(\"agentId\", args.agentId);\n  }\n  return url.toString();\n}\n\nfunction callbackActionUrlExample(\n  actionUrl: string,\n  agentId: string | undefined,\n): string | null {\n  const threadId = currentChatThreadId(agentId);\n  if (!threadId) {\n    return null;\n  }\n\n  const url = new URL(actionUrl);\n  addCallbackSearchParams(\n    url.searchParams,\n    threadId,\n    CALLBACK_PROMPT_PLACEHOLDER,\n  );\n  return url.toString();\n}\n\nexport function printCallbackActionUrlExample(\n  actionUrl: string,\n  agentId: string | undefined,\n): void {\n  const callbackUrl = callbackActionUrlExample(actionUrl, agentId);\n  if (!callbackUrl) {\n    return;\n  }\n\n  console.log(\"\");\n  console.log(\n    \"Or, if this is the only connector or permission action needed, use the callback URL below. After the user completes this action, Zero will automatically start the next round with the callback prompt:\",\n  );\n  console.log(callbackUrl);\n}\n\nexport function printCallbackTurnInstruction(): void {\n  console.log(\"\");\n  console.log(\n    \"After sharing this callback URL, end the current turn. When the user completes the action, Zero will automatically start the next round with the callback prompt.\",\n  );\n}\n","import type {\n  PublicConnectorCatalogAuthMethodDetail,\n  PublicConnectorCatalogItem,\n  PublicConnectorCatalogStatusItem,\n} from \"@vm0/api-contracts/contracts/zero-connector-catalog\";\n\nexport type PublicConnectorStatus = PublicConnectorCatalogStatusItem;\n\ninterface PublicConnectorSearchResult {\n  readonly connector: PublicConnectorStatus;\n  readonly score: number;\n  readonly matchedField: string;\n}\n\ninterface PublicConnectorSearchOutput {\n  readonly results: readonly PublicConnectorSearchResult[];\n  readonly total: number;\n}\n\nconst TOKEN_BOUNDARY = /[_\\-\\s]+/;\nconst CASE_BOUNDARY = /(?<=[a-z])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/;\nconst MIN_SCORE = 10;\n\nfunction tokenize(input: string): Set<string> {\n  const tokens = new Set<string>();\n  for (const chunk of input.split(TOKEN_BOUNDARY)) {\n    if (!chunk) continue;\n    for (const sub of chunk.split(CASE_BOUNDARY)) {\n      const lower = sub.toLowerCase();\n      if (lower) tokens.add(lower);\n    }\n  }\n  return tokens;\n}\n\nfunction publicStrings(connector: PublicConnectorCatalogItem): string[] {\n  return [\n    connector.connectorRef,\n    connector.label,\n    connector.description,\n    connector.category,\n    ...connector.tags,\n    ...connector.generation,\n    ...connector.authMethods.flatMap((authMethod) => {\n      return [\n        authMethod.id,\n        authMethod.label,\n        ...(authMethod.description ? [authMethod.description] : []),\n      ];\n    }),\n  ];\n}\n\ntype ScoreHit = { score: number; matchedField: string };\n\nfunction best(candidates: readonly (ScoreHit | null)[]): ScoreHit | null {\n  return candidates.reduce<ScoreHit | null>((bestHit, hit) => {\n    if (!hit) return bestHit;\n    if (!bestHit || hit.score > bestHit.score) return hit;\n    return bestHit;\n  }, null);\n}\n\nfunction scoreExact(\n  keywordLower: string,\n  skipPrivateIdentifierMatches: boolean,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  if (connector.connectorRef.toLowerCase() === keywordLower) {\n    return { score: 100, matchedField: \"connectorRef\" };\n  }\n  if (connector.label.toLowerCase() === keywordLower) {\n    return { score: 80, matchedField: \"label\" };\n  }\n  for (const tag of connector.tags) {\n    if (skipPrivateIdentifierMatches && tag.includes(\"_\")) continue;\n    if (tag.toLowerCase() === keywordLower) {\n      return { score: 70, matchedField: `tag:${tag}` };\n    }\n  }\n  for (const generationType of connector.generation) {\n    if (generationType.toLowerCase() === keywordLower) {\n      return { score: 65, matchedField: `generation:${generationType}` };\n    }\n  }\n  for (const authMethod of connector.authMethods) {\n    if (authMethod.id.toLowerCase() === keywordLower) {\n      return { score: 60, matchedField: `auth-method:${authMethod.id}` };\n    }\n    if (authMethod.label.toLowerCase() === keywordLower) {\n      return { score: 60, matchedField: `auth-method:${authMethod.label}` };\n    }\n  }\n  if (connector.category.toLowerCase() === keywordLower) {\n    return { score: 55, matchedField: \"category\" };\n  }\n  return null;\n}\n\nfunction scoreSubstring(\n  keywordLower: string,\n  skipPrivateIdentifierMatches: boolean,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  const candidates: ScoreHit[] = [];\n  if (connector.connectorRef.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 50, matchedField: \"connectorRef\" });\n  }\n  if (connector.label.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 50, matchedField: \"label\" });\n  }\n  for (const tag of connector.tags) {\n    if (skipPrivateIdentifierMatches && tag.includes(\"_\")) continue;\n    if (tag.toLowerCase().includes(keywordLower)) {\n      candidates.push({ score: 25, matchedField: `tag:${tag}` });\n    }\n  }\n  for (const generationType of connector.generation) {\n    if (generationType.toLowerCase().includes(keywordLower)) {\n      candidates.push({\n        score: 25,\n        matchedField: `generation:${generationType}`,\n      });\n    }\n  }\n  for (const authMethod of connector.authMethods) {\n    if (\n      authMethod.id.toLowerCase().includes(keywordLower) ||\n      authMethod.label.toLowerCase().includes(keywordLower)\n    ) {\n      candidates.push({\n        score: 20,\n        matchedField: `auth-method:${authMethod.id}`,\n      });\n    }\n  }\n  if (connector.category.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 20, matchedField: \"category\" });\n  }\n  if (connector.description.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 15, matchedField: \"description\" });\n  }\n\n  return best(candidates);\n}\n\nfunction scoreTokens(\n  keywordTokens: ReadonlySet<string>,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  const candidateTokens = new Set<string>();\n  for (const source of publicStrings(connector)) {\n    for (const token of tokenize(source)) {\n      candidateTokens.add(token);\n    }\n  }\n\n  let intersection = 0;\n  let firstCommon = \"\";\n  for (const token of keywordTokens) {\n    if (candidateTokens.has(token)) {\n      intersection++;\n      if (!firstCommon) firstCommon = token;\n    }\n  }\n  if (intersection === 0) return null;\n  return { score: 10 * intersection, matchedField: `token:${firstCommon}` };\n}\n\nfunction scoreConnector(\n  keywordLower: string,\n  keyword: string,\n  keywordTokens: ReadonlySet<string>,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  const skipPrivateIdentifierMatches =\n    /^[A-Za-z0-9_]+$/.test(keyword) && keyword.includes(\"_\");\n  const tokenHit = skipPrivateIdentifierMatches\n    ? null\n    : scoreTokens(keywordTokens, connector);\n  const hit = best([\n    scoreExact(keywordLower, skipPrivateIdentifierMatches, connector),\n    scoreSubstring(keywordLower, skipPrivateIdentifierMatches, connector),\n    tokenHit,\n  ]);\n  if (!hit || hit.score < MIN_SCORE) return null;\n  return hit;\n}\n\nexport function searchPublicConnectorCatalog(\n  connectors: readonly PublicConnectorStatus[],\n  keyword: string,\n  limit: number,\n): PublicConnectorSearchOutput {\n  const trimmed = keyword.trim();\n  if (!trimmed) return { results: [], total: 0 };\n\n  const keywordLower = trimmed.toLowerCase();\n  const keywordTokens = tokenize(trimmed);\n  const hits = connectors.flatMap(\n    (connector): PublicConnectorSearchResult[] => {\n      const hit = scoreConnector(\n        keywordLower,\n        trimmed,\n        keywordTokens,\n        connector,\n      );\n      if (!hit) return [];\n      return [\n        {\n          connector,\n          score: hit.score,\n          matchedField: hit.matchedField,\n        },\n      ];\n    },\n  );\n\n  hits.sort((a, b) => {\n    if (b.score !== a.score) return b.score - a.score;\n    return a.connector.connectorRef.localeCompare(b.connector.connectorRef);\n  });\n\n  return {\n    results: hits.slice(0, limit),\n    total: hits.length,\n  };\n}\n\nexport function findConnectorStatusItem(\n  connectors: readonly PublicConnectorStatus[],\n  connectorRef: string,\n): PublicConnectorStatus | null {\n  const exact = connectors.find((connector) => {\n    return connector.connectorRef === connectorRef;\n  });\n  if (exact) return exact;\n\n  const lower = connectorRef.toLowerCase();\n  return (\n    connectors.find((connector) => {\n      return connector.connectorRef.toLowerCase() === lower;\n    }) ?? null\n  );\n}\n\nexport function availableConnectorRefs(\n  connectors: readonly PublicConnectorStatus[],\n): string {\n  return connectors\n    .map((connector) => {\n      return connector.connectorRef;\n    })\n    .join(\", \");\n}\n\nexport function resolveManualGrantAuthMethod(\n  connector: PublicConnectorStatus,\n  rawAuthMethod: string | undefined,\n): PublicConnectorCatalogAuthMethodDetail {\n  if (rawAuthMethod) {\n    const authMethod = connector.authMethods.find((method) => {\n      return method.id === rawAuthMethod;\n    });\n    if (!authMethod) {\n      throw new Error(\n        `${connector.connectorRef} connector does not have ${rawAuthMethod} auth method`,\n        {\n          cause: new Error(\n            `Available auth methods: ${connector.authMethods\n              .map((method) => {\n                return method.id;\n              })\n              .join(\", \")}`,\n          ),\n        },\n      );\n    }\n\n    if (authMethod.grantKind === \"manual\") {\n      return authMethod;\n    }\n\n    throw new Error(\n      `${connector.connectorRef} ${authMethod.id} auth method does not use a manual grant`,\n    );\n  }\n\n  const manualAuthMethods = connector.authMethods.filter((method) => {\n    return method.grantKind === \"manual\";\n  });\n  const authMethod = manualAuthMethods[0];\n  if (manualAuthMethods.length === 1 && authMethod) {\n    return authMethod;\n  }\n  if (manualAuthMethods.length === 0) {\n    throw new Error(\n      `${connector.connectorRef} connector does not use a manual grant`,\n    );\n  }\n\n  throw new Error(\n    `${connector.connectorRef} connector has multiple manual grant auth methods`,\n    {\n      cause: new Error(\n        `Pass --auth-method ${manualAuthMethods\n          .map((method) => {\n            return method.id;\n          })\n          .join(\"|\")}`,\n      ),\n    },\n  );\n}\n","import { getZeroAgent, getZeroAgentUserConnectors } from \"../../../lib/api\";\n\ninterface AgentContext {\n  agentId: string;\n  displayName: string;\n  authorizedTypes: Set<string>;\n}\n\nexport async function resolveAgentContext(\n  flagAgentId: string | undefined,\n): Promise<AgentContext | null> {\n  const agentId = flagAgentId ?? process.env.ZERO_AGENT_ID;\n  if (!agentId) return null;\n\n  const [agent, enabledTypes] = await Promise.all([\n    getZeroAgent(agentId),\n    getZeroAgentUserConnectors(agentId),\n  ]);\n\n  return {\n    agentId: agent.agentId,\n    displayName: agent.displayName ?? agent.agentId,\n    authorizedTypes: new Set(enabledTypes),\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAAA;AAAO,IAAM,8BACX;AAEK,SAAS,mCAA4C;AAC1D,SAAO,QAAQ,QAAQ,IAAI,qBAAqB,KAAK,CAAC;AACxD;AAEA,SAAS,oBAAoB,SAA4C;AACvE,QAAM,WAAW,QAAQ,IAAI,qBAAqB,KAAK;AACvD,QAAM,iBAAiB,QAAQ,IAAI,eAAe,KAAK;AACvD,MAAI,CAAC,YAAY,CAAC,kBAAkB,YAAY,gBAAgB;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,kCACd,SACS;AACT,SAAO,oBAAoB,OAAO,MAAM;AAC1C;AAEA,SAAS,wBACP,QACA,UACA,gBACM;AACN,SAAO,IAAI,YAAY,QAAQ;AAC/B,SAAO,IAAI,kBAAkB,cAAc;AAC7C;AAEO,SAAS,iCACd,QACA,gBACA,SACM;AACN,MAAI,mBAAmB,QAAW;AAChC;AAAA,EACF;AAEA,QAAM,mBAAmB,eAAe,KAAK;AAC7C,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAEA,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,0BAAwB,QAAQ,UAAU,gBAAgB;AAC5D;AAEO,SAAS,mBAAmB,MAIxB;AACT,QAAM,MAAM,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM;AAC1C,MAAI,KAAK,SAAS;AAChB,QAAI,aAAa,IAAI,WAAW,KAAK,OAAO;AAAA,EAC9C;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,yBACP,WACA,SACe;AACf,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B;AAAA,IACE,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAEO,SAAS,8BACd,WACA,SACM;AACN,QAAM,cAAc,yBAAyB,WAAW,OAAO;AAC/D,MAAI,CAAC,aAAa;AAChB;AAAA,EACF;AAEA,UAAQ,IAAI,EAAE;AACd,UAAQ;AAAA,IACN;AAAA,EACF;AACA,UAAQ,IAAI,WAAW;AACzB;AAEO,SAAS,+BAAqC;AACnD,UAAQ,IAAI,EAAE;AACd,UAAQ;AAAA,IACN;AAAA,EACF;AACF;;;ACzGA;AAmBA,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AACtB,IAAM,YAAY;AAElB,SAAS,SAAS,OAA4B;AAC5C,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,SAAS,MAAM,MAAM,cAAc,GAAG;AAC/C,QAAI,CAAC,MAAO;AACZ,eAAW,OAAO,MAAM,MAAM,aAAa,GAAG;AAC5C,YAAM,QAAQ,IAAI,YAAY;AAC9B,UAAI,MAAO,QAAO,IAAI,KAAK;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,WAAiD;AACtE,SAAO;AAAA,IACL,UAAU;AAAA,IACV,UAAU;AAAA,IACV,UAAU;AAAA,IACV,UAAU;AAAA,IACV,GAAG,UAAU;AAAA,IACb,GAAG,UAAU;AAAA,IACb,GAAG,UAAU,YAAY,QAAQ,CAAC,eAAe;AAC/C,aAAO;AAAA,QACL,WAAW;AAAA,QACX,WAAW;AAAA,QACX,GAAI,WAAW,cAAc,CAAC,WAAW,WAAW,IAAI,CAAC;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAIA,SAAS,KAAK,YAA2D;AACvE,SAAO,WAAW,OAAwB,CAAC,SAAS,QAAQ;AAC1D,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI,CAAC,WAAW,IAAI,QAAQ,QAAQ,MAAO,QAAO;AAClD,WAAO;AAAA,EACT,GAAG,IAAI;AACT;AAEA,SAAS,WACP,cACA,8BACA,WACiB;AACjB,MAAI,UAAU,aAAa,YAAY,MAAM,cAAc;AACzD,WAAO,EAAE,OAAO,KAAK,cAAc,eAAe;AAAA,EACpD;AACA,MAAI,UAAU,MAAM,YAAY,MAAM,cAAc;AAClD,WAAO,EAAE,OAAO,IAAI,cAAc,QAAQ;AAAA,EAC5C;AACA,aAAW,OAAO,UAAU,MAAM;AAChC,QAAI,gCAAgC,IAAI,SAAS,GAAG,EAAG;AACvD,QAAI,IAAI,YAAY,MAAM,cAAc;AACtC,aAAO,EAAE,OAAO,IAAI,cAAc,OAAO,GAAG,GAAG;AAAA,IACjD;AAAA,EACF;AACA,aAAW,kBAAkB,UAAU,YAAY;AACjD,QAAI,eAAe,YAAY,MAAM,cAAc;AACjD,aAAO,EAAE,OAAO,IAAI,cAAc,cAAc,cAAc,GAAG;AAAA,IACnE;AAAA,EACF;AACA,aAAW,cAAc,UAAU,aAAa;AAC9C,QAAI,WAAW,GAAG,YAAY,MAAM,cAAc;AAChD,aAAO,EAAE,OAAO,IAAI,cAAc,eAAe,WAAW,EAAE,GAAG;AAAA,IACnE;AACA,QAAI,WAAW,MAAM,YAAY,MAAM,cAAc;AACnD,aAAO,EAAE,OAAO,IAAI,cAAc,eAAe,WAAW,KAAK,GAAG;AAAA,IACtE;AAAA,EACF;AACA,MAAI,UAAU,SAAS,YAAY,MAAM,cAAc;AACrD,WAAO,EAAE,OAAO,IAAI,cAAc,WAAW;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,SAAS,eACP,cACA,8BACA,WACiB;AACjB,QAAM,aAAyB,CAAC;AAChC,MAAI,UAAU,aAAa,YAAY,EAAE,SAAS,YAAY,GAAG;AAC/D,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,eAAe,CAAC;AAAA,EAC7D;AACA,MAAI,UAAU,MAAM,YAAY,EAAE,SAAS,YAAY,GAAG;AACxD,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,QAAQ,CAAC;AAAA,EACtD;AACA,aAAW,OAAO,UAAU,MAAM;AAChC,QAAI,gCAAgC,IAAI,SAAS,GAAG,EAAG;AACvD,QAAI,IAAI,YAAY,EAAE,SAAS,YAAY,GAAG;AAC5C,iBAAW,KAAK,EAAE,OAAO,IAAI,cAAc,OAAO,GAAG,GAAG,CAAC;AAAA,IAC3D;AAAA,EACF;AACA,aAAW,kBAAkB,UAAU,YAAY;AACjD,QAAI,eAAe,YAAY,EAAE,SAAS,YAAY,GAAG;AACvD,iBAAW,KAAK;AAAA,QACd,OAAO;AAAA,QACP,cAAc,cAAc,cAAc;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AACA,aAAW,cAAc,UAAU,aAAa;AAC9C,QACE,WAAW,GAAG,YAAY,EAAE,SAAS,YAAY,KACjD,WAAW,MAAM,YAAY,EAAE,SAAS,YAAY,GACpD;AACA,iBAAW,KAAK;AAAA,QACd,OAAO;AAAA,QACP,cAAc,eAAe,WAAW,EAAE;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,UAAU,SAAS,YAAY,EAAE,SAAS,YAAY,GAAG;AAC3D,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,WAAW,CAAC;AAAA,EACzD;AACA,MAAI,UAAU,YAAY,YAAY,EAAE,SAAS,YAAY,GAAG;AAC9D,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,cAAc,CAAC;AAAA,EAC5D;AAEA,SAAO,KAAK,UAAU;AACxB;AAEA,SAAS,YACP,eACA,WACiB;AACjB,QAAM,kBAAkB,oBAAI,IAAY;AACxC,aAAW,UAAU,cAAc,SAAS,GAAG;AAC7C,eAAW,SAAS,SAAS,MAAM,GAAG;AACpC,sBAAgB,IAAI,KAAK;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,eAAe;AACnB,MAAI,cAAc;AAClB,aAAW,SAAS,eAAe;AACjC,QAAI,gBAAgB,IAAI,KAAK,GAAG;AAC9B;AACA,UAAI,CAAC,YAAa,eAAc;AAAA,IAClC;AAAA,EACF;AACA,MAAI,iBAAiB,EAAG,QAAO;AAC/B,SAAO,EAAE,OAAO,KAAK,cAAc,cAAc,SAAS,WAAW,GAAG;AAC1E;AAEA,SAAS,eACP,cACA,SACA,eACA,WACiB;AACjB,QAAM,+BACJ,kBAAkB,KAAK,OAAO,KAAK,QAAQ,SAAS,GAAG;AACzD,QAAM,WAAW,+BACb,OACA,YAAY,eAAe,SAAS;AACxC,QAAM,MAAM,KAAK;AAAA,IACf,WAAW,cAAc,8BAA8B,SAAS;AAAA,IAChE,eAAe,cAAc,8BAA8B,SAAS;AAAA,IACpE;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,IAAI,QAAQ,UAAW,QAAO;AAC1C,SAAO;AACT;AAEO,SAAS,6BACd,YACA,SACA,OAC6B;AAC7B,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,CAAC,QAAS,QAAO,EAAE,SAAS,CAAC,GAAG,OAAO,EAAE;AAE7C,QAAM,eAAe,QAAQ,YAAY;AACzC,QAAM,gBAAgB,SAAS,OAAO;AACtC,QAAM,OAAO,WAAW;AAAA,IACtB,CAAC,cAA6C;AAC5C,YAAM,MAAM;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,OAAO,IAAI;AAAA,UACX,cAAc,IAAI;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,OAAK,KAAK,CAAC,GAAG,MAAM;AAClB,QAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,WAAO,EAAE,UAAU,aAAa,cAAc,EAAE,UAAU,YAAY;AAAA,EACxE,CAAC;AAED,SAAO;AAAA,IACL,SAAS,KAAK,MAAM,GAAG,KAAK;AAAA,IAC5B,OAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,wBACd,YACA,cAC8B;AAC9B,QAAM,QAAQ,WAAW,KAAK,CAAC,cAAc;AAC3C,WAAO,UAAU,iBAAiB;AAAA,EACpC,CAAC;AACD,MAAI,MAAO,QAAO;AAElB,QAAM,QAAQ,aAAa,YAAY;AACvC,SACE,WAAW,KAAK,CAAC,cAAc;AAC7B,WAAO,UAAU,aAAa,YAAY,MAAM;AAAA,EAClD,CAAC,KAAK;AAEV;AAEO,SAAS,uBACd,YACQ;AACR,SAAO,WACJ,IAAI,CAAC,cAAc;AAClB,WAAO,UAAU;AAAA,EACnB,CAAC,EACA,KAAK,IAAI;AACd;AAEO,SAAS,6BACd,WACA,eACwC;AACxC,MAAI,eAAe;AACjB,UAAMA,cAAa,UAAU,YAAY,KAAK,CAAC,WAAW;AACxD,aAAO,OAAO,OAAO;AAAA,IACvB,CAAC;AACD,QAAI,CAACA,aAAY;AACf,YAAM,IAAI;AAAA,QACR,GAAG,UAAU,YAAY,4BAA4B,aAAa;AAAA,QAClE;AAAA,UACE,OAAO,IAAI;AAAA,YACT,2BAA2B,UAAU,YAClC,IAAI,CAAC,WAAW;AACf,qBAAO,OAAO;AAAA,YAChB,CAAC,EACA,KAAK,IAAI,CAAC;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAIA,YAAW,cAAc,UAAU;AACrC,aAAOA;AAAA,IACT;AAEA,UAAM,IAAI;AAAA,MACR,GAAG,UAAU,YAAY,IAAIA,YAAW,EAAE;AAAA,IAC5C;AAAA,EACF;AAEA,QAAM,oBAAoB,UAAU,YAAY,OAAO,CAAC,WAAW;AACjE,WAAO,OAAO,cAAc;AAAA,EAC9B,CAAC;AACD,QAAM,aAAa,kBAAkB,CAAC;AACtC,MAAI,kBAAkB,WAAW,KAAK,YAAY;AAChD,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,WAAW,GAAG;AAClC,UAAM,IAAI;AAAA,MACR,GAAG,UAAU,YAAY;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR,GAAG,UAAU,YAAY;AAAA,IACzB;AAAA,MACE,OAAO,IAAI;AAAA,QACT,sBAAsB,kBACnB,IAAI,CAAC,WAAW;AACf,iBAAO,OAAO;AAAA,QAChB,CAAC,EACA,KAAK,GAAG,CAAC;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;;;ACzTA;AAQA,eAAsB,oBACpB,aAC8B;AAC9B,QAAM,UAAU,eAAe,QAAQ,IAAI;AAC3C,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,CAAC,OAAO,YAAY,IAAI,MAAM,QAAQ,IAAI;AAAA,IAC9C,aAAa,OAAO;AAAA,IACpB,2BAA2B,OAAO;AAAA,EACpC,CAAC;AAED,SAAO;AAAA,IACL,SAAS,MAAM;AAAA,IACf,aAAa,MAAM,eAAe,MAAM;AAAA,IACxC,iBAAiB,IAAI,IAAI,YAAY;AAAA,EACvC;AACF;","names":["authMethod"]}
+{"version":3,"sources":["../src/commands/zero/connector/action-url.ts","../src/commands/zero/connector/public-catalog.ts","../src/commands/zero/connector/agent-context.ts"],"sourcesContent":["export const CALLBACK_PROMPT_PLACEHOLDER =\n  \"SOMETHING_AGENT_WANT_TO_BE_CALLBACK\";\n\nexport function connectorActionCallbackAvailable(): boolean {\n  return Boolean(process.env.ZERO_CHAT_THREAD_ID?.trim());\n}\n\nfunction currentChatThreadId(agentId: string | undefined): string | null {\n  const threadId = process.env.ZERO_CHAT_THREAD_ID?.trim();\n  const currentAgentId = process.env.ZERO_AGENT_ID?.trim();\n  if (!threadId || !currentAgentId || agentId !== currentAgentId) {\n    return null;\n  }\n  return threadId;\n}\n\nexport function currentChatSupportsActionCallback(\n  agentId: string | undefined,\n): boolean {\n  return currentChatThreadId(agentId) !== null;\n}\n\nfunction addCallbackSearchParams(\n  params: URLSearchParams,\n  threadId: string,\n  callbackPrompt: string,\n): void {\n  params.set(\"threadId\", threadId);\n  params.set(\"callbackPrompt\", callbackPrompt);\n}\n\nexport function addRequestedCallbackSearchParams(\n  params: URLSearchParams,\n  callbackPrompt: string | undefined,\n  agentId: string | undefined,\n): void {\n  if (callbackPrompt === undefined) {\n    return;\n  }\n\n  const normalizedPrompt = callbackPrompt.trim();\n  if (!normalizedPrompt) {\n    throw new Error(\"--callback-prompt cannot be empty\");\n  }\n\n  const threadId = currentChatThreadId(agentId);\n  if (!threadId) {\n    throw new Error(\n      \"--callback-prompt can only target the current Zero web chat thread and agent\",\n    );\n  }\n  addCallbackSearchParams(params, threadId, normalizedPrompt);\n}\n\nexport function connectorActionUrl(args: {\n  readonly origin: string;\n  readonly path: string;\n  readonly agentId?: string;\n}): string {\n  const url = new URL(args.path, args.origin);\n  if (args.agentId) {\n    url.searchParams.set(\"agentId\", args.agentId);\n  }\n  return url.toString();\n}\n\nfunction callbackActionUrlExample(\n  actionUrl: string,\n  agentId: string | undefined,\n): string | null {\n  const threadId = currentChatThreadId(agentId);\n  if (!threadId) {\n    return null;\n  }\n\n  const url = new URL(actionUrl);\n  addCallbackSearchParams(\n    url.searchParams,\n    threadId,\n    CALLBACK_PROMPT_PLACEHOLDER,\n  );\n  return url.toString();\n}\n\nexport function printCallbackActionUrlExample(\n  actionUrl: string,\n  agentId: string | undefined,\n): void {\n  const callbackUrl = callbackActionUrlExample(actionUrl, agentId);\n  if (!callbackUrl) {\n    return;\n  }\n\n  console.log(\"\");\n  console.log(\n    \"Or, if this is the only connector or permission action needed, use the callback URL below. After the user completes this action, Zero will automatically start the next round with the callback prompt:\",\n  );\n  console.log(callbackUrl);\n}\n\nexport function printCallbackTurnInstruction(): void {\n  console.log(\"\");\n  console.log(\n    \"After sharing this callback URL, end the current turn. When the user completes the action, Zero will automatically start the next round with the callback prompt.\",\n  );\n}\n","import type {\n  PublicConnectorCatalogAuthMethodDetail,\n  PublicConnectorCatalogItem,\n  PublicConnectorCatalogStatusItem,\n} from \"@vm0/api-contracts/contracts/zero-connector-catalog\";\n\nexport type PublicConnectorStatus = PublicConnectorCatalogStatusItem;\n\ninterface PublicConnectorSearchResult {\n  readonly connector: PublicConnectorStatus;\n  readonly score: number;\n  readonly matchedField: string;\n}\n\ninterface PublicConnectorSearchOutput {\n  readonly results: readonly PublicConnectorSearchResult[];\n  readonly total: number;\n}\n\nconst TOKEN_BOUNDARY = /[_\\-\\s]+/;\nconst CASE_BOUNDARY = /(?<=[a-z])(?=[A-Z])|(?<=[A-Z])(?=[A-Z][a-z])/;\nconst MIN_SCORE = 10;\n\nfunction tokenize(input: string): Set<string> {\n  const tokens = new Set<string>();\n  for (const chunk of input.split(TOKEN_BOUNDARY)) {\n    if (!chunk) continue;\n    for (const sub of chunk.split(CASE_BOUNDARY)) {\n      const lower = sub.toLowerCase();\n      if (lower) tokens.add(lower);\n    }\n  }\n  return tokens;\n}\n\nfunction publicStrings(connector: PublicConnectorCatalogItem): string[] {\n  return [\n    connector.connectorRef,\n    connector.label,\n    connector.description,\n    connector.category,\n    ...connector.tags,\n    ...connector.generation,\n    ...connector.authMethods.flatMap((authMethod) => {\n      return [\n        authMethod.id,\n        authMethod.label,\n        ...(authMethod.description ? [authMethod.description] : []),\n      ];\n    }),\n  ];\n}\n\ntype ScoreHit = { score: number; matchedField: string };\n\nfunction best(candidates: readonly (ScoreHit | null)[]): ScoreHit | null {\n  return candidates.reduce<ScoreHit | null>((bestHit, hit) => {\n    if (!hit) return bestHit;\n    if (!bestHit || hit.score > bestHit.score) return hit;\n    return bestHit;\n  }, null);\n}\n\nfunction scoreExact(\n  keywordLower: string,\n  skipPrivateIdentifierMatches: boolean,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  if (connector.connectorRef.toLowerCase() === keywordLower) {\n    return { score: 100, matchedField: \"connectorRef\" };\n  }\n  if (connector.label.toLowerCase() === keywordLower) {\n    return { score: 80, matchedField: \"label\" };\n  }\n  for (const tag of connector.tags) {\n    if (skipPrivateIdentifierMatches && tag.includes(\"_\")) continue;\n    if (tag.toLowerCase() === keywordLower) {\n      return { score: 70, matchedField: `tag:${tag}` };\n    }\n  }\n  for (const generationType of connector.generation) {\n    if (generationType.toLowerCase() === keywordLower) {\n      return { score: 65, matchedField: `generation:${generationType}` };\n    }\n  }\n  for (const authMethod of connector.authMethods) {\n    if (authMethod.id.toLowerCase() === keywordLower) {\n      return { score: 60, matchedField: `auth-method:${authMethod.id}` };\n    }\n    if (authMethod.label.toLowerCase() === keywordLower) {\n      return { score: 60, matchedField: `auth-method:${authMethod.label}` };\n    }\n  }\n  if (connector.category.toLowerCase() === keywordLower) {\n    return { score: 55, matchedField: \"category\" };\n  }\n  return null;\n}\n\nfunction scoreSubstring(\n  keywordLower: string,\n  skipPrivateIdentifierMatches: boolean,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  const candidates: ScoreHit[] = [];\n  if (connector.connectorRef.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 50, matchedField: \"connectorRef\" });\n  }\n  if (connector.label.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 50, matchedField: \"label\" });\n  }\n  for (const tag of connector.tags) {\n    if (skipPrivateIdentifierMatches && tag.includes(\"_\")) continue;\n    if (tag.toLowerCase().includes(keywordLower)) {\n      candidates.push({ score: 25, matchedField: `tag:${tag}` });\n    }\n  }\n  for (const generationType of connector.generation) {\n    if (generationType.toLowerCase().includes(keywordLower)) {\n      candidates.push({\n        score: 25,\n        matchedField: `generation:${generationType}`,\n      });\n    }\n  }\n  for (const authMethod of connector.authMethods) {\n    if (\n      authMethod.id.toLowerCase().includes(keywordLower) ||\n      authMethod.label.toLowerCase().includes(keywordLower)\n    ) {\n      candidates.push({\n        score: 20,\n        matchedField: `auth-method:${authMethod.id}`,\n      });\n    }\n  }\n  if (connector.category.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 20, matchedField: \"category\" });\n  }\n  if (connector.description.toLowerCase().includes(keywordLower)) {\n    candidates.push({ score: 15, matchedField: \"description\" });\n  }\n\n  return best(candidates);\n}\n\nfunction scoreTokens(\n  keywordTokens: ReadonlySet<string>,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  const candidateTokens = new Set<string>();\n  for (const source of publicStrings(connector)) {\n    for (const token of tokenize(source)) {\n      candidateTokens.add(token);\n    }\n  }\n\n  let intersection = 0;\n  let firstCommon = \"\";\n  for (const token of keywordTokens) {\n    if (candidateTokens.has(token)) {\n      intersection++;\n      if (!firstCommon) firstCommon = token;\n    }\n  }\n  if (intersection === 0) return null;\n  return { score: 10 * intersection, matchedField: `token:${firstCommon}` };\n}\n\nfunction scoreConnector(\n  keywordLower: string,\n  keyword: string,\n  keywordTokens: ReadonlySet<string>,\n  connector: PublicConnectorStatus,\n): ScoreHit | null {\n  const skipPrivateIdentifierMatches =\n    /^[A-Za-z0-9_]+$/.test(keyword) && keyword.includes(\"_\");\n  const tokenHit = skipPrivateIdentifierMatches\n    ? null\n    : scoreTokens(keywordTokens, connector);\n  const hit = best([\n    scoreExact(keywordLower, skipPrivateIdentifierMatches, connector),\n    scoreSubstring(keywordLower, skipPrivateIdentifierMatches, connector),\n    tokenHit,\n  ]);\n  if (!hit || hit.score < MIN_SCORE) return null;\n  return hit;\n}\n\nexport function searchPublicConnectorCatalog(\n  connectors: readonly PublicConnectorStatus[],\n  keyword: string,\n  limit: number,\n): PublicConnectorSearchOutput {\n  const trimmed = keyword.trim();\n  if (!trimmed) return { results: [], total: 0 };\n\n  const keywordLower = trimmed.toLowerCase();\n  const keywordTokens = tokenize(trimmed);\n  const hits = connectors.flatMap(\n    (connector): PublicConnectorSearchResult[] => {\n      const hit = scoreConnector(\n        keywordLower,\n        trimmed,\n        keywordTokens,\n        connector,\n      );\n      if (!hit) return [];\n      return [\n        {\n          connector,\n          score: hit.score,\n          matchedField: hit.matchedField,\n        },\n      ];\n    },\n  );\n\n  hits.sort((a, b) => {\n    if (b.score !== a.score) return b.score - a.score;\n    return a.connector.connectorRef.localeCompare(b.connector.connectorRef);\n  });\n\n  return {\n    results: hits.slice(0, limit),\n    total: hits.length,\n  };\n}\n\nexport function findConnectorStatusItem(\n  connectors: readonly PublicConnectorStatus[],\n  connectorSlug: string,\n): PublicConnectorStatus | null {\n  const exact = connectors.find((connector) => {\n    return connector.connectorRef === connectorSlug;\n  });\n  if (exact) return exact;\n\n  const lower = connectorSlug.toLowerCase();\n  return (\n    connectors.find((connector) => {\n      return connector.connectorRef.toLowerCase() === lower;\n    }) ?? null\n  );\n}\n\nexport function availableConnectorSlugs(\n  connectors: readonly PublicConnectorStatus[],\n): string {\n  return connectors\n    .map((connector) => {\n      return connector.connectorRef;\n    })\n    .join(\", \");\n}\n\nexport function resolveManualGrantAuthMethod(\n  connector: PublicConnectorStatus,\n  rawAuthMethod: string | undefined,\n): PublicConnectorCatalogAuthMethodDetail {\n  if (rawAuthMethod) {\n    const authMethod = connector.authMethods.find((method) => {\n      return method.id === rawAuthMethod;\n    });\n    if (!authMethod) {\n      throw new Error(\n        `${connector.connectorRef} connector does not have ${rawAuthMethod} auth method`,\n        {\n          cause: new Error(\n            `Available auth methods: ${connector.authMethods\n              .map((method) => {\n                return method.id;\n              })\n              .join(\", \")}`,\n          ),\n        },\n      );\n    }\n\n    if (authMethod.grantKind === \"manual\") {\n      return authMethod;\n    }\n\n    throw new Error(\n      `${connector.connectorRef} ${authMethod.id} auth method does not use a manual grant`,\n    );\n  }\n\n  const manualAuthMethods = connector.authMethods.filter((method) => {\n    return method.grantKind === \"manual\";\n  });\n  const authMethod = manualAuthMethods[0];\n  if (manualAuthMethods.length === 1 && authMethod) {\n    return authMethod;\n  }\n  if (manualAuthMethods.length === 0) {\n    throw new Error(\n      `${connector.connectorRef} connector does not use a manual grant`,\n    );\n  }\n\n  throw new Error(\n    `${connector.connectorRef} connector has multiple manual grant auth methods`,\n    {\n      cause: new Error(\n        `Pass --auth-method ${manualAuthMethods\n          .map((method) => {\n            return method.id;\n          })\n          .join(\"|\")}`,\n      ),\n    },\n  );\n}\n","import { getZeroAgent, getZeroAgentUserConnectors } from \"../../../lib/api\";\n\ninterface AgentContext {\n  agentId: string;\n  displayName: string;\n  authorizedConnectorSlugs: Set<string>;\n}\n\nexport async function resolveAgentContext(\n  flagAgentId: string | undefined,\n): Promise<AgentContext | null> {\n  const agentId = flagAgentId ?? process.env.ZERO_AGENT_ID;\n  if (!agentId) return null;\n\n  const [agent, enabledConnectorSlugs] = await Promise.all([\n    getZeroAgent(agentId),\n    getZeroAgentUserConnectors(agentId),\n  ]);\n\n  return {\n    agentId: agent.agentId,\n    displayName: agent.displayName ?? agent.agentId,\n    authorizedConnectorSlugs: new Set(enabledConnectorSlugs),\n  };\n}\n"],"mappings":";;;;;;;;;;;;AAAA;AAAO,IAAM,8BACX;AAEK,SAAS,mCAA4C;AAC1D,SAAO,QAAQ,QAAQ,IAAI,qBAAqB,KAAK,CAAC;AACxD;AAEA,SAAS,oBAAoB,SAA4C;AACvE,QAAM,WAAW,QAAQ,IAAI,qBAAqB,KAAK;AACvD,QAAM,iBAAiB,QAAQ,IAAI,eAAe,KAAK;AACvD,MAAI,CAAC,YAAY,CAAC,kBAAkB,YAAY,gBAAgB;AAC9D,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEO,SAAS,kCACd,SACS;AACT,SAAO,oBAAoB,OAAO,MAAM;AAC1C;AAEA,SAAS,wBACP,QACA,UACA,gBACM;AACN,SAAO,IAAI,YAAY,QAAQ;AAC/B,SAAO,IAAI,kBAAkB,cAAc;AAC7C;AAEO,SAAS,iCACd,QACA,gBACA,SACM;AACN,MAAI,mBAAmB,QAAW;AAChC;AAAA,EACF;AAEA,QAAM,mBAAmB,eAAe,KAAK;AAC7C,MAAI,CAAC,kBAAkB;AACrB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AAEA,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,CAAC,UAAU;AACb,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AACA,0BAAwB,QAAQ,UAAU,gBAAgB;AAC5D;AAEO,SAAS,mBAAmB,MAIxB;AACT,QAAM,MAAM,IAAI,IAAI,KAAK,MAAM,KAAK,MAAM;AAC1C,MAAI,KAAK,SAAS;AAChB,QAAI,aAAa,IAAI,WAAW,KAAK,OAAO;AAAA,EAC9C;AACA,SAAO,IAAI,SAAS;AACtB;AAEA,SAAS,yBACP,WACA,SACe;AACf,QAAM,WAAW,oBAAoB,OAAO;AAC5C,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,QAAM,MAAM,IAAI,IAAI,SAAS;AAC7B;AAAA,IACE,IAAI;AAAA,IACJ;AAAA,IACA;AAAA,EACF;AACA,SAAO,IAAI,SAAS;AACtB;AAEO,SAAS,8BACd,WACA,SACM;AACN,QAAM,cAAc,yBAAyB,WAAW,OAAO;AAC/D,MAAI,CAAC,aAAa;AAChB;AAAA,EACF;AAEA,UAAQ,IAAI,EAAE;AACd,UAAQ;AAAA,IACN;AAAA,EACF;AACA,UAAQ,IAAI,WAAW;AACzB;AAEO,SAAS,+BAAqC;AACnD,UAAQ,IAAI,EAAE;AACd,UAAQ;AAAA,IACN;AAAA,EACF;AACF;;;ACzGA;AAmBA,IAAM,iBAAiB;AACvB,IAAM,gBAAgB;AACtB,IAAM,YAAY;AAElB,SAAS,SAAS,OAA4B;AAC5C,QAAM,SAAS,oBAAI,IAAY;AAC/B,aAAW,SAAS,MAAM,MAAM,cAAc,GAAG;AAC/C,QAAI,CAAC,MAAO;AACZ,eAAW,OAAO,MAAM,MAAM,aAAa,GAAG;AAC5C,YAAM,QAAQ,IAAI,YAAY;AAC9B,UAAI,MAAO,QAAO,IAAI,KAAK;AAAA,IAC7B;AAAA,EACF;AACA,SAAO;AACT;AAEA,SAAS,cAAc,WAAiD;AACtE,SAAO;AAAA,IACL,UAAU;AAAA,IACV,UAAU;AAAA,IACV,UAAU;AAAA,IACV,UAAU;AAAA,IACV,GAAG,UAAU;AAAA,IACb,GAAG,UAAU;AAAA,IACb,GAAG,UAAU,YAAY,QAAQ,CAAC,eAAe;AAC/C,aAAO;AAAA,QACL,WAAW;AAAA,QACX,WAAW;AAAA,QACX,GAAI,WAAW,cAAc,CAAC,WAAW,WAAW,IAAI,CAAC;AAAA,MAC3D;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAIA,SAAS,KAAK,YAA2D;AACvE,SAAO,WAAW,OAAwB,CAAC,SAAS,QAAQ;AAC1D,QAAI,CAAC,IAAK,QAAO;AACjB,QAAI,CAAC,WAAW,IAAI,QAAQ,QAAQ,MAAO,QAAO;AAClD,WAAO;AAAA,EACT,GAAG,IAAI;AACT;AAEA,SAAS,WACP,cACA,8BACA,WACiB;AACjB,MAAI,UAAU,aAAa,YAAY,MAAM,cAAc;AACzD,WAAO,EAAE,OAAO,KAAK,cAAc,eAAe;AAAA,EACpD;AACA,MAAI,UAAU,MAAM,YAAY,MAAM,cAAc;AAClD,WAAO,EAAE,OAAO,IAAI,cAAc,QAAQ;AAAA,EAC5C;AACA,aAAW,OAAO,UAAU,MAAM;AAChC,QAAI,gCAAgC,IAAI,SAAS,GAAG,EAAG;AACvD,QAAI,IAAI,YAAY,MAAM,cAAc;AACtC,aAAO,EAAE,OAAO,IAAI,cAAc,OAAO,GAAG,GAAG;AAAA,IACjD;AAAA,EACF;AACA,aAAW,kBAAkB,UAAU,YAAY;AACjD,QAAI,eAAe,YAAY,MAAM,cAAc;AACjD,aAAO,EAAE,OAAO,IAAI,cAAc,cAAc,cAAc,GAAG;AAAA,IACnE;AAAA,EACF;AACA,aAAW,cAAc,UAAU,aAAa;AAC9C,QAAI,WAAW,GAAG,YAAY,MAAM,cAAc;AAChD,aAAO,EAAE,OAAO,IAAI,cAAc,eAAe,WAAW,EAAE,GAAG;AAAA,IACnE;AACA,QAAI,WAAW,MAAM,YAAY,MAAM,cAAc;AACnD,aAAO,EAAE,OAAO,IAAI,cAAc,eAAe,WAAW,KAAK,GAAG;AAAA,IACtE;AAAA,EACF;AACA,MAAI,UAAU,SAAS,YAAY,MAAM,cAAc;AACrD,WAAO,EAAE,OAAO,IAAI,cAAc,WAAW;AAAA,EAC/C;AACA,SAAO;AACT;AAEA,SAAS,eACP,cACA,8BACA,WACiB;AACjB,QAAM,aAAyB,CAAC;AAChC,MAAI,UAAU,aAAa,YAAY,EAAE,SAAS,YAAY,GAAG;AAC/D,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,eAAe,CAAC;AAAA,EAC7D;AACA,MAAI,UAAU,MAAM,YAAY,EAAE,SAAS,YAAY,GAAG;AACxD,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,QAAQ,CAAC;AAAA,EACtD;AACA,aAAW,OAAO,UAAU,MAAM;AAChC,QAAI,gCAAgC,IAAI,SAAS,GAAG,EAAG;AACvD,QAAI,IAAI,YAAY,EAAE,SAAS,YAAY,GAAG;AAC5C,iBAAW,KAAK,EAAE,OAAO,IAAI,cAAc,OAAO,GAAG,GAAG,CAAC;AAAA,IAC3D;AAAA,EACF;AACA,aAAW,kBAAkB,UAAU,YAAY;AACjD,QAAI,eAAe,YAAY,EAAE,SAAS,YAAY,GAAG;AACvD,iBAAW,KAAK;AAAA,QACd,OAAO;AAAA,QACP,cAAc,cAAc,cAAc;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AACA,aAAW,cAAc,UAAU,aAAa;AAC9C,QACE,WAAW,GAAG,YAAY,EAAE,SAAS,YAAY,KACjD,WAAW,MAAM,YAAY,EAAE,SAAS,YAAY,GACpD;AACA,iBAAW,KAAK;AAAA,QACd,OAAO;AAAA,QACP,cAAc,eAAe,WAAW,EAAE;AAAA,MAC5C,CAAC;AAAA,IACH;AAAA,EACF;AACA,MAAI,UAAU,SAAS,YAAY,EAAE,SAAS,YAAY,GAAG;AAC3D,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,WAAW,CAAC;AAAA,EACzD;AACA,MAAI,UAAU,YAAY,YAAY,EAAE,SAAS,YAAY,GAAG;AAC9D,eAAW,KAAK,EAAE,OAAO,IAAI,cAAc,cAAc,CAAC;AAAA,EAC5D;AAEA,SAAO,KAAK,UAAU;AACxB;AAEA,SAAS,YACP,eACA,WACiB;AACjB,QAAM,kBAAkB,oBAAI,IAAY;AACxC,aAAW,UAAU,cAAc,SAAS,GAAG;AAC7C,eAAW,SAAS,SAAS,MAAM,GAAG;AACpC,sBAAgB,IAAI,KAAK;AAAA,IAC3B;AAAA,EACF;AAEA,MAAI,eAAe;AACnB,MAAI,cAAc;AAClB,aAAW,SAAS,eAAe;AACjC,QAAI,gBAAgB,IAAI,KAAK,GAAG;AAC9B;AACA,UAAI,CAAC,YAAa,eAAc;AAAA,IAClC;AAAA,EACF;AACA,MAAI,iBAAiB,EAAG,QAAO;AAC/B,SAAO,EAAE,OAAO,KAAK,cAAc,cAAc,SAAS,WAAW,GAAG;AAC1E;AAEA,SAAS,eACP,cACA,SACA,eACA,WACiB;AACjB,QAAM,+BACJ,kBAAkB,KAAK,OAAO,KAAK,QAAQ,SAAS,GAAG;AACzD,QAAM,WAAW,+BACb,OACA,YAAY,eAAe,SAAS;AACxC,QAAM,MAAM,KAAK;AAAA,IACf,WAAW,cAAc,8BAA8B,SAAS;AAAA,IAChE,eAAe,cAAc,8BAA8B,SAAS;AAAA,IACpE;AAAA,EACF,CAAC;AACD,MAAI,CAAC,OAAO,IAAI,QAAQ,UAAW,QAAO;AAC1C,SAAO;AACT;AAEO,SAAS,6BACd,YACA,SACA,OAC6B;AAC7B,QAAM,UAAU,QAAQ,KAAK;AAC7B,MAAI,CAAC,QAAS,QAAO,EAAE,SAAS,CAAC,GAAG,OAAO,EAAE;AAE7C,QAAM,eAAe,QAAQ,YAAY;AACzC,QAAM,gBAAgB,SAAS,OAAO;AACtC,QAAM,OAAO,WAAW;AAAA,IACtB,CAAC,cAA6C;AAC5C,YAAM,MAAM;AAAA,QACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI,CAAC,IAAK,QAAO,CAAC;AAClB,aAAO;AAAA,QACL;AAAA,UACE;AAAA,UACA,OAAO,IAAI;AAAA,UACX,cAAc,IAAI;AAAA,QACpB;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAEA,OAAK,KAAK,CAAC,GAAG,MAAM;AAClB,QAAI,EAAE,UAAU,EAAE,MAAO,QAAO,EAAE,QAAQ,EAAE;AAC5C,WAAO,EAAE,UAAU,aAAa,cAAc,EAAE,UAAU,YAAY;AAAA,EACxE,CAAC;AAED,SAAO;AAAA,IACL,SAAS,KAAK,MAAM,GAAG,KAAK;AAAA,IAC5B,OAAO,KAAK;AAAA,EACd;AACF;AAEO,SAAS,wBACd,YACA,eAC8B;AAC9B,QAAM,QAAQ,WAAW,KAAK,CAAC,cAAc;AAC3C,WAAO,UAAU,iBAAiB;AAAA,EACpC,CAAC;AACD,MAAI,MAAO,QAAO;AAElB,QAAM,QAAQ,cAAc,YAAY;AACxC,SACE,WAAW,KAAK,CAAC,cAAc;AAC7B,WAAO,UAAU,aAAa,YAAY,MAAM;AAAA,EAClD,CAAC,KAAK;AAEV;AAEO,SAAS,wBACd,YACQ;AACR,SAAO,WACJ,IAAI,CAAC,cAAc;AAClB,WAAO,UAAU;AAAA,EACnB,CAAC,EACA,KAAK,IAAI;AACd;AAEO,SAAS,6BACd,WACA,eACwC;AACxC,MAAI,eAAe;AACjB,UAAMA,cAAa,UAAU,YAAY,KAAK,CAAC,WAAW;AACxD,aAAO,OAAO,OAAO;AAAA,IACvB,CAAC;AACD,QAAI,CAACA,aAAY;AACf,YAAM,IAAI;AAAA,QACR,GAAG,UAAU,YAAY,4BAA4B,aAAa;AAAA,QAClE;AAAA,UACE,OAAO,IAAI;AAAA,YACT,2BAA2B,UAAU,YAClC,IAAI,CAAC,WAAW;AACf,qBAAO,OAAO;AAAA,YAChB,CAAC,EACA,KAAK,IAAI,CAAC;AAAA,UACf;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,QAAIA,YAAW,cAAc,UAAU;AACrC,aAAOA;AAAA,IACT;AAEA,UAAM,IAAI;AAAA,MACR,GAAG,UAAU,YAAY,IAAIA,YAAW,EAAE;AAAA,IAC5C;AAAA,EACF;AAEA,QAAM,oBAAoB,UAAU,YAAY,OAAO,CAAC,WAAW;AACjE,WAAO,OAAO,cAAc;AAAA,EAC9B,CAAC;AACD,QAAM,aAAa,kBAAkB,CAAC;AACtC,MAAI,kBAAkB,WAAW,KAAK,YAAY;AAChD,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,WAAW,GAAG;AAClC,UAAM,IAAI;AAAA,MACR,GAAG,UAAU,YAAY;AAAA,IAC3B;AAAA,EACF;AAEA,QAAM,IAAI;AAAA,IACR,GAAG,UAAU,YAAY;AAAA,IACzB;AAAA,MACE,OAAO,IAAI;AAAA,QACT,sBAAsB,kBACnB,IAAI,CAAC,WAAW;AACf,iBAAO,OAAO;AAAA,QAChB,CAAC,EACA,KAAK,GAAG,CAAC;AAAA,MACd;AAAA,IACF;AAAA,EACF;AACF;;;ACzTA;AAQA,eAAsB,oBACpB,aAC8B;AAC9B,QAAM,UAAU,eAAe,QAAQ,IAAI;AAC3C,MAAI,CAAC,QAAS,QAAO;AAErB,QAAM,CAAC,OAAO,qBAAqB,IAAI,MAAM,QAAQ,IAAI;AAAA,IACvD,aAAa,OAAO;AAAA,IACpB,2BAA2B,OAAO;AAAA,EACpC,CAAC;AAED,SAAO;AAAA,IACL,SAAS,MAAM;AAAA,IACf,aAAa,MAAM,eAAe,MAAM;AAAA,IACxC,0BAA0B,IAAI,IAAI,qBAAqB;AAAA,EACzD;AACF;","names":["authMethod"]}

package/{computer-use-PLMPMCUY.js → computer-use-JPDTT4KX.js}

@@ -12,12 +12,12 @@ import {
   fetchComputerUseScreenshot,
   getComputerUseCommand,
   listComputerUseHosts
-} from "./chunk-JQSR2FQW.js";
-import "./chunk-O2ZRRF6W.js";
+} from "./chunk-FLWE2Q4D.js";
+import "./chunk-A3GE6ETZ.js";
 import {
   ApiRequestError,
   withErrorHandler
-} from "./chunk-MIVNAXCC.js";
+} from "./chunk-DOYP2C2B.js";
 import "./chunk-MD3YWUKO.js";
 import {
   Command
@@ -970,4 +970,4 @@ export {
   formatComputerUseResultForConsole,
   zeroComputerUseCommand
 };
-//# sourceMappingURL=computer-use-PLMPMCUY.js.map
+//# sourceMappingURL=computer-use-JPDTT4KX.js.map