@vm0/cli 9.269.5 → 9.270.1

package/{chunk-ZUHSC7WF.js → chunk-MD3YWUKO.js}

@@ -7,19 +7,6 @@ import {
 
 // src/lib/api/zero-token.ts
 init_esm_shims();
-function normalizeZeroCapability(capability) {
-  switch (capability) {
-    case "chat-message:read": {
-      return "chat-event:read";
-    }
-    case "chat-message:write": {
-      return "chat-event:write";
-    }
-    default: {
-      return capability;
-    }
-  }
-}
 function decodeZeroTokenPayload(token) {
   const raw = token ?? process.env.ZERO_TOKEN;
   if (!raw) return void 0;
@@ -33,10 +20,7 @@ function decodeZeroTokenPayload(token) {
       Buffer.from(parts[1], "base64url").toString()
     );
     if (payload.scope === "zero" && Array.isArray(payload.capabilities)) {
-      return {
-        ...payload,
-        capabilities: payload.capabilities.map(normalizeZeroCapability)
-      };
+      return payload;
     }
   } catch {
   }
@@ -46,4 +30,4 @@ function decodeZeroTokenPayload(token) {
 export {
   decodeZeroTokenPayload
 };
-//# sourceMappingURL=chunk-ZUHSC7WF.js.map
+//# sourceMappingURL=chunk-MD3YWUKO.js.map

package/chunk-MD3YWUKO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/api/zero-token.ts"],"sourcesContent":["import type { FeatureSwitchKey } from \"@vm0/core/feature-switch-key\";\n\nexport interface ZeroTokenPayload {\n  userId: string;\n  runId: string;\n  orgId: string;\n  scope: string;\n  capabilities: string[];\n  featureSwitchOverrides?: Partial<Record<FeatureSwitchKey, boolean>>;\n  iat: number;\n  exp: number;\n}\n\n/**\n * Decode a ZERO_TOKEN JWT payload.\n * Only decodes — does NOT verify signature (server does that).\n * If no token is provided, reads from process.env.ZERO_TOKEN.\n * Returns undefined if token is missing, malformed, or not a zero-scoped token.\n */\nexport function decodeZeroTokenPayload(\n  token?: string,\n): ZeroTokenPayload | undefined {\n  const raw = token ?? process.env.ZERO_TOKEN;\n  if (!raw) return undefined;\n\n  const prefix = \"vm0_sandbox_\";\n  if (!raw.startsWith(prefix)) return undefined;\n  const jwt = raw.slice(prefix.length);\n\n  const parts = jwt.split(\".\");\n  if (parts.length !== 3) return undefined;\n\n  try {\n    const payload = JSON.parse(\n      Buffer.from(parts[1]!, \"base64url\").toString(),\n    ) as ZeroTokenPayload;\n    if (payload.scope === \"zero\" && Array.isArray(payload.capabilities)) {\n      return payload;\n    }\n  } catch {\n    // Malformed token — fall through\n  }\n  return undefined;\n}\n"],"mappings":";;;;;;;;AAAA;AAmBO,SAAS,uBACd,OAC8B;AAC9B,QAAM,MAAM,SAAS,QAAQ,IAAI;AACjC,MAAI,CAAC,IAAK,QAAO;AAEjB,QAAM,SAAS;AACf,MAAI,CAAC,IAAI,WAAW,MAAM,EAAG,QAAO;AACpC,QAAM,MAAM,IAAI,MAAM,OAAO,MAAM;AAEnC,QAAM,QAAQ,IAAI,MAAM,GAAG;AAC3B,MAAI,MAAM,WAAW,EAAG,QAAO;AAE/B,MAAI;AACF,UAAM,UAAU,KAAK;AAAA,MACnB,OAAO,KAAK,MAAM,CAAC,GAAI,WAAW,EAAE,SAAS;AAAA,IAC/C;AACA,QAAI,QAAQ,UAAU,UAAU,MAAM,QAAQ,QAAQ,YAAY,GAAG;AACnE,aAAO;AAAA,IACT;AAAA,EACF,QAAQ;AAAA,EAER;AACA,SAAO;AACT;","names":[]}

package/{chunk-IYGQB2IF.js → chunk-NGDZ3M3I.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   decodeZeroTokenPayload
-} from "./chunk-ZUHSC7WF.js";
+} from "./chunk-MD3YWUKO.js";
 import {
   init_esm_shims
 } from "./chunk-GPYQ24DR.js";
@@ -29,4 +29,4 @@ export {
   currentPlanAllowsVideo,
   currentTokenCanReadBilling
 };
-//# sourceMappingURL=chunk-IYGQB2IF.js.map
+//# sourceMappingURL=chunk-NGDZ3M3I.js.map