@vm0/cli 9.75.0 → 9.75.2

package/index.js

@@ -47,7 +47,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.75.0",
+    release: "9.75.2",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -66,7 +66,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.75.0",
+    version: "9.75.2",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -7508,6 +7508,202 @@ var confluenceFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/figma.generated.ts
+var figmaFirewall = {
+  name: "figma",
+  description: "Figma API",
+  placeholders: {
+    FIGMA_TOKEN: "figd_Vm0PlaceHolder00000000000000000000000000"
+  },
+  apis: [
+    {
+      base: "https://api.figma.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.FIGMA_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all endpoints",
+          rules: ["ANY /{path*}"]
+        },
+        {
+          name: "current_user:read",
+          description: "Read your name, email, and profile image.",
+          rules: ["GET /v1/me"]
+        },
+        {
+          name: "file_comments:read",
+          description: "Read the comments for files.",
+          rules: [
+            "GET /v1/files/{file_key}/comments",
+            "GET /v1/files/{file_key}/comments/{comment_id}/reactions"
+          ]
+        },
+        {
+          name: "file_comments:write",
+          description: "Post and delete comments and comment reactions in files.",
+          rules: [
+            "POST /v1/files/{file_key}/comments",
+            "DELETE /v1/files/{file_key}/comments/{comment_id}",
+            "POST /v1/files/{file_key}/comments/{comment_id}/reactions",
+            "DELETE /v1/files/{file_key}/comments/{comment_id}/reactions"
+          ]
+        },
+        {
+          name: "file_content:read",
+          description: "Read the contents of files, such as nodes and the editor type.",
+          rules: [
+            "GET /v1/files/{file_key}",
+            "GET /v1/files/{file_key}/images",
+            "GET /v1/files/{file_key}/nodes",
+            "GET /v1/images/{file_key}"
+          ]
+        },
+        {
+          name: "file_dev_resources:read",
+          description: "Read dev resources in files.",
+          rules: ["GET /v1/files/{file_key}/dev_resources"]
+        },
+        {
+          name: "file_dev_resources:write",
+          description: "Write to dev resources in files.",
+          rules: [
+            "POST /v1/dev_resources",
+            "PUT /v1/dev_resources",
+            "DELETE /v1/files/{file_key}/dev_resources/{dev_resource_id}"
+          ]
+        },
+        {
+          name: "file_metadata:read",
+          description: "Read metadata of files.",
+          rules: ["GET /v1/files/{file_key}/meta"]
+        },
+        {
+          name: "file_variables:read",
+          description: "Read variables in Figma file. Note: this is only available to members in Enterprise organizations.",
+          rules: [
+            "GET /v1/files/{file_key}/variables/local",
+            "GET /v1/files/{file_key}/variables/published"
+          ]
+        },
+        {
+          name: "file_variables:write",
+          description: "Write to variables in Figma file. Note: this is only available to members in Enterprise organizations.",
+          rules: ["POST /v1/files/{file_key}/variables"]
+        },
+        {
+          name: "file_versions:read",
+          description: "Read the version history for files you can access.",
+          rules: ["GET /v1/files/{file_key}/versions"]
+        },
+        {
+          name: "files:read",
+          description: "Deprecated. Read files, projects, users, versions, comments, components & styles, and webhooks.",
+          rules: [
+            "GET /v1/component_sets/{key}",
+            "GET /v1/components/{key}",
+            "GET /v1/files/{file_key}",
+            "GET /v1/files/{file_key}/comments",
+            "GET /v1/files/{file_key}/comments/{comment_id}/reactions",
+            "GET /v1/files/{file_key}/component_sets",
+            "GET /v1/files/{file_key}/components",
+            "GET /v1/files/{file_key}/images",
+            "GET /v1/files/{file_key}/meta",
+            "GET /v1/files/{file_key}/nodes",
+            "GET /v1/files/{file_key}/styles",
+            "GET /v1/files/{file_key}/versions",
+            "GET /v1/images/{file_key}",
+            "GET /v1/me",
+            "GET /v1/projects/{project_id}/files",
+            "GET /v1/styles/{key}",
+            "GET /v1/teams/{team_id}/component_sets",
+            "GET /v1/teams/{team_id}/components",
+            "GET /v1/teams/{team_id}/projects",
+            "GET /v1/teams/{team_id}/styles",
+            "GET /v2/teams/{team_id}/webhooks",
+            "GET /v2/webhooks/{webhook_id}",
+            "GET /v2/webhooks/{webhook_id}/requests"
+          ]
+        },
+        {
+          name: "library_analytics:read",
+          description: "Read library analytics data.",
+          rules: [
+            "GET /v1/analytics/libraries/{file_key}/component/actions",
+            "GET /v1/analytics/libraries/{file_key}/component/usages",
+            "GET /v1/analytics/libraries/{file_key}/style/actions",
+            "GET /v1/analytics/libraries/{file_key}/style/usages",
+            "GET /v1/analytics/libraries/{file_key}/variable/actions",
+            "GET /v1/analytics/libraries/{file_key}/variable/usages"
+          ]
+        },
+        {
+          name: "library_assets:read",
+          description: "Read data of individual published components and styles.",
+          rules: [
+            "GET /v1/component_sets/{key}",
+            "GET /v1/components/{key}",
+            "GET /v1/styles/{key}"
+          ]
+        },
+        {
+          name: "library_content:read",
+          description: "Read published components and styles of files.",
+          rules: [
+            "GET /v1/files/{file_key}/component_sets",
+            "GET /v1/files/{file_key}/components",
+            "GET /v1/files/{file_key}/styles"
+          ]
+        },
+        {
+          name: "org:activity_log_read",
+          description: "Read activity logs in the organization.",
+          rules: ["GET /v1/activity_logs"]
+        },
+        {
+          name: "projects:read",
+          description: "List projects and files in projects.",
+          rules: [
+            "GET /v1/projects/{project_id}/files",
+            "GET /v1/teams/{team_id}/projects"
+          ]
+        },
+        {
+          name: "team_library_content:read",
+          description: "Read published components and styles of teams.",
+          rules: [
+            "GET /v1/teams/{team_id}/component_sets",
+            "GET /v1/teams/{team_id}/components",
+            "GET /v1/teams/{team_id}/styles"
+          ]
+        },
+        {
+          name: "webhooks:read",
+          description: "Read metadata of webhooks.",
+          rules: [
+            "GET /v2/teams/{team_id}/webhooks",
+            "GET /v2/webhooks",
+            "GET /v2/webhooks/{webhook_id}",
+            "GET /v2/webhooks/{webhook_id}/requests"
+          ]
+        },
+        {
+          name: "webhooks:write",
+          description: "Create and manage webhooks.",
+          rules: [
+            "POST /v2/webhooks",
+            "PUT /v2/webhooks/{webhook_id}",
+            "DELETE /v2/webhooks/{webhook_id}"
+          ]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/github.generated.ts
 var githubFirewall = {
   name: "github",
@@ -11329,6 +11525,99 @@ var jiraFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/notion.generated.ts
+var notionFirewall = {
+  name: "notion",
+  description: "Notion API",
+  placeholders: {
+    NOTION_TOKEN: "ntn_00000000000Vm0PlaceHolder000000000000000000Aaa"
+  },
+  apis: [
+    {
+      base: "https://api.notion.com/v1",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.NOTION_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all endpoints",
+          rules: ["ANY /{path*}"]
+        },
+        {
+          name: "insert_comments",
+          description: "Create comments",
+          rules: ["POST /comments"]
+        },
+        {
+          name: "insert_content",
+          description: "Create pages, databases, blocks, data sources, and upload files",
+          rules: [
+            "PATCH /blocks/{block_id}/children",
+            "POST /data_sources",
+            "POST /databases",
+            "POST /file_uploads",
+            "POST /file_uploads/{file_upload_id}/complete",
+            "POST /file_uploads/{file_upload_id}/send",
+            "POST /pages",
+            "POST /views",
+            "POST /views/{view_id}/queries"
+          ]
+        },
+        {
+          name: "read_comments",
+          description: "Read comments",
+          rules: ["GET /comments", "GET /comments/{comment_id}"]
+        },
+        {
+          name: "read_content",
+          description: "Read pages, databases, blocks, data sources, and files",
+          rules: [
+            "GET /blocks/{block_id}",
+            "GET /blocks/{block_id}/children",
+            "GET /data_sources/{data_source_id}",
+            "POST /data_sources/{data_source_id}/query",
+            "GET /data_sources/{data_source_id}/templates",
+            "GET /databases/{database_id}",
+            "GET /file_uploads",
+            "GET /file_uploads/{file_upload_id}",
+            "GET /pages/{page_id}",
+            "GET /pages/{page_id}/markdown",
+            "GET /pages/{page_id}/properties/{property_id}",
+            "POST /search",
+            "GET /views",
+            "GET /views/{view_id}",
+            "GET /views/{view_id}/queries/{query_id}"
+          ]
+        },
+        {
+          name: "read_users",
+          description: "Read user information",
+          rules: ["GET /users", "GET /users/me", "GET /users/{user_id}"]
+        },
+        {
+          name: "update_content",
+          description: "Update and delete pages, databases, blocks, and data sources",
+          rules: [
+            "PATCH /blocks/{block_id}",
+            "DELETE /blocks/{block_id}",
+            "PATCH /data_sources/{data_source_id}",
+            "PATCH /databases/{database_id}",
+            "PATCH /pages/{page_id}",
+            "PATCH /pages/{page_id}/markdown",
+            "POST /pages/{page_id}/move",
+            "PATCH /views/{view_id}",
+            "DELETE /views/{view_id}",
+            "DELETE /views/{view_id}/queries/{query_id}"
+          ]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/slack.generated.ts
 var slackFirewall = {
   name: "slack",
@@ -12160,6 +12449,7 @@ var slackFirewall = {
 // ../../packages/core/src/firewalls/index.ts
 var builtinFirewalls = {
   confluence: confluenceFirewall,
+  figma: figmaFirewall,
   github: githubFirewall,
   gmail: gmailFirewall,
   "google-calendar": googleCalendarFirewall,
@@ -12167,6 +12457,7 @@ var builtinFirewalls = {
   "google-drive": googleDriveFirewall,
   "google-sheets": googleSheetsFirewall,
   jira: jiraFirewall,
+  notion: notionFirewall,
   slack: slackFirewall
 };
 
@@ -12800,6 +13091,16 @@ var zeroAgentsMainContract = c27.router({
       422: apiErrorSchema
     },
     summary: "Create zero agent"
+  },
+  list: {
+    method: "GET",
+    path: "/api/zero/agents",
+    headers: authHeadersSchema,
+    responses: {
+      200: z31.array(zeroAgentResponseSchema),
+      401: apiErrorSchema
+    },
+    summary: "List zero agents"
   }
 });
 var zeroAgentsByNameContract = c27.router({
@@ -12829,6 +13130,19 @@ var zeroAgentsByNameContract = c27.router({
       422: apiErrorSchema
     },
     summary: "Update zero agent"
+  },
+  delete: {
+    method: "DELETE",
+    path: "/api/zero/agents/:name",
+    headers: authHeadersSchema,
+    pathParams: z31.object({ name: z31.string() }),
+    body: c27.noBody(),
+    responses: {
+      204: c27.noBody(),
+      401: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Delete zero agent by name"
   }
 });
 var zeroAgentInstructionsContract = c27.router({
@@ -12992,9 +13306,25 @@ var zeroOrgDeleteContract = c29.router({
   }
 });
 
-// ../../packages/core/src/contracts/zero-org-members.ts
+// ../../packages/core/src/contracts/zero-org-list.ts
 var c30 = initContract();
-var zeroOrgMembersContract = c30.router({
+var zeroOrgListContract = c30.router({
+  list: {
+    method: "GET",
+    path: "/api/zero/org/list",
+    headers: authHeadersSchema,
+    responses: {
+      200: orgListResponseSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "List all accessible orgs for the authenticated user"
+  }
+});
+
+// ../../packages/core/src/contracts/zero-org-members.ts
+var c31 = initContract();
+var zeroOrgMembersContract = c31.router({
   members: {
     method: "GET",
     path: "/api/zero/org/members",
@@ -13038,7 +13368,7 @@ var zeroOrgMembersContract = c30.router({
     summary: "Remove a member from the org (zero proxy)"
   }
 });
-var zeroOrgInviteContract = c30.router({
+var zeroOrgInviteContract = c31.router({
   invite: {
     method: "POST",
     path: "/api/zero/org/invite",
@@ -13057,8 +13387,8 @@ var zeroOrgInviteContract = c30.router({
 
 // ../../packages/core/src/contracts/zero-composes.ts
 import { z as z34 } from "zod";
-var c31 = initContract();
-var zeroComposesMainContract = c31.router({
+var c32 = initContract();
+var zeroComposesMainContract = c32.router({
   getByName: {
     method: "GET",
     path: "/api/zero/composes",
@@ -13076,7 +13406,7 @@ var zeroComposesMainContract = c31.router({
     summary: "Get agent compose by name (zero proxy)"
   }
 });
-var zeroComposesByIdContract = c31.router({
+var zeroComposesByIdContract = c32.router({
   getById: {
     method: "GET",
     path: "/api/zero/composes/:id",
@@ -13099,9 +13429,9 @@ var zeroComposesByIdContract = c31.router({
     pathParams: z34.object({
       id: z34.string().uuid("Compose ID is required")
     }),
-    body: c31.noBody(),
+    body: c32.noBody(),
     responses: {
-      204: c31.noBody(),
+      204: c32.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -13110,7 +13440,7 @@ var zeroComposesByIdContract = c31.router({
     summary: "Delete agent compose (zero proxy)"
   }
 });
-var zeroComposesListContract = c31.router({
+var zeroComposesListContract = c32.router({
   list: {
     method: "GET",
     path: "/api/zero/composes/list",
@@ -13142,8 +13472,8 @@ var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   vars: true,
   secrets: true
 });
-var c32 = initContract();
-var zeroRunsMainContract = c32.router({
+var c33 = initContract();
+var zeroRunsMainContract = c33.router({
   create: {
     method: "POST",
     path: "/api/zero/runs",
@@ -13159,7 +13489,7 @@ var zeroRunsMainContract = c32.router({
     summary: "Create and execute agent run (zero proxy)"
   }
 });
-var zeroRunsByIdContract = c32.router({
+var zeroRunsByIdContract = c33.router({
   getById: {
     method: "GET",
     path: "/api/zero/runs/:id",
@@ -13176,7 +13506,7 @@ var zeroRunsByIdContract = c32.router({
     summary: "Get agent run by ID (zero proxy)"
   }
 });
-var zeroRunsCancelContract = c32.router({
+var zeroRunsCancelContract = c33.router({
   cancel: {
     method: "POST",
     path: "/api/zero/runs/:id/cancel",
@@ -13195,7 +13525,7 @@ var zeroRunsCancelContract = c32.router({
     summary: "Cancel a pending or running run (zero proxy)"
   }
 });
-var zeroRunsQueueContract = c32.router({
+var zeroRunsQueueContract = c33.router({
   getQueue: {
     method: "GET",
     path: "/api/zero/runs/queue",
@@ -13208,7 +13538,7 @@ var zeroRunsQueueContract = c32.router({
     summary: "Get org run queue status (zero proxy)"
   }
 });
-var zeroRunAgentEventsContract = c32.router({
+var zeroRunAgentEventsContract = c33.router({
   getAgentEvents: {
     method: "GET",
     path: "/api/zero/runs/:id/telemetry/agent",
@@ -13232,8 +13562,8 @@ var zeroRunAgentEventsContract = c32.router({
 
 // ../../packages/core/src/contracts/zero-schedules.ts
 import { z as z36 } from "zod";
-var c33 = initContract();
-var zeroSchedulesMainContract = c33.router({
+var c34 = initContract();
+var zeroSchedulesMainContract = c34.router({
   deploy: {
     method: "POST",
     path: "/api/zero/schedules",
@@ -13261,7 +13591,7 @@ var zeroSchedulesMainContract = c33.router({
     summary: "List all schedules (zero proxy)"
   }
 });
-var zeroSchedulesByNameContract = c33.router({
+var zeroSchedulesByNameContract = c34.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/schedules/:name",
@@ -13273,7 +13603,7 @@ var zeroSchedulesByNameContract = c33.router({
       composeId: z36.string().uuid("Compose ID required")
     }),
     responses: {
-      204: c33.noBody(),
+      204: c34.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -13281,7 +13611,7 @@ var zeroSchedulesByNameContract = c33.router({
     summary: "Delete schedule (zero proxy)"
   }
 });
-var zeroSchedulesEnableContract = c33.router({
+var zeroSchedulesEnableContract = c34.router({
   enable: {
     method: "POST",
     path: "/api/zero/schedules/:name/enable",
@@ -13324,8 +13654,8 @@ var zeroSchedulesEnableContract = c33.router({
 
 // ../../packages/core/src/contracts/zero-model-providers.ts
 import { z as z37 } from "zod";
-var c34 = initContract();
-var zeroModelProvidersMainContract = c34.router({
+var c35 = initContract();
+var zeroModelProvidersMainContract = c35.router({
   list: {
     method: "GET",
     path: "/api/zero/model-providers",
@@ -13353,7 +13683,7 @@ var zeroModelProvidersMainContract = c34.router({
     summary: "Create or update an org-level model provider (admin only)"
   }
 });
-var zeroModelProvidersByTypeContract = c34.router({
+var zeroModelProvidersByTypeContract = c35.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/model-providers/:type",
@@ -13362,7 +13692,7 @@ var zeroModelProvidersByTypeContract = c34.router({
       type: modelProviderTypeSchema
     }),
     responses: {
-      204: c34.noBody(),
+      204: c35.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -13371,7 +13701,7 @@ var zeroModelProvidersByTypeContract = c34.router({
     summary: "Delete an org-level model provider (admin only)"
   }
 });
-var zeroModelProvidersDefaultContract = c34.router({
+var zeroModelProvidersDefaultContract = c35.router({
   setDefault: {
     method: "POST",
     path: "/api/zero/model-providers/:type/default",
@@ -13390,7 +13720,7 @@ var zeroModelProvidersDefaultContract = c34.router({
     summary: "Set org-level model provider as default (admin only)"
   }
 });
-var zeroModelProvidersUpdateModelContract = c34.router({
+var zeroModelProvidersUpdateModelContract = c35.router({
   updateModel: {
     method: "PATCH",
     path: "/api/zero/model-providers/:type/model",
@@ -13411,8 +13741,8 @@ var zeroModelProvidersUpdateModelContract = c34.router({
 });
 
 // ../../packages/core/src/contracts/zero-user-preferences.ts
-var c35 = initContract();
-var zeroUserPreferencesContract = c35.router({
+var c36 = initContract();
+var zeroUserPreferencesContract = c36.router({
   get: {
     method: "GET",
     path: "/api/zero/user-preferences",
@@ -13440,8 +13770,20 @@ var zeroUserPreferencesContract = c35.router({
 });
 
 // ../../packages/core/src/contracts/zero-secrets.ts
-var c36 = initContract();
-var zeroSecretsContract = c36.router({
+import { z as z38 } from "zod";
+var c37 = initContract();
+var zeroSecretsContract = c37.router({
+  list: {
+    method: "GET",
+    path: "/api/zero/secrets",
+    headers: authHeadersSchema,
+    responses: {
+      200: secretListResponseSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "List all secrets (metadata only)"
+  },
   set: {
     method: "POST",
     path: "/api/zero/secrets",
@@ -13457,7 +13799,35 @@ var zeroSecretsContract = c36.router({
     summary: "Create or update a secret"
   }
 });
-var zeroVariablesContract = c36.router({
+var zeroSecretsByNameContract = c37.router({
+  delete: {
+    method: "DELETE",
+    path: "/api/zero/secrets/:name",
+    headers: authHeadersSchema,
+    pathParams: z38.object({
+      name: secretNameSchema
+    }),
+    responses: {
+      204: c37.noBody(),
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Delete a secret by name"
+  }
+});
+var zeroVariablesContract = c37.router({
+  list: {
+    method: "GET",
+    path: "/api/zero/variables",
+    headers: authHeadersSchema,
+    responses: {
+      200: variableListResponseSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "List all variables (includes values)"
+  },
   set: {
     method: "POST",
     path: "/api/zero/variables",
@@ -13473,17 +13843,34 @@ var zeroVariablesContract = c36.router({
     summary: "Create or update a variable"
   }
 });
+var zeroVariablesByNameContract = c37.router({
+  delete: {
+    method: "DELETE",
+    path: "/api/zero/variables/:name",
+    headers: authHeadersSchema,
+    pathParams: z38.object({
+      name: variableNameSchema
+    }),
+    responses: {
+      204: c37.noBody(),
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Delete a variable by name"
+  }
+});
 
 // ../../packages/core/src/contracts/zero-sessions.ts
-import { z as z38 } from "zod";
-var c37 = initContract();
-var zeroSessionsByIdContract = c37.router({
+import { z as z39 } from "zod";
+var c38 = initContract();
+var zeroSessionsByIdContract = c38.router({
   getById: {
     method: "GET",
     path: "/api/zero/sessions/:id",
     headers: authHeadersSchema,
-    pathParams: z38.object({
-      id: z38.string().min(1, "Session ID is required")
+    pathParams: z39.object({
+      id: z39.string().min(1, "Session ID is required")
     }),
     responses: {
       200: sessionResponseSchema,
@@ -13496,24 +13883,24 @@ var zeroSessionsByIdContract = c37.router({
 });
 
 // ../../packages/core/src/contracts/integrations.ts
-import { z as z39 } from "zod";
-var c38 = initContract();
-var integrationsSlackMessageContract = c38.router({
+import { z as z40 } from "zod";
+var c39 = initContract();
+var integrationsSlackMessageContract = c39.router({
   sendMessage: {
     method: "POST",
     path: "/api/agent/integrations/slack/message",
     headers: authHeadersSchema,
-    body: z39.object({
-      channel: z39.string().min(1, "Channel ID is required"),
-      text: z39.string().optional(),
-      threadTs: z39.string().optional(),
-      blocks: z39.array(z39.object({ type: z39.string() }).passthrough()).optional()
+    body: z40.object({
+      channel: z40.string().min(1, "Channel ID is required"),
+      text: z40.string().optional(),
+      threadTs: z40.string().optional(),
+      blocks: z40.array(z40.object({ type: z40.string() }).passthrough()).optional()
     }),
     responses: {
-      200: z39.object({
-        ok: z39.literal(true),
-        ts: z39.string().optional(),
-        channel: z39.string().optional()
+      200: z40.object({
+        ok: z40.literal(true),
+        ts: z40.string().optional(),
+        channel: z40.string().optional()
       }),
       400: apiErrorSchema,
       401: apiErrorSchema,
@@ -13524,6 +13911,147 @@ var integrationsSlackMessageContract = c38.router({
   }
 });
 
+// ../../packages/core/src/contracts/zero-billing.ts
+import { z as z41 } from "zod";
+var c40 = initContract();
+var autoRechargeSchema = z41.object({
+  enabled: z41.boolean(),
+  threshold: z41.number().nullable(),
+  amount: z41.number().nullable()
+});
+var billingStatusResponseSchema = z41.object({
+  tier: z41.string(),
+  credits: z41.number(),
+  subscriptionStatus: z41.string().nullable(),
+  currentPeriodEnd: z41.string().nullable(),
+  hasSubscription: z41.boolean(),
+  autoRecharge: autoRechargeSchema
+});
+var checkoutResponseSchema = z41.object({
+  url: z41.string()
+});
+var portalResponseSchema = z41.object({
+  url: z41.string()
+});
+var checkoutRequestSchema = z41.object({
+  tier: z41.enum(["pro", "team"]),
+  successUrl: z41.string().url(),
+  cancelUrl: z41.string().url()
+});
+var portalRequestSchema = z41.object({
+  returnUrl: z41.string().min(1)
+});
+var autoRechargeUpdateRequestSchema = z41.object({
+  enabled: z41.boolean(),
+  threshold: z41.number().int().positive().optional(),
+  amount: z41.number().int().min(1e3).optional()
+});
+var zeroBillingStatusContract = c40.router({
+  get: {
+    method: "GET",
+    path: "/api/zero/billing/status",
+    headers: authHeadersSchema,
+    responses: {
+      200: billingStatusResponseSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Get billing status for current org"
+  }
+});
+var zeroBillingCheckoutContract = c40.router({
+  create: {
+    method: "POST",
+    path: "/api/zero/billing/checkout",
+    headers: authHeadersSchema,
+    body: checkoutRequestSchema,
+    responses: {
+      200: checkoutResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema,
+      503: apiErrorSchema
+    },
+    summary: "Create Stripe checkout session"
+  }
+});
+var zeroBillingPortalContract = c40.router({
+  create: {
+    method: "POST",
+    path: "/api/zero/billing/portal",
+    headers: authHeadersSchema,
+    body: portalRequestSchema,
+    responses: {
+      200: portalResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema,
+      503: apiErrorSchema
+    },
+    summary: "Create Stripe billing portal session"
+  }
+});
+var zeroBillingAutoRechargeContract = c40.router({
+  get: {
+    method: "GET",
+    path: "/api/zero/billing/auto-recharge",
+    headers: authHeadersSchema,
+    responses: {
+      200: autoRechargeSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Get auto-recharge configuration"
+  },
+  update: {
+    method: "PUT",
+    path: "/api/zero/billing/auto-recharge",
+    headers: authHeadersSchema,
+    body: autoRechargeUpdateRequestSchema,
+    responses: {
+      200: autoRechargeSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Update auto-recharge configuration"
+  }
+});
+
+// ../../packages/core/src/contracts/zero-usage.ts
+import { z as z42 } from "zod";
+var c41 = initContract();
+var memberUsageSchema = z42.object({
+  userId: z42.string(),
+  email: z42.string(),
+  inputTokens: z42.number(),
+  outputTokens: z42.number(),
+  cacheReadInputTokens: z42.number(),
+  cacheCreationInputTokens: z42.number(),
+  creditsCharged: z42.number()
+});
+var usageMembersResponseSchema = z42.object({
+  period: z42.object({
+    start: z42.string(),
+    end: z42.string()
+  }).nullable(),
+  members: z42.array(memberUsageSchema)
+});
+var zeroUsageMembersContract = c41.router({
+  get: {
+    method: "GET",
+    path: "/api/zero/usage/members",
+    headers: authHeadersSchema,
+    responses: {
+      200: usageMembersResponseSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Get per-member usage for current billing period"
+  }
+});
+
 // ../../packages/core/src/storage-names.ts
 function getInstructionsStorageName(agentName) {
   return `agent-instructions@${agentName}`;
@@ -14163,7 +14691,7 @@ function getConfigPath() {
   return join2(homedir2(), ".vm0", "config.json");
 }
 var infoCommand = new Command6().name("info").description("Display environment and debug information").action(async () => {
-  console.log(chalk4.bold(`VM0 CLI v${"9.75.0"}`));
+  console.log(chalk4.bold(`VM0 CLI v${"9.75.2"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -14923,8 +15451,8 @@ async function resolveSkills(skillUrls) {
 }
 
 // src/lib/domain/yaml-validator.ts
-import { z as z40 } from "zod";
-var cliAgentNameSchema = z40.string().min(3, "Agent name must be at least 3 characters").max(64, "Agent name must be 64 characters or less").regex(
+import { z as z43 } from "zod";
+var cliAgentNameSchema = z43.string().min(3, "Agent name must be at least 3 characters").max(64, "Agent name must be 64 characters or less").regex(
   /^[a-zA-Z0-9]([a-zA-Z0-9-]{0,62}[a-zA-Z0-9])?$/,
   "Agent name must start and end with letter or number, and contain only letters, numbers, and hyphens"
 );
@@ -14938,7 +15466,7 @@ var cliAgentDefinitionSchema = agentDefinitionSchema.superRefine(
             resolveSkillRef(skillRef);
           } catch (error) {
             ctx.addIssue({
-              code: z40.ZodIssueCode.custom,
+              code: z43.ZodIssueCode.custom,
               message: error instanceof Error ? error.message : `Invalid skill reference: ${skillRef}`,
               path: ["skills", i]
             });
@@ -14948,15 +15476,15 @@ var cliAgentDefinitionSchema = agentDefinitionSchema.superRefine(
     }
   }
 );
-var cliComposeSchema = z40.object({
-  version: z40.string().min(1, "Missing config.version"),
-  agents: z40.record(cliAgentNameSchema, cliAgentDefinitionSchema),
-  volumes: z40.record(z40.string(), volumeConfigSchema).optional()
+var cliComposeSchema = z43.object({
+  version: z43.string().min(1, "Missing config.version"),
+  agents: z43.record(cliAgentNameSchema, cliAgentDefinitionSchema),
+  volumes: z43.record(z43.string(), volumeConfigSchema).optional()
 }).superRefine((config, ctx) => {
   const agentKeys = Object.keys(config.agents);
   if (agentKeys.length === 0) {
     ctx.addIssue({
-      code: z40.ZodIssueCode.custom,
+      code: z43.ZodIssueCode.custom,
       message: "agents must have at least one agent defined",
       path: ["agents"]
     });
@@ -14964,7 +15492,7 @@ var cliComposeSchema = z40.object({
   }
   if (agentKeys.length > 1) {
     ctx.addIssue({
-      code: z40.ZodIssueCode.custom,
+      code: z43.ZodIssueCode.custom,
       message: "Multiple agents not supported yet. Only one agent allowed.",
       path: ["agents"]
     });
@@ -14976,7 +15504,7 @@ var cliComposeSchema = z40.object({
   if (agentVolumes && agentVolumes.length > 0) {
     if (!config.volumes) {
       ctx.addIssue({
-        code: z40.ZodIssueCode.custom,
+        code: z43.ZodIssueCode.custom,
         message: "Agent references volumes but no volumes section defined. Each volume must have explicit name and version.",
         path: ["volumes"]
       });
@@ -14986,7 +15514,7 @@ var cliComposeSchema = z40.object({
       const parts = volDeclaration.split(":");
       if (parts.length !== 2) {
         ctx.addIssue({
-          code: z40.ZodIssueCode.custom,
+          code: z43.ZodIssueCode.custom,
           message: `Invalid volume declaration: ${volDeclaration}. Expected format: volume-key:/mount/path`,
           path: ["agents", agentName, "volumes"]
         });
@@ -14995,7 +15523,7 @@ var cliComposeSchema = z40.object({
       const volumeKey = parts[0].trim();
       if (!config.volumes[volumeKey]) {
         ctx.addIssue({
-          code: z40.ZodIssueCode.custom,
+          code: z43.ZodIssueCode.custom,
           message: `Volume "${volumeKey}" is not defined in volumes section. Each volume must have explicit name and version.`,
           path: ["volumes", volumeKey]
         });
@@ -16194,7 +16722,7 @@ var composeCommand = new Command7().name("compose").description("Create or updat
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.75.0");
+        await startSilentUpgrade("9.75.2");
       }
       try {
         let result;
@@ -17029,7 +17557,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.75.0");
+        await startSilentUpgrade("9.75.2");
       }
       const { org, name, version } = parseIdentifier(identifier);
       let composeId;
@@ -18785,7 +19313,7 @@ var cookAction = new Command35().name("cook").description("Quick start: prepare,
   withErrorHandler(
     async (prompt, options) => {
       if (options.autoUpdate !== false) {
-        const shouldExit = await checkAndUpgrade("9.75.0", prompt);
+        const shouldExit = await checkAndUpgrade("9.75.2", prompt);
         if (shouldExit) {
           process.exit(0);
         }
@@ -21147,7 +21675,7 @@ var listCommand9 = new Command65().name("list").alias("ls").description("List al
       );
       return;
     }
-    const nameWidth = Math.max(4, ...data.composes.map((c39) => c39.name.length));
+    const nameWidth = Math.max(4, ...data.composes.map((c42) => c42.name.length));
     const header = ["NAME".padEnd(nameWidth), "VERSION", "UPDATED"].join(
       "  "
     );
@@ -21745,7 +22273,7 @@ async function gatherFrequency(optionFrequency, existingFrequency) {
   if (!isInteractive()) {
     throw new Error("--frequency is required (daily|weekly|monthly|once|loop)");
   }
-  const defaultIndex = existingFrequency ? FREQUENCY_CHOICES.findIndex((c39) => c39.value === existingFrequency) : 0;
+  const defaultIndex = existingFrequency ? FREQUENCY_CHOICES.findIndex((c42) => c42.value === existingFrequency) : 0;
   frequency = await promptSelect(
     "Schedule frequency",
     FREQUENCY_CHOICES,
@@ -21770,7 +22298,7 @@ async function gatherDay(frequency, optionDay, existingDay) {
     throw new Error("--day is required for weekly/monthly");
   }
   if (frequency === "weekly") {
-    const defaultDayIndex = existingDay !== void 0 ? DAY_OF_WEEK_CHOICES.findIndex((c39) => c39.value === existingDay) : 0;
+    const defaultDayIndex = existingDay !== void 0 ? DAY_OF_WEEK_CHOICES.findIndex((c42) => c42.value === existingDay) : 0;
     const day2 = await promptSelect(
       "Day of week",
       DAY_OF_WEEK_CHOICES,
@@ -23071,7 +23599,7 @@ import chalk75 from "chalk";
 var listCommand13 = new Command85().name("list").alias("ls").description("List all connectors and their status").action(
   withErrorHandler(async () => {
     const result = await listConnectors();
-    const connectedMap = new Map(result.connectors.map((c39) => [c39.type, c39]));
+    const connectedMap = new Map(result.connectors.map((c42) => [c42.type, c42]));
     const allTypesRaw = Object.keys(CONNECTOR_TYPES);
     const allTypes = [];
     for (const type2 of allTypesRaw) {
@@ -23338,13 +23866,13 @@ var upgradeCommand = new Command90().name("upgrade").description("Upgrade vm0 CL
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.75.0") {
-      console.log(chalk79.green(`\u2713 Already up to date (${"9.75.0"})`));
+    if (latestVersion === "9.75.2") {
+      console.log(chalk79.green(`\u2713 Already up to date (${"9.75.2"})`));
       return;
     }
     console.log(
       chalk79.yellow(
-        `Current version: ${"9.75.0"} -> Latest version: ${latestVersion}`
+        `Current version: ${"9.75.2"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -23371,7 +23899,7 @@ var upgradeCommand = new Command90().name("upgrade").description("Upgrade vm0 CL
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        chalk79.green(`\u2713 Upgraded from ${"9.75.0"} to ${latestVersion}`)
+        chalk79.green(`\u2713 Upgraded from ${"9.75.2"} to ${latestVersion}`)
       );
       return;
     }
@@ -23451,7 +23979,7 @@ var zeroCommand = new Command92("zero").description(
 
 // src/index.ts
 var program = new Command93();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.75.0");
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.75.2");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.75.0",
+  "version": "9.75.2",
   "description": "CLI application",
   "repository": {
     "type": "git",