@vm0/cli 9.89.0 → 9.90.1

package/zero.js

@@ -7,11 +7,13 @@ import {
   allowsCustomModel,
   configureGlobalProxyFromEnv,
   connectorTypeSchema,
+  createAgentSkill,
   createZeroAgent,
   createZeroComputerConnector,
   createZeroConnectorSession,
   createZeroRun,
   decodeZeroTokenPayload,
+  deleteAgentSkill,
   deleteZeroAgent,
   deleteZeroComputerConnector,
   deleteZeroConnector,
@@ -25,12 +27,15 @@ import {
   deployZeroSchedule,
   disableZeroSchedule,
   enableZeroSchedule,
+  findMatchingPermissions,
   getActiveOrg,
+  getAgentSkill,
   getApiUrl,
   getAskUserAnswer,
   getAuthMethodsForType,
   getBaseUrl,
   getConnectorDerivedNames,
+  getConnectorFirewall,
   getConnectorTypeForSecretName,
   getCustomModelPlaceholder,
   getDefaultAuthMethod,
@@ -55,9 +60,11 @@ import {
   hasRequiredScopes,
   inviteZeroOrgMember,
   isFeatureEnabled,
+  isFirewallConnectorType,
   isInteractive,
   isUUID,
   leaveZeroOrg,
+  listAgentSkills,
   listZeroAgents,
   listZeroConnectors,
   listZeroOrgModelProviders,
@@ -86,6 +93,7 @@ import {
   setZeroSecret,
   setZeroVariable,
   switchZeroOrg,
+  updateAgentSkill,
   updateZeroAgent,
   updateZeroAgentInstructions,
   updateZeroOrg,
@@ -93,10 +101,10 @@ import {
   updateZeroUserPreferences,
   upsertZeroOrgModelProvider,
   withErrorHandler
-} from "./chunk-AM6X5N5J.js";
+} from "./chunk-RJS4OQ2I.js";
 
 // src/zero.ts
-import { Command as Command61 } from "commander";
+import { Command as Command68 } from "commander";
 
 // src/commands/zero/org/index.ts
 import { Command as Command23 } from "commander";
@@ -1192,6 +1200,9 @@ Examples:
       const connectors = await getZeroAgentUserConnectors(agentId);
       if (connectors.length > 0)
         console.log(`Connectors:   ${connectors.join(", ")}`);
+      if (agent.customSkills?.length > 0) {
+        console.log(`Skills:       ${agent.customSkills.join(", ")}`);
+      }
       if (agent.description)
         console.log(`Description:  ${agent.description}`);
       if (agent.sound) console.log(`Sound:        ${agent.sound}`);
@@ -1904,10 +1915,12 @@ var disconnectCommand = new Command33().name("disconnect").description("Disconne
 var zeroConnectorCommand = new Command34().name("connector").description("Check or connect third-party services (GitHub, Slack, etc.)").addCommand(listCommand6).addCommand(statusCommand2).addCommand(connectCommand).addCommand(disconnectCommand);
 
 // src/commands/zero/doctor/index.ts
-import { Command as Command36 } from "commander";
+import { Command as Command37 } from "commander";
 
 // src/commands/zero/doctor/missing-token.ts
 import { Command as Command35 } from "commander";
+
+// src/commands/zero/doctor/platform-url.ts
 function toPlatformUrl(apiUrl) {
   const parsed = new URL(apiUrl);
   const parts = parsed.hostname.split(".");
@@ -1921,6 +1934,12 @@ function toPlatformUrl(apiUrl) {
   parsed.hostname = parts.join(".");
   return parsed;
 }
+async function getPlatformOrigin() {
+  const apiUrl = await getApiUrl();
+  return toPlatformUrl(apiUrl).origin;
+}
+
+// src/commands/zero/doctor/missing-token.ts
 var missingTokenCommand = new Command35().name("missing-token").description(
   "Diagnose a missing token and find the connector that provides it"
 ).argument("<token-name>", "The environment variable / token name to look up").addHelpText(
@@ -1956,37 +1975,99 @@ Notes:
     if (!isConnected) {
       const url = `${platformUrl.origin}/connectors`;
       console.log(
-        `The ${label} connector is not connected. Ask the user to connect it at: ${url}`
+        `The ${label} connector is not connected. Ask the user to connect it at: [Connect ${label}](${url})`
       );
     } else if (!hasPermission) {
       const path = agentId ? `/team/${agentId}` : "/team";
       const url = `${platformUrl.origin}${path}?tab=authorization`;
       console.log(
-        `The ${label} connector is connected but not authorized for this agent. Ask the user to enable it at: ${url}`
+        `The ${label} connector is connected but not authorized for this agent. Ask the user to enable it at: [Authorize ${label}](${url})`
       );
     } else {
       const url = `${platformUrl.origin}/connectors`;
       console.log(
-        `The ${label} connector is connected and authorized, but the token is still missing. Ask the user to check the connector status at: ${url}`
+        `The ${label} connector is connected and authorized, but the token is still missing. Ask the user to check the connector status at: [Check ${label} status](${url})`
       );
     }
   })
 );
 
+// src/commands/zero/doctor/firewall-deny.ts
+import { Command as Command36, Option } from "commander";
+var firewallDenyCommand = new Command36().name("firewall-deny").description(
+  "Diagnose a firewall denial and find the permission that covers it"
+).argument("<firewall-ref>", "The firewall connector type (e.g. github)").addOption(
+  new Option(
+    "--method <method>",
+    "The denied HTTP method"
+  ).makeOptionMandatory()
+).addOption(
+  new Option("--path <path>", "The denied path").makeOptionMandatory()
+).addHelpText(
+  "after",
+  `
+Examples:
+  zero doctor firewall-deny github --method GET --path /repos/owner/repo/pulls
+  zero doctor firewall-deny slack --method POST --path /chat.postMessage
+
+Notes:
+  - Identifies which named permission covers a denied request
+  - Outputs a platform URL for the user to allow the permission`
+).action(
+  withErrorHandler(
+    async (firewallRef, opts) => {
+      if (!isFirewallConnectorType(firewallRef)) {
+        throw new Error(`Unknown firewall connector type: ${firewallRef}`);
+      }
+      const { label } = CONNECTOR_TYPES[firewallRef];
+      const config = getConnectorFirewall(firewallRef);
+      const permissions = findMatchingPermissions(
+        opts.method,
+        opts.path,
+        config
+      );
+      const platformOrigin = await getPlatformOrigin();
+      const agentId = process.env.ZERO_AGENT_ID;
+      const urlParams = new URLSearchParams({
+        ref: firewallRef,
+        method: opts.method,
+        path: opts.path
+      });
+      if (permissions.length > 0) {
+        urlParams.set("permission", permissions[0]);
+      }
+      const pagePath = agentId ? `/firewall-allow/${agentId}` : "/firewall-allow";
+      const url = `${platformOrigin}${pagePath}?${urlParams.toString()}`;
+      console.log(
+        `The ${label} firewall blocked ${opts.method} ${opts.path}.`
+      );
+      if (permissions.length > 0) {
+        console.log(`This is covered by the "${permissions[0]}" permission.`);
+      } else {
+        console.log("No named permission was found covering this request.");
+      }
+      console.log(
+        `Ask the user to allow it at: [Allow ${label} access](${url})`
+      );
+    }
+  )
+);
+
 // src/commands/zero/doctor/index.ts
-var zeroDoctorCommand = new Command36().name("doctor").description("Diagnose runtime issues (missing tokens, connectors)").addCommand(missingTokenCommand).addHelpText(
+var zeroDoctorCommand = new Command37().name("doctor").description("Diagnose runtime issues (missing tokens, firewall denials)").addCommand(missingTokenCommand).addCommand(firewallDenyCommand).addHelpText(
   "after",
   `
 Examples:
   Missing an API key?    zero doctor missing-token GITHUB_TOKEN
+  Firewall blocked?      zero doctor firewall-deny github --method GET --path /repos/owner/repo
 
 Notes:
-  - Use this when your task fails due to a missing environment variable
-  - The doctor will identify which connector provides the token and give the user a link to connect it`
+  - Use this when your task fails due to a missing environment variable or firewall denial
+  - The doctor will identify the issue and give the user a link to resolve it`
 );
 
 // src/commands/zero/preference/index.ts
-import { Command as Command37 } from "commander";
+import { Command as Command38 } from "commander";
 import chalk31 from "chalk";
 function detectTimezone2() {
   return Intl.DateTimeFormat().resolvedOptions().timeZone;
@@ -2043,7 +2124,7 @@ System timezone detected: ${detectedTz}`));
     }
   }
 }
-var zeroPreferenceCommand = new Command37().name("preference").description("View or update user preferences (timezone, notifications)").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").action(
+var zeroPreferenceCommand = new Command38().name("preference").description("View or update user preferences (timezone, notifications)").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").action(
   withErrorHandler(async (opts) => {
     const updates = buildUpdates(opts);
     if (updates) {
@@ -2068,7 +2149,7 @@ var zeroPreferenceCommand = new Command37().name("preference").description("View
 );
 
 // src/commands/zero/run/run.ts
-import { Command as Command38 } from "commander";
+import { Command as Command39 } from "commander";
 
 // src/commands/zero/run/shared.ts
 import chalk32 from "chalk";
@@ -2147,7 +2228,7 @@ function showZeroNextSteps(result) {
 }
 
 // src/commands/zero/run/run.ts
-var mainRunCommand = new Command38().name("run").description("Delegate a task to a teammate agent").argument("<agent-id>", "Agent UUID (from `zero agent list`)").argument("<prompt>", "Task prompt for the agent").option(
+var mainRunCommand = new Command39().name("run").description("Delegate a task to a teammate agent").argument("<agent-id>", "Agent UUID (from `zero agent list`)").argument("<prompt>", "Task prompt for the agent").option(
   "--append-system-prompt <text>",
   "Append text to the agent's system prompt"
 ).option(
@@ -2199,8 +2280,8 @@ Notes:
 );
 
 // src/commands/zero/run/continue.ts
-import { Command as Command39 } from "commander";
-var continueCommand = new Command39().name("continue").description("Continue a previous delegation from a session").argument("<session-id>", "Session ID from a previous run").argument("<prompt>", "Follow-up prompt for the agent").option(
+import { Command as Command40 } from "commander";
+var continueCommand = new Command40().name("continue").description("Continue a previous delegation from a session").argument("<session-id>", "Session ID from a previous run").argument("<prompt>", "Follow-up prompt for the agent").option(
   "--append-system-prompt <text>",
   "Append text to the agent's system prompt"
 ).option(
@@ -2261,10 +2342,10 @@ Examples:
 var zeroRunCommand = mainRunCommand;
 
 // src/commands/zero/schedule/index.ts
-import { Command as Command46 } from "commander";
+import { Command as Command47 } from "commander";
 
 // src/commands/zero/schedule/setup.ts
-import { Command as Command40 } from "commander";
+import { Command as Command41 } from "commander";
 import chalk33 from "chalk";
 var FREQUENCY_CHOICES = [
   { title: "Daily", value: "daily", description: "Run every day" },
@@ -2710,7 +2791,7 @@ async function handleScheduleEnabling(params) {
     showEnableHint(agentName);
   }
 }
-var setupCommand2 = new Command40().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-id>", "Agent ID").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("-e, --enable", "Enable schedule immediately after creation").option("--notify-email", "Enable email notifications (default: false)").option("--no-notify-email", "Disable email notifications").option("--notify-slack", "Enable Slack notifications (default: false)").option("--no-notify-slack", "Disable Slack notifications").option(
+var setupCommand2 = new Command41().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-id>", "Agent ID").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("-e, --enable", "Enable schedule immediately after creation").option("--notify-email", "Enable email notifications (default: false)").option("--no-notify-email", "Disable email notifications").option("--notify-slack", "Enable Slack notifications (default: false)").option("--no-notify-slack", "Disable Slack notifications").option(
   "--notify-slack-channel-id <channel-id>",
   "Slack channel ID for notifications (default: DM)"
 ).addHelpText(
@@ -2812,9 +2893,9 @@ Notes:
 );
 
 // src/commands/zero/schedule/list.ts
-import { Command as Command41 } from "commander";
+import { Command as Command42 } from "commander";
 import chalk34 from "chalk";
-var listCommand7 = new Command41().name("list").alias("ls").description("List all zero schedules").addHelpText(
+var listCommand7 = new Command42().name("list").alias("ls").description("List all zero schedules").addHelpText(
   "after",
   `
 Examples:
@@ -2868,7 +2949,7 @@ Examples:
 );
 
 // src/commands/zero/schedule/status.ts
-import { Command as Command42 } from "commander";
+import { Command as Command43 } from "commander";
 import chalk35 from "chalk";
 function formatDateTimeStyled(dateStr) {
   if (!dateStr) return chalk35.dim("-");
@@ -2923,7 +3004,7 @@ function printTimeSchedule(schedule) {
     console.log(`${"Failures:".padEnd(16)}${failureText}`);
   }
 }
-var statusCommand3 = new Command42().name("status").description("Show detailed status of a zero schedule").argument("<agent-id>", "Agent ID").option(
+var statusCommand3 = new Command43().name("status").description("Show detailed status of a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -2948,9 +3029,9 @@ Examples:
 );
 
 // src/commands/zero/schedule/delete.ts
-import { Command as Command43 } from "commander";
+import { Command as Command44 } from "commander";
 import chalk36 from "chalk";
-var deleteCommand3 = new Command43().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-id>", "Agent ID").option(
+var deleteCommand3 = new Command44().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).option("-y, --yes", "Skip confirmation prompt").addHelpText(
@@ -2992,9 +3073,9 @@ Notes:
 );
 
 // src/commands/zero/schedule/enable.ts
-import { Command as Command44 } from "commander";
+import { Command as Command45 } from "commander";
 import chalk37 from "chalk";
-var enableCommand = new Command44().name("enable").description("Enable a zero schedule").argument("<agent-id>", "Agent ID").option(
+var enableCommand = new Command45().name("enable").description("Enable a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3018,9 +3099,9 @@ Examples:
 );
 
 // src/commands/zero/schedule/disable.ts
-import { Command as Command45 } from "commander";
+import { Command as Command46 } from "commander";
 import chalk38 from "chalk";
-var disableCommand = new Command45().name("disable").description("Disable a zero schedule").argument("<agent-id>", "Agent ID").option(
+var disableCommand = new Command46().name("disable").description("Disable a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3044,7 +3125,7 @@ Examples:
 );
 
 // src/commands/zero/schedule/index.ts
-var zeroScheduleCommand = new Command46().name("schedule").description("Create or manage recurring scheduled tasks").addCommand(setupCommand2).addCommand(listCommand7).addCommand(statusCommand3).addCommand(deleteCommand3).addCommand(enableCommand).addCommand(disableCommand).addHelpText(
+var zeroScheduleCommand = new Command47().name("schedule").description("Create or manage recurring scheduled tasks").addCommand(setupCommand2).addCommand(listCommand7).addCommand(statusCommand3).addCommand(deleteCommand3).addCommand(enableCommand).addCommand(disableCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3057,12 +3138,12 @@ Examples:
 );
 
 // src/commands/zero/secret/index.ts
-import { Command as Command50 } from "commander";
+import { Command as Command51 } from "commander";
 
 // src/commands/zero/secret/list.ts
-import { Command as Command47 } from "commander";
+import { Command as Command48 } from "commander";
 import chalk39 from "chalk";
-var listCommand8 = new Command47().name("list").alias("ls").description("List all secrets").action(
+var listCommand8 = new Command48().name("list").alias("ls").description("List all secrets").action(
   withErrorHandler(async () => {
     const result = await listZeroSecrets();
     if (result.secrets.length === 0) {
@@ -3115,9 +3196,9 @@ var listCommand8 = new Command47().name("list").alias("ls").description("List al
 );
 
 // src/commands/zero/secret/set.ts
-import { Command as Command48 } from "commander";
+import { Command as Command49 } from "commander";
 import chalk40 from "chalk";
-var setCommand4 = new Command48().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
+var setCommand4 = new Command49().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
   "-b, --body <value>",
   "Secret value (required in non-interactive mode)"
 ).option("-d, --description <description>", "Optional description").action(
@@ -3163,9 +3244,9 @@ var setCommand4 = new Command48().name("set").description("Create or update a se
 );
 
 // src/commands/zero/secret/delete.ts
-import { Command as Command49 } from "commander";
+import { Command as Command50 } from "commander";
 import chalk41 from "chalk";
-var deleteCommand4 = new Command49().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+var deleteCommand4 = new Command50().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
   withErrorHandler(async (name, options) => {
     if (!options.yes) {
       if (!isInteractive()) {
@@ -3186,19 +3267,19 @@ var deleteCommand4 = new Command49().name("delete").description("Delete a secret
 );
 
 // src/commands/zero/secret/index.ts
-var zeroSecretCommand = new Command50().name("secret").description("Read or write secrets (API keys, tokens)").addCommand(listCommand8).addCommand(setCommand4).addCommand(deleteCommand4);
+var zeroSecretCommand = new Command51().name("secret").description("Read or write secrets (API keys, tokens)").addCommand(listCommand8).addCommand(setCommand4).addCommand(deleteCommand4);
 
 // src/commands/zero/slack/index.ts
-import { Command as Command53 } from "commander";
+import { Command as Command54 } from "commander";
 
 // src/commands/zero/slack/message/index.ts
-import { Command as Command52 } from "commander";
+import { Command as Command53 } from "commander";
 
 // src/commands/zero/slack/message/send.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { Command as Command51 } from "commander";
+import { Command as Command52 } from "commander";
 import chalk42 from "chalk";
-var sendCommand = new Command51().name("send").description("Send a message to a Slack channel").requiredOption("-c, --channel <id>", "Channel ID").option("-t, --text <message>", "Message text").option("--thread <ts>", "Thread timestamp for replies").option("--blocks <json>", "Block Kit JSON string").addHelpText(
+var sendCommand = new Command52().name("send").description("Send a message to a Slack channel").requiredOption("-c, --channel <id>", "Channel ID").option("-t, --text <message>", "Message text").option("--thread <ts>", "Thread timestamp for replies").option("--blocks <json>", "Block Kit JSON string").addHelpText(
   "after",
   `
 Examples:
@@ -3248,7 +3329,7 @@ Notes:
 );
 
 // src/commands/zero/slack/message/index.ts
-var zeroSlackMessageCommand = new Command52().name("message").description("Manage Slack messages").addCommand(sendCommand).addHelpText(
+var zeroSlackMessageCommand = new Command53().name("message").description("Manage Slack messages").addCommand(sendCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3256,7 +3337,7 @@ Examples:
 );
 
 // src/commands/zero/slack/index.ts
-var zeroSlackCommand = new Command53().name("slack").description("Send messages to Slack channels as the bot").addCommand(zeroSlackMessageCommand).addHelpText(
+var zeroSlackCommand = new Command54().name("slack").description("Send messages to Slack channels as the bot").addCommand(zeroSlackMessageCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3265,10 +3346,10 @@ Examples:
 );
 
 // src/commands/zero/variable/index.ts
-import { Command as Command57 } from "commander";
+import { Command as Command58 } from "commander";
 
 // src/commands/zero/variable/list.ts
-import { Command as Command54 } from "commander";
+import { Command as Command55 } from "commander";
 import chalk43 from "chalk";
 function truncateValue2(value, maxLength = 60) {
   if (value.length <= maxLength) {
@@ -3276,7 +3357,7 @@ function truncateValue2(value, maxLength = 60) {
   }
   return value.slice(0, maxLength - 15) + "... [truncated]";
 }
-var listCommand9 = new Command54().name("list").alias("ls").description("List all variables").action(
+var listCommand9 = new Command55().name("list").alias("ls").description("List all variables").action(
   withErrorHandler(async () => {
     const result = await listZeroVariables();
     if (result.variables.length === 0) {
@@ -3304,9 +3385,9 @@ var listCommand9 = new Command54().name("list").alias("ls").description("List al
 );
 
 // src/commands/zero/variable/set.ts
-import { Command as Command55 } from "commander";
+import { Command as Command56 } from "commander";
 import chalk44 from "chalk";
-var setCommand5 = new Command55().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
+var setCommand5 = new Command56().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
   withErrorHandler(
     async (name, value, options) => {
       let variable;
@@ -3332,9 +3413,9 @@ var setCommand5 = new Command55().name("set").description("Create or update a va
 );
 
 // src/commands/zero/variable/delete.ts
-import { Command as Command56 } from "commander";
+import { Command as Command57 } from "commander";
 import chalk45 from "chalk";
-var deleteCommand5 = new Command56().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+var deleteCommand5 = new Command57().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
   withErrorHandler(async (name, options) => {
     if (!options.yes) {
       if (!isInteractive()) {
@@ -3355,10 +3436,10 @@ var deleteCommand5 = new Command56().name("delete").description("Delete a variab
 );
 
 // src/commands/zero/variable/index.ts
-var zeroVariableCommand = new Command57().name("variable").description("Read or write non-sensitive configuration values").addCommand(listCommand9).addCommand(setCommand5).addCommand(deleteCommand5);
+var zeroVariableCommand = new Command58().name("variable").description("Read or write non-sensitive configuration values").addCommand(listCommand9).addCommand(setCommand5).addCommand(deleteCommand5);
 
 // src/commands/zero/whoami.ts
-import { Command as Command58 } from "commander";
+import { Command as Command59 } from "commander";
 import chalk46 from "chalk";
 function isInsideSandbox() {
   return !!process.env.ZERO_AGENT_ID;
@@ -3395,7 +3476,7 @@ async function showLocalInfo() {
     console.log(`  Active:     ${activeOrg}`);
   }
 }
-var zeroWhoamiCommand = new Command58().name("whoami").description("Show agent identity, run ID, and capabilities").addHelpText(
+var zeroWhoamiCommand = new Command59().name("whoami").description("Show agent identity, run ID, and capabilities").addHelpText(
   "after",
   `
 Examples:
@@ -3415,10 +3496,10 @@ Notes:
 );
 
 // src/commands/zero/ask-user/index.ts
-import { Command as Command60 } from "commander";
+import { Command as Command61 } from "commander";
 
 // src/commands/zero/ask-user/question.ts
-import { Command as Command59 } from "commander";
+import { Command as Command60 } from "commander";
 import chalk47 from "chalk";
 function collectOption(value, previous) {
   const list = previous ?? [];
@@ -3430,7 +3511,7 @@ function collectDesc(value, previous) {
   list.push(value);
   return list;
 }
-var questionCommand = new Command59().name("question").description("Ask the user a question and wait for the answer").argument("<question>", "The question to ask").option("--header <text>", "Short label displayed as chip/tag (max 12 chars)").option("--option <label>", "Add a choice option (repeatable)", collectOption).option(
+var questionCommand = new Command60().name("question").description("Ask the user a question and wait for the answer").argument("<question>", "The question to ask").option("--header <text>", "Short label displayed as chip/tag (max 12 chars)").option("--option <label>", "Add a choice option (repeatable)", collectOption).option(
   "--desc <text>",
   "Description for the preceding --option",
   collectDesc
@@ -3511,7 +3592,7 @@ Notes:
 );
 
 // src/commands/zero/ask-user/index.ts
-var zeroAskUserCommand = new Command60().name("ask-user").description("Ask the user a question and wait for the answer").addCommand(questionCommand).addHelpText(
+var zeroAskUserCommand = new Command61().name("ask-user").description("Ask the user a question and wait for the answer").addCommand(questionCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3522,9 +3603,234 @@ Notes:
   - The user's answer is printed to stdout for your consumption`
 );
 
+// src/commands/zero/skill/index.ts
+import { Command as Command67 } from "commander";
+
+// src/commands/zero/skill/create.ts
+import { Command as Command62 } from "commander";
+import { readFileSync as readFileSync4, existsSync } from "fs";
+import { join as join2 } from "path";
+import chalk48 from "chalk";
+var createCommand2 = new Command62().name("create").description("Create a custom skill for a zero agent").argument("<name>", "Skill name (lowercase alphanumeric with hyphens)").requiredOption("--dir <path>", "Path to directory containing SKILL.md").option("--agent <id>", "Agent ID (defaults to $ZERO_AGENT_ID)").option("--display-name <name>", "Skill display name").option("--description <text>", "Skill description").addHelpText(
+  "after",
+  `
+Examples:
+  zero skill create my-skill --dir ./skills/my-skill/
+  zero skill create my-skill --dir ./skills/my-skill/ --agent <id>
+  zero skill create my-skill --dir ./skills/my-skill/ --display-name "My Skill" --description "Does things"
+
+Notes:
+  - The directory must contain a SKILL.md file
+  - Agent ID defaults to $ZERO_AGENT_ID if --agent is not provided`
+).action(
+  withErrorHandler(
+    async (name, options) => {
+      const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
+      if (!agentId) {
+        throw new Error(
+          "Agent ID required: use --agent <id> or set $ZERO_AGENT_ID"
+        );
+      }
+      const skillMdPath = join2(options.dir, "SKILL.md");
+      if (!existsSync(skillMdPath)) {
+        throw new Error(`SKILL.md not found in ${options.dir}`);
+      }
+      const content = readFileSync4(skillMdPath, "utf-8");
+      const skill = await createAgentSkill(agentId, {
+        name,
+        content,
+        displayName: options.displayName,
+        description: options.description
+      });
+      console.log(chalk48.green(`\u2713 Skill "${skill.name}" created`));
+      console.log(`  Name:         ${skill.name}`);
+      console.log(`  Agent:        ${agentId}`);
+      if (skill.displayName) {
+        console.log(`  Display Name: ${skill.displayName}`);
+      }
+      if (skill.description) {
+        console.log(`  Description:  ${skill.description}`);
+      }
+    }
+  )
+);
+
+// src/commands/zero/skill/edit.ts
+import { Command as Command63 } from "commander";
+import { readFileSync as readFileSync5, existsSync as existsSync2 } from "fs";
+import { join as join3 } from "path";
+import chalk49 from "chalk";
+var editCommand2 = new Command63().name("edit").description("Update a custom skill's content").argument("<name>", "Skill name").requiredOption(
+  "--dir <path>",
+  "Path to directory containing updated SKILL.md"
+).option("--agent <id>", "Agent ID (defaults to $ZERO_AGENT_ID)").addHelpText(
+  "after",
+  `
+Examples:
+  zero skill edit my-skill --dir ./skills/my-skill/
+  zero skill edit my-skill --dir ./skills/my-skill/ --agent <id>`
+).action(
+  withErrorHandler(
+    async (name, options) => {
+      const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
+      if (!agentId) {
+        throw new Error(
+          "Agent ID required: use --agent <id> or set $ZERO_AGENT_ID"
+        );
+      }
+      const skillMdPath = join3(options.dir, "SKILL.md");
+      if (!existsSync2(skillMdPath)) {
+        throw new Error(`SKILL.md not found in ${options.dir}`);
+      }
+      const content = readFileSync5(skillMdPath, "utf-8");
+      await updateAgentSkill(agentId, name, { content });
+      console.log(chalk49.green(`\u2713 Skill "${name}" updated`));
+    }
+  )
+);
+
+// src/commands/zero/skill/view.ts
+import { Command as Command64 } from "commander";
+import chalk50 from "chalk";
+var viewCommand2 = new Command64().name("view").description("View a custom skill").argument("<name>", "Skill name").option("--agent <id>", "Agent ID (defaults to $ZERO_AGENT_ID)").addHelpText(
+  "after",
+  `
+Examples:
+  zero skill view my-skill
+  zero skill view my-skill --agent <id>`
+).action(
+  withErrorHandler(async (name, options) => {
+    const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
+    if (!agentId) {
+      throw new Error(
+        "Agent ID required: use --agent <id> or set $ZERO_AGENT_ID"
+      );
+    }
+    const skill = await getAgentSkill(agentId, name);
+    console.log(chalk50.bold(skill.name));
+    if (skill.displayName) console.log(chalk50.dim(skill.displayName));
+    console.log();
+    console.log(`Name:         ${skill.name}`);
+    if (skill.displayName) console.log(`Display Name: ${skill.displayName}`);
+    if (skill.description) console.log(`Description:  ${skill.description}`);
+    console.log();
+    if (skill.content) {
+      console.log(chalk50.dim("\u2500\u2500 SKILL.md \u2500\u2500"));
+      console.log(skill.content);
+    } else {
+      console.log(chalk50.dim("No content"));
+    }
+  })
+);
+
+// src/commands/zero/skill/list.ts
+import { Command as Command65 } from "commander";
+import chalk51 from "chalk";
+var listCommand10 = new Command65().name("list").alias("ls").description("List custom skills for a zero agent").option("--agent <id>", "Agent ID (defaults to $ZERO_AGENT_ID)").addHelpText(
+  "after",
+  `
+Examples:
+  zero skill list
+  zero skill list --agent <id>`
+).action(
+  withErrorHandler(async (options) => {
+    const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
+    if (!agentId) {
+      throw new Error(
+        "Agent ID required: use --agent <id> or set $ZERO_AGENT_ID"
+      );
+    }
+    const skills = await listAgentSkills(agentId);
+    if (skills.length === 0) {
+      console.log(chalk51.dim("No custom skills found"));
+      console.log(
+        chalk51.dim("  Create one with: zero skill create <name> --dir <path>")
+      );
+      return;
+    }
+    const nameWidth = Math.max(4, ...skills.map((s) => s.name.length));
+    const displayWidth = Math.max(
+      12,
+      ...skills.map((s) => (s.displayName ?? "").length)
+    );
+    const header = [
+      "NAME".padEnd(nameWidth),
+      "DISPLAY NAME".padEnd(displayWidth),
+      "DESCRIPTION"
+    ].join("  ");
+    console.log(chalk51.dim(header));
+    for (const skill of skills) {
+      const row = [
+        skill.name.padEnd(nameWidth),
+        (skill.displayName ?? "-").padEnd(displayWidth),
+        skill.description ?? "-"
+      ].join("  ");
+      console.log(row);
+    }
+  })
+);
+
+// src/commands/zero/skill/delete.ts
+import { Command as Command66 } from "commander";
+import chalk52 from "chalk";
+var deleteCommand6 = new Command66().name("delete").alias("rm").description("Delete a custom skill").argument("<name>", "Skill name").option("--agent <id>", "Agent ID (defaults to $ZERO_AGENT_ID)").option("-y, --yes", "Skip confirmation prompt").addHelpText(
+  "after",
+  `
+Examples:
+  zero skill delete my-skill
+  zero skill delete my-skill -y
+  zero skill delete my-skill --agent <id>
+
+Notes:
+  - Use -y to skip confirmation in non-interactive mode`
+).action(
+  withErrorHandler(
+    async (name, options) => {
+      const agentId = options.agent ?? process.env.ZERO_AGENT_ID;
+      if (!agentId) {
+        throw new Error(
+          "Agent ID required: use --agent <id> or set $ZERO_AGENT_ID"
+        );
+      }
+      await getAgentSkill(agentId, name);
+      if (!options.yes) {
+        if (!isInteractive()) {
+          throw new Error("--yes flag is required in non-interactive mode");
+        }
+        const confirmed = await promptConfirm(
+          `Delete skill '${name}'?`,
+          false
+        );
+        if (!confirmed) {
+          console.log(chalk52.dim("Cancelled"));
+          return;
+        }
+      }
+      await deleteAgentSkill(agentId, name);
+      console.log(chalk52.green(`\u2713 Skill "${name}" deleted`));
+    }
+  )
+);
+
+// src/commands/zero/skill/index.ts
+var zeroSkillCommand = new Command67("skill").description("Manage custom skills for zero agents").addCommand(createCommand2).addCommand(editCommand2).addCommand(viewCommand2).addCommand(listCommand10).addCommand(deleteCommand6).addHelpText(
+  "after",
+  `
+Examples:
+  Create from directory:   zero skill create my-skill --dir ./skills/my-skill/
+  List agent's skills:     zero skill list --agent <id>
+  View skill content:      zero skill view my-skill
+  Update skill content:    zero skill edit my-skill --dir ./skills/my-skill/
+  Delete a skill:          zero skill delete my-skill -y
+
+Notes:
+  Agent ID comes from --agent flag or $ZERO_AGENT_ID environment variable`
+);
+
 // src/zero.ts
 var COMMAND_CAPABILITY_MAP = {
   agent: "agent:read",
+  skill: "agent:read",
   run: "agent-run:write",
   schedule: "schedule:read",
   doctor: null,
@@ -3544,7 +3850,8 @@ var DEFAULT_COMMANDS = [
   zeroSlackCommand,
   zeroVariableCommand,
   zeroWhoamiCommand,
-  zeroAskUserCommand
+  zeroAskUserCommand,
+  zeroSkillCommand
 ];
 function shouldHideCommand(name, payload) {
   if (!payload) return false;
@@ -3560,10 +3867,10 @@ function registerZeroCommands(prog, commands) {
     prog.addCommand(cmd, hidden ? { hidden: true } : {});
   }
 }
-var program = new Command61();
+var program = new Command68();
 program.name("zero").description(
   "Zero CLI \u2014 interact with the zero platform from inside the sandbox"
-).version("9.89.0").addHelpText(
+).version("9.90.1").addHelpText(
   "after",
   `
 Examples: