@vm0/cli 9.92.1 → 9.94.0

package/{chunk-KXR4BFFL.js → chunk-XQIPEDKM.js}

@@ -49,7 +49,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.92.1",
+    release: "9.94.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -68,7 +68,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.92.1",
+    version: "9.94.0",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -494,7 +494,7 @@ var agentDefinitionSchema = z3.object({
    * Map format: { slack: { permissions: [...] | "all" } }
    * Resolved to full ExpandedFirewallConfig[] at runtime.
    */
-  experimental_firewalls: z3.record(
+  firewalls: z3.record(
     z3.string(),
     z3.object({
       permissions: z3.union([z3.literal("all"), z3.array(z3.string()).min(1)])
@@ -513,7 +513,7 @@ var agentComposeApiContentSchema = z3.object({
     agentDefinitionSchema.extend({
       // Legacy: older compose versions may have this field (map or expanded array).
       // Accepted for backward compat but ignored at runtime.
-      experimental_firewalls: z3.unknown().optional()
+      firewalls: z3.unknown().optional()
     })
   ),
   volumes: z3.record(z3.string(), volumeConfigSchema).optional()
@@ -754,7 +754,7 @@ var firewallSchema = z4.object({
   ref: z4.string(),
   apis: z4.array(firewallApiSchema)
 });
-var experimentalFirewallsSchema = z4.array(firewallSchema);
+var firewallsSchema = z4.array(firewallSchema);
 var firewallConfigSchema = z4.object({
   name: z4.string().min(1, "Firewall name is required"),
   description: z4.string().optional(),
@@ -929,7 +929,8 @@ var orgMembersResponseSchema = z6.object({
   createdAt: z6.string()
 });
 var inviteOrgMemberRequestSchema = z6.object({
-  email: z6.string().email()
+  email: z6.string().email(),
+  role: orgRoleSchema.optional().default("member")
 });
 var removeOrgMemberRequestSchema = z6.object({
   email: z6.string().email()
@@ -1051,8 +1052,6 @@ var unifiedRunRequestSchema = z8.object({
   debugNoMockClaude: z8.boolean().optional(),
   // Model provider for automatic secret injection
   modelProvider: z8.string().optional(),
-  // Environment validation flag - when true, validates secrets/vars before running
-  checkEnv: z8.boolean().optional(),
   // Required
   prompt: z8.string().min(1, "Missing prompt"),
   // Optional system prompt to append to the agent's system prompt
@@ -2123,8 +2122,7 @@ var cliAuthTokenContract = c7.router({
       200: z11.object({
         access_token: z11.string(),
         token_type: z11.literal("Bearer"),
-        expires_in: z11.number(),
-        org_slug: z11.string().optional()
+        expires_in: z11.number()
       }),
       // Authorization pending
       202: oauthErrorSchema,
@@ -2152,8 +2150,7 @@ var cliAuthOrgContract = c7.router({
       200: z11.object({
         access_token: z11.string(),
         token_type: z11.literal("Bearer"),
-        expires_in: z11.number(),
-        org_slug: z11.string()
+        expires_in: z11.number()
       }),
       400: oauthErrorSchema,
       401: apiErrorResponseSchema,
@@ -3050,8 +3047,8 @@ var storedExecutionContextSchema = z19.object({
   userTimezone: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
-  // Experimental firewall for proxy-side token replacement
-  experimentalFirewalls: experimentalFirewallsSchema.optional(),
+  // Firewall for proxy-side token replacement
+  firewalls: firewallsSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: z19.array(z19.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -3088,8 +3085,8 @@ var executionContextSchema = z19.object({
   userTimezone: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
-  // Experimental firewall for proxy-side token replacement
-  experimentalFirewalls: experimentalFirewallsSchema.optional(),
+  // Firewall for proxy-side token replacement
+  firewalls: firewallsSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: z19.array(z19.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -4047,7 +4044,6 @@ var CONNECTOR_TYPES_DEF = {
             label: "Base URL",
             required: true,
             placeholder: "https://mycompany.metabaseapp.com",
-            helpText: "Your Metabase instance URL (e.g. 'https://mycompany.metabaseapp.com' for cloud or your self-hosted URL)",
             type: "variable"
           }
         }
@@ -4430,7 +4426,6 @@ var CONNECTOR_TYPES_DEF = {
             label: "Instance",
             required: true,
             placeholder: "mycompany",
-            helpText: "Your Salesforce instance name (e.g. 'mycompany' from mycompany.my.salesforce.com)",
             type: "variable"
           }
         }
@@ -5286,14 +5281,12 @@ var CONNECTOR_TYPES_DEF = {
             label: "Email",
             required: true,
             placeholder: "you@example.com",
-            helpText: "The email address associated with your Atlassian account",
             type: "variable"
           },
           ATLASSIAN_DOMAIN: {
             label: "Domain",
             required: true,
             placeholder: "mycompany",
-            helpText: "Your Atlassian domain (e.g. 'mycompany' from mycompany.atlassian.net)",
             type: "variable"
           }
         }
@@ -5941,7 +5934,6 @@ var CONNECTOR_TYPES_DEF = {
             label: "Cluster URL",
             required: true,
             placeholder: "https://your-cluster.region.cloud.qdrant.io:6333",
-            helpText: "Your Qdrant cluster URL (e.g. 'https://abc123.us-east4-0.gcp.cloud.qdrant.io:6333')",
             type: "variable"
           }
         }
@@ -6212,14 +6204,12 @@ var CONNECTOR_TYPES_DEF = {
             label: "Email",
             required: true,
             placeholder: "your-email@company.com",
-            helpText: "The email address associated with your Zendesk account",
             type: "variable"
           },
           ZENDESK_SUBDOMAIN: {
             label: "Subdomain",
             required: true,
             placeholder: "yourcompany",
-            helpText: "Your Zendesk subdomain (e.g. 'yourcompany' from yourcompany.zendesk.com)",
             type: "variable"
           }
         }
@@ -6747,6 +6737,7 @@ var slackFirewall = {
       permissions: [
         {
           name: "admin",
+          description: "Administer a workspace (access audit logs, SCIM API, and billing info)",
           rules: [
             "POST /admin.audit.anomaly.allow.getItem",
             "POST /admin.audit.anomaly.allow.updateItem",
@@ -6757,6 +6748,7 @@ var slackFirewall = {
         },
         {
           name: "admin.analytics:read",
+          description: "Access workspace analytics data",
           rules: [
             "GET /admin.analytics.getFile",
             "GET /admin.analytics.messages.activity",
@@ -6765,10 +6757,12 @@ var slackFirewall = {
         },
         {
           name: "admin.app_activities:read",
+          description: "View app activities within an Enterprise organization",
           rules: ["POST /admin.apps.activities.list"]
         },
         {
           name: "admin.apps:read",
+          description: "View apps and app requests in an Enterprise organization",
           rules: [
             "GET /admin.apps.approved.list",
             "POST /admin.apps.config.lookup",
@@ -6778,6 +6772,7 @@ var slackFirewall = {
         },
         {
           name: "admin.apps:write",
+          description: "Manage apps and app requests in an Enterprise organization",
           rules: [
             "POST /admin.apps.approve",
             "POST /admin.apps.clearResolution",
@@ -6789,10 +6784,12 @@ var slackFirewall = {
         },
         {
           name: "admin.barriers:read",
+          description: "Read information barriers in an Enterprise organization",
           rules: ["GET /admin.barriers.list"]
         },
         {
           name: "admin.barriers:write",
+          description: "Manage information barriers in an Enterprise organization",
           rules: [
             "POST /admin.barriers.create",
             "POST /admin.barriers.delete",
@@ -6801,6 +6798,7 @@ var slackFirewall = {
         },
         {
           name: "admin.conversations:manage_objects",
+          description: "Manage channel objects in an Enterprise organization",
           rules: [
             "POST /admin.conversations.createForObjects",
             "POST /admin.conversations.linkObjects",
@@ -6809,6 +6807,7 @@ var slackFirewall = {
         },
         {
           name: "admin.conversations:read",
+          description: "View channels and their settings in an Enterprise organization",
           rules: [
             "POST /admin.conversations.ekm.listOriginalConnectedChannelInfo",
             "POST /admin.conversations.getConversationPrefs",
@@ -6821,6 +6820,7 @@ var slackFirewall = {
         },
         {
           name: "admin.conversations:write",
+          description: "Set channel settings in an Enterprise organization",
           rules: [
             "POST /admin.conversations.archive",
             "POST /admin.conversations.bulkArchive",
@@ -6845,6 +6845,7 @@ var slackFirewall = {
         },
         {
           name: "admin.invites:read",
+          description: "View workspace invite requests in an Enterprise organization",
           rules: [
             "POST /admin.inviteRequests.approved.list",
             "POST /admin.inviteRequests.denied.list",
@@ -6853,6 +6854,7 @@ var slackFirewall = {
         },
         {
           name: "admin.invites:write",
+          description: "Manage workspace invite requests in an Enterprise organization",
           rules: [
             "POST /admin.inviteRequests.approve",
             "POST /admin.inviteRequests.deny"
@@ -6860,10 +6862,12 @@ var slackFirewall = {
         },
         {
           name: "admin.roles:read",
+          description: "View role assignments in an Enterprise organization",
           rules: ["GET /admin.roles.listAssignments"]
         },
         {
           name: "admin.roles:write",
+          description: "Manage role assignments in an Enterprise organization",
           rules: [
             "POST /admin.roles.addAssignments",
             "POST /admin.roles.removeAssignments"
@@ -6871,6 +6875,7 @@ var slackFirewall = {
         },
         {
           name: "admin.teams:read",
+          description: "View workspace settings in an Enterprise organization",
           rules: [
             "GET /admin.emoji.list",
             "GET /admin.teams.admins.list",
@@ -6881,6 +6886,7 @@ var slackFirewall = {
         },
         {
           name: "admin.teams:write",
+          description: "Manage workspace settings in an Enterprise organization",
           rules: [
             "GET /admin.emoji.add",
             "GET /admin.emoji.addAlias",
@@ -6897,10 +6903,12 @@ var slackFirewall = {
         },
         {
           name: "admin.usergroups:read",
+          description: "View user groups in an Enterprise organization",
           rules: ["POST /admin.usergroups.listChannels"]
         },
         {
           name: "admin.usergroups:write",
+          description: "Manage user groups in an Enterprise organization",
           rules: [
             "POST /admin.usergroups.addChannels",
             "POST /admin.usergroups.removeChannels"
@@ -6908,6 +6916,7 @@ var slackFirewall = {
         },
         {
           name: "admin.users:read",
+          description: "View users in an Enterprise organization",
           rules: [
             "POST /admin.auth.policy.getEntities",
             "GET /admin.users.getExpiration",
@@ -6919,6 +6928,7 @@ var slackFirewall = {
         },
         {
           name: "admin.users:write",
+          description: "Manage users in an Enterprise organization",
           rules: [
             "POST /admin.auth.policy.assignEntities",
             "POST /admin.auth.policy.removeEntities",
@@ -6938,6 +6948,7 @@ var slackFirewall = {
         },
         {
           name: "admin.workflows:read",
+          description: "View workflow builder workflows in an Enterprise organization",
           rules: [
             "POST /admin.functions.list",
             "POST /admin.functions.permissions.lookup",
@@ -6948,6 +6959,7 @@ var slackFirewall = {
         },
         {
           name: "admin.workflows:write",
+          description: "Manage workflow builder workflows in an Enterprise organization",
           rules: [
             "POST /admin.workflows.collaborators.add",
             "POST /admin.workflows.collaborators.remove",
@@ -6956,6 +6968,7 @@ var slackFirewall = {
         },
         {
           name: "assistant:write",
+          description: "Act as an AI Assistant app",
           rules: [
             "POST /assistant.threads.setSuggestedPrompts",
             "POST /assistant.threads.setTitle"
@@ -6963,10 +6976,12 @@ var slackFirewall = {
         },
         {
           name: "bookmarks:read",
+          description: "List bookmarks in channels",
           rules: ["POST /bookmarks.list", "POST /workflows.featured.list"]
         },
         {
           name: "bookmarks:write",
+          description: "Create, edit, and remove bookmarks",
           rules: [
             "POST /bookmarks.add",
             "POST /bookmarks.edit",
@@ -6978,10 +6993,12 @@ var slackFirewall = {
         },
         {
           name: "calls:read",
+          description: "View information about ongoing and past calls",
           rules: ["POST /calls.info"]
         },
         {
           name: "calls:write",
+          description: "Start and manage calls in a workspace",
           rules: [
             "POST /calls.add",
             "POST /calls.end",
@@ -6992,10 +7009,12 @@ var slackFirewall = {
         },
         {
           name: "canvases:read",
+          description: "Access contents of canvases created inside Slack",
           rules: ["POST /canvases.sections.lookup"]
         },
         {
           name: "canvases:write",
+          description: "Create and edit canvases",
           rules: [
             "POST /canvases.access.delete",
             "POST /canvases.access.set",
@@ -7007,14 +7026,17 @@ var slackFirewall = {
         },
         {
           name: "channels:history",
+          description: "View messages and other content in public channels that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "channels:join",
+          description: "Join public channels in a workspace",
           rules: ["POST /conversations.join"]
         },
         {
           name: "channels:manage",
+          description: "Manage public channels that the app has been added to and create new ones",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7032,6 +7054,7 @@ var slackFirewall = {
         },
         {
           name: "channels:read",
+          description: "View basic information about public channels in a workspace",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7041,6 +7064,7 @@ var slackFirewall = {
         },
         {
           name: "channels:write",
+          description: "Manage a user's public channels and create new ones on a user's behalf",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7059,10 +7083,12 @@ var slackFirewall = {
         },
         {
           name: "channels:write.invites",
+          description: "Invite members to public channels",
           rules: ["POST /conversations.invite"]
         },
         {
           name: "channels:write.topic",
+          description: "Set the topic and purpose of public channels",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7070,6 +7096,7 @@ var slackFirewall = {
         },
         {
           name: "chat:write",
+          description: "Send messages as the app",
           rules: [
             "POST /assistant.threads.setStatus",
             "POST /chat.appendStream",
@@ -7086,6 +7113,7 @@ var slackFirewall = {
         },
         {
           name: "client",
+          description: "Full access to all client features (legacy, deprecated)",
           rules: [
             "POST /admin.workflows.triggers.types.permissions.lookup",
             "POST /admin.workflows.triggers.types.permissions.set"
@@ -7093,6 +7121,7 @@ var slackFirewall = {
         },
         {
           name: "conversations.connect:manage",
+          description: "Manage Slack Connect channels (approve or decline invitations)",
           rules: [
             "POST /conversations.approveSharedInvite",
             "GET /conversations.declineSharedInvite",
@@ -7108,6 +7137,7 @@ var slackFirewall = {
         },
         {
           name: "conversations.connect:write",
+          description: "Create Slack Connect invitations and accept invitations",
           rules: [
             "POST /conversations.acceptSharedInvite",
             "GET /conversations.inviteShared"
@@ -7115,6 +7145,7 @@ var slackFirewall = {
         },
         {
           name: "datastore:read",
+          description: "Read data from Slack's hosted datastore",
           rules: [
             "POST /apps.datastore.bulkGet",
             "POST /apps.datastore.count",
@@ -7124,6 +7155,7 @@ var slackFirewall = {
         },
         {
           name: "datastore:write",
+          description: "Write data to Slack's hosted datastore",
           rules: [
             "POST /apps.datastore.bulkDelete",
             "POST /apps.datastore.bulkPut",
@@ -7134,10 +7166,12 @@ var slackFirewall = {
         },
         {
           name: "dnd:read",
+          description: "View Do Not Disturb settings for people in a workspace",
           rules: ["GET /dnd.info", "GET /dnd.teamInfo"]
         },
         {
           name: "dnd:write",
+          description: "Edit a user's Do Not Disturb settings",
           rules: [
             "POST /dnd.endDnd",
             "POST /dnd.endSnooze",
@@ -7146,14 +7180,17 @@ var slackFirewall = {
         },
         {
           name: "emoji:read",
+          description: "View custom emoji in a workspace",
           rules: ["GET /emoji.list"]
         },
         {
           name: "files:read",
+          description: "View files shared in channels and conversations that the app has been added to",
           rules: ["GET /files.info", "GET /files.list"]
         },
         {
           name: "files:write",
+          description: "Upload, edit, and delete files as the app",
           rules: [
             "POST /files.comments.delete",
             "POST /files.completeUploadExternal",
@@ -7166,10 +7203,12 @@ var slackFirewall = {
         },
         {
           name: "groups:history",
+          description: "View messages and other content in private channels that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "groups:read",
+          description: "View basic information about private channels that the app has been added to",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7179,6 +7218,7 @@ var slackFirewall = {
         },
         {
           name: "groups:write",
+          description: "Manage private channels that the user is a member of and create new ones",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7196,10 +7236,12 @@ var slackFirewall = {
         },
         {
           name: "groups:write.invites",
+          description: "Invite members to private channels",
           rules: ["POST /conversations.invite"]
         },
         {
           name: "groups:write.topic",
+          description: "Set the topic and purpose of private channels",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7207,18 +7249,22 @@ var slackFirewall = {
         },
         {
           name: "hosting:read",
+          description: "Read hosting environment information",
           rules: ["POST /apps.activities.list"]
         },
         {
           name: "identity:read",
+          description: "View a user's Slack identity (Sign in with Slack)",
           rules: ["GET /users.identity"]
         },
         {
           name: "im:history",
+          description: "View messages and other content in direct messages that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "im:read",
+          description: "View basic information about direct messages that the app has access to",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7228,6 +7274,7 @@ var slackFirewall = {
         },
         {
           name: "im:write",
+          description: "Start direct messages with people",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7245,6 +7292,7 @@ var slackFirewall = {
         },
         {
           name: "im:write.topic",
+          description: "Set the topic of direct messages",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7252,10 +7300,12 @@ var slackFirewall = {
         },
         {
           name: "links:write",
+          description: "Show previews of URLs in messages",
           rules: ["POST /chat.unfurl"]
         },
         {
           name: "lists:read",
+          description: "View lists in a workspace",
           rules: [
             "POST /slackLists.download.get",
             "POST /slackLists.download.start",
@@ -7265,6 +7315,7 @@ var slackFirewall = {
         },
         {
           name: "lists:write",
+          description: "Create and manage lists in a workspace",
           rules: [
             "POST /slackLists.access.delete",
             "POST /slackLists.access.set",
@@ -7278,10 +7329,12 @@ var slackFirewall = {
         },
         {
           name: "mpim:history",
+          description: "View messages and other content in group direct messages that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "mpim:read",
+          description: "View basic information about group direct messages that the app has been added to",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7291,6 +7344,7 @@ var slackFirewall = {
         },
         {
           name: "mpim:write",
+          description: "Start group direct messages with people",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7308,6 +7362,7 @@ var slackFirewall = {
         },
         {
           name: "mpim:write.topic",
+          description: "Set the topic and purpose of group direct messages",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7315,30 +7370,37 @@ var slackFirewall = {
         },
         {
           name: "openid",
+          description: "View information about a user's identity (Sign in with Slack)",
           rules: ["POST /openid.connect.userInfo"]
         },
         {
           name: "pins:read",
+          description: "View pinned content in channels and conversations that the app has been added to",
           rules: ["GET /pins.list"]
         },
         {
           name: "pins:write",
+          description: "Add and remove pinned messages and files",
           rules: ["POST /pins.add", "POST /pins.remove"]
         },
         {
           name: "reactions:read",
+          description: "View emoji reactions and their associated content in channels and conversations",
           rules: ["GET /reactions.get", "GET /reactions.list"]
         },
         {
           name: "reactions:write",
+          description: "Add and edit emoji reactions",
           rules: ["POST /reactions.add", "POST /reactions.remove"]
         },
         {
           name: "reminders:read",
+          description: "View reminders created by the app",
           rules: ["GET /reminders.info", "GET /reminders.list"]
         },
         {
           name: "reminders:write",
+          description: "Add, remove, or complete reminders",
           rules: [
             "POST /reminders.add",
             "POST /reminders.complete",
@@ -7347,14 +7409,17 @@ var slackFirewall = {
         },
         {
           name: "remote_files:read",
+          description: "View remote files added by the app in a workspace",
           rules: ["GET /files.remote.info", "GET /files.remote.list"]
         },
         {
           name: "remote_files:share",
+          description: "Share remote files on a user's behalf",
           rules: ["GET /files.remote.share"]
         },
         {
           name: "remote_files:write",
+          description: "Add, edit, and delete remote files on a user's behalf",
           rules: [
             "POST /files.remote.add",
             "POST /files.remote.remove",
@@ -7363,6 +7428,7 @@ var slackFirewall = {
         },
         {
           name: "search:read",
+          description: "Search a workspace's content",
           rules: [
             "POST /assistant.search.info",
             "GET /search.all",
@@ -7372,22 +7438,27 @@ var slackFirewall = {
         },
         {
           name: "search:read.files",
+          description: "Search for files in a workspace",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.im",
+          description: "Search direct messages",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.mpim",
+          description: "Search group direct messages",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.private",
+          description: "Search private channels",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.public",
+          description: "Search public channels",
           rules: [
             "POST /assistant.search.context",
             "POST /assistant.search.info"
@@ -7395,26 +7466,32 @@ var slackFirewall = {
         },
         {
           name: "search:read.users",
+          description: "Search for users in a workspace",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "stars:read",
+          description: "View starred messages and files",
           rules: ["GET /stars.list"]
         },
         {
           name: "stars:write",
+          description: "Add or remove stars (saved items)",
           rules: ["POST /stars.add", "POST /stars.remove"]
         },
         {
           name: "team.billing:read",
+          description: "View billing information for a workspace",
           rules: ["POST /team.billing.info"]
         },
         {
           name: "team.preferences:read",
+          description: "View team preferences",
           rules: ["POST /team.preferences.list"]
         },
         {
           name: "team:read",
+          description: "View the name, email domain, and icon for workspaces the app is connected to",
           rules: [
             "GET /team.externalTeams.list",
             "GET /team.info",
@@ -7423,14 +7500,17 @@ var slackFirewall = {
         },
         {
           name: "tokens.basic",
+          description: "Execute methods with no required scope",
           rules: ["GET /migration.exchange"]
         },
         {
           name: "triggers:read",
+          description: "View triggers in a workspace",
           rules: ["POST /workflows.triggers.permissions.list"]
         },
         {
           name: "triggers:write",
+          description: "Create and manage triggers in a workspace",
           rules: [
             "POST /workflows.triggers.permissions.add",
             "POST /workflows.triggers.permissions.remove",
@@ -7439,10 +7519,12 @@ var slackFirewall = {
         },
         {
           name: "usergroups:read",
+          description: "View user groups in a workspace",
           rules: ["GET /usergroups.list", "GET /usergroups.users.list"]
         },
         {
           name: "usergroups:write",
+          description: "Create and manage user groups",
           rules: [
             "POST /usergroups.create",
             "POST /usergroups.disable",
@@ -7453,10 +7535,12 @@ var slackFirewall = {
         },
         {
           name: "users.profile:read",
+          description: "View profile details of people in a workspace",
           rules: ["GET /team.profile.get", "GET /users.profile.get"]
         },
         {
           name: "users.profile:write",
+          description: "Edit a user's profile information and status",
           rules: [
             "GET /users.deletePhoto",
             "POST /users.profile.set",
@@ -7465,6 +7549,7 @@ var slackFirewall = {
         },
         {
           name: "users:read",
+          description: "View people in a workspace",
           rules: [
             "GET /bots.info",
             "GET /users.getPresence",
@@ -7474,10 +7559,12 @@ var slackFirewall = {
         },
         {
           name: "users:read.email",
+          description: "View email addresses of people in a workspace",
           rules: ["GET /users.lookupByEmail"]
         },
         {
           name: "users:write",
+          description: "Set a user's presence status",
           rules: [
             "POST /apps.user.connection.update",
             "POST /users.setActive",
@@ -7628,7 +7715,7 @@ var slackCategories = {
   "channels:write.topic": "Write",
   "datastore:write": "Write",
   "dnd:write": "Write",
-  "files:write": "Write",
+  "files:write": "Send",
   "groups:write": "Write",
   "groups:write.invites": "Write",
   "groups:write.topic": "Write",
@@ -8951,7 +9038,261 @@ var axiomFirewall = {
           Authorization: "Bearer ${{ secrets.AXIOM_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "annotations|create",
+          rules: ["POST /v2/annotations"]
+        },
+        {
+          name: "annotations|delete",
+          rules: ["DELETE /v2/annotations/{id}"]
+        },
+        {
+          name: "annotations|read",
+          rules: ["GET /v2/annotations", "GET /v2/annotations/{id}"]
+        },
+        {
+          name: "annotations|update",
+          rules: ["PUT /v2/annotations/{id}"]
+        },
+        {
+          name: "apiTokens|create",
+          rules: ["POST /v2/tokens"]
+        },
+        {
+          name: "apiTokens|delete",
+          rules: ["DELETE /v2/tokens/{id}"]
+        },
+        {
+          name: "apiTokens|read",
+          rules: ["GET /v2/tokens", "GET /v2/tokens/{id}"]
+        },
+        {
+          name: "apiTokens|update",
+          rules: ["POST /v2/tokens/{id}/regenerate"]
+        },
+        {
+          name: "dashboards|create",
+          rules: ["POST /v2/dashboards"]
+        },
+        {
+          name: "dashboards|delete",
+          rules: ["DELETE /v2/dashboards/uid/{uid}"]
+        },
+        {
+          name: "dashboards|read",
+          rules: ["GET /v2/dashboards", "GET /v2/dashboards/uid/{uid}"]
+        },
+        {
+          name: "dashboards|update",
+          rules: ["PUT /v2/dashboards/uid/{uid}"]
+        },
+        {
+          name: "datasets|create",
+          rules: ["POST /v2/datasets"]
+        },
+        {
+          name: "datasets|delete",
+          rules: ["DELETE /v2/datasets/{dataset_id}"]
+        },
+        {
+          name: "datasets|read",
+          rules: [
+            "GET /v1/datasets",
+            "GET /v1/datasets/{dataset_name}",
+            "GET /v2/datasets",
+            "GET /v2/datasets/{dataset_id}",
+            "GET /v2/datasets/{dataset_id}/fields",
+            "GET /v2/datasets/{dataset_id}/fields/{field_id}",
+            "GET /v2/datasets/{dataset_id}/mapfields"
+          ]
+        },
+        {
+          name: "datasets|update",
+          rules: [
+            "POST /v1/datasets",
+            "PUT /v1/datasets/{dataset_name}",
+            "DELETE /v1/datasets/{dataset_name}",
+            "POST /v1/datasets/{dataset_name}/trim",
+            "PUT /v2/datasets/{dataset_id}",
+            "PUT /v2/datasets/{dataset_id}/fields/{field_id}",
+            "POST /v2/datasets/{dataset_id}/mapfields",
+            "PUT /v2/datasets/{dataset_id}/mapfields",
+            "DELETE /v2/datasets/{dataset_id}/mapfields/{map_field_name}"
+          ]
+        },
+        {
+          name: "ingest|create",
+          rules: [
+            "POST /v1/datasets/{dataset_name}/ingest",
+            "POST /v1/ingest/{dataset-id}"
+          ]
+        },
+        {
+          name: "monitors|create",
+          rules: ["POST /v2/monitors"]
+        },
+        {
+          name: "monitors|delete",
+          rules: ["DELETE /v2/monitors/{id}"]
+        },
+        {
+          name: "monitors|read",
+          rules: [
+            "GET /v2/monitors",
+            "GET /v2/monitors/{id}",
+            "GET /v2/monitors/{id}/history"
+          ]
+        },
+        {
+          name: "monitors|update",
+          rules: ["PUT /v2/monitors/{id}"]
+        },
+        {
+          name: "notifiers|create",
+          rules: ["POST /v2/notifiers"]
+        },
+        {
+          name: "notifiers|delete",
+          rules: ["DELETE /v2/notifiers/{id}"]
+        },
+        {
+          name: "notifiers|read",
+          rules: ["GET /v2/notifiers", "GET /v2/notifiers/{id}"]
+        },
+        {
+          name: "notifiers|update",
+          rules: ["PUT /v2/notifiers/{id}"]
+        },
+        {
+          name: "orgs|create",
+          rules: ["POST /v2/orgs"]
+        },
+        {
+          name: "orgs|read",
+          rules: ["GET /v2/orgs", "GET /v2/orgs/{id}"]
+        },
+        {
+          name: "orgs|update",
+          rules: ["PUT /v2/orgs/{id}"]
+        },
+        {
+          name: "query|read",
+          rules: [
+            "POST /v1/datasets/_apl?format=tabular",
+            "POST /v1/datasets/{dataset_name}/query",
+            "POST /v1/query/_apl?format=tabular",
+            "POST /v1/query/_mpl",
+            "POST /v1/query/batch",
+            "GET /v1/query/metrics/info/datasets/{dataset}/metrics",
+            "POST /v1/query/metrics/info/datasets/{dataset}/metrics",
+            "GET /v1/query/metrics/info/datasets/{dataset}/metrics/{metric}/tags",
+            "GET /v1/query/metrics/info/datasets/{dataset}/metrics/{metric}/tags/{tag}/values",
+            "GET /v1/query/metrics/info/datasets/{dataset}/tags",
+            "GET /v1/query/metrics/info/datasets/{dataset}/tags/{tag}/values"
+          ]
+        },
+        {
+          name: "rbac|create",
+          rules: [
+            "POST /v2/rbac/groups",
+            "PUT /v2/rbac/groups/{id}",
+            "DELETE /v2/rbac/groups/{id}",
+            "POST /v2/rbac/roles",
+            "PUT /v2/rbac/roles/{id}",
+            "DELETE /v2/rbac/roles/{id}"
+          ]
+        },
+        {
+          name: "rbac|read",
+          rules: [
+            "GET /v2/rbac/groups",
+            "GET /v2/rbac/groups/{id}",
+            "GET /v2/rbac/roles",
+            "GET /v2/rbac/roles/{id}"
+          ]
+        },
+        {
+          name: "starredQueries|create",
+          rules: ["POST /v2/apl-starred-queries"]
+        },
+        {
+          name: "starredQueries|delete",
+          rules: ["DELETE /v2/apl-starred-queries/{id}"]
+        },
+        {
+          name: "starredQueries|read",
+          rules: [
+            "GET /v2/apl-starred-queries",
+            "GET /v2/apl-starred-queries/{id}"
+          ]
+        },
+        {
+          name: "starredQueries|update",
+          rules: ["PUT /v2/apl-starred-queries/{id}"]
+        },
+        {
+          name: "trim|update",
+          rules: ["POST /v2/datasets/{dataset_id}/trim"]
+        },
+        {
+          name: "users|create",
+          rules: ["POST /v2/users"]
+        },
+        {
+          name: "users|delete",
+          rules: ["DELETE /v2/users/{id}"]
+        },
+        {
+          name: "users|read",
+          rules: [
+            "GET /v1/user",
+            "GET /v2/user",
+            "GET /v2/users",
+            "GET /v2/users/{id}"
+          ]
+        },
+        {
+          name: "users|update",
+          rules: ["PUT /v2/user", "PUT /v2/users/{id}/role"]
+        },
+        {
+          name: "vacuum|update",
+          rules: ["POST /v2/datasets/{dataset_id}/vacuum"]
+        },
+        {
+          name: "views|create",
+          rules: ["POST /v2/views"]
+        },
+        {
+          name: "views|delete",
+          rules: ["DELETE /v2/views/{id}"]
+        },
+        {
+          name: "views|read",
+          rules: ["GET /v2/views", "GET /v2/views/{id}"]
+        },
+        {
+          name: "views|update",
+          rules: ["PUT /v2/views/{id}"]
+        },
+        {
+          name: "virtualFields|create",
+          rules: ["POST /v2/vfields"]
+        },
+        {
+          name: "virtualFields|delete",
+          rules: ["DELETE /v2/vfields/{id}"]
+        },
+        {
+          name: "virtualFields|read",
+          rules: ["GET /v2/vfields", "GET /v2/vfields/{id}"]
+        },
+        {
+          name: "virtualFields|update",
+          rules: ["PUT /v2/vfields/{id}"]
+        }
+      ]
     }
   ]
 };
@@ -9291,7 +9632,670 @@ var deelFirewall = {
           Authorization: "Bearer ${{ secrets.DEEL_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "accounting:read",
+          rules: [
+            "GET /rest/v2/invoices",
+            "GET /rest/v2/invoices/deel",
+            "GET /rest/v2/invoices/{id}/download",
+            "GET /rest/v2/invoices/{invoice_id}",
+            "GET /rest/v2/legal-entities",
+            "GET /rest/v2/payments",
+            "GET /rest/v2/payments/{payment_id}/breakdown"
+          ]
+        },
+        {
+          name: "adjustments:read",
+          rules: [
+            "GET /rest/v2/adjustments/categories",
+            "GET /rest/v2/adjustments/{id}",
+            "GET /rest/v2/contracts/{contract_id}/adjustments"
+          ]
+        },
+        {
+          name: "adjustments:write",
+          rules: [
+            "POST /rest/v2/adjustments",
+            "PATCH /rest/v2/adjustments/{id}",
+            "DELETE /rest/v2/adjustments/{id}"
+          ]
+        },
+        {
+          name: "admin:worker",
+          rules: [
+            "POST /rest/v2/workers/session",
+            "DELETE /rest/v2/workers/{worker_id}/session"
+          ]
+        },
+        {
+          name: "ats:read",
+          rules: [
+            "GET /rest/v2/ats/application-sources",
+            "GET /rest/v2/ats/applications",
+            "GET /rest/v2/ats/applications/{application_id}",
+            "GET /rest/v2/ats/attachments/{attachable_type_slug}/{attachable_id}/{attachment_type_slug}",
+            "GET /rest/v2/ats/candidates",
+            "GET /rest/v2/ats/departments",
+            "GET /rest/v2/ats/email-templates",
+            "GET /rest/v2/ats/employment-types",
+            "GET /rest/v2/ats/hiring-members",
+            "GET /rest/v2/ats/job-boards/{job_board_id}/job-postings",
+            "GET /rest/v2/ats/job-postings/{job_posting_id}",
+            "GET /rest/v2/ats/jobs",
+            "GET /rest/v2/ats/locations",
+            "GET /rest/v2/ats/offers",
+            "GET /rest/v2/ats/reasons",
+            "GET /rest/v2/ats/tags"
+          ]
+        },
+        {
+          name: "ats:write",
+          rules: [
+            "POST /rest/v2/ats/applications",
+            "POST /rest/v2/ats/applications/{application_id}/interview-plan-stages",
+            "POST /rest/v2/ats/applications/{application_id}/notes",
+            "POST /rest/v2/ats/candidates",
+            "POST /rest/v2/ats/candidates/{candidate_id}/tags",
+            "POST /rest/v2/ats/jobs"
+          ]
+        },
+        {
+          name: "auth:write",
+          rules: ["POST /rest/v2/managers/magic-links"]
+        },
+        {
+          name: "benefits:read",
+          rules: [
+            "GET /rest/v2/benefits/legal-entities/{id}/401k/plans",
+            "GET /rest/v2/benefits/legal-entities/{legal_entity_id}/contracts/{contract_id}/plans/{plan_id}",
+            "GET /rest/v2/benefits/legal-entities/{legal_entity_id}/paystubs",
+            "GET /rest/v2/eor/benefits",
+            "GET /rest/v2/eor/worker/benefits",
+            "POST /rest/v2/workers/amendments/{amendment_id}/sign"
+          ]
+        },
+        {
+          name: "benefits:write",
+          rules: [
+            "POST /rest/v2/benefits/legal-entities/{id}/401k/plans/clean-up",
+            "POST /rest/v2/benefits/legal-entities/{id}/benefits/401k/activate",
+            "POST /rest/v2/benefits/legal-entities/{legal_entity_id}/401k/plans",
+            "PUT /rest/v2/benefits/legal-entities/{legal_entity_id}/401k/plans/{plan_id}",
+            "POST /rest/v2/benefits/legal-entities/{legal_entity_id}/contracts/{contract_id}/plans/{plan_id}"
+          ]
+        },
+        {
+          name: "candidates:write",
+          rules: ["POST /rest/v2/candidates"]
+        },
+        {
+          name: "contracts:read",
+          rules: [
+            "GET /rest/v2/contract-templates",
+            "GET /rest/v2/contracts",
+            "GET /rest/v2/contracts/custom_fields",
+            "GET /rest/v2/contracts/custom_fields/{id}",
+            "GET /rest/v2/contracts/{contract_id}",
+            "GET /rest/v2/contracts/{contract_id}/amendments",
+            "GET /rest/v2/contracts/{contract_id}/equity_withholding_estimate",
+            "GET /rest/v2/contracts/{contract_id}/invite",
+            "GET /rest/v2/contracts/{contract_id}/payment_cycles",
+            "GET /rest/v2/contracts/{contract_id}/preview",
+            "GET /rest/v2/contracts/{contract_id}/tasks",
+            "GET /rest/v2/employee-info/contract-types/{type}/countries/{country}",
+            "GET /rest/v2/eor/additional-costs/{country}",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/validation/settings",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/effective-date-limitations",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/pdf",
+            "GET /rest/v2/eor/contracts/{contract_id}/details",
+            "GET /rest/v2/eor/contracts/{contract_id}/documents/{type}",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents/{document_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/attachments/{attachment_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/required-information",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/restricted-dates",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/time-offs",
+            "GET /rest/v2/eor/contracts/{contract_id}/project-assignment",
+            "GET /rest/v2/eor/contracts/{contract_id}/project-assignment/checkin",
+            "POST /rest/v2/eor/contracts/{contract_id}/project-assignment/checkin",
+            "GET /rest/v2/eor/start-date",
+            "GET /rest/v2/eor/validations/{country_code}",
+            "GET /rest/v2/eor/{contract_id}/benefits",
+            "POST /rest/v2/eor/{oid}/terminations/regular",
+            "POST /rest/v2/eor/{oid}/terminations/resignation",
+            "GET /rest/v2/eor/{oid}/terminations/{terminationId}",
+            "GET /rest/v2/offboarding/tracker",
+            "GET /rest/v2/offboarding/tracker/hris_profile/{oid}",
+            "GET /rest/v2/offboarding/tracker/{id}",
+            "GET /rest/v2/onboarding/tracker",
+            "GET /rest/v2/onboarding/tracker/hris_profile/{hris_profile_id}",
+            "GET /rest/v2/onboarding/tracker/{tracker_id}"
+          ]
+        },
+        {
+          name: "contracts:write",
+          rules: [
+            "POST /rest/v2/contracts",
+            "POST /rest/v2/contracts/gp",
+            "PATCH /rest/v2/contracts/{contract_id}",
+            "GET /rest/v2/contracts/{contract_id}/amendments",
+            "POST /rest/v2/contracts/{contract_id}/amendments",
+            "PUT /rest/v2/contracts/{contract_id}/custom_fields",
+            "DELETE /rest/v2/contracts/{contract_id}/custom_fields/{id}",
+            "POST /rest/v2/contracts/{contract_id}/documents",
+            "POST /rest/v2/contracts/{contract_id}/invitations",
+            "DELETE /rest/v2/contracts/{contract_id}/invitations",
+            "POST /rest/v2/contracts/{contract_id}/signatures",
+            "POST /rest/v2/contracts/{contract_id}/tasks",
+            "POST /rest/v2/contracts/{contract_id}/tasks/many/reviews",
+            "DELETE /rest/v2/contracts/{contract_id}/tasks/{task_id}",
+            "POST /rest/v2/contracts/{contract_id}/tasks/{task_id}/reviews",
+            "POST /rest/v2/contracts/{contract_id}/terminations",
+            "DELETE /rest/v2/contracts/{contract_id}/terminations",
+            "POST /rest/v2/eor",
+            "PATCH /rest/v2/eor/contract/{contract_id}",
+            "POST /rest/v2/eor/contract/{oid}/cancel",
+            "PATCH /rest/v2/eor/contract/{oid}/delay-onboarding",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/validate",
+            "PATCH /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}",
+            "DELETE /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/accept",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/confirm",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/sign",
+            "POST /rest/v2/eor/contracts/{contract_id}/documents/{type}/sign",
+            "PATCH /rest/v2/eor/contracts/{contract_id}/employee-information",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/resignation",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/resignations/review-pto",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/review-client-sign-offs",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/termination",
+            "POST /rest/v2/eor/contracts/{contract_id}/project-assignment/accept",
+            "POST /rest/v2/eor/contracts/{contract_id}/project-assignment/checkin",
+            "POST /rest/v2/eor/job-scopes/validate",
+            "POST /rest/v2/eor/{oid}/terminations/regular",
+            "POST /rest/v2/eor/{oid}/terminations/resignation",
+            "POST /rest/v2/equity/exercise",
+            "PATCH /rest/v2/equity/exercise/{public_id}"
+          ]
+        },
+        {
+          name: "equities:write",
+          rules: ["POST /rest/v2/equities-tokens/tax-events"]
+        },
+        {
+          name: "forms:read",
+          rules: [
+            "POST /rest/v2/forms/eor/create-contract/definitions",
+            "GET /rest/v2/forms/eor/create-contract/{country_code}",
+            "GET /rest/v2/forms/eor/worker-additional-fields/{country_code}",
+            "GET /rest/v2/forms/gp/worker-additional-fields/{country_code}"
+          ]
+        },
+        {
+          name: "global-payroll:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/equity_withholding_estimate",
+            "GET /rest/v2/gp/legal-entities/{legal_entity_id}/reports",
+            "GET /rest/v2/gp/reports/{id}/gross_to_net",
+            "GET /rest/v2/gp/reports/{id}/gross_to_net/csv"
+          ]
+        },
+        {
+          name: "global-payroll:write",
+          rules: ["POST /rest/v2/gp/workers/{worker_id}/terminations"]
+        },
+        {
+          name: "groups:read",
+          rules: [
+            "GET /rest/v2/groups",
+            "POST /rest/v2/groups",
+            "PATCH /rest/v2/groups/{id}"
+          ]
+        },
+        {
+          name: "groups:write",
+          rules: [
+            "POST /rest/v2/groups",
+            "PATCH /rest/v2/groups/{id}",
+            "DELETE /rest/v2/groups/{id}",
+            "POST /rest/v2/groups/{id}/clone"
+          ]
+        },
+        {
+          name: "immigration:read",
+          rules: [
+            "GET /rest/v2/immigration/client/cases",
+            "GET /rest/v2/immigration/client/cases/{id}",
+            "GET /rest/v2/immigration/documents/{id}",
+            "GET /rest/v2/immigration/visa-requirement/business",
+            "GET /rest/v2/immigration/visa-types/{country_code}"
+          ]
+        },
+        {
+          name: "immigration:write",
+          rules: ["POST /rest/v2/immigration/client/cases"]
+        },
+        {
+          name: "invoice-adjustments:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/ic-invoicing-taxes",
+            "GET /rest/v2/contracts/{contract_id}/invoice-adjustments",
+            "GET /rest/v2/invoice-adjustments",
+            "GET /rest/v2/invoice-adjustments/{id}"
+          ]
+        },
+        {
+          name: "invoice-adjustments:write",
+          rules: [
+            "POST /rest/v2/contracts/{contract_id}/ic-invoicing-taxes",
+            "PATCH /rest/v2/contracts/{contract_id}/ic-invoicing-taxes",
+            "DELETE /rest/v2/contracts/{contract_id}/ic-invoicing-taxes/{tax_type}",
+            "POST /rest/v2/invoice-adjustments",
+            "PATCH /rest/v2/invoice-adjustments/{id}",
+            "DELETE /rest/v2/invoice-adjustments/{id}",
+            "POST /rest/v2/invoice-adjustments/{id}/reviews"
+          ]
+        },
+        {
+          name: "it-assets:read",
+          rules: [
+            "GET /rest/v2/it/assets",
+            "GET /rest/v2/it/assets/{asset_id}"
+          ]
+        },
+        {
+          name: "it-orders:read",
+          rules: [
+            "GET /rest/v2/it/orders",
+            "GET /rest/v2/it/orders/{order_id}"
+          ]
+        },
+        {
+          name: "it-policies:read",
+          rules: ["GET /rest/v2/it/policies"]
+        },
+        {
+          name: "knowledge-hub:read",
+          rules: ["GET /rest/v2/knowledge-hub/country-guide/{country_code}"]
+        },
+        {
+          name: "legal-entity:read",
+          rules: [
+            "GET /rest/v2/industries",
+            "POST /rest/v2/legal-entities",
+            "PATCH /rest/v2/legal-entities/{id}",
+            "DELETE /rest/v2/legal-entities/{id}",
+            "GET /rest/v2/legal-entities/{legal_entity_id}/cost-centers",
+            "GET /rest/v2/legal-entities/{legal_entity_id}/payroll-events",
+            "GET /rest/v2/lookups"
+          ]
+        },
+        {
+          name: "legal-entity:write",
+          rules: [
+            "POST /rest/v2/legal-entities",
+            "PATCH /rest/v2/legal-entities/{id}",
+            "DELETE /rest/v2/legal-entities/{id}"
+          ]
+        },
+        {
+          name: "lookups:read",
+          rules: [
+            "GET /rest/v2/lookups/countries",
+            "GET /rest/v2/lookups/currencies",
+            "GET /rest/v2/lookups/job-titles",
+            "GET /rest/v2/lookups/seniorities",
+            "GET /rest/v2/lookups/time-off-types"
+          ]
+        },
+        {
+          name: "milestones:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/milestones",
+            "GET /rest/v2/contracts/{contract_id}/milestones/{milestone_id}"
+          ]
+        },
+        {
+          name: "milestones:write",
+          rules: [
+            "POST /rest/v2/contracts/{contract_id}/milestones",
+            "DELETE /rest/v2/contracts/{contract_id}/milestones/{milestone_id}"
+          ]
+        },
+        {
+          name: "off-cycle-payments:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/off-cycle-payments",
+            "GET /rest/v2/contracts/{contract_id}/off-cycle-payments/{id}"
+          ]
+        },
+        {
+          name: "off-cycle-payments:write",
+          rules: ["POST /rest/v2/contracts/{contract_id}/off-cycle-payments"]
+        },
+        {
+          name: "organizations:read",
+          rules: [
+            "GET /rest/v2/benefits/legal-entities/{id}",
+            "GET /rest/v2/benefits/legal-entities/{id}/pay-stub",
+            "GET /rest/v2/benefits/legal-entities/{id}/year-to-date-pay",
+            "GET /rest/v2/departments",
+            "GET /rest/v2/eor/job-scopes",
+            "GET /rest/v2/hris/organization-structures/teams/{team_id}/custom-fields",
+            "PATCH /rest/v2/hris/organization-structures/teams/{team_id}/custom-fields",
+            "GET /rest/v2/hris/organization_structures",
+            "GET /rest/v2/hris/organization_structures/external/{external_id}",
+            "GET /rest/v2/hris/organization_structures/{hrisOrgStr_id}",
+            "GET /rest/v2/hris/worker_relations/types",
+            "GET /rest/v2/legal-entities",
+            "GET /rest/v2/managers",
+            "GET /rest/v2/organizations",
+            "GET /rest/v2/roles",
+            "GET /rest/v2/teams",
+            "GET /rest/v2/working-locations"
+          ]
+        },
+        {
+          name: "organizations:write",
+          rules: [
+            "POST /rest/v2/hris/organization_structures",
+            "PATCH /rest/v2/hris/organization_structures/external/{external_id}",
+            "DELETE /rest/v2/hris/organization_structures/external/{external_id}",
+            "PATCH /rest/v2/hris/organization_structures/{hrisOrgStr_id}",
+            "DELETE /rest/v2/hris/organization_structures/{hrisOrgStr_id}",
+            "POST /rest/v2/hris/worker_relations/types",
+            "PATCH /rest/v2/hris/worker_relations/types/external/{externalId}",
+            "DELETE /rest/v2/hris/worker_relations/types/external/{externalId}",
+            "PATCH /rest/v2/hris/worker_relations/types/{typeId}",
+            "DELETE /rest/v2/hris/worker_relations/types/{typeId}",
+            "POST /rest/v2/managers",
+            "POST /rest/v2/organizations/children",
+            "POST /rest/v2/roles",
+            "PATCH /rest/v2/roles/{roleId}"
+          ]
+        },
+        {
+          name: "payslips:read",
+          rules: [
+            "GET /rest/v2/eor/workers/{worker_id}/payslips",
+            "GET /rest/v2/eor/workers/{worker_id}/payslips/{payslip_id}/download",
+            "GET /rest/v2/gp/workers/{id}/payslips",
+            "GET /rest/v2/reports/payroll/cycles/{cycle_id}/gross-to-net"
+          ]
+        },
+        {
+          name: "people:read",
+          rules: [
+            "GET /rest/v2/benefits/legal-entities/{id}/employees/{employee_id}",
+            "GET /rest/v2/gp/workers/{worker_id}/banks",
+            "GET /rest/v2/gp/workers/{worker_id}/banks/guide",
+            "GET /rest/v2/offboarding/tracker",
+            "GET /rest/v2/offboarding/tracker/hris_profile/{oid}",
+            "GET /rest/v2/offboarding/tracker/{id}",
+            "GET /rest/v2/onboarding/tracker",
+            "GET /rest/v2/onboarding/tracker/hris_profile/{hris_profile_id}",
+            "GET /rest/v2/onboarding/tracker/{tracker_id}",
+            "GET /rest/v2/people",
+            "GET /rest/v2/people/custom_fields",
+            "GET /rest/v2/people/custom_fields/{id}",
+            "GET /rest/v2/people/external/{worker_id}/personal",
+            "GET /rest/v2/people/me",
+            "GET /rest/v2/people/{hris_profile_id}",
+            "GET /rest/v2/people/{worker_id}/custom_fields",
+            "GET /rest/v2/people/{worker_id}/personal"
+          ]
+        },
+        {
+          name: "people:write",
+          rules: [
+            "POST /rest/v2/eor/worker",
+            "POST /rest/v2/gp/workers/contracts/{contract_id}/additional-information",
+            "PATCH /rest/v2/gp/workers/contracts/{contract_id}/additional-information",
+            "PATCH /rest/v2/gp/workers/{worker_id}/address",
+            "POST /rest/v2/gp/workers/{worker_id}/banks",
+            "PATCH /rest/v2/gp/workers/{worker_id}/banks/{bank_id}",
+            "PATCH /rest/v2/gp/workers/{worker_id}/compensation",
+            "PATCH /rest/v2/gp/workers/{worker_id}/employee-information",
+            "PATCH /rest/v2/gp/workers/{worker_id}/pto-policy",
+            "POST /rest/v2/people",
+            "PATCH /rest/v2/people/external/{worker_id}/personal",
+            "PUT /rest/v2/people/{id}/department",
+            "PUT /rest/v2/people/{id}/working-location",
+            "PUT /rest/v2/people/{worker_id}/custom_fields",
+            "DELETE /rest/v2/people/{worker_id}/custom_fields/{id}",
+            "PATCH /rest/v2/people/{worker_id}/personal",
+            "POST /rest/v2/pwac"
+          ]
+        },
+        {
+          name: "profile:read",
+          rules: [
+            "GET /rest/v2/hris/positions/profile/{hrisProfileId}",
+            "GET /rest/v2/hris/worker_relations/profile/external/{profileId}",
+            "GET /rest/v2/hris/worker_relations/profile/{hrisProfileOid}",
+            "PATCH /rest/v2/profiles"
+          ]
+        },
+        {
+          name: "profile:write",
+          rules: [
+            "POST /rest/v2/hris/positions/apply_changes",
+            "POST /rest/v2/hris/worker_relations/profile",
+            "POST /rest/v2/hris/worker_relations/profile/external",
+            "DELETE /rest/v2/hris/worker_relations/profile/external/{profileId}",
+            "PUT /rest/v2/hris/worker_relations/profile/external/{profileId}/child",
+            "PUT /rest/v2/hris/worker_relations/profile/external/{profileId}/parent",
+            "DELETE /rest/v2/hris/worker_relations/profile/{hrisProfileOid}",
+            "PUT /rest/v2/hris/worker_relations/profile/{hrisProfileOid}/child",
+            "PUT /rest/v2/hris/worker_relations/profile/{hrisProfileOid}/parent",
+            "PATCH /rest/v2/profiles"
+          ]
+        },
+        {
+          name: "screenings:read",
+          rules: [
+            "GET /rest/v2/screenings/aml/{entity_type}/{entity_id}",
+            "GET /rest/v2/screenings/kyc/details",
+            "GET /rest/v2/screenings/verification-method"
+          ]
+        },
+        {
+          name: "screenings:write",
+          rules: ["POST /rest/v2/veriff/session"]
+        },
+        {
+          name: "tasks:read",
+          rules: ["GET /rest/v2/organizations/tasks"]
+        },
+        {
+          name: "tasks:write",
+          rules: ["PATCH /rest/v2/tasks/{task_id}"]
+        },
+        {
+          name: "time-off:read",
+          rules: [
+            "GET /rest/v2/time_offs",
+            "GET /rest/v2/time_offs/dailies",
+            "GET /rest/v2/time_offs/policy-validation-templates",
+            "GET /rest/v2/time_offs/profile/{hris_profile_id}",
+            "GET /rest/v2/time_offs/profile/{hris_profile_id}/entitlements",
+            "GET /rest/v2/time_offs/profile/{hris_profile_id}/policies",
+            "GET /rest/v2/time_offs/time-off-events",
+            "POST /rest/v2/time_offs/validate"
+          ]
+        },
+        {
+          name: "time-off:write",
+          rules: [
+            "POST /rest/v2/time_offs",
+            "POST /rest/v2/time_offs/global-payroll/sync",
+            "POST /rest/v2/time_offs/review",
+            "PATCH /rest/v2/time_offs/{time_off_id}",
+            "DELETE /rest/v2/time_offs/{time_off_id}"
+          ]
+        },
+        {
+          name: "time-tracking:read",
+          rules: [
+            "GET /rest/v2/time-tracking/timesheets/{timesheet_id}",
+            "GET /rest/v2/time_tracking/shift_rates",
+            "GET /rest/v2/time_tracking/shift_rates/{external_id}",
+            "GET /rest/v2/time_tracking/shifts",
+            "GET /rest/v2/time_tracking/shifts/{external_id}"
+          ]
+        },
+        {
+          name: "time-tracking:write",
+          rules: [
+            "POST /rest/v2/time-tracking/timesheets/upload-url",
+            "POST /rest/v2/time-tracking/timesheets/{timesheet_id}/review",
+            "POST /rest/v2/time_tracking/shift_rates",
+            "PATCH /rest/v2/time_tracking/shift_rates/{external_id}",
+            "DELETE /rest/v2/time_tracking/shift_rates/{external_id}",
+            "POST /rest/v2/time_tracking/shifts",
+            "POST /rest/v2/time_tracking/shifts/bulk-delete",
+            "POST /rest/v2/time_tracking/shifts/raw",
+            "PATCH /rest/v2/time_tracking/shifts/{external_id}",
+            "DELETE /rest/v2/time_tracking/shifts/{external_id}"
+          ]
+        },
+        {
+          name: "timesheets:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/timesheets",
+            "GET /rest/v2/contracts/{contract_id}/timesheets/presets",
+            "GET /rest/v2/timesheets",
+            "GET /rest/v2/timesheets/presets/{id}",
+            "GET /rest/v2/timesheets/root-presets",
+            "GET /rest/v2/timesheets/root-presets/{id}",
+            "GET /rest/v2/timesheets/{id}"
+          ]
+        },
+        {
+          name: "timesheets:write",
+          rules: [
+            "POST /rest/v2/timesheets",
+            "POST /rest/v2/timesheets/presets",
+            "PATCH /rest/v2/timesheets/presets/{id}",
+            "DELETE /rest/v2/timesheets/presets/{id}",
+            "POST /rest/v2/timesheets/root-presets",
+            "PATCH /rest/v2/timesheets/{id}",
+            "DELETE /rest/v2/timesheets/{id}",
+            "POST /rest/v2/timesheets/{id}/reviews"
+          ]
+        },
+        {
+          name: "treasury-vendorbill:write",
+          rules: [
+            "POST /rest/v2/accounts-payable/vendor-bills",
+            "POST /rest/v2/accounts-payable/vendor-bills/{vendor_bill_id}/attachments"
+          ]
+        },
+        {
+          name: "webhooks:read",
+          rules: [
+            "GET /rest/v2/webhooks",
+            "GET /rest/v2/webhooks/events/types",
+            "GET /rest/v2/webhooks/{id}"
+          ]
+        },
+        {
+          name: "webhooks:write",
+          rules: [
+            "POST /rest/v2/webhooks",
+            "PATCH /rest/v2/webhooks/{id}",
+            "DELETE /rest/v2/webhooks/{id}"
+          ]
+        },
+        {
+          name: "worker:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/preview",
+            "GET /rest/v2/daas/payslips",
+            "GET /rest/v2/engage/learning/actionable-journeys",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents/{document_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding",
+            "GET /rest/v2/eor/workers/banks-guide/country/{country}/currency/{currency}",
+            "GET /rest/v2/eor/workers/banks/guide",
+            "GET /rest/v2/eor/workers/compliance-documents",
+            "GET /rest/v2/eor/workers/compliance-documents/{document_id}/download",
+            "GET /rest/v2/eor/workers/compliance-documents/{document_id}/templates/download",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/employee-agreement/download",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/hr-documents",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/offboarding/resignation-letter",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/offer-letter",
+            "GET /rest/v2/eor/workers/resignations",
+            "GET /rest/v2/eor/workers/tax-documents",
+            "GET /rest/v2/escalations/workers/me/hrx",
+            "GET /rest/v2/immigration/workers/{worker_id}/cases/{case_id}/required-document",
+            "GET /rest/v2/immigration/workers/{worker_id}/onboarding-case",
+            "GET /rest/v2/immigration/workers/{worker_id}/required-documents",
+            "GET /rest/v2/invoice-adjustments/{id}",
+            "POST /rest/v2/magic-link",
+            "GET /rest/v2/payouts/auto-withdrawal-setting",
+            "GET /rest/v2/payouts/balances",
+            "GET /rest/v2/payouts/contractors/methods",
+            "POST /rest/v2/payouts/contractors/methods",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/requirements",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/supported_routes",
+            "PUT /rest/v2/payouts/contractors/methods/{id}",
+            "POST /rest/v2/payouts/contractors/settings/auto_withdraw",
+            "GET /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods/bank_transfers/requirements",
+            "DELETE /rest/v2/payouts/employees/methods/{id}",
+            "GET /rest/v2/people/me",
+            "GET /rest/v2/screenings/verification-method",
+            "POST /rest/v2/workers/amendments/{amendment_id}/sign",
+            "GET /rest/v2/workers/contracts/{contract_id}/pdf"
+          ]
+        },
+        {
+          name: "worker:write",
+          rules: [
+            "PATCH /rest/v2/daas/banks/{bank_id}",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/review-employee-sign-offs",
+            "POST /rest/v2/eor/mailboxes/change-password",
+            "POST /rest/v2/eor/workers/banks",
+            "POST /rest/v2/eor/workers/compliance-documents/{document_id}",
+            "POST /rest/v2/eor/workers/compliance-documents/{document_id}/acknowledgement",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/additional-information",
+            "PATCH /rest/v2/eor/workers/contracts/{contract_id}/additional-information",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/offboarding",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/offboarding/resignation-letter/sign",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/signatures",
+            "POST /rest/v2/immigration/workers/documents",
+            "POST /rest/v2/immigration/workers/{worker_id}/cases/{case_id}/required-document/{document_request_id}",
+            "POST /rest/v2/invoice-adjustments",
+            "PATCH /rest/v2/invoice-adjustments/{id}",
+            "PATCH /rest/v2/payouts/auto-withdrawal-setting",
+            "GET /rest/v2/payouts/contractors/methods",
+            "POST /rest/v2/payouts/contractors/methods",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/requirements",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/supported_routes",
+            "PUT /rest/v2/payouts/contractors/methods/{id}",
+            "POST /rest/v2/payouts/contractors/settings/auto_withdraw",
+            "GET /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods/bank_transfers/requirements",
+            "DELETE /rest/v2/payouts/employees/methods/{id}",
+            "POST /rest/v2/payouts/withdrawals",
+            "POST /rest/v2/screenings/kyc/external",
+            "POST /rest/v2/screenings/manual-verification",
+            "POST /rest/v2/time_offs",
+            "PATCH /rest/v2/time_offs/{time_off_id}",
+            "POST /rest/v2/veriff/session",
+            "POST /rest/v2/workers/amendments/{amendment_id}/sign",
+            "POST /rest/v2/workers/contracts/{contract_id}/reject",
+            "POST /rest/v2/workers/contracts/{contract_id}/signatures"
+          ]
+        }
+      ]
     }
   ]
 };
@@ -9454,7 +10458,387 @@ var dropboxFirewall = {
           Authorization: "Bearer ${{ secrets.DROPBOX_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "account_info.read",
+          rules: [
+            "POST /2/check/user",
+            "POST /2/users/features/get_values",
+            "POST /2/users/get_current_account",
+            "POST /2/users/get_space_usage"
+          ]
+        },
+        {
+          name: "account_info.write",
+          rules: ["POST /2/account/set_profile_photo"]
+        },
+        {
+          name: "contacts.write",
+          rules: [
+            "POST /2/contacts/delete_manual_contacts",
+            "POST /2/contacts/delete_manual_contacts_batch"
+          ]
+        },
+        {
+          name: "events.read",
+          rules: [
+            "POST /2/team_log/get_events",
+            "POST /2/team_log/get_events/continue"
+          ]
+        },
+        {
+          name: "file_requests.read",
+          rules: [
+            "POST /2/file_requests/count",
+            "POST /2/file_requests/get",
+            "POST /2/file_requests/list",
+            "POST /2/file_requests/list/continue",
+            "POST /2/file_requests/list:2"
+          ]
+        },
+        {
+          name: "file_requests.write",
+          rules: [
+            "POST /2/file_requests/create",
+            "POST /2/file_requests/delete",
+            "POST /2/file_requests/delete_all_closed",
+            "POST /2/file_requests/update"
+          ]
+        },
+        {
+          name: "files.content.read",
+          rules: [
+            "POST /2/files/get_file_lock_batch",
+            "POST /2/files/get_temporary_link",
+            "POST /2/paper/docs/download"
+          ]
+        },
+        {
+          name: "files.content.write",
+          rules: [
+            "POST /2/files/copy",
+            "POST /2/files/copy:2",
+            "POST /2/files/copy_batch",
+            "POST /2/files/copy_batch/check",
+            "POST /2/files/copy_batch/check:2",
+            "POST /2/files/copy_batch:2",
+            "POST /2/files/copy_reference/get",
+            "POST /2/files/copy_reference/save",
+            "POST /2/files/create_folder",
+            "POST /2/files/create_folder:2",
+            "POST /2/files/create_folder_batch",
+            "POST /2/files/create_folder_batch/check",
+            "POST /2/files/delete",
+            "POST /2/files/delete:2",
+            "POST /2/files/delete_batch",
+            "POST /2/files/delete_batch/check",
+            "POST /2/files/get_temporary_upload_link",
+            "POST /2/files/lock_file_batch",
+            "POST /2/files/move",
+            "POST /2/files/move:2",
+            "POST /2/files/move_batch",
+            "POST /2/files/move_batch/check",
+            "POST /2/files/move_batch/check:2",
+            "POST /2/files/move_batch:2",
+            "POST /2/files/paper/create",
+            "POST /2/files/paper/update",
+            "POST /2/files/restore",
+            "POST /2/files/save_url",
+            "POST /2/files/save_url/check_job_status",
+            "POST /2/files/unlock_file_batch",
+            "POST /2/files/upload_session/finish_batch",
+            "POST /2/files/upload_session/finish_batch/check",
+            "POST /2/files/upload_session/finish_batch:2",
+            "POST /2/files/upload_session/start_batch",
+            "POST /2/paper/docs/archive",
+            "POST /2/paper/docs/create",
+            "POST /2/paper/docs/update",
+            "POST /2/paper/folders/create"
+          ]
+        },
+        {
+          name: "files.metadata.read",
+          rules: [
+            "POST /2/file_properties/properties/search",
+            "POST /2/file_properties/properties/search/continue",
+            "POST /2/file_properties/templates/get_for_user",
+            "POST /2/file_properties/templates/list_for_user",
+            "POST /2/files/alpha/get_metadata",
+            "POST /2/files/get_metadata",
+            "POST /2/files/list_folder",
+            "POST /2/files/list_folder/continue",
+            "POST /2/files/list_folder/get_latest_cursor",
+            "POST /2/files/list_revisions",
+            "POST /2/files/properties/template/get",
+            "POST /2/files/properties/template/list",
+            "POST /2/files/search",
+            "POST /2/files/search/continue:2",
+            "POST /2/files/search:2",
+            "POST /2/files/tags/get",
+            "POST /2/paper/docs/list",
+            "POST /2/paper/docs/list/continue"
+          ]
+        },
+        {
+          name: "files.metadata.write",
+          rules: [
+            "POST /2/file_properties/properties/add",
+            "POST /2/file_properties/properties/overwrite",
+            "POST /2/file_properties/properties/remove",
+            "POST /2/file_properties/properties/update",
+            "POST /2/file_properties/templates/add_for_user",
+            "POST /2/file_properties/templates/remove_for_user",
+            "POST /2/file_properties/templates/update_for_user",
+            "POST /2/files/properties/add",
+            "POST /2/files/properties/overwrite",
+            "POST /2/files/properties/remove",
+            "POST /2/files/properties/update",
+            "POST /2/files/tags/add",
+            "POST /2/files/tags/remove"
+          ]
+        },
+        {
+          name: "files.permanent_delete",
+          rules: [
+            "POST /2/files/permanently_delete",
+            "POST /2/paper/docs/permanently_delete"
+          ]
+        },
+        {
+          name: "files.team_metadata.write",
+          rules: [
+            "POST /2/file_properties/templates/add_for_team",
+            "POST /2/file_properties/templates/get_for_team",
+            "POST /2/file_properties/templates/list_for_team",
+            "POST /2/file_properties/templates/remove_for_team",
+            "POST /2/file_properties/templates/update_for_team",
+            "POST /2/team/properties/template/add",
+            "POST /2/team/properties/template/get",
+            "POST /2/team/properties/template/list",
+            "POST /2/team/properties/template/update"
+          ]
+        },
+        {
+          name: "groups.read",
+          rules: [
+            "POST /2/team/groups/get_info",
+            "POST /2/team/groups/list",
+            "POST /2/team/groups/list/continue",
+            "POST /2/team/groups/members/list",
+            "POST /2/team/groups/members/list/continue"
+          ]
+        },
+        {
+          name: "groups.write",
+          rules: [
+            "POST /2/team/groups/create",
+            "POST /2/team/groups/delete",
+            "POST /2/team/groups/job_status/get",
+            "POST /2/team/groups/members/add",
+            "POST /2/team/groups/members/remove",
+            "POST /2/team/groups/members/set_access_type",
+            "POST /2/team/groups/update"
+          ]
+        },
+        {
+          name: "members.delete",
+          rules: [
+            "POST /2/team/members/recover",
+            "POST /2/team/members/remove",
+            "POST /2/team/members/remove/job_status/get"
+          ]
+        },
+        {
+          name: "members.read",
+          rules: [
+            "POST /2/team/member_space_limits/excluded_users/list",
+            "POST /2/team/member_space_limits/excluded_users/list/continue",
+            "POST /2/team/member_space_limits/get_custom_quota",
+            "POST /2/team/member_space_limits/set_custom_quota",
+            "POST /2/team/members/get_available_team_member_roles",
+            "POST /2/team/members/get_info",
+            "POST /2/team/members/get_info:2",
+            "POST /2/team/members/list",
+            "POST /2/team/members/list/continue",
+            "POST /2/team/members/list/continue:2",
+            "POST /2/team/members/list:2"
+          ]
+        },
+        {
+          name: "members.write",
+          rules: [
+            "POST /2/team/member_space_limits/excluded_users/add",
+            "POST /2/team/member_space_limits/excluded_users/remove",
+            "POST /2/team/member_space_limits/remove_custom_quota",
+            "POST /2/team/members/add",
+            "POST /2/team/members/add/job_status/get",
+            "POST /2/team/members/add/job_status/get:2",
+            "POST /2/team/members/add:2",
+            "POST /2/team/members/delete_profile_photo",
+            "POST /2/team/members/delete_profile_photo:2",
+            "POST /2/team/members/move_former_member_files",
+            "POST /2/team/members/move_former_member_files/job_status/check",
+            "POST /2/team/members/secondary_emails/add",
+            "POST /2/team/members/secondary_emails/delete",
+            "POST /2/team/members/secondary_emails/resend_verification_emails",
+            "POST /2/team/members/send_welcome_email",
+            "POST /2/team/members/set_admin_permissions",
+            "POST /2/team/members/set_admin_permissions:2",
+            "POST /2/team/members/set_profile",
+            "POST /2/team/members/set_profile:2",
+            "POST /2/team/members/set_profile_photo",
+            "POST /2/team/members/set_profile_photo:2",
+            "POST /2/team/members/suspend",
+            "POST /2/team/members/unsuspend"
+          ]
+        },
+        {
+          name: "openid",
+          rules: ["POST /2/openid/userinfo"]
+        },
+        {
+          name: "sessions.list",
+          rules: [
+            "POST /2/team/devices/list_member_devices",
+            "POST /2/team/devices/list_members_devices",
+            "POST /2/team/devices/list_team_devices",
+            "POST /2/team/linked_apps/list_member_linked_apps",
+            "POST /2/team/linked_apps/list_members_linked_apps",
+            "POST /2/team/linked_apps/list_team_linked_apps"
+          ]
+        },
+        {
+          name: "sessions.modify",
+          rules: [
+            "POST /2/team/devices/revoke_device_session",
+            "POST /2/team/devices/revoke_device_session_batch",
+            "POST /2/team/linked_apps/revoke_linked_app",
+            "POST /2/team/linked_apps/revoke_linked_app_batch"
+          ]
+        },
+        {
+          name: "sharing.read",
+          rules: [
+            "POST /2/paper/docs/folder_users/list",
+            "POST /2/paper/docs/folder_users/list/continue",
+            "POST /2/paper/docs/get_folder_info",
+            "POST /2/paper/docs/sharing_policy/get",
+            "POST /2/paper/docs/users/list",
+            "POST /2/paper/docs/users/list/continue",
+            "POST /2/sharing/get_file_metadata",
+            "POST /2/sharing/get_file_metadata/batch",
+            "POST /2/sharing/get_folder_metadata",
+            "POST /2/sharing/get_shared_link_metadata",
+            "POST /2/sharing/get_shared_links",
+            "POST /2/sharing/list_file_members",
+            "POST /2/sharing/list_file_members/batch",
+            "POST /2/sharing/list_file_members/continue",
+            "POST /2/sharing/list_folder_members",
+            "POST /2/sharing/list_folder_members/continue",
+            "POST /2/sharing/list_folders",
+            "POST /2/sharing/list_folders/continue",
+            "POST /2/sharing/list_mountable_folders",
+            "POST /2/sharing/list_mountable_folders/continue",
+            "POST /2/sharing/list_received_files",
+            "POST /2/sharing/list_received_files/continue",
+            "POST /2/sharing/list_shared_links",
+            "POST /2/users/get_account",
+            "POST /2/users/get_account_batch"
+          ]
+        },
+        {
+          name: "sharing.write",
+          rules: [
+            "POST /2/paper/docs/sharing_policy/set",
+            "POST /2/paper/docs/users/add",
+            "POST /2/paper/docs/users/remove",
+            "POST /2/sharing/add_file_member",
+            "POST /2/sharing/add_folder_member",
+            "POST /2/sharing/check_job_status",
+            "POST /2/sharing/check_remove_member_job_status",
+            "POST /2/sharing/check_share_job_status",
+            "POST /2/sharing/create_shared_link",
+            "POST /2/sharing/create_shared_link_with_settings",
+            "POST /2/sharing/modify_shared_link_settings",
+            "POST /2/sharing/mount_folder",
+            "POST /2/sharing/relinquish_file_membership",
+            "POST /2/sharing/relinquish_folder_membership",
+            "POST /2/sharing/remove_file_member",
+            "POST /2/sharing/remove_file_member_2",
+            "POST /2/sharing/remove_folder_member",
+            "POST /2/sharing/revoke_shared_link",
+            "POST /2/sharing/set_access_inheritance",
+            "POST /2/sharing/share_folder",
+            "POST /2/sharing/transfer_folder",
+            "POST /2/sharing/unmount_folder",
+            "POST /2/sharing/unshare_file",
+            "POST /2/sharing/unshare_folder",
+            "POST /2/sharing/update_file_member",
+            "POST /2/sharing/update_folder_member",
+            "POST /2/sharing/update_folder_policy"
+          ]
+        },
+        {
+          name: "team_data.content.read",
+          rules: [
+            "POST /2/team/team_folder/get_info",
+            "POST /2/team/team_folder/list",
+            "POST /2/team/team_folder/list/continue"
+          ]
+        },
+        {
+          name: "team_data.content.write",
+          rules: [
+            "POST /2/team/team_folder/activate",
+            "POST /2/team/team_folder/archive",
+            "POST /2/team/team_folder/archive/check",
+            "POST /2/team/team_folder/create",
+            "POST /2/team/team_folder/permanently_delete",
+            "POST /2/team/team_folder/rename",
+            "POST /2/team/team_folder/update_sync_settings"
+          ]
+        },
+        {
+          name: "team_data.governance.write",
+          rules: [
+            "POST /2/team/legal_holds/create_policy",
+            "POST /2/team/legal_holds/get_policy",
+            "POST /2/team/legal_holds/list_held_revisions",
+            "POST /2/team/legal_holds/list_held_revisions_continue",
+            "POST /2/team/legal_holds/list_policies",
+            "POST /2/team/legal_holds/release_policy",
+            "POST /2/team/legal_holds/update_policy"
+          ]
+        },
+        {
+          name: "team_data.member",
+          rules: [
+            "POST /2/team/namespaces/list",
+            "POST /2/team/namespaces/list/continue"
+          ]
+        },
+        {
+          name: "team_info.read",
+          rules: [
+            "POST /2/team/features/get_values",
+            "POST /2/team/get_info",
+            "POST /2/team/reports/get_activity",
+            "POST /2/team/reports/get_devices",
+            "POST /2/team/reports/get_membership",
+            "POST /2/team/reports/get_storage",
+            "POST /2/team/sharing_allowlist/list",
+            "POST /2/team/sharing_allowlist/list/continue",
+            "POST /2/team/token/get_authenticated_admin"
+          ]
+        },
+        {
+          name: "team_info.write",
+          rules: [
+            "POST /2/team/sharing_allowlist/add",
+            "POST /2/team/sharing_allowlist/remove"
+          ]
+        }
+      ]
     },
     {
       base: "https://content.dropboxapi.com",
@@ -9463,7 +10847,35 @@ var dropboxFirewall = {
           Authorization: "Bearer ${{ secrets.DROPBOX_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "files.content.read",
+          rules: [
+            "POST /2/files/download",
+            "POST /2/files/download_zip",
+            "POST /2/files/export",
+            "POST /2/files/get_preview",
+            "POST /2/files/get_thumbnail",
+            "POST /2/files/get_thumbnail:2",
+            "POST /2/files/get_thumbnail_batch"
+          ]
+        },
+        {
+          name: "files.content.write",
+          rules: [
+            "POST /2/files/alpha/upload",
+            "POST /2/files/upload",
+            "POST /2/files/upload_session/append",
+            "POST /2/files/upload_session/append:2",
+            "POST /2/files/upload_session/finish",
+            "POST /2/files/upload_session/start"
+          ]
+        },
+        {
+          name: "sharing.read",
+          rules: ["POST /2/sharing/get_shared_link_file"]
+        }
+      ]
     },
     {
       base: "https://notify.dropboxapi.com",
@@ -9472,7 +10884,12 @@ var dropboxFirewall = {
           Authorization: "Bearer ${{ secrets.DROPBOX_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "files.metadata.read",
+          rules: ["POST /2/files/list_folder/longpoll"]
+        }
+      ]
     }
   ]
 };
@@ -17427,6 +18844,7 @@ var c17 = initContract();
 var zeroAgentCustomSkillNameSchema = z26.string().min(2).max(64).regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$/);
 var zeroAgentResponseSchema = z26.object({
   agentId: z26.string(),
+  ownerId: z26.string(),
   description: z26.string().nullable(),
   displayName: z26.string().nullable(),
   sound: z26.string().nullable(),
@@ -17558,7 +18976,7 @@ var zeroAgentFirewallPoliciesContract = c17.router({
       403: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Update zero agent firewall policies (admin only)"
+    summary: "Update zero agent firewall policies (owner only)"
   }
 });
 var zeroAgentInstructionsContract = c17.router({
@@ -17596,14 +19014,57 @@ var zeroAgentCustomSkillSchema = z26.object({
   displayName: z26.string().max(256).nullable(),
   description: z26.string().max(1024).nullable()
 });
-var zeroAgentSkillContentRequestSchema = z26.object({
+var skillFileEntrySchema = z26.object({
+  path: z26.string().min(1).max(256).refine(
+    (p) => {
+      return !p.startsWith("/");
+    },
+    { message: "Path must be relative" }
+  ).refine(
+    (p) => {
+      return !p.includes("..");
+    },
+    {
+      message: "Path must not contain .."
+    }
+  ),
   content: z26.string()
 });
+var SKILL_FILES_MAX_BYTES = 5 * 1024 * 1024;
+var SKILL_FILES_MAX_COUNT = 500;
+var zeroAgentSkillFilesRequestSchema = z26.object({
+  files: z26.array(skillFileEntrySchema).min(1, "At least one file is required").max(
+    SKILL_FILES_MAX_COUNT,
+    `Maximum ${SKILL_FILES_MAX_COUNT} files allowed`
+  ).refine(
+    (files) => {
+      return files.some((f) => {
+        return f.path === "SKILL.md";
+      });
+    },
+    {
+      message: "SKILL.md is required"
+    }
+  ).refine(
+    (files) => {
+      const total = files.reduce((sum, f) => {
+        return sum + new TextEncoder().encode(f.content).length;
+      }, 0);
+      return total <= SKILL_FILES_MAX_BYTES;
+    },
+    { message: "Total file size must not exceed 5MB" }
+  )
+});
+var skillFileMetadataSchema = z26.object({
+  path: z26.string(),
+  size: z26.number()
+});
 var zeroAgentSkillContentResponseSchema = z26.object({
   name: z26.string(),
   displayName: z26.string().nullable(),
   description: z26.string().nullable(),
-  content: z26.string().nullable()
+  content: z26.string().nullable(),
+  files: z26.array(skillFileMetadataSchema).nullable()
 });
 var zeroAgentSkillListResponseSchema = z26.array(
   zeroAgentCustomSkillSchema
@@ -17624,7 +19085,7 @@ var zeroSkillsCollectionContract = c17.router({
     method: "POST",
     path: "/api/zero/skills",
     headers: authHeadersSchema,
-    body: zeroAgentSkillContentRequestSchema.extend({
+    body: zeroAgentSkillFilesRequestSchema.extend({
       name: zeroAgentCustomSkillNameSchema,
       displayName: z26.string().max(256).optional(),
       description: z26.string().max(1024).optional()
@@ -17658,7 +19119,7 @@ var zeroSkillsDetailContract = c17.router({
     path: "/api/zero/skills/:name",
     headers: authHeadersSchema,
     pathParams: z26.object({ name: zeroAgentCustomSkillNameSchema }),
-    body: zeroAgentSkillContentRequestSchema,
+    body: zeroAgentSkillFilesRequestSchema,
     responses: {
       200: zeroAgentSkillContentResponseSchema,
       401: apiErrorSchema,
@@ -17762,7 +19223,7 @@ var firewallAccessRequestsResolveContract = c17.router({
       403: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Resolve (approve/reject) a firewall access request (admin only)"
+    summary: "Resolve (approve/reject) a firewall access request (owner only)"
   }
 });
 
@@ -18279,7 +19740,8 @@ var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   volumeVersions: true,
   vars: true,
   secrets: true,
-  agentComposeId: true
+  agentComposeId: true,
+  appendSystemPrompt: true
 }).extend({
   agentId: z31.string().optional()
 });
@@ -18469,9 +19931,6 @@ var scheduleResponseSchema = z32.object({
   secretNames: z32.array(z32.string()).nullable(),
   volumeVersions: z32.record(z32.string(), z32.string()).nullable(),
   enabled: z32.boolean(),
-  notifyEmail: z32.boolean(),
-  notifySlack: z32.boolean(),
-  notifySlackChannelId: z32.string().nullable(),
   nextRunAt: z32.string().nullable(),
   lastRunAt: z32.string().nullable(),
   retryStartedAt: z32.string().nullable(),
@@ -18497,10 +19956,7 @@ var zeroDeployScheduleRequestSchema = z32.object({
   appendSystemPrompt: z32.string().optional(),
   volumeVersions: z32.record(z32.string(), z32.string()).optional(),
   agentId: z32.string().uuid("Invalid agent ID"),
-  enabled: z32.boolean().optional(),
-  notifyEmail: z32.boolean().optional(),
-  notifySlack: z32.boolean().optional(),
-  notifySlackChannelId: z32.string().nullable().optional()
+  enabled: z32.boolean().optional()
 }).refine(
   (data) => {
     const triggers = [
@@ -18864,6 +20320,57 @@ var integrationsSlackMessageContract = c30.router({
     summary: "Send a Slack message via org bot token"
   }
 });
+var slackUploadInitBodySchema = z36.object({
+  filename: z36.string().min(1, "Filename is required"),
+  length: z36.number().int().positive("File length must be a positive integer")
+});
+var slackUploadInitResponseSchema = z36.object({
+  uploadUrl: z36.string(),
+  fileId: z36.string()
+});
+var integrationsSlackUploadInitContract = c30.router({
+  init: {
+    method: "POST",
+    path: "/api/zero/integrations/slack/upload-file/init",
+    headers: authHeadersSchema,
+    body: slackUploadInitBodySchema,
+    responses: {
+      200: slackUploadInitResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Get a pre-signed Slack upload URL via org bot token"
+  }
+});
+var slackUploadCompleteBodySchema = z36.object({
+  fileId: z36.string().min(1, "File ID is required"),
+  channel: z36.string().min(1, "Channel ID is required"),
+  threadTs: z36.string().optional(),
+  title: z36.string().optional(),
+  initialComment: z36.string().optional()
+});
+var slackUploadCompleteResponseSchema = z36.object({
+  fileId: z36.string(),
+  permalink: z36.string()
+});
+var integrationsSlackUploadCompleteContract = c30.router({
+  complete: {
+    method: "POST",
+    path: "/api/zero/integrations/slack/upload-file/complete",
+    headers: authHeadersSchema,
+    body: slackUploadCompleteBodySchema,
+    responses: {
+      200: slackUploadCompleteResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Finalize Slack file upload and share to channel"
+  }
+});
 
 // ../../packages/core/src/contracts/zero-billing.ts
 import { z as z37 } from "zod";
@@ -20273,11 +21780,11 @@ async function getZeroOrgMembers() {
   }
   handleError(result, "Failed to get organization members");
 }
-async function inviteZeroOrgMember(email) {
+async function inviteZeroOrgMember(email, role = "member") {
   const config = await getClientConfig();
   const client = initClient11(zeroOrgInviteContract, config);
   const result = await client.invite({
-    body: { email }
+    body: { email, role }
   });
   if (result.status === 200) {
     return;
@@ -20563,6 +22070,24 @@ async function sendSlackMessage(body) {
   }
   handleError(result, "Failed to send Slack message");
 }
+async function initSlackFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient17(integrationsSlackUploadInitContract, config);
+  const result = await client.init({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to initialize Slack file upload");
+}
+async function completeSlackFileUpload(body) {
+  const config = await getClientConfig();
+  const client = initClient17(integrationsSlackUploadCompleteContract, config);
+  const result = await client.complete({ body, headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to complete Slack file upload");
+}
 
 // src/lib/api/domains/zero-schedules.ts
 import { initClient as initClient18 } from "@ts-rest/core";
@@ -21690,6 +23215,8 @@ export {
   createZeroComputerConnector,
   deleteZeroComputerConnector,
   sendSlackMessage,
+  initSlackFileUpload,
+  completeSlackFileUpload,
   deployZeroSchedule,
   listZeroSchedules,
   deleteZeroSchedule,
@@ -21726,4 +23253,4 @@ export {
   pollEvents,
   showNextSteps
 };
-//# sourceMappingURL=chunk-KXR4BFFL.js.map
+//# sourceMappingURL=chunk-XQIPEDKM.js.map