@vm0/cli 9.92.1 → 9.94.0

package/zero.js

@@ -5,6 +5,7 @@ import {
   EventRenderer,
   MODEL_PROVIDER_TYPES,
   allowsCustomModel,
+  completeSlackFileUpload,
   configureGlobalProxyFromEnv,
   connectorTypeSchema,
   createSkill,
@@ -58,6 +59,7 @@ import {
   hasAuthMethods,
   hasModelSelection,
   hasRequiredScopes,
+  initSlackFileUpload,
   inviteZeroOrgMember,
   isFeatureEnabled,
   isFirewallConnectorType,
@@ -100,10 +102,10 @@ import {
   updateZeroUserPreferences,
   upsertZeroOrgModelProvider,
   withErrorHandler
-} from "./chunk-KXR4BFFL.js";
+} from "./chunk-XQIPEDKM.js";
 
 // src/zero.ts
-import { Command as Command68 } from "commander";
+import { Command as Command70 } from "commander";
 
 // src/commands/zero/org/index.ts
 import { Command as Command23 } from "commander";
@@ -227,10 +229,21 @@ var membersCommand = new Command5().name("members").description("View organizati
 // src/commands/zero/org/invite.ts
 import { Command as Command6 } from "commander";
 import chalk6 from "chalk";
-var inviteCommand = new Command6().name("invite").description("Invite a member to the current organization").requiredOption("--email <email>", "Email address of the member to invite").action(
+var inviteCommand = new Command6().name("invite").description("Invite a member to the current organization").requiredOption("--email <email>", "Email address of the member to invite").option(
+  "--role <role>",
+  "Role for the invited member (member or admin)",
+  "member"
+).action(
   withErrorHandler(async (options) => {
-    await inviteZeroOrgMember(options.email);
-    console.log(chalk6.green(`\u2713 Invitation sent to ${options.email}`));
+    if (options.role !== "member" && options.role !== "admin") {
+      throw new Error(
+        `Invalid role "${options.role}". Must be "member" or "admin".`
+      );
+    }
+    await inviteZeroOrgMember(options.email, options.role);
+    console.log(
+      chalk6.green(`\u2713 Invitation sent to ${options.email} as ${options.role}`)
+    );
   })
 );
 
@@ -2017,7 +2030,7 @@ var disconnectCommand = new Command33().name("disconnect").description("Disconne
 var zeroConnectorCommand = new Command34().name("connector").description("Check or connect third-party services (GitHub, Slack, etc.)").addCommand(listCommand6).addCommand(statusCommand2).addCommand(connectCommand).addCommand(disconnectCommand);
 
 // src/commands/zero/doctor/index.ts
-import { Command as Command37 } from "commander";
+import { Command as Command38 } from "commander";
 
 // src/commands/zero/doctor/missing-token.ts
 import { Command as Command35 } from "commander";
@@ -2114,6 +2127,22 @@ Notes:
 
 // src/commands/zero/doctor/firewall-deny.ts
 import { Command as Command36, Option } from "commander";
+
+// src/commands/zero/doctor/resolve-role.ts
+async function resolveRole() {
+  try {
+    const org = await getZeroOrg();
+    if (org.role === "admin" || org.role === "member") {
+      return org.role;
+    }
+    return "unknown";
+  } catch (error) {
+    console.debug("resolveRole failed, falling back to unknown:", error);
+    return "unknown";
+  }
+}
+
+// src/commands/zero/doctor/firewall-deny.ts
 var firewallDenyCommand = new Command36().name("firewall-deny").description(
   "Diagnose a firewall denial and find the permission that covers it"
 ).argument("<firewall-ref>", "The firewall connector type (e.g. github)").addOption(
@@ -2179,20 +2208,116 @@ Notes:
         );
         console.log("");
       }
-      console.log(
-        `Ask the user to allow it at: [Allow ${label} access](${url})`
-      );
+      const role = agentId ? await resolveRole() : "unknown";
+      if (role === "admin") {
+        console.log(
+          `You can allow this permission directly: [Manage ${label} firewall](${url})`
+        );
+      } else if (role === "member") {
+        console.log(
+          `This change requires admin approval. Request access at: [Request ${label} access](${url})`
+        );
+      } else {
+        console.log(
+          `Ask the user to allow it at: [Allow ${label} access](${url})`
+        );
+      }
+    }
+  )
+);
+
+// src/commands/zero/doctor/firewall-permissions-change.ts
+import { Command as Command37, Option as Option2 } from "commander";
+function findPermissionInConfig(ref, permissionName) {
+  if (!isFirewallConnectorType(ref)) return false;
+  const config = getConnectorFirewall(ref);
+  for (const api of config.apis) {
+    if (!api.permissions) continue;
+    for (const p of api.permissions) {
+      if (p.name === permissionName) return true;
+    }
+  }
+  return false;
+}
+var firewallPermissionsChangeCommand = new Command37().name("firewall-permissions-change").description("Request a firewall permission change (enable or disable)").argument("<firewall-ref>", "The firewall connector type (e.g. github)").addOption(
+  new Option2(
+    "--permission <name>",
+    "The permission name to change"
+  ).makeOptionMandatory()
+).addOption(
+  new Option2("--enable", "Request to enable the permission").conflicts(
+    "disable"
+  )
+).addOption(
+  new Option2("--disable", "Request to disable the permission").conflicts(
+    "enable"
+  )
+).addHelpText(
+  "after",
+  `
+Examples:
+  zero doctor firewall-permissions-change github --permission contents:read --enable
+  zero doctor firewall-permissions-change slack --permission chat:write --disable
+
+Notes:
+  - Outputs a platform URL for the user to adjust the permission
+  - Admins can change permissions directly; members must request approval`
+).action(
+  withErrorHandler(
+    async (firewallRef, opts) => {
+      if (!opts.enable && !opts.disable) {
+        throw new Error("Either --enable or --disable is required");
+      }
+      if (!isFirewallConnectorType(firewallRef)) {
+        throw new Error(`Unknown firewall connector type: ${firewallRef}`);
+      }
+      if (!findPermissionInConfig(firewallRef, opts.permission)) {
+        throw new Error(
+          `Unknown permission "${opts.permission}" for ${firewallRef} firewall`
+        );
+      }
+      const { label } = CONNECTOR_TYPES[firewallRef];
+      const action = opts.enable ? "enable" : "disable";
+      const platformOrigin = await getPlatformOrigin();
+      const agentId = process.env.ZERO_AGENT_ID;
+      const urlParams = new URLSearchParams({
+        ref: firewallRef,
+        permission: opts.permission
+      });
+      const pagePath = agentId ? `/firewall-allow/${agentId}` : "/firewall-allow";
+      const url = `${platformOrigin}${pagePath}?${urlParams.toString()}`;
+      const role = agentId ? await resolveRole() : "unknown";
+      if (role === "admin") {
+        console.log(
+          `You can ${action} the "${opts.permission}" permission directly: [Manage ${label} firewall](${url})`
+        );
+      } else if (role === "member") {
+        if (action === "enable") {
+          console.log(
+            `Permission changes require admin approval. Request access at: [Request ${label} access](${url})`
+          );
+        } else {
+          console.log(
+            `Permission changes require admin approval. Contact an org admin to disable this permission: [View ${label} firewall](${url})`
+          );
+        }
+      } else {
+        console.log(
+          `To ${action} the "${opts.permission}" permission on the ${label} firewall: [Manage ${label} firewall](${url})`
+        );
+      }
     }
   )
 );
 
 // src/commands/zero/doctor/index.ts
-var zeroDoctorCommand = new Command37().name("doctor").description("Diagnose runtime issues (missing tokens, firewall denials)").addCommand(missingTokenCommand).addCommand(firewallDenyCommand).addHelpText(
+var zeroDoctorCommand = new Command38().name("doctor").description("Diagnose runtime issues (missing tokens, firewall denials)").addCommand(missingTokenCommand).addCommand(firewallDenyCommand).addCommand(firewallPermissionsChangeCommand).addHelpText(
   "after",
   `
 Examples:
   Missing an API key?    zero doctor missing-token GITHUB_TOKEN
   Firewall blocked?      zero doctor firewall-deny github --method GET --path /repos/owner/repo
+  Change a permission?   zero doctor firewall-permissions-change github --permission contents:read --enable
 
 Notes:
   - Use this when your task fails due to a missing environment variable or firewall denial
@@ -2200,7 +2325,7 @@ Notes:
 );
 
 // src/commands/zero/preference/index.ts
-import { Command as Command38 } from "commander";
+import { Command as Command39 } from "commander";
 import chalk31 from "chalk";
 function detectTimezone2() {
   return Intl.DateTimeFormat().resolvedOptions().timeZone;
@@ -2257,7 +2382,7 @@ System timezone detected: ${detectedTz}`));
     }
   }
 }
-var zeroPreferenceCommand = new Command38().name("preference").description("View or update user preferences (timezone, notifications)").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").action(
+var zeroPreferenceCommand = new Command39().name("preference").description("View or update user preferences (timezone, notifications)").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").action(
   withErrorHandler(async (opts) => {
     const updates = buildUpdates(opts);
     if (updates) {
@@ -2282,7 +2407,7 @@ var zeroPreferenceCommand = new Command38().name("preference").description("View
 );
 
 // src/commands/zero/run/run.ts
-import { Command as Command39 } from "commander";
+import { Command as Command40 } from "commander";
 
 // src/commands/zero/run/shared.ts
 import chalk32 from "chalk";
@@ -2365,10 +2490,7 @@ function showZeroNextSteps(result) {
 }
 
 // src/commands/zero/run/run.ts
-var mainRunCommand = new Command39().name("run").description("Delegate a task to a teammate agent").argument("<agent-id>", "Agent UUID (from `zero agent list`)").argument("<prompt>", "Task prompt for the agent").option(
-  "--append-system-prompt <text>",
-  "Append text to the agent's system prompt"
-).option(
+var mainRunCommand = new Command40().name("run").description("Delegate a task to a teammate agent").argument("<agent-id>", "Agent UUID (from `zero agent list`)").argument("<prompt>", "Task prompt for the agent").option(
   "--model-provider <type>",
   "Override model provider (e.g., anthropic-api-key)"
 ).option("--verbose", "Show full tool inputs and outputs").addHelpText(
@@ -2395,7 +2517,6 @@ Notes:
       const response = await createZeroRun({
         agentId,
         prompt,
-        appendSystemPrompt: options.appendSystemPrompt,
         modelProvider: options.modelProvider
       });
       if (response.status === "failed") {
@@ -2417,11 +2538,8 @@ Notes:
 );
 
 // src/commands/zero/run/continue.ts
-import { Command as Command40 } from "commander";
-var continueCommand = new Command40().name("continue").description("Continue a previous delegation from a session").argument("<session-id>", "Session ID from a previous run").argument("<prompt>", "Follow-up prompt for the agent").option(
-  "--append-system-prompt <text>",
-  "Append text to the agent's system prompt"
-).option(
+import { Command as Command41 } from "commander";
+var continueCommand = new Command41().name("continue").description("Continue a previous delegation from a session").argument("<session-id>", "Session ID from a previous run").argument("<prompt>", "Follow-up prompt for the agent").option(
   "--model-provider <type>",
   "Override model provider (e.g., anthropic-api-key)"
 ).option("--verbose", "Show full tool inputs and outputs").addHelpText(
@@ -2445,7 +2563,6 @@ Notes:
       const response = await createZeroRun({
         sessionId,
         prompt,
-        appendSystemPrompt: options.appendSystemPrompt,
         modelProvider: options.modelProvider
       });
       if (response.status === "failed") {
@@ -2479,10 +2596,10 @@ Examples:
 var zeroRunCommand = mainRunCommand;
 
 // src/commands/zero/schedule/index.ts
-import { Command as Command47 } from "commander";
+import { Command as Command48 } from "commander";
 
 // src/commands/zero/schedule/setup.ts
-import { Command as Command41 } from "commander";
+import { Command as Command42 } from "commander";
 import chalk33 from "chalk";
 var FREQUENCY_CHOICES = [
   { title: "Daily", value: "daily", description: "Run every day" },
@@ -2720,42 +2837,6 @@ async function gatherPromptText(optionPrompt, existingPrompt) {
     existingPrompt || "let's start working."
   );
 }
-async function gatherNotificationPreferences(optionNotifyEmail, optionNotifySlack, optionNotifySlackChannelId, existingSchedule) {
-  if (optionNotifyEmail !== void 0 && optionNotifySlack !== void 0) {
-    return {
-      notifyEmail: optionNotifyEmail,
-      notifySlack: optionNotifySlack,
-      notifySlackChannelId: optionNotifySlackChannelId
-    };
-  }
-  if (!isInteractive()) {
-    return {
-      notifyEmail: optionNotifyEmail,
-      notifySlack: optionNotifySlack,
-      notifySlackChannelId: optionNotifySlackChannelId
-    };
-  }
-  const notifyEmail = optionNotifyEmail ?? await promptConfirm(
-    "Enable email notifications?",
-    existingSchedule?.notifyEmail ?? false
-  );
-  const notifySlack = optionNotifySlack ?? await promptConfirm(
-    "Enable Slack notifications?",
-    existingSchedule?.notifySlack ?? false
-  );
-  let notifySlackChannelId = optionNotifySlackChannelId;
-  if (notifySlackChannelId === void 0 && notifySlack) {
-    const defaultChannel = existingSchedule?.notifySlackChannelId ?? "";
-    const channelInput = await promptText(
-      "Slack channel ID (leave empty for DM)",
-      defaultChannel
-    );
-    if (channelInput) {
-      notifySlackChannelId = channelInput;
-    }
-  }
-  return { notifyEmail, notifySlack, notifySlackChannelId };
-}
 async function gatherInterval(optionInterval, existingInterval) {
   if (optionInterval) {
     const val = parseInt(optionInterval, 10);
@@ -2848,16 +2929,7 @@ Deploying schedule for agent ${chalk33.cyan(params.agentName)}...`
     atTime: atTimeISO,
     intervalSeconds: params.intervalSeconds,
     timezone: params.timezone,
-    prompt: params.prompt,
-    ...params.notifyEmail !== void 0 && {
-      notifyEmail: params.notifyEmail
-    },
-    ...params.notifySlack !== void 0 && {
-      notifySlack: params.notifySlack
-    },
-    ...params.notifySlackChannelId !== void 0 && {
-      notifySlackChannelId: params.notifySlackChannelId
-    }
+    prompt: params.prompt
   });
   return deployResult;
 }
@@ -2936,10 +3008,7 @@ async function handleScheduleEnabling(params) {
     showEnableHint(agentName);
   }
 }
-var setupCommand2 = new Command41().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-id>", "Agent ID").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("-e, --enable", "Enable schedule immediately after creation").option("--notify-email", "Enable email notifications (default: false)").option("--no-notify-email", "Disable email notifications").option("--notify-slack", "Enable Slack notifications (default: false)").option("--no-notify-slack", "Disable Slack notifications").option(
-  "--notify-slack-channel-id <channel-id>",
-  "Slack channel ID for notifications (default: DM)"
-).addHelpText(
+var setupCommand2 = new Command42().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-id>", "Agent ID").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("-e, --enable", "Enable schedule immediately after creation").addHelpText(
   "after",
   `
 Examples:
@@ -2953,8 +3022,7 @@ Examples:
 Notes:
   - Re-running setup with the same agent updates the existing "default" schedule
   - Use -n to manage multiple named schedules for the same agent
-  - All flags are required in non-interactive mode; interactive mode prompts for missing values
-  - When --notify-slack is enabled, run results are automatically posted to the Slack channel specified by --notify-slack-channel-id (or as a DM if not set). No need to include Slack delivery instructions in your prompt.`
+  - All flags are required in non-interactive mode; interactive mode prompts for missing values`
 ).action(
   withErrorHandler(async (agentIdentifier, options) => {
     const compose = await resolveCompose(agentIdentifier);
@@ -3004,12 +3072,6 @@ Notes:
       console.log(chalk33.dim("Cancelled"));
       return;
     }
-    const { notifyEmail, notifySlack, notifySlackChannelId } = await gatherNotificationPreferences(
-      options.notifyEmail,
-      options.notifySlack,
-      options.notifySlackChannelId,
-      existingSchedule
-    );
     const deployResult = await buildAndDeploy({
       scheduleName,
       agentId,
@@ -3020,10 +3082,7 @@ Notes:
       atTime,
       intervalSeconds,
       timezone,
-      prompt: promptText_,
-      notifyEmail,
-      notifySlack,
-      notifySlackChannelId
+      prompt: promptText_
     });
     displayDeployResult(scheduleName, deployResult);
     const shouldPromptEnable = deployResult.created || existingSchedule !== void 0 && !existingSchedule.enabled;
@@ -3038,9 +3097,9 @@ Notes:
 );
 
 // src/commands/zero/schedule/list.ts
-import { Command as Command42 } from "commander";
+import { Command as Command43 } from "commander";
 import chalk34 from "chalk";
-var listCommand7 = new Command42().name("list").alias("ls").description("List all zero schedules").addHelpText(
+var listCommand7 = new Command43().name("list").alias("ls").description("List all zero schedules").addHelpText(
   "after",
   `
 Examples:
@@ -3098,7 +3157,7 @@ Examples:
 );
 
 // src/commands/zero/schedule/status.ts
-import { Command as Command43 } from "commander";
+import { Command as Command44 } from "commander";
 import chalk35 from "chalk";
 function formatDateTimeStyled(dateStr) {
   if (!dateStr) return chalk35.dim("-");
@@ -3151,7 +3210,7 @@ function printTimeSchedule(schedule) {
     console.log(`${"Failures:".padEnd(16)}${failureText}`);
   }
 }
-var statusCommand3 = new Command43().name("status").description("Show detailed status of a zero schedule").argument("<agent-id>", "Agent ID").option(
+var statusCommand3 = new Command44().name("status").description("Show detailed status of a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3176,9 +3235,9 @@ Examples:
 );
 
 // src/commands/zero/schedule/delete.ts
-import { Command as Command44 } from "commander";
+import { Command as Command45 } from "commander";
 import chalk36 from "chalk";
-var deleteCommand3 = new Command44().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-id>", "Agent ID").option(
+var deleteCommand3 = new Command45().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).option("-y, --yes", "Skip confirmation prompt").addHelpText(
@@ -3220,9 +3279,9 @@ Notes:
 );
 
 // src/commands/zero/schedule/enable.ts
-import { Command as Command45 } from "commander";
+import { Command as Command46 } from "commander";
 import chalk37 from "chalk";
-var enableCommand = new Command45().name("enable").description("Enable a zero schedule").argument("<agent-id>", "Agent ID").option(
+var enableCommand = new Command46().name("enable").description("Enable a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3246,9 +3305,9 @@ Examples:
 );
 
 // src/commands/zero/schedule/disable.ts
-import { Command as Command46 } from "commander";
+import { Command as Command47 } from "commander";
 import chalk38 from "chalk";
-var disableCommand = new Command46().name("disable").description("Disable a zero schedule").argument("<agent-id>", "Agent ID").option(
+var disableCommand = new Command47().name("disable").description("Disable a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3272,7 +3331,7 @@ Examples:
 );
 
 // src/commands/zero/schedule/index.ts
-var zeroScheduleCommand = new Command47().name("schedule").description("Create or manage recurring scheduled tasks").addCommand(setupCommand2).addCommand(listCommand7).addCommand(statusCommand3).addCommand(deleteCommand3).addCommand(enableCommand).addCommand(disableCommand).addHelpText(
+var zeroScheduleCommand = new Command48().name("schedule").description("Create or manage recurring scheduled tasks").addCommand(setupCommand2).addCommand(listCommand7).addCommand(statusCommand3).addCommand(deleteCommand3).addCommand(enableCommand).addCommand(disableCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3285,12 +3344,12 @@ Examples:
 );
 
 // src/commands/zero/secret/index.ts
-import { Command as Command51 } from "commander";
+import { Command as Command52 } from "commander";
 
 // src/commands/zero/secret/list.ts
-import { Command as Command48 } from "commander";
+import { Command as Command49 } from "commander";
 import chalk39 from "chalk";
-var listCommand8 = new Command48().name("list").alias("ls").description("List all secrets").action(
+var listCommand8 = new Command49().name("list").alias("ls").description("List all secrets").action(
   withErrorHandler(async () => {
     const result = await listZeroSecrets();
     if (result.secrets.length === 0) {
@@ -3343,9 +3402,9 @@ var listCommand8 = new Command48().name("list").alias("ls").description("List al
 );
 
 // src/commands/zero/secret/set.ts
-import { Command as Command49 } from "commander";
+import { Command as Command50 } from "commander";
 import chalk40 from "chalk";
-var setCommand4 = new Command49().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
+var setCommand4 = new Command50().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
   "-b, --body <value>",
   "Secret value (required in non-interactive mode)"
 ).option("-d, --description <description>", "Optional description").action(
@@ -3391,9 +3450,9 @@ var setCommand4 = new Command49().name("set").description("Create or update a se
 );
 
 // src/commands/zero/secret/delete.ts
-import { Command as Command50 } from "commander";
+import { Command as Command51 } from "commander";
 import chalk41 from "chalk";
-var deleteCommand4 = new Command50().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+var deleteCommand4 = new Command51().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
   withErrorHandler(async (name, options) => {
     if (!options.yes) {
       if (!isInteractive()) {
@@ -3414,19 +3473,19 @@ var deleteCommand4 = new Command50().name("delete").description("Delete a secret
 );
 
 // src/commands/zero/secret/index.ts
-var zeroSecretCommand = new Command51().name("secret").description("Read or write secrets (API keys, tokens)").addCommand(listCommand8).addCommand(setCommand4).addCommand(deleteCommand4);
+var zeroSecretCommand = new Command52().name("secret").description("Read or write secrets (API keys, tokens)").addCommand(listCommand8).addCommand(setCommand4).addCommand(deleteCommand4);
 
 // src/commands/zero/slack/index.ts
-import { Command as Command54 } from "commander";
+import { Command as Command56 } from "commander";
 
 // src/commands/zero/slack/message/index.ts
-import { Command as Command53 } from "commander";
+import { Command as Command54 } from "commander";
 
 // src/commands/zero/slack/message/send.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { Command as Command52 } from "commander";
+import { Command as Command53 } from "commander";
 import chalk42 from "chalk";
-var sendCommand = new Command52().name("send").description("Send a message to a Slack channel").requiredOption("-c, --channel <id>", "Channel ID").option("-t, --text <message>", "Message text").option("--thread <ts>", "Thread timestamp for replies").option("--blocks <json>", "Block Kit JSON string").addHelpText(
+var sendCommand = new Command53().name("send").description("Send a message to a Slack channel").requiredOption("-c, --channel <id>", "Channel ID").option("-t, --text <message>", "Message text").option("--thread <ts>", "Thread timestamp for replies").option("--blocks <json>", "Block Kit JSON string").addHelpText(
   "after",
   `
 Examples:
@@ -3476,65 +3535,123 @@ Notes:
 );
 
 // src/commands/zero/slack/message/index.ts
-var zeroSlackMessageCommand = new Command53().name("message").description("Manage Slack messages").addCommand(sendCommand).addHelpText(
+var zeroSlackMessageCommand = new Command54().name("message").description("Manage Slack messages").addCommand(sendCommand).addHelpText(
   "after",
   `
 Examples:
   zero slack message send -c <channel-id> -t "Hello!"`
 );
 
+// src/commands/zero/slack/upload-file.ts
+import { statSync, readFileSync as readFileSync4 } from "fs";
+import { basename } from "path";
+import { Command as Command55 } from "commander";
+import chalk43 from "chalk";
+var uploadFileCommand = new Command55().name("upload-file").description("Upload a file to a Slack channel as the bot").requiredOption("-f, --file <path>", "Local file path to upload").requiredOption("-c, --channel <id>", "Slack channel ID").option("--thread <ts>", "Thread timestamp to post as a reply").option("--title <title>", "Display title for the file").option("--comment <text>", "Initial comment to accompany the file").addHelpText(
+  "after",
+  `
+Examples:
+  Upload a file:           zero slack upload-file -f /tmp/report.pdf -c C01234
+  Upload to thread:        zero slack upload-file -f /tmp/log.txt -c C01234 --thread 1234567890.123456
+  With title and comment:  zero slack upload-file -f /tmp/data.csv -c C01234 --title "Daily Report" --comment "Here's the report"
+
+Notes:
+  - Uses the bot token (not user SLACK_TOKEN), so no files:write firewall permission is needed
+  - Returns file_id and permalink for reference`
+).action(
+  withErrorHandler(
+    async (options) => {
+      let fileSize;
+      try {
+        const stat = statSync(options.file);
+        fileSize = stat.size;
+      } catch {
+        throw new Error(`File not found: ${options.file}`);
+      }
+      if (fileSize === 0) {
+        throw new Error("File is empty");
+      }
+      const filename = basename(options.file);
+      const { uploadUrl, fileId } = await initSlackFileUpload({
+        filename,
+        length: fileSize
+      });
+      const fileContent = readFileSync4(options.file);
+      const uploadResponse = await fetch(uploadUrl, {
+        method: "POST",
+        body: fileContent
+      });
+      if (!uploadResponse.ok) {
+        throw new Error(
+          `File upload failed: ${uploadResponse.status} ${uploadResponse.statusText}`
+        );
+      }
+      const result = await completeSlackFileUpload({
+        fileId,
+        channel: options.channel,
+        threadTs: options.thread,
+        title: options.title,
+        initialComment: options.comment
+      });
+      console.log(chalk43.green(`\u2713 File uploaded (file_id: ${result.fileId})`));
+      console.log(chalk43.dim(`  permalink: ${result.permalink}`));
+    }
+  )
+);
+
 // src/commands/zero/slack/index.ts
-var zeroSlackCommand = new Command54().name("slack").description("Send messages to Slack channels as the bot").addCommand(zeroSlackMessageCommand).addHelpText(
+var zeroSlackCommand = new Command56().name("slack").description("Send messages and upload files to Slack channels as the bot").addCommand(zeroSlackMessageCommand).addCommand(uploadFileCommand).addHelpText(
   "after",
   `
 Examples:
   Send a message:        zero slack message send -c <channel-id> -t "Hello!"
-  Reply in a thread:     zero slack message send -c <channel-id> --thread <ts> -t "reply"`
+  Reply in a thread:     zero slack message send -c <channel-id> --thread <ts> -t "reply"
+  Upload a file:         zero slack upload-file -f /tmp/report.pdf -c <channel-id>`
 );
 
 // src/commands/zero/variable/index.ts
-import { Command as Command58 } from "commander";
+import { Command as Command60 } from "commander";
 
 // src/commands/zero/variable/list.ts
-import { Command as Command55 } from "commander";
-import chalk43 from "chalk";
+import { Command as Command57 } from "commander";
+import chalk44 from "chalk";
 function truncateValue2(value, maxLength = 60) {
   if (value.length <= maxLength) {
     return value;
   }
   return value.slice(0, maxLength - 15) + "... [truncated]";
 }
-var listCommand9 = new Command55().name("list").alias("ls").description("List all variables").action(
+var listCommand9 = new Command57().name("list").alias("ls").description("List all variables").action(
   withErrorHandler(async () => {
     const result = await listZeroVariables();
     if (result.variables.length === 0) {
-      console.log(chalk43.dim("No variables found"));
+      console.log(chalk44.dim("No variables found"));
       console.log();
       console.log("To add a variable:");
-      console.log(chalk43.cyan("  zero variable set MY_VAR <value>"));
+      console.log(chalk44.cyan("  zero variable set MY_VAR <value>"));
       return;
     }
-    console.log(chalk43.bold("Variables:"));
+    console.log(chalk44.bold("Variables:"));
     console.log();
     for (const variable of result.variables) {
       const displayValue = truncateValue2(variable.value);
-      console.log(`  ${chalk43.cyan(variable.name)} = ${displayValue}`);
+      console.log(`  ${chalk44.cyan(variable.name)} = ${displayValue}`);
       if (variable.description) {
-        console.log(`    ${chalk43.dim(variable.description)}`);
+        console.log(`    ${chalk44.dim(variable.description)}`);
       }
       console.log(
-        `    ${chalk43.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
+        `    ${chalk44.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
       );
       console.log();
     }
-    console.log(chalk43.dim(`Total: ${result.variables.length} variable(s)`));
+    console.log(chalk44.dim(`Total: ${result.variables.length} variable(s)`));
   })
 );
 
 // src/commands/zero/variable/set.ts
-import { Command as Command56 } from "commander";
-import chalk44 from "chalk";
-var setCommand5 = new Command56().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
+import { Command as Command58 } from "commander";
+import chalk45 from "chalk";
+var setCommand5 = new Command58().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
   withErrorHandler(
     async (name, value, options) => {
       let variable;
@@ -3554,15 +3671,15 @@ var setCommand5 = new Command56().name("set").description("Create or update a va
         }
         throw error;
       }
-      console.log(chalk44.green(`\u2713 Variable "${variable.name}" saved`));
+      console.log(chalk45.green(`\u2713 Variable "${variable.name}" saved`));
     }
   )
 );
 
 // src/commands/zero/variable/delete.ts
-import { Command as Command57 } from "commander";
-import chalk45 from "chalk";
-var deleteCommand5 = new Command57().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+import { Command as Command59 } from "commander";
+import chalk46 from "chalk";
+var deleteCommand5 = new Command59().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
   withErrorHandler(async (name, options) => {
     if (!options.yes) {
       if (!isInteractive()) {
@@ -3573,21 +3690,21 @@ var deleteCommand5 = new Command57().name("delete").description("Delete a variab
         false
       );
       if (!confirmed) {
-        console.log(chalk45.dim("Cancelled"));
+        console.log(chalk46.dim("Cancelled"));
         return;
       }
     }
     await deleteZeroVariable(name);
-    console.log(chalk45.green(`\u2713 Variable "${name}" deleted`));
+    console.log(chalk46.green(`\u2713 Variable "${name}" deleted`));
   })
 );
 
 // src/commands/zero/variable/index.ts
-var zeroVariableCommand = new Command58().name("variable").description("Read or write non-sensitive configuration values").addCommand(listCommand9).addCommand(setCommand5).addCommand(deleteCommand5);
+var zeroVariableCommand = new Command60().name("variable").description("Read or write non-sensitive configuration values").addCommand(listCommand9).addCommand(setCommand5).addCommand(deleteCommand5);
 
 // src/commands/zero/whoami.ts
-import { Command as Command59 } from "commander";
-import chalk46 from "chalk";
+import { Command as Command61 } from "commander";
+import chalk47 from "chalk";
 function isInsideSandbox() {
   return !!process.env.ZERO_AGENT_ID;
 }
@@ -3595,11 +3712,11 @@ async function showSandboxInfo() {
   const agentId = process.env.ZERO_AGENT_ID;
   const payload = decodeZeroTokenPayload();
   console.log(`Agent ID:   ${agentId}`);
-  console.log(`Run ID:     ${payload?.runId ?? chalk46.dim("unavailable")}`);
-  console.log(`Org ID:     ${payload?.orgId ?? chalk46.dim("unavailable")}`);
+  console.log(`Run ID:     ${payload?.runId ?? chalk47.dim("unavailable")}`);
+  console.log(`Org ID:     ${payload?.orgId ?? chalk47.dim("unavailable")}`);
   if (payload?.capabilities?.length) {
     console.log();
-    console.log(chalk46.bold("Capabilities:"));
+    console.log(chalk47.bold("Capabilities:"));
     console.log(`  ${payload.capabilities.join(", ")}`);
   }
 }
@@ -3607,23 +3724,23 @@ async function showLocalInfo() {
   const token = await getToken();
   const apiUrl = await getApiUrl();
   const activeOrg = await getActiveOrg();
-  console.log(chalk46.bold("Auth:"));
+  console.log(chalk47.bold("Auth:"));
   if (token) {
     const tokenSource = process.env.ZERO_TOKEN ? "ZERO_TOKEN env var" : process.env.VM0_TOKEN ? "VM0_TOKEN env var" : "config file";
     console.log(
-      `  Status:     ${chalk46.green("Authenticated")} (via ${tokenSource})`
+      `  Status:     ${chalk47.green("Authenticated")} (via ${tokenSource})`
     );
   } else {
-    console.log(`  Status:     ${chalk46.dim("Not authenticated")}`);
+    console.log(`  Status:     ${chalk47.dim("Not authenticated")}`);
   }
   console.log(`  API:        ${apiUrl}`);
   console.log();
   if (activeOrg) {
-    console.log(chalk46.bold("Org:"));
+    console.log(chalk47.bold("Org:"));
     console.log(`  Active:     ${activeOrg}`);
   }
 }
-var zeroWhoamiCommand = new Command59().name("whoami").description("Show agent identity, run ID, and capabilities").addHelpText(
+var zeroWhoamiCommand = new Command61().name("whoami").description("Show agent identity, run ID, and capabilities").addHelpText(
   "after",
   `
 Examples:
@@ -3643,11 +3760,11 @@ Notes:
 );
 
 // src/commands/zero/ask-user/index.ts
-import { Command as Command61 } from "commander";
+import { Command as Command63 } from "commander";
 
 // src/commands/zero/ask-user/question.ts
-import { Command as Command60 } from "commander";
-import chalk47 from "chalk";
+import { Command as Command62 } from "commander";
+import chalk48 from "chalk";
 function collectOption(value, previous) {
   const list = previous ?? [];
   list.push({ label: value });
@@ -3658,7 +3775,7 @@ function collectDesc(value, previous) {
   list.push(value);
   return list;
 }
-var questionCommand = new Command60().name("question").description("Ask the user a question and wait for the answer").argument("<question>", "The question to ask").option("--header <text>", "Short label displayed as chip/tag (max 12 chars)").option("--option <label>", "Add a choice option (repeatable)", collectOption).option(
+var questionCommand = new Command62().name("question").description("Ask the user a question and wait for the answer").argument("<question>", "The question to ask").option("--header <text>", "Short label displayed as chip/tag (max 12 chars)").option("--option <label>", "Add a choice option (repeatable)", collectOption).option(
   "--desc <text>",
   "Description for the preceding --option",
   collectDesc
@@ -3714,7 +3831,7 @@ Notes:
         questions: [questionItem]
       });
       console.error(
-        chalk47.dim(
+        chalk48.dim(
           `\u23F3 Waiting for user response... (pendingId: ${pendingId})`
         )
       );
@@ -3741,7 +3858,7 @@ Notes:
 );
 
 // src/commands/zero/ask-user/index.ts
-var zeroAskUserCommand = new Command61().name("ask-user").description("Ask the user a question and wait for the answer").addCommand(questionCommand).addHelpText(
+var zeroAskUserCommand = new Command63().name("ask-user").description("Ask the user a question and wait for the answer").addCommand(questionCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3753,14 +3870,44 @@ Notes:
 );
 
 // src/commands/zero/skill/index.ts
-import { Command as Command67 } from "commander";
+import { Command as Command69 } from "commander";
 
 // src/commands/zero/skill/create.ts
-import { Command as Command62 } from "commander";
-import { readFileSync as readFileSync4, existsSync } from "fs";
+import { Command as Command64 } from "commander";
+import chalk49 from "chalk";
+
+// src/lib/skill-directory.ts
+import { readFileSync as readFileSync5, readdirSync } from "fs";
 import { join as join2 } from "path";
-import chalk48 from "chalk";
-var createCommand2 = new Command62().name("create").description("Create a custom skill in the organization").argument("<name>", "Skill name (lowercase alphanumeric with hyphens)").requiredOption("--dir <path>", "Path to directory containing SKILL.md").option("--display-name <name>", "Skill display name").option("--description <text>", "Skill description").addHelpText(
+var IGNORED_NAMES = /* @__PURE__ */ new Set(["node_modules", ".git", ".DS_Store"]);
+function readSkillDirectory(dirPath) {
+  const files = [];
+  function walk(dir, prefix) {
+    const entries = readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (entry.name.startsWith(".") || IGNORED_NAMES.has(entry.name)) continue;
+      const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) {
+        walk(join2(dir, entry.name), relPath);
+      } else {
+        files.push({
+          path: relPath,
+          content: readFileSync5(join2(dir, entry.name), "utf-8")
+        });
+      }
+    }
+  }
+  walk(dirPath, "");
+  if (!files.some((f) => {
+    return f.path === "SKILL.md";
+  })) {
+    throw new Error(`SKILL.md not found in ${dirPath}`);
+  }
+  return files;
+}
+
+// src/commands/zero/skill/create.ts
+var createCommand2 = new Command64().name("create").description("Create a custom skill in the organization").argument("<name>", "Skill name (lowercase alphanumeric with hyphens)").requiredOption("--dir <path>", "Path to directory containing SKILL.md").option("--display-name <name>", "Skill display name").option("--description <text>", "Skill description").addHelpText(
   "after",
   `
 Examples:
@@ -3769,24 +3916,22 @@ Examples:
 
 Notes:
   - The directory must contain a SKILL.md file
+  - All files in the directory are uploaded (hidden files and node_modules excluded)
   - The skill is created in the organization but not bound to any agent
   - Use 'zero agent edit <id> --add-skill <name>' to bind a skill to an agent`
 ).action(
   withErrorHandler(
     async (name, options) => {
-      const skillMdPath = join2(options.dir, "SKILL.md");
-      if (!existsSync(skillMdPath)) {
-        throw new Error(`SKILL.md not found in ${options.dir}`);
-      }
-      const content = readFileSync4(skillMdPath, "utf-8");
+      const files = readSkillDirectory(options.dir);
       const skill = await createSkill({
         name,
-        content,
+        files,
         displayName: options.displayName,
         description: options.description
       });
-      console.log(chalk48.green(`\u2713 Skill "${skill.name}" created`));
+      console.log(chalk49.green(`\u2713 Skill "${skill.name}" created`));
       console.log(`  Name:         ${skill.name}`);
+      console.log(`  Files:        ${files.length} file(s)`);
       if (skill.displayName) {
         console.log(`  Display Name: ${skill.displayName}`);
       }
@@ -3798,13 +3943,11 @@ Notes:
 );
 
 // src/commands/zero/skill/edit.ts
-import { Command as Command63 } from "commander";
-import { readFileSync as readFileSync5, existsSync as existsSync2 } from "fs";
-import { join as join3 } from "path";
-import chalk49 from "chalk";
-var editCommand2 = new Command63().name("edit").description("Update a custom skill's content").argument("<name>", "Skill name").requiredOption(
+import { Command as Command65 } from "commander";
+import chalk50 from "chalk";
+var editCommand2 = new Command65().name("edit").description("Update a custom skill's content").argument("<name>", "Skill name").requiredOption(
   "--dir <path>",
-  "Path to directory containing updated SKILL.md"
+  "Path to directory containing updated skill files"
 ).addHelpText(
   "after",
   `
@@ -3812,20 +3955,18 @@ Examples:
   zero skill edit my-skill --dir ./skills/my-skill/`
 ).action(
   withErrorHandler(async (name, options) => {
-    const skillMdPath = join3(options.dir, "SKILL.md");
-    if (!existsSync2(skillMdPath)) {
-      throw new Error(`SKILL.md not found in ${options.dir}`);
-    }
-    const content = readFileSync5(skillMdPath, "utf-8");
-    await updateSkill(name, { content });
-    console.log(chalk49.green(`\u2713 Skill "${name}" updated`));
+    const files = readSkillDirectory(options.dir);
+    await updateSkill(name, { files });
+    console.log(
+      chalk50.green(`\u2713 Skill "${name}" updated (${files.length} file(s))`)
+    );
   })
 );
 
 // src/commands/zero/skill/view.ts
-import { Command as Command64 } from "commander";
-import chalk50 from "chalk";
-var viewCommand2 = new Command64().name("view").description("View a custom skill").argument("<name>", "Skill name").addHelpText(
+import { Command as Command66 } from "commander";
+import chalk51 from "chalk";
+var viewCommand2 = new Command66().name("view").description("View a custom skill").argument("<name>", "Skill name").addHelpText(
   "after",
   `
 Examples:
@@ -3833,26 +3974,33 @@ Examples:
 ).action(
   withErrorHandler(async (name) => {
     const skill = await getSkill(name);
-    console.log(chalk50.bold(skill.name));
-    if (skill.displayName) console.log(chalk50.dim(skill.displayName));
+    console.log(chalk51.bold(skill.name));
+    if (skill.displayName) console.log(chalk51.dim(skill.displayName));
     console.log();
     console.log(`Name:         ${skill.name}`);
     if (skill.displayName) console.log(`Display Name: ${skill.displayName}`);
     if (skill.description) console.log(`Description:  ${skill.description}`);
+    if (skill.files && skill.files.length > 0) {
+      console.log();
+      console.log(chalk51.dim("\u2500\u2500 Files \u2500\u2500"));
+      for (const f of skill.files) {
+        console.log(`  ${f.path} (${f.size} bytes)`);
+      }
+    }
     console.log();
     if (skill.content) {
-      console.log(chalk50.dim("\u2500\u2500 SKILL.md \u2500\u2500"));
+      console.log(chalk51.dim("\u2500\u2500 SKILL.md \u2500\u2500"));
       console.log(skill.content);
     } else {
-      console.log(chalk50.dim("No content"));
+      console.log(chalk51.dim("No content"));
     }
   })
 );
 
 // src/commands/zero/skill/list.ts
-import { Command as Command65 } from "commander";
-import chalk51 from "chalk";
-var listCommand10 = new Command65().name("list").alias("ls").description("List custom skills in the organization").addHelpText(
+import { Command as Command67 } from "commander";
+import chalk52 from "chalk";
+var listCommand10 = new Command67().name("list").alias("ls").description("List custom skills in the organization").addHelpText(
   "after",
   `
 Examples:
@@ -3861,9 +4009,9 @@ Examples:
   withErrorHandler(async () => {
     const skills = await listSkills();
     if (skills.length === 0) {
-      console.log(chalk51.dim("No custom skills found"));
+      console.log(chalk52.dim("No custom skills found"));
       console.log(
-        chalk51.dim("  Create one with: zero skill create <name> --dir <path>")
+        chalk52.dim("  Create one with: zero skill create <name> --dir <path>")
       );
       return;
     }
@@ -3884,7 +4032,7 @@ Examples:
       "DISPLAY NAME".padEnd(displayWidth),
       "DESCRIPTION"
     ].join("  ");
-    console.log(chalk51.dim(header));
+    console.log(chalk52.dim(header));
     for (const skill of skills) {
       const row = [
         skill.name.padEnd(nameWidth),
@@ -3897,9 +4045,9 @@ Examples:
 );
 
 // src/commands/zero/skill/delete.ts
-import { Command as Command66 } from "commander";
-import chalk52 from "chalk";
-var deleteCommand6 = new Command66().name("delete").alias("rm").description("Delete a custom skill from the organization").argument("<name>", "Skill name").option("-y, --yes", "Skip confirmation prompt").addHelpText(
+import { Command as Command68 } from "commander";
+import chalk53 from "chalk";
+var deleteCommand6 = new Command68().name("delete").alias("rm").description("Delete a custom skill from the organization").argument("<name>", "Skill name").option("-y, --yes", "Skip confirmation prompt").addHelpText(
   "after",
   `
 Examples:
@@ -3921,17 +4069,17 @@ Notes:
         false
       );
       if (!confirmed) {
-        console.log(chalk52.dim("Cancelled"));
+        console.log(chalk53.dim("Cancelled"));
         return;
       }
     }
     await deleteSkill(name);
-    console.log(chalk52.green(`\u2713 Skill "${name}" deleted`));
+    console.log(chalk53.green(`\u2713 Skill "${name}" deleted`));
   })
 );
 
 // src/commands/zero/skill/index.ts
-var zeroSkillCommand = new Command67("skill").description("Manage custom skills").addCommand(createCommand2).addCommand(editCommand2).addCommand(viewCommand2).addCommand(listCommand10).addCommand(deleteCommand6).addHelpText(
+var zeroSkillCommand = new Command69("skill").description("Manage custom skills").addCommand(createCommand2).addCommand(editCommand2).addCommand(viewCommand2).addCommand(listCommand10).addCommand(deleteCommand6).addHelpText(
   "after",
   `
 Examples:
@@ -3987,10 +4135,10 @@ function registerZeroCommands(prog, commands) {
     prog.addCommand(cmd, hidden ? { hidden: true } : {});
   }
 }
-var program = new Command68();
+var program = new Command70();
 program.name("zero").description(
   "Zero CLI \u2014 interact with the zero platform from inside the sandbox"
-).version("9.92.1").addHelpText(
+).version("9.94.0").addHelpText(
   "after",
   `
 Examples: