@vm0/cli 9.93.0 → 9.94.1

package/{chunk-UEVD4XR7.js → chunk-OYO75U5W.js}

@@ -49,7 +49,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.93.0",
+    release: "9.94.1",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -68,7 +68,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.93.0",
+    version: "9.94.1",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -494,7 +494,7 @@ var agentDefinitionSchema = z3.object({
    * Map format: { slack: { permissions: [...] | "all" } }
    * Resolved to full ExpandedFirewallConfig[] at runtime.
    */
-  experimental_firewalls: z3.record(
+  firewalls: z3.record(
     z3.string(),
     z3.object({
       permissions: z3.union([z3.literal("all"), z3.array(z3.string()).min(1)])
@@ -513,7 +513,7 @@ var agentComposeApiContentSchema = z3.object({
     agentDefinitionSchema.extend({
       // Legacy: older compose versions may have this field (map or expanded array).
       // Accepted for backward compat but ignored at runtime.
-      experimental_firewalls: z3.unknown().optional()
+      firewalls: z3.unknown().optional()
     })
   ),
   volumes: z3.record(z3.string(), volumeConfigSchema).optional()
@@ -754,7 +754,7 @@ var firewallSchema = z4.object({
   ref: z4.string(),
   apis: z4.array(firewallApiSchema)
 });
-var experimentalFirewallsSchema = z4.array(firewallSchema);
+var firewallsSchema = z4.array(firewallSchema);
 var firewallConfigSchema = z4.object({
   name: z4.string().min(1, "Firewall name is required"),
   description: z4.string().optional(),
@@ -929,7 +929,8 @@ var orgMembersResponseSchema = z6.object({
   createdAt: z6.string()
 });
 var inviteOrgMemberRequestSchema = z6.object({
-  email: z6.string().email()
+  email: z6.string().email(),
+  role: orgRoleSchema.optional().default("member")
 });
 var removeOrgMemberRequestSchema = z6.object({
   email: z6.string().email()
@@ -1051,8 +1052,6 @@ var unifiedRunRequestSchema = z8.object({
   debugNoMockClaude: z8.boolean().optional(),
   // Model provider for automatic secret injection
   modelProvider: z8.string().optional(),
-  // Environment validation flag - when true, validates secrets/vars before running
-  checkEnv: z8.boolean().optional(),
   // Required
   prompt: z8.string().min(1, "Missing prompt"),
   // Optional system prompt to append to the agent's system prompt
@@ -2123,8 +2122,7 @@ var cliAuthTokenContract = c7.router({
       200: z11.object({
         access_token: z11.string(),
         token_type: z11.literal("Bearer"),
-        expires_in: z11.number(),
-        org_slug: z11.string().optional()
+        expires_in: z11.number()
       }),
       // Authorization pending
       202: oauthErrorSchema,
@@ -2152,8 +2150,7 @@ var cliAuthOrgContract = c7.router({
       200: z11.object({
         access_token: z11.string(),
         token_type: z11.literal("Bearer"),
-        expires_in: z11.number(),
-        org_slug: z11.string()
+        expires_in: z11.number()
       }),
       400: oauthErrorSchema,
       401: apiErrorResponseSchema,
@@ -3050,8 +3047,8 @@ var storedExecutionContextSchema = z19.object({
   userTimezone: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
-  // Experimental firewall for proxy-side token replacement
-  experimentalFirewalls: experimentalFirewallsSchema.optional(),
+  // Firewall for proxy-side token replacement
+  firewalls: firewallsSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: z19.array(z19.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -3088,8 +3085,8 @@ var executionContextSchema = z19.object({
   userTimezone: z19.string().optional(),
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z19.string().optional(),
-  // Experimental firewall for proxy-side token replacement
-  experimentalFirewalls: experimentalFirewallsSchema.optional(),
+  // Firewall for proxy-side token replacement
+  firewalls: firewallsSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: z19.array(z19.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -6740,6 +6737,7 @@ var slackFirewall = {
       permissions: [
         {
           name: "admin",
+          description: "Administer a workspace (access audit logs, SCIM API, and billing info)",
           rules: [
             "POST /admin.audit.anomaly.allow.getItem",
             "POST /admin.audit.anomaly.allow.updateItem",
@@ -6750,6 +6748,7 @@ var slackFirewall = {
         },
         {
           name: "admin.analytics:read",
+          description: "Access workspace analytics data",
           rules: [
             "GET /admin.analytics.getFile",
             "GET /admin.analytics.messages.activity",
@@ -6758,10 +6757,12 @@ var slackFirewall = {
         },
         {
           name: "admin.app_activities:read",
+          description: "View app activities within an Enterprise organization",
           rules: ["POST /admin.apps.activities.list"]
         },
         {
           name: "admin.apps:read",
+          description: "View apps and app requests in an Enterprise organization",
           rules: [
             "GET /admin.apps.approved.list",
             "POST /admin.apps.config.lookup",
@@ -6771,6 +6772,7 @@ var slackFirewall = {
         },
         {
           name: "admin.apps:write",
+          description: "Manage apps and app requests in an Enterprise organization",
           rules: [
             "POST /admin.apps.approve",
             "POST /admin.apps.clearResolution",
@@ -6782,10 +6784,12 @@ var slackFirewall = {
         },
         {
           name: "admin.barriers:read",
+          description: "Read information barriers in an Enterprise organization",
           rules: ["GET /admin.barriers.list"]
         },
         {
           name: "admin.barriers:write",
+          description: "Manage information barriers in an Enterprise organization",
           rules: [
             "POST /admin.barriers.create",
             "POST /admin.barriers.delete",
@@ -6794,6 +6798,7 @@ var slackFirewall = {
         },
         {
           name: "admin.conversations:manage_objects",
+          description: "Manage channel objects in an Enterprise organization",
           rules: [
             "POST /admin.conversations.createForObjects",
             "POST /admin.conversations.linkObjects",
@@ -6802,6 +6807,7 @@ var slackFirewall = {
         },
         {
           name: "admin.conversations:read",
+          description: "View channels and their settings in an Enterprise organization",
           rules: [
             "POST /admin.conversations.ekm.listOriginalConnectedChannelInfo",
             "POST /admin.conversations.getConversationPrefs",
@@ -6814,6 +6820,7 @@ var slackFirewall = {
         },
         {
           name: "admin.conversations:write",
+          description: "Set channel settings in an Enterprise organization",
           rules: [
             "POST /admin.conversations.archive",
             "POST /admin.conversations.bulkArchive",
@@ -6838,6 +6845,7 @@ var slackFirewall = {
         },
         {
           name: "admin.invites:read",
+          description: "View workspace invite requests in an Enterprise organization",
           rules: [
             "POST /admin.inviteRequests.approved.list",
             "POST /admin.inviteRequests.denied.list",
@@ -6846,6 +6854,7 @@ var slackFirewall = {
         },
         {
           name: "admin.invites:write",
+          description: "Manage workspace invite requests in an Enterprise organization",
           rules: [
             "POST /admin.inviteRequests.approve",
             "POST /admin.inviteRequests.deny"
@@ -6853,10 +6862,12 @@ var slackFirewall = {
         },
         {
           name: "admin.roles:read",
+          description: "View role assignments in an Enterprise organization",
           rules: ["GET /admin.roles.listAssignments"]
         },
         {
           name: "admin.roles:write",
+          description: "Manage role assignments in an Enterprise organization",
           rules: [
             "POST /admin.roles.addAssignments",
             "POST /admin.roles.removeAssignments"
@@ -6864,6 +6875,7 @@ var slackFirewall = {
         },
         {
           name: "admin.teams:read",
+          description: "View workspace settings in an Enterprise organization",
           rules: [
             "GET /admin.emoji.list",
             "GET /admin.teams.admins.list",
@@ -6874,6 +6886,7 @@ var slackFirewall = {
         },
         {
           name: "admin.teams:write",
+          description: "Manage workspace settings in an Enterprise organization",
           rules: [
             "GET /admin.emoji.add",
             "GET /admin.emoji.addAlias",
@@ -6890,10 +6903,12 @@ var slackFirewall = {
         },
         {
           name: "admin.usergroups:read",
+          description: "View user groups in an Enterprise organization",
           rules: ["POST /admin.usergroups.listChannels"]
         },
         {
           name: "admin.usergroups:write",
+          description: "Manage user groups in an Enterprise organization",
           rules: [
             "POST /admin.usergroups.addChannels",
             "POST /admin.usergroups.removeChannels"
@@ -6901,6 +6916,7 @@ var slackFirewall = {
         },
         {
           name: "admin.users:read",
+          description: "View users in an Enterprise organization",
           rules: [
             "POST /admin.auth.policy.getEntities",
             "GET /admin.users.getExpiration",
@@ -6912,6 +6928,7 @@ var slackFirewall = {
         },
         {
           name: "admin.users:write",
+          description: "Manage users in an Enterprise organization",
           rules: [
             "POST /admin.auth.policy.assignEntities",
             "POST /admin.auth.policy.removeEntities",
@@ -6931,6 +6948,7 @@ var slackFirewall = {
         },
         {
           name: "admin.workflows:read",
+          description: "View workflow builder workflows in an Enterprise organization",
           rules: [
             "POST /admin.functions.list",
             "POST /admin.functions.permissions.lookup",
@@ -6941,6 +6959,7 @@ var slackFirewall = {
         },
         {
           name: "admin.workflows:write",
+          description: "Manage workflow builder workflows in an Enterprise organization",
           rules: [
             "POST /admin.workflows.collaborators.add",
             "POST /admin.workflows.collaborators.remove",
@@ -6949,6 +6968,7 @@ var slackFirewall = {
         },
         {
           name: "assistant:write",
+          description: "Act as an AI Assistant app",
           rules: [
             "POST /assistant.threads.setSuggestedPrompts",
             "POST /assistant.threads.setTitle"
@@ -6956,10 +6976,12 @@ var slackFirewall = {
         },
         {
           name: "bookmarks:read",
+          description: "List bookmarks in channels",
           rules: ["POST /bookmarks.list", "POST /workflows.featured.list"]
         },
         {
           name: "bookmarks:write",
+          description: "Create, edit, and remove bookmarks",
           rules: [
             "POST /bookmarks.add",
             "POST /bookmarks.edit",
@@ -6971,10 +6993,12 @@ var slackFirewall = {
         },
         {
           name: "calls:read",
+          description: "View information about ongoing and past calls",
           rules: ["POST /calls.info"]
         },
         {
           name: "calls:write",
+          description: "Start and manage calls in a workspace",
           rules: [
             "POST /calls.add",
             "POST /calls.end",
@@ -6985,10 +7009,12 @@ var slackFirewall = {
         },
         {
           name: "canvases:read",
+          description: "Access contents of canvases created inside Slack",
           rules: ["POST /canvases.sections.lookup"]
         },
         {
           name: "canvases:write",
+          description: "Create and edit canvases",
           rules: [
             "POST /canvases.access.delete",
             "POST /canvases.access.set",
@@ -7000,14 +7026,17 @@ var slackFirewall = {
         },
         {
           name: "channels:history",
+          description: "View messages and other content in public channels that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "channels:join",
+          description: "Join public channels in a workspace",
           rules: ["POST /conversations.join"]
         },
         {
           name: "channels:manage",
+          description: "Manage public channels that the app has been added to and create new ones",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7025,6 +7054,7 @@ var slackFirewall = {
         },
         {
           name: "channels:read",
+          description: "View basic information about public channels in a workspace",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7034,6 +7064,7 @@ var slackFirewall = {
         },
         {
           name: "channels:write",
+          description: "Manage a user's public channels and create new ones on a user's behalf",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7052,10 +7083,12 @@ var slackFirewall = {
         },
         {
           name: "channels:write.invites",
+          description: "Invite members to public channels",
           rules: ["POST /conversations.invite"]
         },
         {
           name: "channels:write.topic",
+          description: "Set the topic and purpose of public channels",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7063,6 +7096,7 @@ var slackFirewall = {
         },
         {
           name: "chat:write",
+          description: "Send messages as the app",
           rules: [
             "POST /assistant.threads.setStatus",
             "POST /chat.appendStream",
@@ -7079,6 +7113,7 @@ var slackFirewall = {
         },
         {
           name: "client",
+          description: "Full access to all client features (legacy, deprecated)",
           rules: [
             "POST /admin.workflows.triggers.types.permissions.lookup",
             "POST /admin.workflows.triggers.types.permissions.set"
@@ -7086,6 +7121,7 @@ var slackFirewall = {
         },
         {
           name: "conversations.connect:manage",
+          description: "Manage Slack Connect channels (approve or decline invitations)",
           rules: [
             "POST /conversations.approveSharedInvite",
             "GET /conversations.declineSharedInvite",
@@ -7101,6 +7137,7 @@ var slackFirewall = {
         },
         {
           name: "conversations.connect:write",
+          description: "Create Slack Connect invitations and accept invitations",
           rules: [
             "POST /conversations.acceptSharedInvite",
             "GET /conversations.inviteShared"
@@ -7108,6 +7145,7 @@ var slackFirewall = {
         },
         {
           name: "datastore:read",
+          description: "Read data from Slack's hosted datastore",
           rules: [
             "POST /apps.datastore.bulkGet",
             "POST /apps.datastore.count",
@@ -7117,6 +7155,7 @@ var slackFirewall = {
         },
         {
           name: "datastore:write",
+          description: "Write data to Slack's hosted datastore",
           rules: [
             "POST /apps.datastore.bulkDelete",
             "POST /apps.datastore.bulkPut",
@@ -7127,10 +7166,12 @@ var slackFirewall = {
         },
         {
           name: "dnd:read",
+          description: "View Do Not Disturb settings for people in a workspace",
           rules: ["GET /dnd.info", "GET /dnd.teamInfo"]
         },
         {
           name: "dnd:write",
+          description: "Edit a user's Do Not Disturb settings",
           rules: [
             "POST /dnd.endDnd",
             "POST /dnd.endSnooze",
@@ -7139,14 +7180,17 @@ var slackFirewall = {
         },
         {
           name: "emoji:read",
+          description: "View custom emoji in a workspace",
           rules: ["GET /emoji.list"]
         },
         {
           name: "files:read",
+          description: "View files shared in channels and conversations that the app has been added to",
           rules: ["GET /files.info", "GET /files.list"]
         },
         {
           name: "files:write",
+          description: "Upload, edit, and delete files as the app",
           rules: [
             "POST /files.comments.delete",
             "POST /files.completeUploadExternal",
@@ -7159,10 +7203,12 @@ var slackFirewall = {
         },
         {
           name: "groups:history",
+          description: "View messages and other content in private channels that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "groups:read",
+          description: "View basic information about private channels that the app has been added to",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7172,6 +7218,7 @@ var slackFirewall = {
         },
         {
           name: "groups:write",
+          description: "Manage private channels that the user is a member of and create new ones",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7189,10 +7236,12 @@ var slackFirewall = {
         },
         {
           name: "groups:write.invites",
+          description: "Invite members to private channels",
           rules: ["POST /conversations.invite"]
         },
         {
           name: "groups:write.topic",
+          description: "Set the topic and purpose of private channels",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7200,18 +7249,22 @@ var slackFirewall = {
         },
         {
           name: "hosting:read",
+          description: "Read hosting environment information",
           rules: ["POST /apps.activities.list"]
         },
         {
           name: "identity:read",
+          description: "View a user's Slack identity (Sign in with Slack)",
           rules: ["GET /users.identity"]
         },
         {
           name: "im:history",
+          description: "View messages and other content in direct messages that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "im:read",
+          description: "View basic information about direct messages that the app has access to",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7221,6 +7274,7 @@ var slackFirewall = {
         },
         {
           name: "im:write",
+          description: "Start direct messages with people",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7238,6 +7292,7 @@ var slackFirewall = {
         },
         {
           name: "im:write.topic",
+          description: "Set the topic of direct messages",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7245,10 +7300,12 @@ var slackFirewall = {
         },
         {
           name: "links:write",
+          description: "Show previews of URLs in messages",
           rules: ["POST /chat.unfurl"]
         },
         {
           name: "lists:read",
+          description: "View lists in a workspace",
           rules: [
             "POST /slackLists.download.get",
             "POST /slackLists.download.start",
@@ -7258,6 +7315,7 @@ var slackFirewall = {
         },
         {
           name: "lists:write",
+          description: "Create and manage lists in a workspace",
           rules: [
             "POST /slackLists.access.delete",
             "POST /slackLists.access.set",
@@ -7271,10 +7329,12 @@ var slackFirewall = {
         },
         {
           name: "mpim:history",
+          description: "View messages and other content in group direct messages that the app has been added to",
           rules: ["GET /conversations.history", "GET /conversations.replies"]
         },
         {
           name: "mpim:read",
+          description: "View basic information about group direct messages that the app has been added to",
           rules: [
             "GET /conversations.info",
             "GET /conversations.list",
@@ -7284,6 +7344,7 @@ var slackFirewall = {
         },
         {
           name: "mpim:write",
+          description: "Start group direct messages with people",
           rules: [
             "POST /conversations.archive",
             "POST /conversations.close",
@@ -7301,6 +7362,7 @@ var slackFirewall = {
         },
         {
           name: "mpim:write.topic",
+          description: "Set the topic and purpose of group direct messages",
           rules: [
             "POST /conversations.setPurpose",
             "POST /conversations.setTopic"
@@ -7308,30 +7370,37 @@ var slackFirewall = {
         },
         {
           name: "openid",
+          description: "View information about a user's identity (Sign in with Slack)",
           rules: ["POST /openid.connect.userInfo"]
         },
         {
           name: "pins:read",
+          description: "View pinned content in channels and conversations that the app has been added to",
           rules: ["GET /pins.list"]
         },
         {
           name: "pins:write",
+          description: "Add and remove pinned messages and files",
           rules: ["POST /pins.add", "POST /pins.remove"]
         },
         {
           name: "reactions:read",
+          description: "View emoji reactions and their associated content in channels and conversations",
           rules: ["GET /reactions.get", "GET /reactions.list"]
         },
         {
           name: "reactions:write",
+          description: "Add and edit emoji reactions",
           rules: ["POST /reactions.add", "POST /reactions.remove"]
         },
         {
           name: "reminders:read",
+          description: "View reminders created by the app",
           rules: ["GET /reminders.info", "GET /reminders.list"]
         },
         {
           name: "reminders:write",
+          description: "Add, remove, or complete reminders",
           rules: [
             "POST /reminders.add",
             "POST /reminders.complete",
@@ -7340,14 +7409,17 @@ var slackFirewall = {
         },
         {
           name: "remote_files:read",
+          description: "View remote files added by the app in a workspace",
           rules: ["GET /files.remote.info", "GET /files.remote.list"]
         },
         {
           name: "remote_files:share",
+          description: "Share remote files on a user's behalf",
           rules: ["GET /files.remote.share"]
         },
         {
           name: "remote_files:write",
+          description: "Add, edit, and delete remote files on a user's behalf",
           rules: [
             "POST /files.remote.add",
             "POST /files.remote.remove",
@@ -7356,6 +7428,7 @@ var slackFirewall = {
         },
         {
           name: "search:read",
+          description: "Search a workspace's content",
           rules: [
             "POST /assistant.search.info",
             "GET /search.all",
@@ -7365,22 +7438,27 @@ var slackFirewall = {
         },
         {
           name: "search:read.files",
+          description: "Search for files in a workspace",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.im",
+          description: "Search direct messages",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.mpim",
+          description: "Search group direct messages",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.private",
+          description: "Search private channels",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "search:read.public",
+          description: "Search public channels",
           rules: [
             "POST /assistant.search.context",
             "POST /assistant.search.info"
@@ -7388,26 +7466,32 @@ var slackFirewall = {
         },
         {
           name: "search:read.users",
+          description: "Search for users in a workspace",
           rules: ["POST /assistant.search.context"]
         },
         {
           name: "stars:read",
+          description: "View starred messages and files",
           rules: ["GET /stars.list"]
         },
         {
           name: "stars:write",
+          description: "Add or remove stars (saved items)",
           rules: ["POST /stars.add", "POST /stars.remove"]
         },
         {
           name: "team.billing:read",
+          description: "View billing information for a workspace",
           rules: ["POST /team.billing.info"]
         },
         {
           name: "team.preferences:read",
+          description: "View team preferences",
           rules: ["POST /team.preferences.list"]
         },
         {
           name: "team:read",
+          description: "View the name, email domain, and icon for workspaces the app is connected to",
           rules: [
             "GET /team.externalTeams.list",
             "GET /team.info",
@@ -7416,14 +7500,17 @@ var slackFirewall = {
         },
         {
           name: "tokens.basic",
+          description: "Execute methods with no required scope",
           rules: ["GET /migration.exchange"]
         },
         {
           name: "triggers:read",
+          description: "View triggers in a workspace",
           rules: ["POST /workflows.triggers.permissions.list"]
         },
         {
           name: "triggers:write",
+          description: "Create and manage triggers in a workspace",
           rules: [
             "POST /workflows.triggers.permissions.add",
             "POST /workflows.triggers.permissions.remove",
@@ -7432,10 +7519,12 @@ var slackFirewall = {
         },
         {
           name: "usergroups:read",
+          description: "View user groups in a workspace",
           rules: ["GET /usergroups.list", "GET /usergroups.users.list"]
         },
         {
           name: "usergroups:write",
+          description: "Create and manage user groups",
           rules: [
             "POST /usergroups.create",
             "POST /usergroups.disable",
@@ -7446,10 +7535,12 @@ var slackFirewall = {
         },
         {
           name: "users.profile:read",
+          description: "View profile details of people in a workspace",
           rules: ["GET /team.profile.get", "GET /users.profile.get"]
         },
         {
           name: "users.profile:write",
+          description: "Edit a user's profile information and status",
           rules: [
             "GET /users.deletePhoto",
             "POST /users.profile.set",
@@ -7458,6 +7549,7 @@ var slackFirewall = {
         },
         {
           name: "users:read",
+          description: "View people in a workspace",
           rules: [
             "GET /bots.info",
             "GET /users.getPresence",
@@ -7467,10 +7559,12 @@ var slackFirewall = {
         },
         {
           name: "users:read.email",
+          description: "View email addresses of people in a workspace",
           rules: ["GET /users.lookupByEmail"]
         },
         {
           name: "users:write",
+          description: "Set a user's presence status",
           rules: [
             "POST /apps.user.connection.update",
             "POST /users.setActive",
@@ -7621,7 +7715,7 @@ var slackCategories = {
   "channels:write.topic": "Write",
   "datastore:write": "Write",
   "dnd:write": "Write",
-  "files:write": "Write",
+  "files:write": "Send",
   "groups:write": "Write",
   "groups:write.invites": "Write",
   "groups:write.topic": "Write",
@@ -8944,7 +9038,261 @@ var axiomFirewall = {
           Authorization: "Bearer ${{ secrets.AXIOM_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "annotations|create",
+          rules: ["POST /v2/annotations"]
+        },
+        {
+          name: "annotations|delete",
+          rules: ["DELETE /v2/annotations/{id}"]
+        },
+        {
+          name: "annotations|read",
+          rules: ["GET /v2/annotations", "GET /v2/annotations/{id}"]
+        },
+        {
+          name: "annotations|update",
+          rules: ["PUT /v2/annotations/{id}"]
+        },
+        {
+          name: "apiTokens|create",
+          rules: ["POST /v2/tokens"]
+        },
+        {
+          name: "apiTokens|delete",
+          rules: ["DELETE /v2/tokens/{id}"]
+        },
+        {
+          name: "apiTokens|read",
+          rules: ["GET /v2/tokens", "GET /v2/tokens/{id}"]
+        },
+        {
+          name: "apiTokens|update",
+          rules: ["POST /v2/tokens/{id}/regenerate"]
+        },
+        {
+          name: "dashboards|create",
+          rules: ["POST /v2/dashboards"]
+        },
+        {
+          name: "dashboards|delete",
+          rules: ["DELETE /v2/dashboards/uid/{uid}"]
+        },
+        {
+          name: "dashboards|read",
+          rules: ["GET /v2/dashboards", "GET /v2/dashboards/uid/{uid}"]
+        },
+        {
+          name: "dashboards|update",
+          rules: ["PUT /v2/dashboards/uid/{uid}"]
+        },
+        {
+          name: "datasets|create",
+          rules: ["POST /v2/datasets"]
+        },
+        {
+          name: "datasets|delete",
+          rules: ["DELETE /v2/datasets/{dataset_id}"]
+        },
+        {
+          name: "datasets|read",
+          rules: [
+            "GET /v1/datasets",
+            "GET /v1/datasets/{dataset_name}",
+            "GET /v2/datasets",
+            "GET /v2/datasets/{dataset_id}",
+            "GET /v2/datasets/{dataset_id}/fields",
+            "GET /v2/datasets/{dataset_id}/fields/{field_id}",
+            "GET /v2/datasets/{dataset_id}/mapfields"
+          ]
+        },
+        {
+          name: "datasets|update",
+          rules: [
+            "POST /v1/datasets",
+            "PUT /v1/datasets/{dataset_name}",
+            "DELETE /v1/datasets/{dataset_name}",
+            "POST /v1/datasets/{dataset_name}/trim",
+            "PUT /v2/datasets/{dataset_id}",
+            "PUT /v2/datasets/{dataset_id}/fields/{field_id}",
+            "POST /v2/datasets/{dataset_id}/mapfields",
+            "PUT /v2/datasets/{dataset_id}/mapfields",
+            "DELETE /v2/datasets/{dataset_id}/mapfields/{map_field_name}"
+          ]
+        },
+        {
+          name: "ingest|create",
+          rules: [
+            "POST /v1/datasets/{dataset_name}/ingest",
+            "POST /v1/ingest/{dataset-id}"
+          ]
+        },
+        {
+          name: "monitors|create",
+          rules: ["POST /v2/monitors"]
+        },
+        {
+          name: "monitors|delete",
+          rules: ["DELETE /v2/monitors/{id}"]
+        },
+        {
+          name: "monitors|read",
+          rules: [
+            "GET /v2/monitors",
+            "GET /v2/monitors/{id}",
+            "GET /v2/monitors/{id}/history"
+          ]
+        },
+        {
+          name: "monitors|update",
+          rules: ["PUT /v2/monitors/{id}"]
+        },
+        {
+          name: "notifiers|create",
+          rules: ["POST /v2/notifiers"]
+        },
+        {
+          name: "notifiers|delete",
+          rules: ["DELETE /v2/notifiers/{id}"]
+        },
+        {
+          name: "notifiers|read",
+          rules: ["GET /v2/notifiers", "GET /v2/notifiers/{id}"]
+        },
+        {
+          name: "notifiers|update",
+          rules: ["PUT /v2/notifiers/{id}"]
+        },
+        {
+          name: "orgs|create",
+          rules: ["POST /v2/orgs"]
+        },
+        {
+          name: "orgs|read",
+          rules: ["GET /v2/orgs", "GET /v2/orgs/{id}"]
+        },
+        {
+          name: "orgs|update",
+          rules: ["PUT /v2/orgs/{id}"]
+        },
+        {
+          name: "query|read",
+          rules: [
+            "POST /v1/datasets/_apl?format=tabular",
+            "POST /v1/datasets/{dataset_name}/query",
+            "POST /v1/query/_apl?format=tabular",
+            "POST /v1/query/_mpl",
+            "POST /v1/query/batch",
+            "GET /v1/query/metrics/info/datasets/{dataset}/metrics",
+            "POST /v1/query/metrics/info/datasets/{dataset}/metrics",
+            "GET /v1/query/metrics/info/datasets/{dataset}/metrics/{metric}/tags",
+            "GET /v1/query/metrics/info/datasets/{dataset}/metrics/{metric}/tags/{tag}/values",
+            "GET /v1/query/metrics/info/datasets/{dataset}/tags",
+            "GET /v1/query/metrics/info/datasets/{dataset}/tags/{tag}/values"
+          ]
+        },
+        {
+          name: "rbac|create",
+          rules: [
+            "POST /v2/rbac/groups",
+            "PUT /v2/rbac/groups/{id}",
+            "DELETE /v2/rbac/groups/{id}",
+            "POST /v2/rbac/roles",
+            "PUT /v2/rbac/roles/{id}",
+            "DELETE /v2/rbac/roles/{id}"
+          ]
+        },
+        {
+          name: "rbac|read",
+          rules: [
+            "GET /v2/rbac/groups",
+            "GET /v2/rbac/groups/{id}",
+            "GET /v2/rbac/roles",
+            "GET /v2/rbac/roles/{id}"
+          ]
+        },
+        {
+          name: "starredQueries|create",
+          rules: ["POST /v2/apl-starred-queries"]
+        },
+        {
+          name: "starredQueries|delete",
+          rules: ["DELETE /v2/apl-starred-queries/{id}"]
+        },
+        {
+          name: "starredQueries|read",
+          rules: [
+            "GET /v2/apl-starred-queries",
+            "GET /v2/apl-starred-queries/{id}"
+          ]
+        },
+        {
+          name: "starredQueries|update",
+          rules: ["PUT /v2/apl-starred-queries/{id}"]
+        },
+        {
+          name: "trim|update",
+          rules: ["POST /v2/datasets/{dataset_id}/trim"]
+        },
+        {
+          name: "users|create",
+          rules: ["POST /v2/users"]
+        },
+        {
+          name: "users|delete",
+          rules: ["DELETE /v2/users/{id}"]
+        },
+        {
+          name: "users|read",
+          rules: [
+            "GET /v1/user",
+            "GET /v2/user",
+            "GET /v2/users",
+            "GET /v2/users/{id}"
+          ]
+        },
+        {
+          name: "users|update",
+          rules: ["PUT /v2/user", "PUT /v2/users/{id}/role"]
+        },
+        {
+          name: "vacuum|update",
+          rules: ["POST /v2/datasets/{dataset_id}/vacuum"]
+        },
+        {
+          name: "views|create",
+          rules: ["POST /v2/views"]
+        },
+        {
+          name: "views|delete",
+          rules: ["DELETE /v2/views/{id}"]
+        },
+        {
+          name: "views|read",
+          rules: ["GET /v2/views", "GET /v2/views/{id}"]
+        },
+        {
+          name: "views|update",
+          rules: ["PUT /v2/views/{id}"]
+        },
+        {
+          name: "virtualFields|create",
+          rules: ["POST /v2/vfields"]
+        },
+        {
+          name: "virtualFields|delete",
+          rules: ["DELETE /v2/vfields/{id}"]
+        },
+        {
+          name: "virtualFields|read",
+          rules: ["GET /v2/vfields", "GET /v2/vfields/{id}"]
+        },
+        {
+          name: "virtualFields|update",
+          rules: ["PUT /v2/vfields/{id}"]
+        }
+      ]
     }
   ]
 };
@@ -9284,7 +9632,670 @@ var deelFirewall = {
           Authorization: "Bearer ${{ secrets.DEEL_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "accounting:read",
+          rules: [
+            "GET /rest/v2/invoices",
+            "GET /rest/v2/invoices/deel",
+            "GET /rest/v2/invoices/{id}/download",
+            "GET /rest/v2/invoices/{invoice_id}",
+            "GET /rest/v2/legal-entities",
+            "GET /rest/v2/payments",
+            "GET /rest/v2/payments/{payment_id}/breakdown"
+          ]
+        },
+        {
+          name: "adjustments:read",
+          rules: [
+            "GET /rest/v2/adjustments/categories",
+            "GET /rest/v2/adjustments/{id}",
+            "GET /rest/v2/contracts/{contract_id}/adjustments"
+          ]
+        },
+        {
+          name: "adjustments:write",
+          rules: [
+            "POST /rest/v2/adjustments",
+            "PATCH /rest/v2/adjustments/{id}",
+            "DELETE /rest/v2/adjustments/{id}"
+          ]
+        },
+        {
+          name: "admin:worker",
+          rules: [
+            "POST /rest/v2/workers/session",
+            "DELETE /rest/v2/workers/{worker_id}/session"
+          ]
+        },
+        {
+          name: "ats:read",
+          rules: [
+            "GET /rest/v2/ats/application-sources",
+            "GET /rest/v2/ats/applications",
+            "GET /rest/v2/ats/applications/{application_id}",
+            "GET /rest/v2/ats/attachments/{attachable_type_slug}/{attachable_id}/{attachment_type_slug}",
+            "GET /rest/v2/ats/candidates",
+            "GET /rest/v2/ats/departments",
+            "GET /rest/v2/ats/email-templates",
+            "GET /rest/v2/ats/employment-types",
+            "GET /rest/v2/ats/hiring-members",
+            "GET /rest/v2/ats/job-boards/{job_board_id}/job-postings",
+            "GET /rest/v2/ats/job-postings/{job_posting_id}",
+            "GET /rest/v2/ats/jobs",
+            "GET /rest/v2/ats/locations",
+            "GET /rest/v2/ats/offers",
+            "GET /rest/v2/ats/reasons",
+            "GET /rest/v2/ats/tags"
+          ]
+        },
+        {
+          name: "ats:write",
+          rules: [
+            "POST /rest/v2/ats/applications",
+            "POST /rest/v2/ats/applications/{application_id}/interview-plan-stages",
+            "POST /rest/v2/ats/applications/{application_id}/notes",
+            "POST /rest/v2/ats/candidates",
+            "POST /rest/v2/ats/candidates/{candidate_id}/tags",
+            "POST /rest/v2/ats/jobs"
+          ]
+        },
+        {
+          name: "auth:write",
+          rules: ["POST /rest/v2/managers/magic-links"]
+        },
+        {
+          name: "benefits:read",
+          rules: [
+            "GET /rest/v2/benefits/legal-entities/{id}/401k/plans",
+            "GET /rest/v2/benefits/legal-entities/{legal_entity_id}/contracts/{contract_id}/plans/{plan_id}",
+            "GET /rest/v2/benefits/legal-entities/{legal_entity_id}/paystubs",
+            "GET /rest/v2/eor/benefits",
+            "GET /rest/v2/eor/worker/benefits",
+            "POST /rest/v2/workers/amendments/{amendment_id}/sign"
+          ]
+        },
+        {
+          name: "benefits:write",
+          rules: [
+            "POST /rest/v2/benefits/legal-entities/{id}/401k/plans/clean-up",
+            "POST /rest/v2/benefits/legal-entities/{id}/benefits/401k/activate",
+            "POST /rest/v2/benefits/legal-entities/{legal_entity_id}/401k/plans",
+            "PUT /rest/v2/benefits/legal-entities/{legal_entity_id}/401k/plans/{plan_id}",
+            "POST /rest/v2/benefits/legal-entities/{legal_entity_id}/contracts/{contract_id}/plans/{plan_id}"
+          ]
+        },
+        {
+          name: "candidates:write",
+          rules: ["POST /rest/v2/candidates"]
+        },
+        {
+          name: "contracts:read",
+          rules: [
+            "GET /rest/v2/contract-templates",
+            "GET /rest/v2/contracts",
+            "GET /rest/v2/contracts/custom_fields",
+            "GET /rest/v2/contracts/custom_fields/{id}",
+            "GET /rest/v2/contracts/{contract_id}",
+            "GET /rest/v2/contracts/{contract_id}/amendments",
+            "GET /rest/v2/contracts/{contract_id}/equity_withholding_estimate",
+            "GET /rest/v2/contracts/{contract_id}/invite",
+            "GET /rest/v2/contracts/{contract_id}/payment_cycles",
+            "GET /rest/v2/contracts/{contract_id}/preview",
+            "GET /rest/v2/contracts/{contract_id}/tasks",
+            "GET /rest/v2/employee-info/contract-types/{type}/countries/{country}",
+            "GET /rest/v2/eor/additional-costs/{country}",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/validation/settings",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/effective-date-limitations",
+            "GET /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/pdf",
+            "GET /rest/v2/eor/contracts/{contract_id}/details",
+            "GET /rest/v2/eor/contracts/{contract_id}/documents/{type}",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents/{document_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/attachments/{attachment_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/required-information",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/restricted-dates",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding/time-offs",
+            "GET /rest/v2/eor/contracts/{contract_id}/project-assignment",
+            "GET /rest/v2/eor/contracts/{contract_id}/project-assignment/checkin",
+            "POST /rest/v2/eor/contracts/{contract_id}/project-assignment/checkin",
+            "GET /rest/v2/eor/start-date",
+            "GET /rest/v2/eor/validations/{country_code}",
+            "GET /rest/v2/eor/{contract_id}/benefits",
+            "POST /rest/v2/eor/{oid}/terminations/regular",
+            "POST /rest/v2/eor/{oid}/terminations/resignation",
+            "GET /rest/v2/eor/{oid}/terminations/{terminationId}",
+            "GET /rest/v2/offboarding/tracker",
+            "GET /rest/v2/offboarding/tracker/hris_profile/{oid}",
+            "GET /rest/v2/offboarding/tracker/{id}",
+            "GET /rest/v2/onboarding/tracker",
+            "GET /rest/v2/onboarding/tracker/hris_profile/{hris_profile_id}",
+            "GET /rest/v2/onboarding/tracker/{tracker_id}"
+          ]
+        },
+        {
+          name: "contracts:write",
+          rules: [
+            "POST /rest/v2/contracts",
+            "POST /rest/v2/contracts/gp",
+            "PATCH /rest/v2/contracts/{contract_id}",
+            "GET /rest/v2/contracts/{contract_id}/amendments",
+            "POST /rest/v2/contracts/{contract_id}/amendments",
+            "PUT /rest/v2/contracts/{contract_id}/custom_fields",
+            "DELETE /rest/v2/contracts/{contract_id}/custom_fields/{id}",
+            "POST /rest/v2/contracts/{contract_id}/documents",
+            "POST /rest/v2/contracts/{contract_id}/invitations",
+            "DELETE /rest/v2/contracts/{contract_id}/invitations",
+            "POST /rest/v2/contracts/{contract_id}/signatures",
+            "POST /rest/v2/contracts/{contract_id}/tasks",
+            "POST /rest/v2/contracts/{contract_id}/tasks/many/reviews",
+            "DELETE /rest/v2/contracts/{contract_id}/tasks/{task_id}",
+            "POST /rest/v2/contracts/{contract_id}/tasks/{task_id}/reviews",
+            "POST /rest/v2/contracts/{contract_id}/terminations",
+            "DELETE /rest/v2/contracts/{contract_id}/terminations",
+            "POST /rest/v2/eor",
+            "PATCH /rest/v2/eor/contract/{contract_id}",
+            "POST /rest/v2/eor/contract/{oid}/cancel",
+            "PATCH /rest/v2/eor/contract/{oid}/delay-onboarding",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/validate",
+            "PATCH /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}",
+            "DELETE /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/accept",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/confirm",
+            "POST /rest/v2/eor/contracts/{contract_id}/amendments/{amendment_id}/sign",
+            "POST /rest/v2/eor/contracts/{contract_id}/documents/{type}/sign",
+            "PATCH /rest/v2/eor/contracts/{contract_id}/employee-information",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/resignation",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/resignations/review-pto",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/review-client-sign-offs",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/termination",
+            "POST /rest/v2/eor/contracts/{contract_id}/project-assignment/accept",
+            "POST /rest/v2/eor/contracts/{contract_id}/project-assignment/checkin",
+            "POST /rest/v2/eor/job-scopes/validate",
+            "POST /rest/v2/eor/{oid}/terminations/regular",
+            "POST /rest/v2/eor/{oid}/terminations/resignation",
+            "POST /rest/v2/equity/exercise",
+            "PATCH /rest/v2/equity/exercise/{public_id}"
+          ]
+        },
+        {
+          name: "equities:write",
+          rules: ["POST /rest/v2/equities-tokens/tax-events"]
+        },
+        {
+          name: "forms:read",
+          rules: [
+            "POST /rest/v2/forms/eor/create-contract/definitions",
+            "GET /rest/v2/forms/eor/create-contract/{country_code}",
+            "GET /rest/v2/forms/eor/worker-additional-fields/{country_code}",
+            "GET /rest/v2/forms/gp/worker-additional-fields/{country_code}"
+          ]
+        },
+        {
+          name: "global-payroll:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/equity_withholding_estimate",
+            "GET /rest/v2/gp/legal-entities/{legal_entity_id}/reports",
+            "GET /rest/v2/gp/reports/{id}/gross_to_net",
+            "GET /rest/v2/gp/reports/{id}/gross_to_net/csv"
+          ]
+        },
+        {
+          name: "global-payroll:write",
+          rules: ["POST /rest/v2/gp/workers/{worker_id}/terminations"]
+        },
+        {
+          name: "groups:read",
+          rules: [
+            "GET /rest/v2/groups",
+            "POST /rest/v2/groups",
+            "PATCH /rest/v2/groups/{id}"
+          ]
+        },
+        {
+          name: "groups:write",
+          rules: [
+            "POST /rest/v2/groups",
+            "PATCH /rest/v2/groups/{id}",
+            "DELETE /rest/v2/groups/{id}",
+            "POST /rest/v2/groups/{id}/clone"
+          ]
+        },
+        {
+          name: "immigration:read",
+          rules: [
+            "GET /rest/v2/immigration/client/cases",
+            "GET /rest/v2/immigration/client/cases/{id}",
+            "GET /rest/v2/immigration/documents/{id}",
+            "GET /rest/v2/immigration/visa-requirement/business",
+            "GET /rest/v2/immigration/visa-types/{country_code}"
+          ]
+        },
+        {
+          name: "immigration:write",
+          rules: ["POST /rest/v2/immigration/client/cases"]
+        },
+        {
+          name: "invoice-adjustments:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/ic-invoicing-taxes",
+            "GET /rest/v2/contracts/{contract_id}/invoice-adjustments",
+            "GET /rest/v2/invoice-adjustments",
+            "GET /rest/v2/invoice-adjustments/{id}"
+          ]
+        },
+        {
+          name: "invoice-adjustments:write",
+          rules: [
+            "POST /rest/v2/contracts/{contract_id}/ic-invoicing-taxes",
+            "PATCH /rest/v2/contracts/{contract_id}/ic-invoicing-taxes",
+            "DELETE /rest/v2/contracts/{contract_id}/ic-invoicing-taxes/{tax_type}",
+            "POST /rest/v2/invoice-adjustments",
+            "PATCH /rest/v2/invoice-adjustments/{id}",
+            "DELETE /rest/v2/invoice-adjustments/{id}",
+            "POST /rest/v2/invoice-adjustments/{id}/reviews"
+          ]
+        },
+        {
+          name: "it-assets:read",
+          rules: [
+            "GET /rest/v2/it/assets",
+            "GET /rest/v2/it/assets/{asset_id}"
+          ]
+        },
+        {
+          name: "it-orders:read",
+          rules: [
+            "GET /rest/v2/it/orders",
+            "GET /rest/v2/it/orders/{order_id}"
+          ]
+        },
+        {
+          name: "it-policies:read",
+          rules: ["GET /rest/v2/it/policies"]
+        },
+        {
+          name: "knowledge-hub:read",
+          rules: ["GET /rest/v2/knowledge-hub/country-guide/{country_code}"]
+        },
+        {
+          name: "legal-entity:read",
+          rules: [
+            "GET /rest/v2/industries",
+            "POST /rest/v2/legal-entities",
+            "PATCH /rest/v2/legal-entities/{id}",
+            "DELETE /rest/v2/legal-entities/{id}",
+            "GET /rest/v2/legal-entities/{legal_entity_id}/cost-centers",
+            "GET /rest/v2/legal-entities/{legal_entity_id}/payroll-events",
+            "GET /rest/v2/lookups"
+          ]
+        },
+        {
+          name: "legal-entity:write",
+          rules: [
+            "POST /rest/v2/legal-entities",
+            "PATCH /rest/v2/legal-entities/{id}",
+            "DELETE /rest/v2/legal-entities/{id}"
+          ]
+        },
+        {
+          name: "lookups:read",
+          rules: [
+            "GET /rest/v2/lookups/countries",
+            "GET /rest/v2/lookups/currencies",
+            "GET /rest/v2/lookups/job-titles",
+            "GET /rest/v2/lookups/seniorities",
+            "GET /rest/v2/lookups/time-off-types"
+          ]
+        },
+        {
+          name: "milestones:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/milestones",
+            "GET /rest/v2/contracts/{contract_id}/milestones/{milestone_id}"
+          ]
+        },
+        {
+          name: "milestones:write",
+          rules: [
+            "POST /rest/v2/contracts/{contract_id}/milestones",
+            "DELETE /rest/v2/contracts/{contract_id}/milestones/{milestone_id}"
+          ]
+        },
+        {
+          name: "off-cycle-payments:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/off-cycle-payments",
+            "GET /rest/v2/contracts/{contract_id}/off-cycle-payments/{id}"
+          ]
+        },
+        {
+          name: "off-cycle-payments:write",
+          rules: ["POST /rest/v2/contracts/{contract_id}/off-cycle-payments"]
+        },
+        {
+          name: "organizations:read",
+          rules: [
+            "GET /rest/v2/benefits/legal-entities/{id}",
+            "GET /rest/v2/benefits/legal-entities/{id}/pay-stub",
+            "GET /rest/v2/benefits/legal-entities/{id}/year-to-date-pay",
+            "GET /rest/v2/departments",
+            "GET /rest/v2/eor/job-scopes",
+            "GET /rest/v2/hris/organization-structures/teams/{team_id}/custom-fields",
+            "PATCH /rest/v2/hris/organization-structures/teams/{team_id}/custom-fields",
+            "GET /rest/v2/hris/organization_structures",
+            "GET /rest/v2/hris/organization_structures/external/{external_id}",
+            "GET /rest/v2/hris/organization_structures/{hrisOrgStr_id}",
+            "GET /rest/v2/hris/worker_relations/types",
+            "GET /rest/v2/legal-entities",
+            "GET /rest/v2/managers",
+            "GET /rest/v2/organizations",
+            "GET /rest/v2/roles",
+            "GET /rest/v2/teams",
+            "GET /rest/v2/working-locations"
+          ]
+        },
+        {
+          name: "organizations:write",
+          rules: [
+            "POST /rest/v2/hris/organization_structures",
+            "PATCH /rest/v2/hris/organization_structures/external/{external_id}",
+            "DELETE /rest/v2/hris/organization_structures/external/{external_id}",
+            "PATCH /rest/v2/hris/organization_structures/{hrisOrgStr_id}",
+            "DELETE /rest/v2/hris/organization_structures/{hrisOrgStr_id}",
+            "POST /rest/v2/hris/worker_relations/types",
+            "PATCH /rest/v2/hris/worker_relations/types/external/{externalId}",
+            "DELETE /rest/v2/hris/worker_relations/types/external/{externalId}",
+            "PATCH /rest/v2/hris/worker_relations/types/{typeId}",
+            "DELETE /rest/v2/hris/worker_relations/types/{typeId}",
+            "POST /rest/v2/managers",
+            "POST /rest/v2/organizations/children",
+            "POST /rest/v2/roles",
+            "PATCH /rest/v2/roles/{roleId}"
+          ]
+        },
+        {
+          name: "payslips:read",
+          rules: [
+            "GET /rest/v2/eor/workers/{worker_id}/payslips",
+            "GET /rest/v2/eor/workers/{worker_id}/payslips/{payslip_id}/download",
+            "GET /rest/v2/gp/workers/{id}/payslips",
+            "GET /rest/v2/reports/payroll/cycles/{cycle_id}/gross-to-net"
+          ]
+        },
+        {
+          name: "people:read",
+          rules: [
+            "GET /rest/v2/benefits/legal-entities/{id}/employees/{employee_id}",
+            "GET /rest/v2/gp/workers/{worker_id}/banks",
+            "GET /rest/v2/gp/workers/{worker_id}/banks/guide",
+            "GET /rest/v2/offboarding/tracker",
+            "GET /rest/v2/offboarding/tracker/hris_profile/{oid}",
+            "GET /rest/v2/offboarding/tracker/{id}",
+            "GET /rest/v2/onboarding/tracker",
+            "GET /rest/v2/onboarding/tracker/hris_profile/{hris_profile_id}",
+            "GET /rest/v2/onboarding/tracker/{tracker_id}",
+            "GET /rest/v2/people",
+            "GET /rest/v2/people/custom_fields",
+            "GET /rest/v2/people/custom_fields/{id}",
+            "GET /rest/v2/people/external/{worker_id}/personal",
+            "GET /rest/v2/people/me",
+            "GET /rest/v2/people/{hris_profile_id}",
+            "GET /rest/v2/people/{worker_id}/custom_fields",
+            "GET /rest/v2/people/{worker_id}/personal"
+          ]
+        },
+        {
+          name: "people:write",
+          rules: [
+            "POST /rest/v2/eor/worker",
+            "POST /rest/v2/gp/workers/contracts/{contract_id}/additional-information",
+            "PATCH /rest/v2/gp/workers/contracts/{contract_id}/additional-information",
+            "PATCH /rest/v2/gp/workers/{worker_id}/address",
+            "POST /rest/v2/gp/workers/{worker_id}/banks",
+            "PATCH /rest/v2/gp/workers/{worker_id}/banks/{bank_id}",
+            "PATCH /rest/v2/gp/workers/{worker_id}/compensation",
+            "PATCH /rest/v2/gp/workers/{worker_id}/employee-information",
+            "PATCH /rest/v2/gp/workers/{worker_id}/pto-policy",
+            "POST /rest/v2/people",
+            "PATCH /rest/v2/people/external/{worker_id}/personal",
+            "PUT /rest/v2/people/{id}/department",
+            "PUT /rest/v2/people/{id}/working-location",
+            "PUT /rest/v2/people/{worker_id}/custom_fields",
+            "DELETE /rest/v2/people/{worker_id}/custom_fields/{id}",
+            "PATCH /rest/v2/people/{worker_id}/personal",
+            "POST /rest/v2/pwac"
+          ]
+        },
+        {
+          name: "profile:read",
+          rules: [
+            "GET /rest/v2/hris/positions/profile/{hrisProfileId}",
+            "GET /rest/v2/hris/worker_relations/profile/external/{profileId}",
+            "GET /rest/v2/hris/worker_relations/profile/{hrisProfileOid}",
+            "PATCH /rest/v2/profiles"
+          ]
+        },
+        {
+          name: "profile:write",
+          rules: [
+            "POST /rest/v2/hris/positions/apply_changes",
+            "POST /rest/v2/hris/worker_relations/profile",
+            "POST /rest/v2/hris/worker_relations/profile/external",
+            "DELETE /rest/v2/hris/worker_relations/profile/external/{profileId}",
+            "PUT /rest/v2/hris/worker_relations/profile/external/{profileId}/child",
+            "PUT /rest/v2/hris/worker_relations/profile/external/{profileId}/parent",
+            "DELETE /rest/v2/hris/worker_relations/profile/{hrisProfileOid}",
+            "PUT /rest/v2/hris/worker_relations/profile/{hrisProfileOid}/child",
+            "PUT /rest/v2/hris/worker_relations/profile/{hrisProfileOid}/parent",
+            "PATCH /rest/v2/profiles"
+          ]
+        },
+        {
+          name: "screenings:read",
+          rules: [
+            "GET /rest/v2/screenings/aml/{entity_type}/{entity_id}",
+            "GET /rest/v2/screenings/kyc/details",
+            "GET /rest/v2/screenings/verification-method"
+          ]
+        },
+        {
+          name: "screenings:write",
+          rules: ["POST /rest/v2/veriff/session"]
+        },
+        {
+          name: "tasks:read",
+          rules: ["GET /rest/v2/organizations/tasks"]
+        },
+        {
+          name: "tasks:write",
+          rules: ["PATCH /rest/v2/tasks/{task_id}"]
+        },
+        {
+          name: "time-off:read",
+          rules: [
+            "GET /rest/v2/time_offs",
+            "GET /rest/v2/time_offs/dailies",
+            "GET /rest/v2/time_offs/policy-validation-templates",
+            "GET /rest/v2/time_offs/profile/{hris_profile_id}",
+            "GET /rest/v2/time_offs/profile/{hris_profile_id}/entitlements",
+            "GET /rest/v2/time_offs/profile/{hris_profile_id}/policies",
+            "GET /rest/v2/time_offs/time-off-events",
+            "POST /rest/v2/time_offs/validate"
+          ]
+        },
+        {
+          name: "time-off:write",
+          rules: [
+            "POST /rest/v2/time_offs",
+            "POST /rest/v2/time_offs/global-payroll/sync",
+            "POST /rest/v2/time_offs/review",
+            "PATCH /rest/v2/time_offs/{time_off_id}",
+            "DELETE /rest/v2/time_offs/{time_off_id}"
+          ]
+        },
+        {
+          name: "time-tracking:read",
+          rules: [
+            "GET /rest/v2/time-tracking/timesheets/{timesheet_id}",
+            "GET /rest/v2/time_tracking/shift_rates",
+            "GET /rest/v2/time_tracking/shift_rates/{external_id}",
+            "GET /rest/v2/time_tracking/shifts",
+            "GET /rest/v2/time_tracking/shifts/{external_id}"
+          ]
+        },
+        {
+          name: "time-tracking:write",
+          rules: [
+            "POST /rest/v2/time-tracking/timesheets/upload-url",
+            "POST /rest/v2/time-tracking/timesheets/{timesheet_id}/review",
+            "POST /rest/v2/time_tracking/shift_rates",
+            "PATCH /rest/v2/time_tracking/shift_rates/{external_id}",
+            "DELETE /rest/v2/time_tracking/shift_rates/{external_id}",
+            "POST /rest/v2/time_tracking/shifts",
+            "POST /rest/v2/time_tracking/shifts/bulk-delete",
+            "POST /rest/v2/time_tracking/shifts/raw",
+            "PATCH /rest/v2/time_tracking/shifts/{external_id}",
+            "DELETE /rest/v2/time_tracking/shifts/{external_id}"
+          ]
+        },
+        {
+          name: "timesheets:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/timesheets",
+            "GET /rest/v2/contracts/{contract_id}/timesheets/presets",
+            "GET /rest/v2/timesheets",
+            "GET /rest/v2/timesheets/presets/{id}",
+            "GET /rest/v2/timesheets/root-presets",
+            "GET /rest/v2/timesheets/root-presets/{id}",
+            "GET /rest/v2/timesheets/{id}"
+          ]
+        },
+        {
+          name: "timesheets:write",
+          rules: [
+            "POST /rest/v2/timesheets",
+            "POST /rest/v2/timesheets/presets",
+            "PATCH /rest/v2/timesheets/presets/{id}",
+            "DELETE /rest/v2/timesheets/presets/{id}",
+            "POST /rest/v2/timesheets/root-presets",
+            "PATCH /rest/v2/timesheets/{id}",
+            "DELETE /rest/v2/timesheets/{id}",
+            "POST /rest/v2/timesheets/{id}/reviews"
+          ]
+        },
+        {
+          name: "treasury-vendorbill:write",
+          rules: [
+            "POST /rest/v2/accounts-payable/vendor-bills",
+            "POST /rest/v2/accounts-payable/vendor-bills/{vendor_bill_id}/attachments"
+          ]
+        },
+        {
+          name: "webhooks:read",
+          rules: [
+            "GET /rest/v2/webhooks",
+            "GET /rest/v2/webhooks/events/types",
+            "GET /rest/v2/webhooks/{id}"
+          ]
+        },
+        {
+          name: "webhooks:write",
+          rules: [
+            "POST /rest/v2/webhooks",
+            "PATCH /rest/v2/webhooks/{id}",
+            "DELETE /rest/v2/webhooks/{id}"
+          ]
+        },
+        {
+          name: "worker:read",
+          rules: [
+            "GET /rest/v2/contracts/{contract_id}/preview",
+            "GET /rest/v2/daas/payslips",
+            "GET /rest/v2/engage/learning/actionable-journeys",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents",
+            "GET /rest/v2/eor/contracts/{contract_id}/hrx-documents/{document_id}",
+            "GET /rest/v2/eor/contracts/{contract_id}/offboarding",
+            "GET /rest/v2/eor/workers/banks-guide/country/{country}/currency/{currency}",
+            "GET /rest/v2/eor/workers/banks/guide",
+            "GET /rest/v2/eor/workers/compliance-documents",
+            "GET /rest/v2/eor/workers/compliance-documents/{document_id}/download",
+            "GET /rest/v2/eor/workers/compliance-documents/{document_id}/templates/download",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/employee-agreement/download",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/hr-documents",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/offboarding/resignation-letter",
+            "GET /rest/v2/eor/workers/contracts/{contract_id}/offer-letter",
+            "GET /rest/v2/eor/workers/resignations",
+            "GET /rest/v2/eor/workers/tax-documents",
+            "GET /rest/v2/escalations/workers/me/hrx",
+            "GET /rest/v2/immigration/workers/{worker_id}/cases/{case_id}/required-document",
+            "GET /rest/v2/immigration/workers/{worker_id}/onboarding-case",
+            "GET /rest/v2/immigration/workers/{worker_id}/required-documents",
+            "GET /rest/v2/invoice-adjustments/{id}",
+            "POST /rest/v2/magic-link",
+            "GET /rest/v2/payouts/auto-withdrawal-setting",
+            "GET /rest/v2/payouts/balances",
+            "GET /rest/v2/payouts/contractors/methods",
+            "POST /rest/v2/payouts/contractors/methods",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/requirements",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/supported_routes",
+            "PUT /rest/v2/payouts/contractors/methods/{id}",
+            "POST /rest/v2/payouts/contractors/settings/auto_withdraw",
+            "GET /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods/bank_transfers/requirements",
+            "DELETE /rest/v2/payouts/employees/methods/{id}",
+            "GET /rest/v2/people/me",
+            "GET /rest/v2/screenings/verification-method",
+            "POST /rest/v2/workers/amendments/{amendment_id}/sign",
+            "GET /rest/v2/workers/contracts/{contract_id}/pdf"
+          ]
+        },
+        {
+          name: "worker:write",
+          rules: [
+            "PATCH /rest/v2/daas/banks/{bank_id}",
+            "POST /rest/v2/eor/contracts/{contract_id}/offboarding/review-employee-sign-offs",
+            "POST /rest/v2/eor/mailboxes/change-password",
+            "POST /rest/v2/eor/workers/banks",
+            "POST /rest/v2/eor/workers/compliance-documents/{document_id}",
+            "POST /rest/v2/eor/workers/compliance-documents/{document_id}/acknowledgement",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/additional-information",
+            "PATCH /rest/v2/eor/workers/contracts/{contract_id}/additional-information",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/offboarding",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/offboarding/resignation-letter/sign",
+            "POST /rest/v2/eor/workers/contracts/{contract_id}/signatures",
+            "POST /rest/v2/immigration/workers/documents",
+            "POST /rest/v2/immigration/workers/{worker_id}/cases/{case_id}/required-document/{document_request_id}",
+            "POST /rest/v2/invoice-adjustments",
+            "PATCH /rest/v2/invoice-adjustments/{id}",
+            "PATCH /rest/v2/payouts/auto-withdrawal-setting",
+            "GET /rest/v2/payouts/contractors/methods",
+            "POST /rest/v2/payouts/contractors/methods",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/requirements",
+            "GET /rest/v2/payouts/contractors/methods/bank_transfers/supported_routes",
+            "PUT /rest/v2/payouts/contractors/methods/{id}",
+            "POST /rest/v2/payouts/contractors/settings/auto_withdraw",
+            "GET /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods",
+            "POST /rest/v2/payouts/employees/methods/bank_transfers/requirements",
+            "DELETE /rest/v2/payouts/employees/methods/{id}",
+            "POST /rest/v2/payouts/withdrawals",
+            "POST /rest/v2/screenings/kyc/external",
+            "POST /rest/v2/screenings/manual-verification",
+            "POST /rest/v2/time_offs",
+            "PATCH /rest/v2/time_offs/{time_off_id}",
+            "POST /rest/v2/veriff/session",
+            "POST /rest/v2/workers/amendments/{amendment_id}/sign",
+            "POST /rest/v2/workers/contracts/{contract_id}/reject",
+            "POST /rest/v2/workers/contracts/{contract_id}/signatures"
+          ]
+        }
+      ]
     }
   ]
 };
@@ -18003,14 +19014,57 @@ var zeroAgentCustomSkillSchema = z26.object({
   displayName: z26.string().max(256).nullable(),
   description: z26.string().max(1024).nullable()
 });
-var zeroAgentSkillContentRequestSchema = z26.object({
+var skillFileEntrySchema = z26.object({
+  path: z26.string().min(1).max(256).refine(
+    (p) => {
+      return !p.startsWith("/");
+    },
+    { message: "Path must be relative" }
+  ).refine(
+    (p) => {
+      return !p.includes("..");
+    },
+    {
+      message: "Path must not contain .."
+    }
+  ),
   content: z26.string()
 });
+var SKILL_FILES_MAX_BYTES = 5 * 1024 * 1024;
+var SKILL_FILES_MAX_COUNT = 500;
+var zeroAgentSkillFilesRequestSchema = z26.object({
+  files: z26.array(skillFileEntrySchema).min(1, "At least one file is required").max(
+    SKILL_FILES_MAX_COUNT,
+    `Maximum ${SKILL_FILES_MAX_COUNT} files allowed`
+  ).refine(
+    (files) => {
+      return files.some((f) => {
+        return f.path === "SKILL.md";
+      });
+    },
+    {
+      message: "SKILL.md is required"
+    }
+  ).refine(
+    (files) => {
+      const total = files.reduce((sum, f) => {
+        return sum + new TextEncoder().encode(f.content).length;
+      }, 0);
+      return total <= SKILL_FILES_MAX_BYTES;
+    },
+    { message: "Total file size must not exceed 5MB" }
+  )
+});
+var skillFileMetadataSchema = z26.object({
+  path: z26.string(),
+  size: z26.number()
+});
 var zeroAgentSkillContentResponseSchema = z26.object({
   name: z26.string(),
   displayName: z26.string().nullable(),
   description: z26.string().nullable(),
-  content: z26.string().nullable()
+  content: z26.string().nullable(),
+  files: z26.array(skillFileMetadataSchema).nullable()
 });
 var zeroAgentSkillListResponseSchema = z26.array(
   zeroAgentCustomSkillSchema
@@ -18031,7 +19085,7 @@ var zeroSkillsCollectionContract = c17.router({
     method: "POST",
     path: "/api/zero/skills",
     headers: authHeadersSchema,
-    body: zeroAgentSkillContentRequestSchema.extend({
+    body: zeroAgentSkillFilesRequestSchema.extend({
       name: zeroAgentCustomSkillNameSchema,
       displayName: z26.string().max(256).optional(),
       description: z26.string().max(1024).optional()
@@ -18065,7 +19119,7 @@ var zeroSkillsDetailContract = c17.router({
     path: "/api/zero/skills/:name",
     headers: authHeadersSchema,
     pathParams: z26.object({ name: zeroAgentCustomSkillNameSchema }),
-    body: zeroAgentSkillContentRequestSchema,
+    body: zeroAgentSkillFilesRequestSchema,
     responses: {
       200: zeroAgentSkillContentResponseSchema,
       401: apiErrorSchema,
@@ -20726,11 +21780,11 @@ async function getZeroOrgMembers() {
   }
   handleError(result, "Failed to get organization members");
 }
-async function inviteZeroOrgMember(email) {
+async function inviteZeroOrgMember(email, role = "member") {
   const config = await getClientConfig();
   const client = initClient11(zeroOrgInviteContract, config);
   const result = await client.invite({
-    body: { email }
+    body: { email, role }
   });
   if (result.status === 200) {
     return;
@@ -22199,4 +23253,4 @@ export {
   pollEvents,
   showNextSteps
 };
-//# sourceMappingURL=chunk-UEVD4XR7.js.map
+//# sourceMappingURL=chunk-OYO75U5W.js.map