@vm0/cli 9.93.0 → 9.94.1

package/zero.js

@@ -102,10 +102,10 @@ import {
   updateZeroUserPreferences,
   upsertZeroOrgModelProvider,
   withErrorHandler
-} from "./chunk-UEVD4XR7.js";
+} from "./chunk-OYO75U5W.js";
 
 // src/zero.ts
-import { Command as Command69 } from "commander";
+import { Command as Command70 } from "commander";
 
 // src/commands/zero/org/index.ts
 import { Command as Command23 } from "commander";
@@ -229,10 +229,21 @@ var membersCommand = new Command5().name("members").description("View organizati
 // src/commands/zero/org/invite.ts
 import { Command as Command6 } from "commander";
 import chalk6 from "chalk";
-var inviteCommand = new Command6().name("invite").description("Invite a member to the current organization").requiredOption("--email <email>", "Email address of the member to invite").action(
+var inviteCommand = new Command6().name("invite").description("Invite a member to the current organization").requiredOption("--email <email>", "Email address of the member to invite").option(
+  "--role <role>",
+  "Role for the invited member (member or admin)",
+  "member"
+).action(
   withErrorHandler(async (options) => {
-    await inviteZeroOrgMember(options.email);
-    console.log(chalk6.green(`\u2713 Invitation sent to ${options.email}`));
+    if (options.role !== "member" && options.role !== "admin") {
+      throw new Error(
+        `Invalid role "${options.role}". Must be "member" or "admin".`
+      );
+    }
+    await inviteZeroOrgMember(options.email, options.role);
+    console.log(
+      chalk6.green(`\u2713 Invitation sent to ${options.email} as ${options.role}`)
+    );
   })
 );
 
@@ -2019,7 +2030,7 @@ var disconnectCommand = new Command33().name("disconnect").description("Disconne
 var zeroConnectorCommand = new Command34().name("connector").description("Check or connect third-party services (GitHub, Slack, etc.)").addCommand(listCommand6).addCommand(statusCommand2).addCommand(connectCommand).addCommand(disconnectCommand);
 
 // src/commands/zero/doctor/index.ts
-import { Command as Command37 } from "commander";
+import { Command as Command38 } from "commander";
 
 // src/commands/zero/doctor/missing-token.ts
 import { Command as Command35 } from "commander";
@@ -2116,6 +2127,22 @@ Notes:
 
 // src/commands/zero/doctor/firewall-deny.ts
 import { Command as Command36, Option } from "commander";
+
+// src/commands/zero/doctor/resolve-role.ts
+async function resolveRole() {
+  try {
+    const org = await getZeroOrg();
+    if (org.role === "admin" || org.role === "member") {
+      return org.role;
+    }
+    return "unknown";
+  } catch (error) {
+    console.debug("resolveRole failed, falling back to unknown:", error);
+    return "unknown";
+  }
+}
+
+// src/commands/zero/doctor/firewall-deny.ts
 var firewallDenyCommand = new Command36().name("firewall-deny").description(
   "Diagnose a firewall denial and find the permission that covers it"
 ).argument("<firewall-ref>", "The firewall connector type (e.g. github)").addOption(
@@ -2181,20 +2208,116 @@ Notes:
         );
         console.log("");
       }
-      console.log(
-        `Ask the user to allow it at: [Allow ${label} access](${url})`
-      );
+      const role = agentId ? await resolveRole() : "unknown";
+      if (role === "admin") {
+        console.log(
+          `You can allow this permission directly: [Manage ${label} firewall](${url})`
+        );
+      } else if (role === "member") {
+        console.log(
+          `This change requires admin approval. Request access at: [Request ${label} access](${url})`
+        );
+      } else {
+        console.log(
+          `Ask the user to allow it at: [Allow ${label} access](${url})`
+        );
+      }
+    }
+  )
+);
+
+// src/commands/zero/doctor/firewall-permissions-change.ts
+import { Command as Command37, Option as Option2 } from "commander";
+function findPermissionInConfig(ref, permissionName) {
+  if (!isFirewallConnectorType(ref)) return false;
+  const config = getConnectorFirewall(ref);
+  for (const api of config.apis) {
+    if (!api.permissions) continue;
+    for (const p of api.permissions) {
+      if (p.name === permissionName) return true;
+    }
+  }
+  return false;
+}
+var firewallPermissionsChangeCommand = new Command37().name("firewall-permissions-change").description("Request a firewall permission change (enable or disable)").argument("<firewall-ref>", "The firewall connector type (e.g. github)").addOption(
+  new Option2(
+    "--permission <name>",
+    "The permission name to change"
+  ).makeOptionMandatory()
+).addOption(
+  new Option2("--enable", "Request to enable the permission").conflicts(
+    "disable"
+  )
+).addOption(
+  new Option2("--disable", "Request to disable the permission").conflicts(
+    "enable"
+  )
+).addHelpText(
+  "after",
+  `
+Examples:
+  zero doctor firewall-permissions-change github --permission contents:read --enable
+  zero doctor firewall-permissions-change slack --permission chat:write --disable
+
+Notes:
+  - Outputs a platform URL for the user to adjust the permission
+  - Admins can change permissions directly; members must request approval`
+).action(
+  withErrorHandler(
+    async (firewallRef, opts) => {
+      if (!opts.enable && !opts.disable) {
+        throw new Error("Either --enable or --disable is required");
+      }
+      if (!isFirewallConnectorType(firewallRef)) {
+        throw new Error(`Unknown firewall connector type: ${firewallRef}`);
+      }
+      if (!findPermissionInConfig(firewallRef, opts.permission)) {
+        throw new Error(
+          `Unknown permission "${opts.permission}" for ${firewallRef} firewall`
+        );
+      }
+      const { label } = CONNECTOR_TYPES[firewallRef];
+      const action = opts.enable ? "enable" : "disable";
+      const platformOrigin = await getPlatformOrigin();
+      const agentId = process.env.ZERO_AGENT_ID;
+      const urlParams = new URLSearchParams({
+        ref: firewallRef,
+        permission: opts.permission
+      });
+      const pagePath = agentId ? `/firewall-allow/${agentId}` : "/firewall-allow";
+      const url = `${platformOrigin}${pagePath}?${urlParams.toString()}`;
+      const role = agentId ? await resolveRole() : "unknown";
+      if (role === "admin") {
+        console.log(
+          `You can ${action} the "${opts.permission}" permission directly: [Manage ${label} firewall](${url})`
+        );
+      } else if (role === "member") {
+        if (action === "enable") {
+          console.log(
+            `Permission changes require admin approval. Request access at: [Request ${label} access](${url})`
+          );
+        } else {
+          console.log(
+            `Permission changes require admin approval. Contact an org admin to disable this permission: [View ${label} firewall](${url})`
+          );
+        }
+      } else {
+        console.log(
+          `To ${action} the "${opts.permission}" permission on the ${label} firewall: [Manage ${label} firewall](${url})`
+        );
+      }
     }
   )
 );
 
 // src/commands/zero/doctor/index.ts
-var zeroDoctorCommand = new Command37().name("doctor").description("Diagnose runtime issues (missing tokens, firewall denials)").addCommand(missingTokenCommand).addCommand(firewallDenyCommand).addHelpText(
+var zeroDoctorCommand = new Command38().name("doctor").description("Diagnose runtime issues (missing tokens, firewall denials)").addCommand(missingTokenCommand).addCommand(firewallDenyCommand).addCommand(firewallPermissionsChangeCommand).addHelpText(
   "after",
   `
 Examples:
   Missing an API key?    zero doctor missing-token GITHUB_TOKEN
   Firewall blocked?      zero doctor firewall-deny github --method GET --path /repos/owner/repo
+  Change a permission?   zero doctor firewall-permissions-change github --permission contents:read --enable
 
 Notes:
   - Use this when your task fails due to a missing environment variable or firewall denial
@@ -2202,7 +2325,7 @@ Notes:
 );
 
 // src/commands/zero/preference/index.ts
-import { Command as Command38 } from "commander";
+import { Command as Command39 } from "commander";
 import chalk31 from "chalk";
 function detectTimezone2() {
   return Intl.DateTimeFormat().resolvedOptions().timeZone;
@@ -2259,7 +2382,7 @@ System timezone detected: ${detectedTz}`));
     }
   }
 }
-var zeroPreferenceCommand = new Command38().name("preference").description("View or update user preferences (timezone, notifications)").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").action(
+var zeroPreferenceCommand = new Command39().name("preference").description("View or update user preferences (timezone, notifications)").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").action(
   withErrorHandler(async (opts) => {
     const updates = buildUpdates(opts);
     if (updates) {
@@ -2284,7 +2407,7 @@ var zeroPreferenceCommand = new Command38().name("preference").description("View
 );
 
 // src/commands/zero/run/run.ts
-import { Command as Command39 } from "commander";
+import { Command as Command40 } from "commander";
 
 // src/commands/zero/run/shared.ts
 import chalk32 from "chalk";
@@ -2367,7 +2490,7 @@ function showZeroNextSteps(result) {
 }
 
 // src/commands/zero/run/run.ts
-var mainRunCommand = new Command39().name("run").description("Delegate a task to a teammate agent").argument("<agent-id>", "Agent UUID (from `zero agent list`)").argument("<prompt>", "Task prompt for the agent").option(
+var mainRunCommand = new Command40().name("run").description("Delegate a task to a teammate agent").argument("<agent-id>", "Agent UUID (from `zero agent list`)").argument("<prompt>", "Task prompt for the agent").option(
   "--model-provider <type>",
   "Override model provider (e.g., anthropic-api-key)"
 ).option("--verbose", "Show full tool inputs and outputs").addHelpText(
@@ -2415,8 +2538,8 @@ Notes:
 );
 
 // src/commands/zero/run/continue.ts
-import { Command as Command40 } from "commander";
-var continueCommand = new Command40().name("continue").description("Continue a previous delegation from a session").argument("<session-id>", "Session ID from a previous run").argument("<prompt>", "Follow-up prompt for the agent").option(
+import { Command as Command41 } from "commander";
+var continueCommand = new Command41().name("continue").description("Continue a previous delegation from a session").argument("<session-id>", "Session ID from a previous run").argument("<prompt>", "Follow-up prompt for the agent").option(
   "--model-provider <type>",
   "Override model provider (e.g., anthropic-api-key)"
 ).option("--verbose", "Show full tool inputs and outputs").addHelpText(
@@ -2473,10 +2596,10 @@ Examples:
 var zeroRunCommand = mainRunCommand;
 
 // src/commands/zero/schedule/index.ts
-import { Command as Command47 } from "commander";
+import { Command as Command48 } from "commander";
 
 // src/commands/zero/schedule/setup.ts
-import { Command as Command41 } from "commander";
+import { Command as Command42 } from "commander";
 import chalk33 from "chalk";
 var FREQUENCY_CHOICES = [
   { title: "Daily", value: "daily", description: "Run every day" },
@@ -2885,7 +3008,7 @@ async function handleScheduleEnabling(params) {
     showEnableHint(agentName);
   }
 }
-var setupCommand2 = new Command41().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-id>", "Agent ID").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("-e, --enable", "Enable schedule immediately after creation").addHelpText(
+var setupCommand2 = new Command42().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-id>", "Agent ID").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("-e, --enable", "Enable schedule immediately after creation").addHelpText(
   "after",
   `
 Examples:
@@ -2974,9 +3097,9 @@ Notes:
 );
 
 // src/commands/zero/schedule/list.ts
-import { Command as Command42 } from "commander";
+import { Command as Command43 } from "commander";
 import chalk34 from "chalk";
-var listCommand7 = new Command42().name("list").alias("ls").description("List all zero schedules").addHelpText(
+var listCommand7 = new Command43().name("list").alias("ls").description("List all zero schedules").addHelpText(
   "after",
   `
 Examples:
@@ -3034,7 +3157,7 @@ Examples:
 );
 
 // src/commands/zero/schedule/status.ts
-import { Command as Command43 } from "commander";
+import { Command as Command44 } from "commander";
 import chalk35 from "chalk";
 function formatDateTimeStyled(dateStr) {
   if (!dateStr) return chalk35.dim("-");
@@ -3087,7 +3210,7 @@ function printTimeSchedule(schedule) {
     console.log(`${"Failures:".padEnd(16)}${failureText}`);
   }
 }
-var statusCommand3 = new Command43().name("status").description("Show detailed status of a zero schedule").argument("<agent-id>", "Agent ID").option(
+var statusCommand3 = new Command44().name("status").description("Show detailed status of a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3112,9 +3235,9 @@ Examples:
 );
 
 // src/commands/zero/schedule/delete.ts
-import { Command as Command44 } from "commander";
+import { Command as Command45 } from "commander";
 import chalk36 from "chalk";
-var deleteCommand3 = new Command44().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-id>", "Agent ID").option(
+var deleteCommand3 = new Command45().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).option("-y, --yes", "Skip confirmation prompt").addHelpText(
@@ -3156,9 +3279,9 @@ Notes:
 );
 
 // src/commands/zero/schedule/enable.ts
-import { Command as Command45 } from "commander";
+import { Command as Command46 } from "commander";
 import chalk37 from "chalk";
-var enableCommand = new Command45().name("enable").description("Enable a zero schedule").argument("<agent-id>", "Agent ID").option(
+var enableCommand = new Command46().name("enable").description("Enable a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3182,9 +3305,9 @@ Examples:
 );
 
 // src/commands/zero/schedule/disable.ts
-import { Command as Command46 } from "commander";
+import { Command as Command47 } from "commander";
 import chalk38 from "chalk";
-var disableCommand = new Command46().name("disable").description("Disable a zero schedule").argument("<agent-id>", "Agent ID").option(
+var disableCommand = new Command47().name("disable").description("Disable a zero schedule").argument("<agent-id>", "Agent ID").option(
   "-n, --name <schedule-name>",
   "Schedule name (required when agent has multiple schedules)"
 ).addHelpText(
@@ -3208,7 +3331,7 @@ Examples:
 );
 
 // src/commands/zero/schedule/index.ts
-var zeroScheduleCommand = new Command47().name("schedule").description("Create or manage recurring scheduled tasks").addCommand(setupCommand2).addCommand(listCommand7).addCommand(statusCommand3).addCommand(deleteCommand3).addCommand(enableCommand).addCommand(disableCommand).addHelpText(
+var zeroScheduleCommand = new Command48().name("schedule").description("Create or manage recurring scheduled tasks").addCommand(setupCommand2).addCommand(listCommand7).addCommand(statusCommand3).addCommand(deleteCommand3).addCommand(enableCommand).addCommand(disableCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3221,12 +3344,12 @@ Examples:
 );
 
 // src/commands/zero/secret/index.ts
-import { Command as Command51 } from "commander";
+import { Command as Command52 } from "commander";
 
 // src/commands/zero/secret/list.ts
-import { Command as Command48 } from "commander";
+import { Command as Command49 } from "commander";
 import chalk39 from "chalk";
-var listCommand8 = new Command48().name("list").alias("ls").description("List all secrets").action(
+var listCommand8 = new Command49().name("list").alias("ls").description("List all secrets").action(
   withErrorHandler(async () => {
     const result = await listZeroSecrets();
     if (result.secrets.length === 0) {
@@ -3279,9 +3402,9 @@ var listCommand8 = new Command48().name("list").alias("ls").description("List al
 );
 
 // src/commands/zero/secret/set.ts
-import { Command as Command49 } from "commander";
+import { Command as Command50 } from "commander";
 import chalk40 from "chalk";
-var setCommand4 = new Command49().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
+var setCommand4 = new Command50().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
   "-b, --body <value>",
   "Secret value (required in non-interactive mode)"
 ).option("-d, --description <description>", "Optional description").action(
@@ -3327,9 +3450,9 @@ var setCommand4 = new Command49().name("set").description("Create or update a se
 );
 
 // src/commands/zero/secret/delete.ts
-import { Command as Command50 } from "commander";
+import { Command as Command51 } from "commander";
 import chalk41 from "chalk";
-var deleteCommand4 = new Command50().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+var deleteCommand4 = new Command51().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
   withErrorHandler(async (name, options) => {
     if (!options.yes) {
       if (!isInteractive()) {
@@ -3350,19 +3473,19 @@ var deleteCommand4 = new Command50().name("delete").description("Delete a secret
 );
 
 // src/commands/zero/secret/index.ts
-var zeroSecretCommand = new Command51().name("secret").description("Read or write secrets (API keys, tokens)").addCommand(listCommand8).addCommand(setCommand4).addCommand(deleteCommand4);
+var zeroSecretCommand = new Command52().name("secret").description("Read or write secrets (API keys, tokens)").addCommand(listCommand8).addCommand(setCommand4).addCommand(deleteCommand4);
 
 // src/commands/zero/slack/index.ts
-import { Command as Command55 } from "commander";
+import { Command as Command56 } from "commander";
 
 // src/commands/zero/slack/message/index.ts
-import { Command as Command53 } from "commander";
+import { Command as Command54 } from "commander";
 
 // src/commands/zero/slack/message/send.ts
 import { readFileSync as readFileSync3 } from "fs";
-import { Command as Command52 } from "commander";
+import { Command as Command53 } from "commander";
 import chalk42 from "chalk";
-var sendCommand = new Command52().name("send").description("Send a message to a Slack channel").requiredOption("-c, --channel <id>", "Channel ID").option("-t, --text <message>", "Message text").option("--thread <ts>", "Thread timestamp for replies").option("--blocks <json>", "Block Kit JSON string").addHelpText(
+var sendCommand = new Command53().name("send").description("Send a message to a Slack channel").requiredOption("-c, --channel <id>", "Channel ID").option("-t, --text <message>", "Message text").option("--thread <ts>", "Thread timestamp for replies").option("--blocks <json>", "Block Kit JSON string").addHelpText(
   "after",
   `
 Examples:
@@ -3412,7 +3535,7 @@ Notes:
 );
 
 // src/commands/zero/slack/message/index.ts
-var zeroSlackMessageCommand = new Command53().name("message").description("Manage Slack messages").addCommand(sendCommand).addHelpText(
+var zeroSlackMessageCommand = new Command54().name("message").description("Manage Slack messages").addCommand(sendCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3422,9 +3545,9 @@ Examples:
 // src/commands/zero/slack/upload-file.ts
 import { statSync, readFileSync as readFileSync4 } from "fs";
 import { basename } from "path";
-import { Command as Command54 } from "commander";
+import { Command as Command55 } from "commander";
 import chalk43 from "chalk";
-var uploadFileCommand = new Command54().name("upload-file").description("Upload a file to a Slack channel as the bot").requiredOption("-f, --file <path>", "Local file path to upload").requiredOption("-c, --channel <id>", "Slack channel ID").option("--thread <ts>", "Thread timestamp to post as a reply").option("--title <title>", "Display title for the file").option("--comment <text>", "Initial comment to accompany the file").addHelpText(
+var uploadFileCommand = new Command55().name("upload-file").description("Upload a file to a Slack channel as the bot").requiredOption("-f, --file <path>", "Local file path to upload").requiredOption("-c, --channel <id>", "Slack channel ID").option("--thread <ts>", "Thread timestamp to post as a reply").option("--title <title>", "Display title for the file").option("--comment <text>", "Initial comment to accompany the file").addHelpText(
   "after",
   `
 Examples:
@@ -3477,7 +3600,7 @@ Notes:
 );
 
 // src/commands/zero/slack/index.ts
-var zeroSlackCommand = new Command55().name("slack").description("Send messages and upload files to Slack channels as the bot").addCommand(zeroSlackMessageCommand).addCommand(uploadFileCommand).addHelpText(
+var zeroSlackCommand = new Command56().name("slack").description("Send messages and upload files to Slack channels as the bot").addCommand(zeroSlackMessageCommand).addCommand(uploadFileCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3487,10 +3610,10 @@ Examples:
 );
 
 // src/commands/zero/variable/index.ts
-import { Command as Command59 } from "commander";
+import { Command as Command60 } from "commander";
 
 // src/commands/zero/variable/list.ts
-import { Command as Command56 } from "commander";
+import { Command as Command57 } from "commander";
 import chalk44 from "chalk";
 function truncateValue2(value, maxLength = 60) {
   if (value.length <= maxLength) {
@@ -3498,7 +3621,7 @@ function truncateValue2(value, maxLength = 60) {
   }
   return value.slice(0, maxLength - 15) + "... [truncated]";
 }
-var listCommand9 = new Command56().name("list").alias("ls").description("List all variables").action(
+var listCommand9 = new Command57().name("list").alias("ls").description("List all variables").action(
   withErrorHandler(async () => {
     const result = await listZeroVariables();
     if (result.variables.length === 0) {
@@ -3526,9 +3649,9 @@ var listCommand9 = new Command56().name("list").alias("ls").description("List al
 );
 
 // src/commands/zero/variable/set.ts
-import { Command as Command57 } from "commander";
+import { Command as Command58 } from "commander";
 import chalk45 from "chalk";
-var setCommand5 = new Command57().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
+var setCommand5 = new Command58().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
   withErrorHandler(
     async (name, value, options) => {
       let variable;
@@ -3554,9 +3677,9 @@ var setCommand5 = new Command57().name("set").description("Create or update a va
 );
 
 // src/commands/zero/variable/delete.ts
-import { Command as Command58 } from "commander";
+import { Command as Command59 } from "commander";
 import chalk46 from "chalk";
-var deleteCommand5 = new Command58().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+var deleteCommand5 = new Command59().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
   withErrorHandler(async (name, options) => {
     if (!options.yes) {
       if (!isInteractive()) {
@@ -3577,10 +3700,10 @@ var deleteCommand5 = new Command58().name("delete").description("Delete a variab
 );
 
 // src/commands/zero/variable/index.ts
-var zeroVariableCommand = new Command59().name("variable").description("Read or write non-sensitive configuration values").addCommand(listCommand9).addCommand(setCommand5).addCommand(deleteCommand5);
+var zeroVariableCommand = new Command60().name("variable").description("Read or write non-sensitive configuration values").addCommand(listCommand9).addCommand(setCommand5).addCommand(deleteCommand5);
 
 // src/commands/zero/whoami.ts
-import { Command as Command60 } from "commander";
+import { Command as Command61 } from "commander";
 import chalk47 from "chalk";
 function isInsideSandbox() {
   return !!process.env.ZERO_AGENT_ID;
@@ -3617,7 +3740,7 @@ async function showLocalInfo() {
     console.log(`  Active:     ${activeOrg}`);
   }
 }
-var zeroWhoamiCommand = new Command60().name("whoami").description("Show agent identity, run ID, and capabilities").addHelpText(
+var zeroWhoamiCommand = new Command61().name("whoami").description("Show agent identity, run ID, and capabilities").addHelpText(
   "after",
   `
 Examples:
@@ -3637,10 +3760,10 @@ Notes:
 );
 
 // src/commands/zero/ask-user/index.ts
-import { Command as Command62 } from "commander";
+import { Command as Command63 } from "commander";
 
 // src/commands/zero/ask-user/question.ts
-import { Command as Command61 } from "commander";
+import { Command as Command62 } from "commander";
 import chalk48 from "chalk";
 function collectOption(value, previous) {
   const list = previous ?? [];
@@ -3652,7 +3775,7 @@ function collectDesc(value, previous) {
   list.push(value);
   return list;
 }
-var questionCommand = new Command61().name("question").description("Ask the user a question and wait for the answer").argument("<question>", "The question to ask").option("--header <text>", "Short label displayed as chip/tag (max 12 chars)").option("--option <label>", "Add a choice option (repeatable)", collectOption).option(
+var questionCommand = new Command62().name("question").description("Ask the user a question and wait for the answer").argument("<question>", "The question to ask").option("--header <text>", "Short label displayed as chip/tag (max 12 chars)").option("--option <label>", "Add a choice option (repeatable)", collectOption).option(
   "--desc <text>",
   "Description for the preceding --option",
   collectDesc
@@ -3735,7 +3858,7 @@ Notes:
 );
 
 // src/commands/zero/ask-user/index.ts
-var zeroAskUserCommand = new Command62().name("ask-user").description("Ask the user a question and wait for the answer").addCommand(questionCommand).addHelpText(
+var zeroAskUserCommand = new Command63().name("ask-user").description("Ask the user a question and wait for the answer").addCommand(questionCommand).addHelpText(
   "after",
   `
 Examples:
@@ -3747,14 +3870,44 @@ Notes:
 );
 
 // src/commands/zero/skill/index.ts
-import { Command as Command68 } from "commander";
+import { Command as Command69 } from "commander";
 
 // src/commands/zero/skill/create.ts
-import { Command as Command63 } from "commander";
-import { readFileSync as readFileSync5, existsSync } from "fs";
-import { join as join2 } from "path";
+import { Command as Command64 } from "commander";
 import chalk49 from "chalk";
-var createCommand2 = new Command63().name("create").description("Create a custom skill in the organization").argument("<name>", "Skill name (lowercase alphanumeric with hyphens)").requiredOption("--dir <path>", "Path to directory containing SKILL.md").option("--display-name <name>", "Skill display name").option("--description <text>", "Skill description").addHelpText(
+
+// src/lib/skill-directory.ts
+import { readFileSync as readFileSync5, readdirSync } from "fs";
+import { join as join2 } from "path";
+var IGNORED_NAMES = /* @__PURE__ */ new Set(["node_modules", ".git", ".DS_Store"]);
+function readSkillDirectory(dirPath) {
+  const files = [];
+  function walk(dir, prefix) {
+    const entries = readdirSync(dir, { withFileTypes: true });
+    for (const entry of entries) {
+      if (entry.name.startsWith(".") || IGNORED_NAMES.has(entry.name)) continue;
+      const relPath = prefix ? `${prefix}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) {
+        walk(join2(dir, entry.name), relPath);
+      } else {
+        files.push({
+          path: relPath,
+          content: readFileSync5(join2(dir, entry.name), "utf-8")
+        });
+      }
+    }
+  }
+  walk(dirPath, "");
+  if (!files.some((f) => {
+    return f.path === "SKILL.md";
+  })) {
+    throw new Error(`SKILL.md not found in ${dirPath}`);
+  }
+  return files;
+}
+
+// src/commands/zero/skill/create.ts
+var createCommand2 = new Command64().name("create").description("Create a custom skill in the organization").argument("<name>", "Skill name (lowercase alphanumeric with hyphens)").requiredOption("--dir <path>", "Path to directory containing SKILL.md").option("--display-name <name>", "Skill display name").option("--description <text>", "Skill description").addHelpText(
   "after",
   `
 Examples:
@@ -3763,24 +3916,22 @@ Examples:
 
 Notes:
   - The directory must contain a SKILL.md file
+  - All files in the directory are uploaded (hidden files and node_modules excluded)
   - The skill is created in the organization but not bound to any agent
   - Use 'zero agent edit <id> --add-skill <name>' to bind a skill to an agent`
 ).action(
   withErrorHandler(
     async (name, options) => {
-      const skillMdPath = join2(options.dir, "SKILL.md");
-      if (!existsSync(skillMdPath)) {
-        throw new Error(`SKILL.md not found in ${options.dir}`);
-      }
-      const content = readFileSync5(skillMdPath, "utf-8");
+      const files = readSkillDirectory(options.dir);
       const skill = await createSkill({
         name,
-        content,
+        files,
         displayName: options.displayName,
         description: options.description
       });
       console.log(chalk49.green(`\u2713 Skill "${skill.name}" created`));
       console.log(`  Name:         ${skill.name}`);
+      console.log(`  Files:        ${files.length} file(s)`);
       if (skill.displayName) {
         console.log(`  Display Name: ${skill.displayName}`);
       }
@@ -3792,13 +3943,11 @@ Notes:
 );
 
 // src/commands/zero/skill/edit.ts
-import { Command as Command64 } from "commander";
-import { readFileSync as readFileSync6, existsSync as existsSync2 } from "fs";
-import { join as join3 } from "path";
+import { Command as Command65 } from "commander";
 import chalk50 from "chalk";
-var editCommand2 = new Command64().name("edit").description("Update a custom skill's content").argument("<name>", "Skill name").requiredOption(
+var editCommand2 = new Command65().name("edit").description("Update a custom skill's content").argument("<name>", "Skill name").requiredOption(
   "--dir <path>",
-  "Path to directory containing updated SKILL.md"
+  "Path to directory containing updated skill files"
 ).addHelpText(
   "after",
   `
@@ -3806,20 +3955,18 @@ Examples:
   zero skill edit my-skill --dir ./skills/my-skill/`
 ).action(
   withErrorHandler(async (name, options) => {
-    const skillMdPath = join3(options.dir, "SKILL.md");
-    if (!existsSync2(skillMdPath)) {
-      throw new Error(`SKILL.md not found in ${options.dir}`);
-    }
-    const content = readFileSync6(skillMdPath, "utf-8");
-    await updateSkill(name, { content });
-    console.log(chalk50.green(`\u2713 Skill "${name}" updated`));
+    const files = readSkillDirectory(options.dir);
+    await updateSkill(name, { files });
+    console.log(
+      chalk50.green(`\u2713 Skill "${name}" updated (${files.length} file(s))`)
+    );
   })
 );
 
 // src/commands/zero/skill/view.ts
-import { Command as Command65 } from "commander";
+import { Command as Command66 } from "commander";
 import chalk51 from "chalk";
-var viewCommand2 = new Command65().name("view").description("View a custom skill").argument("<name>", "Skill name").addHelpText(
+var viewCommand2 = new Command66().name("view").description("View a custom skill").argument("<name>", "Skill name").addHelpText(
   "after",
   `
 Examples:
@@ -3833,6 +3980,13 @@ Examples:
     console.log(`Name:         ${skill.name}`);
     if (skill.displayName) console.log(`Display Name: ${skill.displayName}`);
     if (skill.description) console.log(`Description:  ${skill.description}`);
+    if (skill.files && skill.files.length > 0) {
+      console.log();
+      console.log(chalk51.dim("\u2500\u2500 Files \u2500\u2500"));
+      for (const f of skill.files) {
+        console.log(`  ${f.path} (${f.size} bytes)`);
+      }
+    }
     console.log();
     if (skill.content) {
       console.log(chalk51.dim("\u2500\u2500 SKILL.md \u2500\u2500"));
@@ -3844,9 +3998,9 @@ Examples:
 );
 
 // src/commands/zero/skill/list.ts
-import { Command as Command66 } from "commander";
+import { Command as Command67 } from "commander";
 import chalk52 from "chalk";
-var listCommand10 = new Command66().name("list").alias("ls").description("List custom skills in the organization").addHelpText(
+var listCommand10 = new Command67().name("list").alias("ls").description("List custom skills in the organization").addHelpText(
   "after",
   `
 Examples:
@@ -3891,9 +4045,9 @@ Examples:
 );
 
 // src/commands/zero/skill/delete.ts
-import { Command as Command67 } from "commander";
+import { Command as Command68 } from "commander";
 import chalk53 from "chalk";
-var deleteCommand6 = new Command67().name("delete").alias("rm").description("Delete a custom skill from the organization").argument("<name>", "Skill name").option("-y, --yes", "Skip confirmation prompt").addHelpText(
+var deleteCommand6 = new Command68().name("delete").alias("rm").description("Delete a custom skill from the organization").argument("<name>", "Skill name").option("-y, --yes", "Skip confirmation prompt").addHelpText(
   "after",
   `
 Examples:
@@ -3925,7 +4079,7 @@ Notes:
 );
 
 // src/commands/zero/skill/index.ts
-var zeroSkillCommand = new Command68("skill").description("Manage custom skills").addCommand(createCommand2).addCommand(editCommand2).addCommand(viewCommand2).addCommand(listCommand10).addCommand(deleteCommand6).addHelpText(
+var zeroSkillCommand = new Command69("skill").description("Manage custom skills").addCommand(createCommand2).addCommand(editCommand2).addCommand(viewCommand2).addCommand(listCommand10).addCommand(deleteCommand6).addHelpText(
   "after",
   `
 Examples:
@@ -3981,10 +4135,10 @@ function registerZeroCommands(prog, commands) {
     prog.addCommand(cmd, hidden ? { hidden: true } : {});
   }
 }
-var program = new Command69();
+var program = new Command70();
 program.name("zero").description(
   "Zero CLI \u2014 interact with the zero platform from inside the sandbox"
-).version("9.93.0").addHelpText(
+).version("9.94.1").addHelpText(
   "after",
   `
 Examples: