@vm0/cli 9.98.2 → 9.99.0

package/{chunk-3S6PEJ3G.js → chunk-52LSZTSN.js}

@@ -49,7 +49,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.98.2",
+    release: "9.99.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -68,7 +68,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.98.2",
+    version: "9.99.0",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -7725,6 +7725,19 @@ var slackFirewall = {
     }
   ]
 };
+var slackDefaultAllowed = [
+  "bookmarks:read",
+  "channels:history",
+  "channels:read",
+  "emoji:read",
+  "pins:read",
+  "reactions:read",
+  "search:read",
+  "team:read",
+  "usergroups:read",
+  "users.profile:read",
+  "users:read"
+];
 
 // ../../packages/core/src/firewalls/categories.ts
 var CATEGORY_REGISTRY = {};
@@ -22518,7 +22531,23 @@ var linearFirewall = {
           Authorization: "Bearer ${{ secrets.LINEAR_TOKEN }}"
         }
       },
-      permissions: []
+      permissions: [
+        {
+          name: "read",
+          description: "Read data (all GraphQL queries)",
+          rules: ["POST /graphql GraphQL type:query"]
+        },
+        {
+          name: "write",
+          description: "Modify data (all GraphQL mutations)",
+          rules: ["POST /graphql GraphQL type:mutation"]
+        },
+        {
+          name: "subscribe",
+          description: "Subscribe to real-time events",
+          rules: ["POST /graphql GraphQL type:subscription"]
+        }
+      ]
     }
   ]
 };
@@ -27113,6 +27142,35 @@ function isFirewallConnectorType(type) {
 function getConnectorFirewall(type) {
   return EXPANDED_CONNECTOR_FIREWALLS[type];
 }
+var DEFAULT_ALLOWED = {
+  slack: slackDefaultAllowed
+};
+function getDefaultFirewallPolicies(type) {
+  const allowed = DEFAULT_ALLOWED[type];
+  if (!allowed) return null;
+  const allowSet = new Set(allowed);
+  const config = getConnectorFirewall(type);
+  const result = {};
+  for (const api of config.apis) {
+    if (api.permissions) {
+      for (const p of api.permissions) {
+        result[p.name] = allowSet.has(p.name) ? "allow" : "deny";
+      }
+    }
+  }
+  return result;
+}
+function resolveFirewallPolicies(stored, connectors) {
+  let resolved = stored;
+  for (const connector of connectors) {
+    if (!isFirewallConnectorType(connector)) continue;
+    if (resolved?.[connector]) continue;
+    const defaults = getDefaultFirewallPolicies(connector);
+    if (!defaults) continue;
+    resolved = { ...resolved, [connector]: defaults };
+  }
+  return resolved;
+}
 
 // ../../packages/core/src/firewall-loader.ts
 var MAX_RESPONSE_SIZE = 128 * 1024;
@@ -31765,6 +31823,7 @@ export {
   resolveSkillRef,
   isFirewallConnectorType,
   getConnectorFirewall,
+  resolveFirewallPolicies,
   findMatchingPermissions,
   getInstructionsStorageName,
   getSkillStorageName,
@@ -31881,4 +31940,4 @@ export {
   parseTime,
   paginate
 };
-//# sourceMappingURL=chunk-3S6PEJ3G.js.map
+//# sourceMappingURL=chunk-52LSZTSN.js.map