@vm0/cli 9.176.0 → 9.176.3

package/{chunk-3WAS5ORK.js → chunk-PK542UZ7.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.176.0",
+    release: "9.176.3",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.176.0",
+    version: "9.176.3",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -95302,6 +95302,7 @@ var zeroBillingStatusContract = c8.router({
     responses: {
       200: billingStatusResponseSchema,
       401: apiErrorSchema,
+      403: apiErrorSchema,
       500: apiErrorSchema
     },
     summary: "Get billing status for current org"
@@ -106669,7 +106670,7 @@ var zeroConnectorSessionsContract = c13.router({
       401: apiErrorSchema,
       403: apiErrorSchema
     },
-    summary: "Create connector session for device flow (zero proxy)"
+    summary: "Create connector session for auth-code handoff"
   }
 });
 var zeroConnectorSessionByIdContract = c13.router({
@@ -115322,6 +115323,16 @@ var GOOGLE_OAUTH_CONNECTOR_TYPES = [
 var GOOGLE_OAUTH_CONNECTOR_TYPE_SET = new Set(GOOGLE_OAUTH_CONNECTOR_TYPES);
 
 // ../../packages/connectors/src/connector-utils.ts
+function getConnectorAuthMethod(type, authMethod) {
+  for (const [methodId, method] of Object.entries(
+    CONNECTOR_TYPES[type].authMethods
+  )) {
+    if (methodId === authMethod) {
+      return method;
+    }
+  }
+  return void 0;
+}
 function connectorAuthMethodValues(type) {
   return Object.values(CONNECTOR_TYPES[type].authMethods);
 }
@@ -115350,23 +115361,21 @@ function authMethodAccessPriority(method) {
       return 1;
   }
 }
-function isConnectorOAuthGrantConfig(method) {
-  switch (method.grant.kind) {
+function connectorGrantScopes(grant) {
+  switch (grant?.kind) {
     case "auth-code":
     case "device-auth":
-      return true;
+      return grant.scopes;
     case "manual":
     case "managed":
-      return false;
+    case void 0:
+      return [];
   }
 }
-function getConnectorOAuthGrantConfig(type) {
-  for (const method of connectorAuthMethodValues(type)) {
-    if (isConnectorOAuthGrantConfig(method)) {
-      return method.grant;
-    }
-  }
-  return void 0;
+function getConnectorAuthMethodGrantScopes(type, authMethod) {
+  return [
+    ...connectorGrantScopes(getConnectorAuthMethod(type, authMethod)?.grant)
+  ];
 }
 function getConnectorGenerationTypes(type) {
   const config4 = CONNECTOR_TYPES[type];
@@ -115428,20 +115437,15 @@ function getConnectorEnvNamesForSecret(secretName) {
   }
   return null;
 }
-function hasRequiredScopes(connectorType, storedScopes) {
-  const scopes = getConnectorOAuthGrantConfig(connectorType)?.scopes;
-  if (!scopes) return true;
-  if (scopes.length === 0) return true;
+function hasRequiredGrantScopes(requiredScopes, storedScopes) {
+  if (requiredScopes.length === 0) return true;
   if (!storedScopes) return false;
   const storedSet = new Set(storedScopes);
-  return scopes.every((s) => {
+  return requiredScopes.every((s) => {
     return storedSet.has(s);
   });
 }
-function getScopeDiff(connectorType, storedScopes) {
-  const currentScopes = [
-    ...getConnectorOAuthGrantConfig(connectorType)?.scopes ?? []
-  ];
+function scopeDiff(currentScopes, storedScopes) {
   const stored = storedScopes ?? [];
   const storedSet = new Set(stored);
   const currentSet = new Set(currentScopes);
@@ -115452,10 +115456,22 @@ function getScopeDiff(connectorType, storedScopes) {
     removedScopes: stored.filter((s) => {
       return !currentSet.has(s);
     }),
-    currentScopes,
+    currentScopes: [...currentScopes],
     storedScopes: stored
   };
 }
+function hasRequiredConnectorAuthMethodScopes(connectorType, authMethod, storedScopes) {
+  return hasRequiredGrantScopes(
+    getConnectorAuthMethodGrantScopes(connectorType, authMethod),
+    storedScopes
+  );
+}
+function getConnectorAuthMethodScopeDiff(connectorType, authMethod, storedScopes) {
+  return scopeDiff(
+    getConnectorAuthMethodGrantScopes(connectorType, authMethod),
+    storedScopes
+  );
+}
 function getConnectorTypeForSecretName(name) {
   const allTypes = CONNECTOR_TYPE_KEYS;
   for (const type of allTypes) {
@@ -132683,8 +132699,8 @@ export {
   getConnectorGenerationTypes,
   getConnectorEnvBindings,
   getConnectorEnvNamesForSecret,
-  hasRequiredScopes,
-  getScopeDiff,
+  hasRequiredConnectorAuthMethodScopes,
+  getConnectorAuthMethodScopeDiff,
   getConnectorTypeForSecretName,
   isFirewallConnectorType,
   getConnectorFirewall,
@@ -132717,4 +132733,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-3WAS5ORK.js.map
+//# sourceMappingURL=chunk-PK542UZ7.js.map