@vm0/cli 9.223.11 → 9.223.14

package/{chunk-K42VJ6IQ.js → chunk-L4WXUD3D.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   MODEL_PROVIDER_TYPES
-} from "./chunk-EHSG57FU.js";
+} from "./chunk-MVQMF64X.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -40,4 +40,4 @@ export {
   formatModelProviderRoute,
   formatModelPolicyStatus
 };
-//# sourceMappingURL=chunk-K42VJ6IQ.js.map
+//# sourceMappingURL=chunk-L4WXUD3D.js.map

package/{chunk-EHSG57FU.js → chunk-MVQMF64X.js}

@@ -6642,14 +6642,12 @@ var chatThreadDetailSchema = external_exports.object({
   pinnedAt: external_exports.string().nullable().optional(),
   computerUseHostId: external_exports.string().uuid().nullable().optional(),
   /**
-   * Per-thread selected model pin. Provider route fields are retained for
-   * backwards-compatible responses but model-first sends re-resolve provider
-   * routing from current org policy.
+   * Legacy provider route fields are retained for backwards-compatible
+   * responses; thread model state is exposed through event-driven projections.
    */
   modelProviderId: external_exports.string().nullable().optional(),
   modelProviderType: modelProviderTypeSchema.nullable().optional(),
   modelProviderCredentialScope: modelProviderCredentialScopeSchema.nullable().optional(),
-  selectedModel: external_exports.string().nullable().optional(),
   codexServiceTier: codexServiceTierSchema.nullable().optional(),
   /**
    * ISO timestamp at which the user manually renamed this thread. Null/undefined
@@ -7022,6 +7020,7 @@ var chatMessagesContract = c15.router({
         threadId: external_exports.string().optional(),
         clientThreadId: external_exports.string().uuid().optional(),
         chatThreadEventId: chatThreadEventIdSchema.optional(),
+        modelSelectionEventId: chatThreadEventIdSchema.optional(),
         modelProvider: external_exports.string().optional(),
         /**
          * Per-run model override; persisted on the thread so subsequent runs
@@ -7059,6 +7058,7 @@ var chatMessagesContract = c15.router({
         prompt: external_exports.undefined().optional(),
         clientThreadId: external_exports.undefined().optional(),
         chatThreadEventId: external_exports.undefined().optional(),
+        modelSelectionEventId: external_exports.undefined().optional(),
         modelProvider: external_exports.undefined().optional(),
         modelSelection: external_exports.undefined().optional(),
         runOptions: external_exports.undefined().optional(),
@@ -7078,6 +7078,7 @@ var chatMessagesContract = c15.router({
         prompt: external_exports.undefined().optional(),
         clientThreadId: external_exports.undefined().optional(),
         chatThreadEventId: external_exports.undefined().optional(),
+        modelSelectionEventId: external_exports.undefined().optional(),
         modelProvider: external_exports.undefined().optional(),
         modelSelection: external_exports.undefined().optional(),
         runOptions: external_exports.undefined().optional(),
@@ -7571,7 +7572,8 @@ var zeroUserPermissionGrantsContract = c17.router({
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
-      404: apiErrorSchema
+      404: apiErrorSchema,
+      500: apiErrorSchema
     },
     summary: "Apply current user's explicit permission grant changes for one connector"
   }
@@ -22850,6 +22852,7 @@ var RESUME_SESSION_HISTORY_MAX_BYTES = 128 * 1024 * 1024;
 var SESSION_HISTORY_ENCODING_IDENTITY = "identity";
 var SESSION_HISTORY_ENCODING_GZIP = "gzip";
 var SESSION_HISTORY_GZIP_MIN_BYTES = 64 * 1024;
+var NETWORK_POLICY_REFRESH_CONNECTOR_REFS_MAX = 256;
 var sessionHistoryEncodingSchema = external_exports.enum([
   SESSION_HISTORY_ENCODING_IDENTITY,
   SESSION_HISTORY_ENCODING_GZIP
@@ -22874,6 +22877,13 @@ var runnerPollTelemetrySchema = external_exports.object({
   pollReason: runnerClaimPollReasonSchema.optional()
 });
 var runnerProfileListSchema = external_exports.array(external_exports.string());
+var networkPolicyRefreshSchema = external_exports.object({
+  nextRefreshAt: external_exports.string().datetime({ offset: true })
+});
+var networkPolicyRefreshesSchema = external_exports.record(
+  external_exports.string(),
+  networkPolicyRefreshSchema
+);
 var runnerGroupSchema = external_exports.string().regex(
   /^[a-z0-9-]+\/[a-z0-9-]+$/,
   "Runner group must be in vm0/<name> format (e.g., vm0/production)"
@@ -23036,6 +23046,9 @@ var storedExecutionContextSchema = external_exports.object({
   firewalls: executionFirewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
   networkPolicies: networkPoliciesSchema.optional(),
+  // Per-connector runtime network policy refresh deadlines. Used by runners to refresh
+  // active sandbox policy when temporary allow grants expire.
+  networkPolicyRefreshes: networkPolicyRefreshesSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: external_exports.array(external_exports.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -23094,6 +23107,9 @@ var executionContextSchema = external_exports.object({
   firewalls: executionFirewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
   networkPolicies: networkPoliciesSchema.optional(),
+  // Per-connector runtime network policy refresh deadlines. Used by runners to refresh
+  // active sandbox policy when temporary allow grants expire.
+  networkPolicyRefreshes: networkPolicyRefreshesSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: external_exports.array(external_exports.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -23136,6 +23152,36 @@ var runnersJobClaimContract = c23.router({
     summary: "Claim a pending job for execution"
   }
 });
+var runnersNetworkPolicyRefreshContract = c23.router({
+  refresh: {
+    method: "POST",
+    path: "/api/runners/runs/:runId/network-policy-refresh",
+    headers: authHeadersSchema,
+    pathParams: external_exports.object({
+      runId: external_exports.uuid()
+    }),
+    body: external_exports.object({
+      connectorRefs: external_exports.array(external_exports.string().min(1).max(64)).min(1).max(NETWORK_POLICY_REFRESH_CONNECTOR_REFS_MAX)
+    }),
+    responses: {
+      200: external_exports.object({
+        refreshes: external_exports.array(
+          external_exports.object({
+            connectorRef: external_exports.string(),
+            networkPolicy: networkPolicySchema,
+            nextRefreshAt: external_exports.string().datetime({ offset: true }).nullable()
+          })
+        )
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Refresh active run network policies"
+  }
+});
 var heartbeatBodySchema = external_exports.object({
   runnerId: external_exports.uuid(),
   runnerName: external_exports.string(),
@@ -28020,6 +28066,7 @@ var gmailRelationshipBackfillStatusSchema = external_exports.enum([
   "idle",
   "pending",
   "running",
+  "stopped",
   "done",
   "failed"
 ]);
@@ -28098,6 +28145,31 @@ var zeroRelationshipsContract = c35.router({
     },
     summary: "Start or restart Gmail relationship memory backfill"
   },
+  gmailStopBackfill: {
+    method: "POST",
+    path: "/api/zero/relationships/gmail/backfill/stop",
+    headers: authHeadersSchema,
+    responses: {
+      200: gmailRelationshipStatusResponseSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Stop the current Gmail relationship memory backfill"
+  },
+  gmailDeleteStoppedBackfill: {
+    method: "DELETE",
+    path: "/api/zero/relationships/gmail/backfill/stopped",
+    headers: authHeadersSchema,
+    responses: {
+      200: gmailRelationshipStatusResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Delete a stopped Gmail relationship memory backfill job"
+  },
   resolve: {
     method: "GET",
     path: "/api/zero/relationships/resolve",
@@ -28516,4 +28588,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-EHSG57FU.js.map
+//# sourceMappingURL=chunk-MVQMF64X.js.map