@vm0/cli 9.223.12 → 9.223.14

package/{chunk-27BKNRVK.js → chunk-L4WXUD3D.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   MODEL_PROVIDER_TYPES
-} from "./chunk-FNXZNI6G.js";
+} from "./chunk-MVQMF64X.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -40,4 +40,4 @@ export {
   formatModelProviderRoute,
   formatModelPolicyStatus
 };
-//# sourceMappingURL=chunk-27BKNRVK.js.map
+//# sourceMappingURL=chunk-L4WXUD3D.js.map

package/{chunk-FNXZNI6G.js → chunk-MVQMF64X.js}

@@ -7572,7 +7572,8 @@ var zeroUserPermissionGrantsContract = c17.router({
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
-      404: apiErrorSchema
+      404: apiErrorSchema,
+      500: apiErrorSchema
     },
     summary: "Apply current user's explicit permission grant changes for one connector"
   }
@@ -22851,6 +22852,7 @@ var RESUME_SESSION_HISTORY_MAX_BYTES = 128 * 1024 * 1024;
 var SESSION_HISTORY_ENCODING_IDENTITY = "identity";
 var SESSION_HISTORY_ENCODING_GZIP = "gzip";
 var SESSION_HISTORY_GZIP_MIN_BYTES = 64 * 1024;
+var NETWORK_POLICY_REFRESH_CONNECTOR_REFS_MAX = 256;
 var sessionHistoryEncodingSchema = external_exports.enum([
   SESSION_HISTORY_ENCODING_IDENTITY,
   SESSION_HISTORY_ENCODING_GZIP
@@ -22875,6 +22877,13 @@ var runnerPollTelemetrySchema = external_exports.object({
   pollReason: runnerClaimPollReasonSchema.optional()
 });
 var runnerProfileListSchema = external_exports.array(external_exports.string());
+var networkPolicyRefreshSchema = external_exports.object({
+  nextRefreshAt: external_exports.string().datetime({ offset: true })
+});
+var networkPolicyRefreshesSchema = external_exports.record(
+  external_exports.string(),
+  networkPolicyRefreshSchema
+);
 var runnerGroupSchema = external_exports.string().regex(
   /^[a-z0-9-]+\/[a-z0-9-]+$/,
   "Runner group must be in vm0/<name> format (e.g., vm0/production)"
@@ -23037,6 +23046,9 @@ var storedExecutionContextSchema = external_exports.object({
   firewalls: executionFirewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
   networkPolicies: networkPoliciesSchema.optional(),
+  // Per-connector runtime network policy refresh deadlines. Used by runners to refresh
+  // active sandbox policy when temporary allow grants expire.
+  networkPolicyRefreshes: networkPolicyRefreshesSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: external_exports.array(external_exports.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -23095,6 +23107,9 @@ var executionContextSchema = external_exports.object({
   firewalls: executionFirewallsSchema.optional(),
   // Per-firewall network policies: which permissions are granted + unknownPolicy
   networkPolicies: networkPoliciesSchema.optional(),
+  // Per-connector runtime network policy refresh deadlines. Used by runners to refresh
+  // active sandbox policy when temporary allow grants expire.
+  networkPolicyRefreshes: networkPolicyRefreshesSchema.optional(),
   // Tools to disable in Claude CLI (passed as --disallowed-tools)
   disallowedTools: external_exports.array(external_exports.string()).optional(),
   // Tools to make available in Claude CLI (passed as --tools)
@@ -23137,6 +23152,36 @@ var runnersJobClaimContract = c23.router({
     summary: "Claim a pending job for execution"
   }
 });
+var runnersNetworkPolicyRefreshContract = c23.router({
+  refresh: {
+    method: "POST",
+    path: "/api/runners/runs/:runId/network-policy-refresh",
+    headers: authHeadersSchema,
+    pathParams: external_exports.object({
+      runId: external_exports.uuid()
+    }),
+    body: external_exports.object({
+      connectorRefs: external_exports.array(external_exports.string().min(1).max(64)).min(1).max(NETWORK_POLICY_REFRESH_CONNECTOR_REFS_MAX)
+    }),
+    responses: {
+      200: external_exports.object({
+        refreshes: external_exports.array(
+          external_exports.object({
+            connectorRef: external_exports.string(),
+            networkPolicy: networkPolicySchema,
+            nextRefreshAt: external_exports.string().datetime({ offset: true }).nullable()
+          })
+        )
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Refresh active run network policies"
+  }
+});
 var heartbeatBodySchema = external_exports.object({
   runnerId: external_exports.uuid(),
   runnerName: external_exports.string(),
@@ -28021,6 +28066,7 @@ var gmailRelationshipBackfillStatusSchema = external_exports.enum([
   "idle",
   "pending",
   "running",
+  "stopped",
   "done",
   "failed"
 ]);
@@ -28099,6 +28145,31 @@ var zeroRelationshipsContract = c35.router({
     },
     summary: "Start or restart Gmail relationship memory backfill"
   },
+  gmailStopBackfill: {
+    method: "POST",
+    path: "/api/zero/relationships/gmail/backfill/stop",
+    headers: authHeadersSchema,
+    responses: {
+      200: gmailRelationshipStatusResponseSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Stop the current Gmail relationship memory backfill"
+  },
+  gmailDeleteStoppedBackfill: {
+    method: "DELETE",
+    path: "/api/zero/relationships/gmail/backfill/stopped",
+    headers: authHeadersSchema,
+    responses: {
+      200: gmailRelationshipStatusResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Delete a stopped Gmail relationship memory backfill job"
+  },
   resolve: {
     method: "GET",
     path: "/api/zero/relationships/resolve",
@@ -28517,4 +28588,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-FNXZNI6G.js.map
+//# sourceMappingURL=chunk-MVQMF64X.js.map