@vm0/cli 9.238.1 → 9.238.3

package/{chunk-JSHFBBDU.js → chunk-NAFRQSTL.js}

@@ -50,7 +50,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.238.1",
+    release: "9.238.3",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -69,7 +69,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.238.1",
+    version: "9.238.3",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -146,4 +146,4 @@ async function configureGlobalProxyFromEnv() {
 export {
   configureGlobalProxyFromEnv
 };
-//# sourceMappingURL=chunk-JSHFBBDU.js.map
+//# sourceMappingURL=chunk-NAFRQSTL.js.map

package/{chunk-YCG6O3ZK.js → chunk-NBAZLPV3.js}

@@ -10,7 +10,7 @@ import {
   splitPathSegments,
   validateAuthBaseUrl,
   validateBaseUrl
-} from "./chunk-37U2ZGBH.js";
+} from "./chunk-XX3HVOWG.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -1298,4 +1298,4 @@ export {
   matchFirewallBaseUrl,
   matchFirewallRequestDecision
 };
-//# sourceMappingURL=chunk-YCG6O3ZK.js.map
+//# sourceMappingURL=chunk-NBAZLPV3.js.map

package/chunk-WPUM3KGN.js

@@ -0,0 +1,133 @@
+#!/usr/bin/env node
+import { createRequire as __createRequire } from "node:module";
+const require = __createRequire(import.meta.url);
+import {
+  UNKNOWN_PERMISSION_GRANT
+} from "./chunk-XX3HVOWG.js";
+import {
+  init_esm_shims
+} from "./chunk-DIRAZ3YX.js";
+
+// ../../packages/connectors/src/firewall-metadata/policy.ts
+init_esm_shims();
+
+// ../../packages/connectors/src/firewall-metadata/policy-resolver.ts
+init_esm_shims();
+function buildMetadataOverrideLookup(metadata) {
+  const overrides = metadata.defaultPolicy.permissionOverrides;
+  const lookup = /* @__PURE__ */ new Map();
+  if (!overrides) {
+    return lookup;
+  }
+  for (const permission of overrides.allow ?? []) {
+    lookup.set(permission, "allow");
+  }
+  for (const permission of overrides.deny ?? []) {
+    lookup.set(permission, "deny");
+  }
+  for (const permission of overrides.ask ?? []) {
+    lookup.set(permission, "ask");
+  }
+  return lookup;
+}
+function getOwnPermissionOverride(overrides, name) {
+  if (!overrides || !Object.prototype.hasOwnProperty.call(overrides, name)) {
+    return void 0;
+  }
+  return overrides[name];
+}
+function createFirewallMetadataPolicyResolver(metadata, overlay) {
+  const metadataOverrides = buildMetadataOverrideLookup(metadata);
+  function metadataPermission(name) {
+    return metadataOverrides.get(name) ?? metadata.defaultPolicy.permissionDefault;
+  }
+  function permission(name) {
+    return getOwnPermissionOverride(overlay?.permissionOverrides, name) ?? overlay?.permissionDefault ?? metadataPermission(name);
+  }
+  return {
+    permission,
+    unknown: () => {
+      return overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy;
+    },
+    list: (permissionNames) => {
+      let first = null;
+      for (const name of permissionNames) {
+        const current = permission(name);
+        if (first === null) {
+          first = current;
+          continue;
+        }
+        if (first !== current) {
+          return "mixed";
+        }
+      }
+      return first ?? "mixed";
+    },
+    isPermissionOverridden: (name) => {
+      return permission(name) !== metadataPermission(name);
+    },
+    isUnknownOverridden: () => {
+      return (overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy) !== metadata.defaultPolicy.unknownPolicy;
+    }
+  };
+}
+
+// ../../packages/connectors/src/firewall-metadata/policy.ts
+function metadataConnectorRef(metadata) {
+  return metadata.connectorRef ?? metadata.type;
+}
+function expandFirewallMetadataDefaultPolicy(metadata) {
+  const resolver = createFirewallMetadataPolicyResolver(metadata);
+  const policies = {};
+  for (const permission of metadata.permissions) {
+    policies[permission.name] = resolver.permission(permission.name);
+  }
+  return {
+    policies,
+    unknownPolicy: resolver.unknown()
+  };
+}
+function findFirewallMetadataPermission(metadata, name) {
+  return metadata.permissions.find((permission) => {
+    return permission.name === name;
+  }) ?? null;
+}
+function resolveFirewallMetadataPolicies(stored, metadata) {
+  let resolved = stored;
+  for (const detail of metadata) {
+    const connectorRef = metadataConnectorRef(detail);
+    const defaults = expandFirewallMetadataDefaultPolicy(detail);
+    const existing = resolved?.[connectorRef];
+    resolved = {
+      ...resolved,
+      [connectorRef]: {
+        policies: { ...defaults.policies, ...existing?.policies },
+        ...existing?.unknownPolicy !== void 0 ? { unknownPolicy: existing.unknownPolicy } : { unknownPolicy: defaults.unknownPolicy }
+      }
+    };
+  }
+  return resolved;
+}
+function permissionGrantsToFirewallPolicies(grants) {
+  const policies = {};
+  for (const grant of grants) {
+    const current = policies[grant.connectorRef] ?? { policies: {} };
+    if (grant.permission === UNKNOWN_PERMISSION_GRANT) {
+      policies[grant.connectorRef] = {
+        ...current,
+        unknownPolicy: grant.action
+      };
+      continue;
+    }
+    current.policies[grant.permission] = grant.action;
+    policies[grant.connectorRef] = current;
+  }
+  return Object.keys(policies).length > 0 ? policies : null;
+}
+
+export {
+  findFirewallMetadataPermission,
+  resolveFirewallMetadataPolicies,
+  permissionGrantsToFirewallPolicies
+};
+//# sourceMappingURL=chunk-WPUM3KGN.js.map

package/chunk-WPUM3KGN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../packages/connectors/src/firewall-metadata/policy.ts","../../../packages/connectors/src/firewall-metadata/policy-resolver.ts"],"sourcesContent":["import {\n  UNKNOWN_PERMISSION_GRANT,\n  type FirewallPolicies,\n  type FirewallPolicy,\n  type FirewallPolicyValue,\n} from \"../firewall-types\";\nimport { createFirewallMetadataPolicyResolver } from \"./policy-resolver\";\n\nexport type {\n  FirewallMetadataPolicyListState,\n  FirewallMetadataPolicyOverlay,\n  FirewallMetadataPolicyResolver,\n} from \"./policy-resolver\";\n\nexport interface FirewallPermissionPolicyMetadataPermission {\n  readonly name: string;\n  readonly description?: string;\n}\n\nexport interface FirewallPermissionPolicyCategoryMetadata {\n  readonly categories: Readonly<Record<string, string>>;\n  readonly displayOrder: readonly string[];\n}\n\nexport type FirewallPermissionPolicyDefaultOverrides = Readonly<\n  Partial<Record<FirewallPolicyValue, readonly string[]>>\n>;\n\nexport interface FirewallPermissionPolicyDefaultMetadata {\n  readonly permissionDefault: FirewallPolicyValue;\n  readonly permissionOverrides?: FirewallPermissionPolicyDefaultOverrides;\n  readonly unknownPolicy: FirewallPolicyValue;\n}\n\ninterface FirewallPermissionPolicyMetadataBase {\n  readonly label: string;\n  readonly permissionCount: number;\n  readonly permissions: readonly FirewallPermissionPolicyMetadataPermission[];\n  readonly categories?: FirewallPermissionPolicyCategoryMetadata | null;\n  readonly defaultPolicy: FirewallPermissionPolicyDefaultMetadata;\n}\n\nexport type FirewallPermissionPolicyMetadata =\n  FirewallPermissionPolicyMetadataBase &\n    (\n      | { readonly connectorRef: string; readonly type?: string }\n      | { readonly connectorRef?: undefined; readonly type: string }\n    );\n\nexport interface FirewallMetadataPermissionGroup<T extends { name: string }> {\n  readonly category: string;\n  readonly permissions: T[];\n}\n\nexport type FirewallPermissionGrantAction = Extract<\n  FirewallPolicyValue,\n  \"allow\" | \"deny\"\n>;\n\nexport interface FirewallPermissionGrant {\n  readonly connectorRef: string;\n  readonly permission: string;\n  readonly action: FirewallPermissionGrantAction;\n}\n\nfunction metadataConnectorRef(\n  metadata: FirewallPermissionPolicyMetadata,\n): string {\n  return metadata.connectorRef ?? metadata.type;\n}\n\nexport { createFirewallMetadataPolicyResolver };\n\nexport function expandFirewallMetadataDefaultPolicy(\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallPolicy {\n  const resolver = createFirewallMetadataPolicyResolver(metadata);\n  const policies: Record<string, FirewallPolicyValue> = {};\n\n  for (const permission of metadata.permissions) {\n    policies[permission.name] = resolver.permission(permission.name);\n  }\n\n  return {\n    policies,\n    unknownPolicy: resolver.unknown(),\n  };\n}\n\nexport function findFirewallMetadataPermission(\n  metadata: FirewallPermissionPolicyMetadata,\n  name: string,\n): FirewallPermissionPolicyMetadata[\"permissions\"][number] | null {\n  return (\n    metadata.permissions.find((permission) => {\n      return permission.name === name;\n    }) ?? null\n  );\n}\n\nexport function groupFirewallMetadataPermissionsByCategory<\n  T extends { name: string },\n>(\n  permissions: readonly T[],\n  metadata: FirewallPermissionPolicyMetadata,\n): FirewallMetadataPermissionGroup<T>[] | null {\n  if (!metadata.categories) {\n    return null;\n  }\n\n  const grouped = new Map<string, T[]>();\n  for (const category of metadata.categories.displayOrder) {\n    grouped.set(category, []);\n  }\n\n  for (const permission of permissions) {\n    const category = metadata.categories.categories[permission.name];\n    if (!category) {\n      continue;\n    }\n    grouped.get(category)?.push(permission);\n  }\n\n  return [...grouped.entries()]\n    .filter(([, groupPermissions]) => {\n      return groupPermissions.length > 0;\n    })\n    .map(([category, groupPermissions]) => {\n      return { category, permissions: groupPermissions };\n    });\n}\n\nexport function resolveFirewallMetadataPolicies(\n  stored: FirewallPolicies | null,\n  metadata: readonly FirewallPermissionPolicyMetadata[],\n): FirewallPolicies | null {\n  let resolved: FirewallPolicies | null = stored;\n  for (const detail of metadata) {\n    const connectorRef = metadataConnectorRef(detail);\n    const defaults = expandFirewallMetadataDefaultPolicy(detail);\n    const existing = resolved?.[connectorRef];\n    resolved = {\n      ...resolved,\n      [connectorRef]: {\n        policies: { ...defaults.policies, ...existing?.policies },\n        ...(existing?.unknownPolicy !== undefined\n          ? { unknownPolicy: existing.unknownPolicy }\n          : { unknownPolicy: defaults.unknownPolicy }),\n      },\n    };\n  }\n  return resolved;\n}\n\nexport function permissionGrantsToFirewallPolicies(\n  grants: readonly FirewallPermissionGrant[],\n): FirewallPolicies | null {\n  const policies: FirewallPolicies = {};\n  for (const grant of grants) {\n    const current = policies[grant.connectorRef] ?? { policies: {} };\n    if (grant.permission === UNKNOWN_PERMISSION_GRANT) {\n      policies[grant.connectorRef] = {\n        ...current,\n        unknownPolicy: grant.action,\n      };\n      continue;\n    }\n    current.policies[grant.permission] = grant.action;\n    policies[grant.connectorRef] = current;\n  }\n  return Object.keys(policies).length > 0 ? policies : null;\n}\n","import type { FirewallPolicyValue } from \"../firewall-types\";\n\ninterface FirewallMetadataPolicyResolverMetadata {\n  readonly defaultPolicy: {\n    readonly permissionDefault: FirewallPolicyValue;\n    readonly permissionOverrides?: Readonly<\n      Partial<Record<FirewallPolicyValue, readonly string[]>>\n    >;\n    readonly unknownPolicy: FirewallPolicyValue;\n  };\n}\n\nexport interface FirewallMetadataPolicyOverlay {\n  readonly permissionDefault?: FirewallPolicyValue;\n  readonly permissionOverrides?: Readonly<Record<string, FirewallPolicyValue>>;\n  readonly unknownPolicy?: FirewallPolicyValue;\n}\n\nexport type FirewallMetadataPolicyListState = FirewallPolicyValue | \"mixed\";\n\n/**\n * Resolves generated metadata defaults with an optional sparse policy overlay.\n * Permission name validation belongs to callers; unknown endpoints use unknown().\n */\nexport interface FirewallMetadataPolicyResolver {\n  permission(name: string): FirewallPolicyValue;\n  unknown(): FirewallPolicyValue;\n  list(permissionNames: readonly string[]): FirewallMetadataPolicyListState;\n  isPermissionOverridden(name: string): boolean;\n  isUnknownOverridden(): boolean;\n}\n\nfunction buildMetadataOverrideLookup(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n): ReadonlyMap<string, FirewallPolicyValue> {\n  const overrides = metadata.defaultPolicy.permissionOverrides;\n  const lookup = new Map<string, FirewallPolicyValue>();\n  if (!overrides) {\n    return lookup;\n  }\n\n  for (const permission of overrides.allow ?? []) {\n    lookup.set(permission, \"allow\");\n  }\n  for (const permission of overrides.deny ?? []) {\n    lookup.set(permission, \"deny\");\n  }\n  for (const permission of overrides.ask ?? []) {\n    lookup.set(permission, \"ask\");\n  }\n\n  return lookup;\n}\n\nfunction getOwnPermissionOverride(\n  overrides: Readonly<Record<string, FirewallPolicyValue>> | undefined,\n  name: string,\n): FirewallPolicyValue | undefined {\n  if (!overrides || !Object.prototype.hasOwnProperty.call(overrides, name)) {\n    return undefined;\n  }\n  return overrides[name];\n}\n\nexport function createFirewallMetadataPolicyResolver(\n  metadata: FirewallMetadataPolicyResolverMetadata,\n  overlay?: FirewallMetadataPolicyOverlay,\n): FirewallMetadataPolicyResolver {\n  const metadataOverrides = buildMetadataOverrideLookup(metadata);\n\n  function metadataPermission(name: string): FirewallPolicyValue {\n    return (\n      metadataOverrides.get(name) ?? metadata.defaultPolicy.permissionDefault\n    );\n  }\n\n  function permission(name: string): FirewallPolicyValue {\n    return (\n      getOwnPermissionOverride(overlay?.permissionOverrides, name) ??\n      overlay?.permissionDefault ??\n      metadataPermission(name)\n    );\n  }\n\n  return {\n    permission,\n    unknown: () => {\n      return overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy;\n    },\n    list: (permissionNames) => {\n      let first: FirewallPolicyValue | null = null;\n      for (const name of permissionNames) {\n        const current = permission(name);\n        if (first === null) {\n          first = current;\n          continue;\n        }\n        if (first !== current) {\n          return \"mixed\";\n        }\n      }\n      return first ?? \"mixed\";\n    },\n    isPermissionOverridden: (name) => {\n      return permission(name) !== metadataPermission(name);\n    },\n    isUnknownOverridden: () => {\n      return (\n        (overlay?.unknownPolicy ?? metadata.defaultPolicy.unknownPolicy) !==\n        metadata.defaultPolicy.unknownPolicy\n      );\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;AAAA;;;ACAA;AAgCA,SAAS,4BACP,UAC0C;AAC1C,QAAM,YAAY,SAAS,cAAc;AACzC,QAAM,SAAS,oBAAI,IAAiC;AACpD,MAAI,CAAC,WAAW;AACd,WAAO;AAAA,EACT;AAEA,aAAW,cAAc,UAAU,SAAS,CAAC,GAAG;AAC9C,WAAO,IAAI,YAAY,OAAO;AAAA,EAChC;AACA,aAAW,cAAc,UAAU,QAAQ,CAAC,GAAG;AAC7C,WAAO,IAAI,YAAY,MAAM;AAAA,EAC/B;AACA,aAAW,cAAc,UAAU,OAAO,CAAC,GAAG;AAC5C,WAAO,IAAI,YAAY,KAAK;AAAA,EAC9B;AAEA,SAAO;AACT;AAEA,SAAS,yBACP,WACA,MACiC;AACjC,MAAI,CAAC,aAAa,CAAC,OAAO,UAAU,eAAe,KAAK,WAAW,IAAI,GAAG;AACxE,WAAO;AAAA,EACT;AACA,SAAO,UAAU,IAAI;AACvB;AAEO,SAAS,qCACd,UACA,SACgC;AAChC,QAAM,oBAAoB,4BAA4B,QAAQ;AAE9D,WAAS,mBAAmB,MAAmC;AAC7D,WACE,kBAAkB,IAAI,IAAI,KAAK,SAAS,cAAc;AAAA,EAE1D;AAEA,WAAS,WAAW,MAAmC;AACrD,WACE,yBAAyB,SAAS,qBAAqB,IAAI,KAC3D,SAAS,qBACT,mBAAmB,IAAI;AAAA,EAE3B;AAEA,SAAO;AAAA,IACL;AAAA,IACA,SAAS,MAAM;AACb,aAAO,SAAS,iBAAiB,SAAS,cAAc;AAAA,IAC1D;AAAA,IACA,MAAM,CAAC,oBAAoB;AACzB,UAAI,QAAoC;AACxC,iBAAW,QAAQ,iBAAiB;AAClC,cAAM,UAAU,WAAW,IAAI;AAC/B,YAAI,UAAU,MAAM;AAClB,kBAAQ;AACR;AAAA,QACF;AACA,YAAI,UAAU,SAAS;AACrB,iBAAO;AAAA,QACT;AAAA,MACF;AACA,aAAO,SAAS;AAAA,IAClB;AAAA,IACA,wBAAwB,CAAC,SAAS;AAChC,aAAO,WAAW,IAAI,MAAM,mBAAmB,IAAI;AAAA,IACrD;AAAA,IACA,qBAAqB,MAAM;AACzB,cACG,SAAS,iBAAiB,SAAS,cAAc,mBAClD,SAAS,cAAc;AAAA,IAE3B;AAAA,EACF;AACF;;;ADhDA,SAAS,qBACP,UACQ;AACR,SAAO,SAAS,gBAAgB,SAAS;AAC3C;AAIO,SAAS,oCACd,UACgB;AAChB,QAAM,WAAW,qCAAqC,QAAQ;AAC9D,QAAM,WAAgD,CAAC;AAEvD,aAAW,cAAc,SAAS,aAAa;AAC7C,aAAS,WAAW,IAAI,IAAI,SAAS,WAAW,WAAW,IAAI;AAAA,EACjE;AAEA,SAAO;AAAA,IACL;AAAA,IACA,eAAe,SAAS,QAAQ;AAAA,EAClC;AACF;AAEO,SAAS,+BACd,UACA,MACgE;AAChE,SACE,SAAS,YAAY,KAAK,CAAC,eAAe;AACxC,WAAO,WAAW,SAAS;AAAA,EAC7B,CAAC,KAAK;AAEV;AAkCO,SAAS,gCACd,QACA,UACyB;AACzB,MAAI,WAAoC;AACxC,aAAW,UAAU,UAAU;AAC7B,UAAM,eAAe,qBAAqB,MAAM;AAChD,UAAM,WAAW,oCAAoC,MAAM;AAC3D,UAAM,WAAW,WAAW,YAAY;AACxC,eAAW;AAAA,MACT,GAAG;AAAA,MACH,CAAC,YAAY,GAAG;AAAA,QACd,UAAU,EAAE,GAAG,SAAS,UAAU,GAAG,UAAU,SAAS;AAAA,QACxD,GAAI,UAAU,kBAAkB,SAC5B,EAAE,eAAe,SAAS,cAAc,IACxC,EAAE,eAAe,SAAS,cAAc;AAAA,MAC9C;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;AAEO,SAAS,mCACd,QACyB;AACzB,QAAM,WAA6B,CAAC;AACpC,aAAW,SAAS,QAAQ;AAC1B,UAAM,UAAU,SAAS,MAAM,YAAY,KAAK,EAAE,UAAU,CAAC,EAAE;AAC/D,QAAI,MAAM,eAAe,0BAA0B;AACjD,eAAS,MAAM,YAAY,IAAI;AAAA,QAC7B,GAAG;AAAA,QACH,eAAe,MAAM;AAAA,MACvB;AACA;AAAA,IACF;AACA,YAAQ,SAAS,MAAM,UAAU,IAAI,MAAM;AAC3C,aAAS,MAAM,YAAY,IAAI;AAAA,EACjC;AACA,SAAO,OAAO,KAAK,QAAQ,EAAE,SAAS,IAAI,WAAW;AACvD;","names":[]}

package/{chunk-37U2ZGBH.js → chunk-XX3HVOWG.js}

@@ -14,7 +14,7 @@ import {
   headersWithCliClientHeaders,
   initClient,
   initContract
-} from "./chunk-VBI53K3Q.js";
+} from "./chunk-22VWTDX6.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -2524,6 +2524,7 @@ var zeroHostContract = c11.router({
       401: apiErrorSchema,
       402: apiErrorSchema,
       403: apiErrorSchema,
+      503: apiErrorSchema,
       500: apiErrorSchema
     },
     summary: "Create an edited HTML draft from DOM comments"
@@ -5549,38 +5550,6 @@ var chatThreadUnreadAgentsSchema = external_exports.object({
 });
 var chatThreadEventIdSchema = external_exports.string().uuid();
 var codexServiceTierSchema = external_exports.enum(["fast"]);
-var chatThreadListItemSchema = external_exports.object({
-  id: external_exports.string(),
-  title: external_exports.string().nullable(),
-  /**
-   * Owning agent snapshot emitted by the server for every list row.
-   */
-  agent: external_exports.object({
-    id: external_exports.string(),
-    avatarUrl: external_exports.string().nullable()
-  }),
-  createdAt: external_exports.string(),
-  updatedAt: external_exports.string(),
-  /**
-   * True when the thread has at least one non-terminal run
-   * (queued / pending / running). Drives the sidebar running indicator,
-   * which is mutually exclusive with the unread dot.
-   */
-  running: external_exports.boolean(),
-  /**
-   * ISO timestamp at which the user pinned this thread. Null/undefined means
-   * unpinned. Pinned threads sort above unpinned in the sidebar; both groups
-   * keep recency order. Optional for back-compat with fixtures that predate
-   * the field.
-   */
-  pinnedAt: external_exports.string().nullable().optional(),
-  /**
-   * ISO timestamp at which the user manually renamed this thread. Null/undefined
-   * means never renamed. When set, automated title generation is suppressed.
-   * Optional for back-compat with fixtures that predate the field.
-   */
-  renamedAt: external_exports.string().nullable().optional()
-});
 var chatThreadSnapshotProjectionSchema = external_exports.object({
   id: external_exports.string().uuid(),
   agentId: external_exports.string().uuid(),
@@ -6437,7 +6406,7 @@ var artifactsContract = c15.router({
       401: apiErrorSchema,
       403: apiErrorSchema
     },
-    summary: "List generated artifacts for the caller's current organization (keyset-paginated)"
+    summary: "List artifacts for the caller's current organization (keyset-paginated)"
   },
   favorite: {
     method: "POST",
@@ -6451,7 +6420,7 @@ var artifactsContract = c15.router({
       403: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Favorite a generated artifact for the caller"
+    summary: "Favorite an artifact for the caller"
   },
   unfavorite: {
     method: "POST",
@@ -6465,7 +6434,7 @@ var artifactsContract = c15.router({
       403: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Remove a generated artifact favorite for the caller"
+    summary: "Remove an artifact favorite for the caller"
   }
 });
 
@@ -7817,6 +7786,28 @@ async function listZeroConnectorCatalogStatus() {
   }
   handleError(result, "Failed to list connector catalog status");
 }
+async function getZeroConnectorCatalogPermissions(connectorRef) {
+  const config = await getClientConfig();
+  const client = initClient(zeroConnectorCatalogContract, config);
+  const result = await client.permissions({
+    params: { connectorRef }
+  });
+  if (result.status === 200) {
+    if (result.body.permissions.connectorRef !== connectorRef) {
+      throw new Error(
+        `Permission metadata connectorRef mismatch: expected ${connectorRef}, got ${result.body.permissions.connectorRef}`
+      );
+    }
+    return result.body.permissions;
+  }
+  if (result.status === 404) {
+    return null;
+  }
+  handleError(
+    result,
+    `Failed to get connector permission metadata for "${connectorRef}"`
+  );
+}
 async function getZeroConnector(type) {
   const config = await getClientConfig();
   const client = initClient(zeroConnectorsByTypeContract, config);
@@ -12160,12 +12151,12 @@ var zeroWorkflowDetailResponseSchema = zeroWorkflowSummarySchema.extend({
 var zeroWorkflowListResponseSchema = external_exports.array(
   zeroWorkflowSummarySchema
 );
-var zeroWorkflowTriggerAutomationEntrySchema = external_exports.object({
+var zeroWorkflowAutomationEntrySchema = external_exports.object({
   workflow: zeroWorkflowSummarySchema,
   trigger: zeroWorkflowTriggerSummarySchema
 });
-var zeroWorkflowTriggerAutomationListResponseSchema = external_exports.array(
-  zeroWorkflowTriggerAutomationEntrySchema
+var zeroWorkflowAutomationListResponseSchema = external_exports.array(
+  zeroWorkflowAutomationEntrySchema
 );
 var zeroWorkflowCreateRequestSchema = external_exports.object({
   agentId: external_exports.string().uuid(),
@@ -12401,7 +12392,7 @@ var zeroWorkflowTriggersContract = c33.router({
     path: "/api/zero/workflow-triggers",
     headers: authHeadersSchema,
     responses: {
-      200: zeroWorkflowTriggerAutomationListResponseSchema,
+      200: zeroWorkflowAutomationListResponseSchema,
       401: apiErrorSchema,
       403: apiErrorSchema
     },
@@ -15292,6 +15283,7 @@ export {
   searchZeroConnectors,
   listZeroConnectorCatalog,
   listZeroConnectorCatalogStatus,
+  getZeroConnectorCatalogPermissions,
   getZeroConnector,
   connectZeroConnectorManualGrant,
   listZeroCustomConnectors,
@@ -15361,4 +15353,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-37U2ZGBH.js.map
+//# sourceMappingURL=chunk-XX3HVOWG.js.map