@vm0/cli 9.265.0 → 9.267.0

package/{chunk-K36BESR5.js → chunk-LYI45KHY.js}

@@ -21,7 +21,7 @@ import {
   updateOrgModelPoliciesRequestSchema,
   upsertModelProviderRequestSchema,
   upsertModelProviderResponseSchema
-} from "./chunk-HYSVCVEH.js";
+} from "./chunk-5TMLTATP.js";
 import {
   __commonJS,
   __esm,
@@ -2008,19 +2008,12 @@ var CHAT_EVENT_TYPES = [
   "run.completed",
   "run.failed",
   "run.cancelled",
-  "queue.automation_paused",
-  "queue.automation_resumed",
   "control.interrupt",
   "control.revoke",
   "goal.changed",
   "usage.recorded"
 ];
 var chatEventTypeSchema = external_exports.enum(CHAT_EVENT_TYPES);
-var MATERIALIZED_CHAT_EVENT_TYPES = CHAT_EVENT_TYPES.filter(
-  (eventType) => {
-    return eventType !== "input.goal";
-  }
-);
 function revokedChatEventIds(events) {
   return new Set(
     events.flatMap((event) => {
@@ -3689,6 +3682,9 @@ var workflowSnapshotSchema = external_exports.object({
   automationId: external_exports.string().uuid().optional(),
   triggerBrief: external_exports.string().nullable().optional()
 });
+var goalSnapshotSchema = external_exports.object({
+  objectiveBrief: external_exports.string().min(1)
+});
 var chatEventBaseSchema = external_exports.object({
   id: external_exports.string(),
   threadId: external_exports.string(),
@@ -3700,9 +3696,7 @@ var chatEventBaseSchema = external_exports.object({
   feishuChatOpenUrl: external_exports.string().url().optional(),
   isGoalRun: external_exports.boolean().optional(),
   runEventId: external_exports.string().optional(),
-  goalSnapshot: external_exports.object({
-    objectiveBrief: external_exports.string().min(1)
-  }).optional(),
+  goalSnapshot: goalSnapshotSchema.optional(),
   revokesEventId: external_exports.string().optional(),
   /** Server-assigned strict position within the chat thread. */
   seqId: external_exports.number().int().positive(),
@@ -3738,6 +3732,23 @@ var inputAutomationEventSchema = chatEventBaseSchema.extend({
   triggerSource: triggerSourceSchema,
   triggerBrief: external_exports.string().nullable()
 }).strict();
+var inputGoalEventSchema = chatEventBaseSchema.extend({
+  eventType: external_exports.literal("input.goal"),
+  content: external_exports.null(),
+  // Queue association stays server-side; the public event preserves only
+  // the non-sensitive goal snapshot and stream ordering contract.
+  runId: external_exports.never().optional(),
+  runGroupId: external_exports.never().optional(),
+  triggerSource: external_exports.never().optional(),
+  slackMessagePermalink: external_exports.never().optional(),
+  feishuChatOpenUrl: external_exports.never().optional(),
+  isGoalRun: external_exports.never().optional(),
+  runEventId: external_exports.never().optional(),
+  goalSnapshot: goalSnapshotSchema,
+  revokesEventId: external_exports.never().optional(),
+  sequenceNumber: external_exports.never().optional(),
+  workflowSnapshot: external_exports.never().optional()
+}).strict();
 var inputRejectedEventSchema = chatEventBaseSchema.extend({
   eventType: external_exports.literal("input.rejected"),
   content: external_exports.null(),
@@ -3795,12 +3806,12 @@ var runCancelledEventSchema = chatEventBaseSchema.extend({
   error: external_exports.string().optional(),
   runLifecycleEvent: external_exports.literal("cancelled")
 }).strict();
-var queueAutomationPausedEventSchema = chatEventBaseSchema.extend({
+var legacyQueueAutomationPausedEventSchema = chatEventBaseSchema.extend({
   eventType: external_exports.literal("queue.automation_paused"),
   content: external_exports.null(),
   pauseReason: external_exports.string().nullable()
 }).strict();
-var queueAutomationResumedEventSchema = chatEventBaseSchema.extend({
+var legacyQueueAutomationResumedEventSchema = chatEventBaseSchema.extend({
   eventType: external_exports.literal("queue.automation_resumed"),
   content: external_exports.null()
 }).strict();
@@ -3828,6 +3839,7 @@ var usageRecordedEventSchema = chatEventBaseSchema.extend({
 var chatEventSchema = external_exports.discriminatedUnion("eventType", [
   inputPromptEventSchema,
   inputAutomationEventSchema,
+  inputGoalEventSchema,
   inputRejectedEventSchema,
   outputMessageEventSchema,
   outputErrorEventSchema,
@@ -3838,17 +3850,19 @@ var chatEventSchema = external_exports.discriminatedUnion("eventType", [
   runCompletedEventSchema,
   runFailedEventSchema,
   runCancelledEventSchema,
-  queueAutomationPausedEventSchema,
-  queueAutomationResumedEventSchema,
   controlInterruptEventSchema,
   controlRevokeEventSchema,
   goalChangedEventSchema,
   usageRecordedEventSchema
 ]);
-var chatEventResponseSchema = chatEventSchema;
-if (MATERIALIZED_CHAT_EVENT_TYPES.length !== chatEventSchema.options.length || !chatEventTypeSchema.options.includes("input.goal")) {
+var chatEventResponseSchema = external_exports.discriminatedUnion("eventType", [
+  ...chatEventSchema.options,
+  legacyQueueAutomationPausedEventSchema,
+  legacyQueueAutomationResumedEventSchema
+]);
+if (CHAT_EVENT_TYPES.length !== chatEventSchema.options.length) {
   throw new Error(
-    "ChatEvent schema must cover every materialized event catalog leaf"
+    "ChatEvent schema must cover every registered event catalog leaf"
   );
 }
 var chatThreadDetailSchema = external_exports.object({
@@ -4562,6 +4576,9 @@ var artifactsContract = c13.router({
     summary: "Delete a resumable image artifact edit snapshot for the caller"
   }
 });
+function isCanonicalChatEventResponse(event) {
+  return event.eventType !== "queue.automation_paused" && event.eventType !== "queue.automation_resumed";
+}
 
 // ../../packages/api-contracts/src/contracts/zero-agents.ts
 var c14 = initContract();
@@ -4794,8 +4811,9 @@ var agentPermissionGrantScopeSchema = external_exports.object({
 });
 var userPermissionGrantScopeSchema = agentPermissionGrantScopeSchema;
 var userPermissionGrantResponseBaseSchema = external_exports.object({
-  // TODO(#23619): Rename permission-grant wire fields with the DB migration.
+  // TODO(#23821): Remove this legacy wire field after clients migrate.
   connectorRef: connectorSlugSchema,
+  connectorSlug: connectorSlugSchema.optional(),
   permission: permissionSchema,
   action: userPermissionGrantActionSchema,
   expiresAt: external_exports.string().nullable(),
@@ -4819,14 +4837,36 @@ var applyUserPermissionGrantSchema = external_exports.discriminatedUnion("action
     expiresIn: external_exports.never().optional()
   })
 ]);
-var applyUserPermissionGrantsRequestSchema = userPermissionGrantScopeSchema.and(
-  external_exports.object({
-    // TODO(#23619): Rename with the response and persisted grant field.
-    connectorRef: connectorSlugSchema,
-    mode: userPermissionGrantApplyModeSchema,
-    grants: external_exports.array(applyUserPermissionGrantSchema)
-  })
-);
+var applyUserPermissionGrantsRequestSchema = external_exports.object({
+  agentId: agentIdSchema,
+  // TODO(#23821): Remove this legacy wire field after clients migrate.
+  connectorRef: connectorSlugSchema.optional(),
+  connectorSlug: connectorSlugSchema.optional(),
+  mode: userPermissionGrantApplyModeSchema,
+  grants: external_exports.array(applyUserPermissionGrantSchema)
+}).superRefine((request, ctx) => {
+  if (request.connectorRef === void 0 && request.connectorSlug === void 0) {
+    ctx.addIssue({
+      code: "custom",
+      message: "connectorRef or connectorSlug is required",
+      path: ["connectorSlug"]
+    });
+  }
+  if (request.connectorRef !== void 0 && request.connectorSlug !== void 0 && request.connectorRef !== request.connectorSlug) {
+    ctx.addIssue({
+      code: "custom",
+      message: "connectorRef and connectorSlug must match",
+      path: ["connectorSlug"]
+    });
+  }
+}).transform(({ connectorRef, connectorSlug, ...request }) => {
+  const normalizedConnectorSlug = connectorSlug ?? connectorRef ?? "";
+  return {
+    ...request,
+    connectorRef: normalizedConnectorSlug,
+    connectorSlug: normalizedConnectorSlug
+  };
+});
 var zeroUserPermissionGrantsContract = c15.router({
   list: {
     method: "GET",
@@ -4863,14 +4903,43 @@ var zeroUserPermissionGrantsContract = c15.router({
 init_esm_shims();
 var c16 = initContract();
 var userConnectorEnabledSlugsSchema = external_exports.object({
-  // TODO(#23619): Rename this user-connector wire field after clients migrate.
-  enabledTypes: external_exports.array(connectorSlugSchema)
+  // TODO(#23821): Remove this legacy wire field after clients migrate.
+  enabledTypes: external_exports.array(connectorSlugSchema),
+  enabledConnectorSlugs: external_exports.array(connectorSlugSchema).optional()
 });
-var userConnectorUpdateSchema = userConnectorEnabledSlugsSchema.extend(
-  {
-    operation: external_exports.enum(["replace", "add", "remove"]).optional()
+function sameConnectorSlugs(left, right) {
+  return left.length === right.length && left.every((value, index) => {
+    return value === right[index];
+  });
+}
+var userConnectorUpdateSchema = external_exports.object({
+  // TODO(#23821): Remove this legacy wire field after clients migrate.
+  enabledTypes: external_exports.array(connectorSlugSchema).optional(),
+  enabledConnectorSlugs: external_exports.array(connectorSlugSchema).optional(),
+  operation: external_exports.enum(["replace", "add", "remove"]).optional()
+}).superRefine((request, ctx) => {
+  if (request.enabledTypes === void 0 && request.enabledConnectorSlugs === void 0) {
+    ctx.addIssue({
+      code: "custom",
+      message: "enabledTypes or enabledConnectorSlugs is required",
+      path: ["enabledConnectorSlugs"]
+    });
   }
-);
+  if (request.enabledTypes !== void 0 && request.enabledConnectorSlugs !== void 0 && !sameConnectorSlugs(request.enabledTypes, request.enabledConnectorSlugs)) {
+    ctx.addIssue({
+      code: "custom",
+      message: "enabledTypes and enabledConnectorSlugs must match",
+      path: ["enabledConnectorSlugs"]
+    });
+  }
+}).transform(({ enabledTypes, enabledConnectorSlugs, ...request }) => {
+  const normalizedConnectorSlugs = enabledConnectorSlugs ?? enabledTypes ?? [];
+  return {
+    ...request,
+    enabledTypes: normalizedConnectorSlugs,
+    enabledConnectorSlugs: normalizedConnectorSlugs
+  };
+});
 var zeroUserConnectorsContract = c16.router({
   get: {
     method: "GET",
@@ -5104,8 +5173,9 @@ var connectorReconnectReasonSchema = external_exports.enum([
 ]);
 var connectorResponseSchema = external_exports.object({
   id: external_exports.uuid(),
-  // TODO(#23619): Rename this legacy wire field after API clients migrate.
+  // TODO(#23821): Remove this legacy wire field after API clients migrate.
   type: connectorSlugSchema,
+  slug: connectorSlugSchema.optional(),
   authMethod: connectorAuthMethodIdSchema,
   externalId: external_exports.string().nullable(),
   externalUsername: external_exports.string().nullable(),
@@ -5135,8 +5205,9 @@ var connectorProvidedBindingSourceSchema = external_exports.discriminatedUnion(
   ]
 );
 var connectorProvidedBindingSchema = external_exports.object({
-  // TODO(#23619): Rename this legacy wire field after API clients migrate.
+  // TODO(#23821): Remove this legacy wire field after API clients migrate.
   connectorType: connectorSlugSchema,
+  connectorSlug: connectorSlugSchema.optional(),
   authMethod: connectorAuthMethodIdSchema,
   namespace: connectorProvidedBindingNamespaceSchema,
   name: external_exports.string(),
@@ -5145,8 +5216,9 @@ var connectorProvidedBindingSchema = external_exports.object({
 });
 var connectorListResponseSchema = external_exports.object({
   connectors: external_exports.array(connectorResponseSchema),
-  // TODO(#23619): Rename this legacy wire field after API clients migrate.
+  // TODO(#23821): Remove this legacy wire field after API clients migrate.
   configuredTypes: external_exports.array(connectorSlugSchema),
+  configuredConnectorSlugs: external_exports.array(connectorSlugSchema).optional(),
   connectorProvidedBindings: external_exports.array(connectorProvidedBindingSchema).default([])
 });
 var scopeDiffResponseSchema = external_exports.object({
@@ -5161,8 +5233,9 @@ var connectorOauthStartResponseSchema = external_exports.object({
 var connectorOauthDeviceAuthSessionStartResponseSchema = external_exports.object({
   sessionId: external_exports.uuid(),
   sessionToken: external_exports.string(),
-  // TODO(#23619): Rename this legacy wire field after API clients migrate.
+  // TODO(#23821): Remove this legacy wire field after API clients migrate.
   type: connectorSlugSchema,
+  connectorSlug: connectorSlugSchema.optional(),
   status: external_exports.literal("pending"),
   userCode: external_exports.string(),
   verificationUri: external_exports.string(),
@@ -5201,8 +5274,9 @@ var connectorOauthDeviceAuthSessionPollResponseSchema = external_exports.discrim
 var connectorExternalCodeSessionStartResponseSchema = external_exports.object({
   sessionId: external_exports.uuid(),
   sessionToken: external_exports.string(),
-  // TODO(#23619): Rename this legacy wire field after API clients migrate.
+  // TODO(#23821): Remove this legacy wire field after API clients migrate.
   type: connectorSlugSchema,
+  connectorSlug: connectorSlugSchema.optional(),
   status: external_exports.literal("pending"),
   authorizationUrl: external_exports.string(),
   expiresIn: external_exports.number()
@@ -5235,9 +5309,9 @@ var zeroConnectorsMainContract = c18.router({
 var zeroConnectorsBySlugContract = c18.router({
   get: {
     method: "GET",
-    path: "/api/zero/connectors/:type",
+    path: "/api/zero/connectors/:connectorSlug",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     responses: {
       200: connectorResponseSchema,
       401: apiErrorSchema,
@@ -5248,9 +5322,9 @@ var zeroConnectorsBySlugContract = c18.router({
   },
   delete: {
     method: "DELETE",
-    path: "/api/zero/connectors/:type",
+    path: "/api/zero/connectors/:connectorSlug",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     responses: {
       204: c18.noBody(),
       401: apiErrorSchema,
@@ -5262,9 +5336,9 @@ var zeroConnectorsBySlugContract = c18.router({
 var zeroConnectorScopeDiffContract = c18.router({
   getScopeDiff: {
     method: "GET",
-    path: "/api/zero/connectors/:type/scope-diff",
+    path: "/api/zero/connectors/:connectorSlug/scope-diff",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     responses: {
       200: scopeDiffResponseSchema,
       401: apiErrorSchema,
@@ -5277,9 +5351,9 @@ var zeroConnectorScopeDiffContract = c18.router({
 var zeroConnectorOauthStartContract = c18.router({
   start: {
     method: "POST",
-    path: "/api/zero/connectors/:type/oauth/start",
+    path: "/api/zero/connectors/:connectorSlug/oauth/start",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     body: external_exports.object({
       authMethod: connectorAuthMethodIdSchema,
       agentId: external_exports.uuid().optional(),
@@ -5299,8 +5373,8 @@ var zeroConnectorOauthStartContract = c18.router({
 var zeroConnectorOauthContinueContract = c18.router({
   continue: {
     method: "GET",
-    path: "/api/zero/connectors/:type/oauth/continue",
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    path: "/api/zero/connectors/:connectorSlug/oauth/continue",
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     query: external_exports.object({ state: external_exports.string().regex(/^[0-9a-f]{64}$/) }),
     responses: {
       307: c18.noBody(),
@@ -5313,9 +5387,9 @@ var zeroConnectorOauthContinueContract = c18.router({
 var zeroConnectorOpenIdStartContract = c18.router({
   start: {
     method: "POST",
-    path: "/api/zero/connectors/:type/openid/start",
+    path: "/api/zero/connectors/:connectorSlug/openid/start",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     body: external_exports.object({
       authMethod: connectorAuthMethodIdSchema,
       agentId: external_exports.uuid().optional(),
@@ -5334,9 +5408,9 @@ var zeroConnectorOpenIdStartContract = c18.router({
 var zeroConnectorManualGrantContract = c18.router({
   connect: {
     method: "POST",
-    path: "/api/zero/connectors/:type/manual-grant",
+    path: "/api/zero/connectors/:connectorSlug/manual-grant",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     body: external_exports.object({
       authMethod: connectorAuthMethodIdSchema,
       agentId: external_exports.uuid().optional(),
@@ -5357,9 +5431,9 @@ var zeroConnectorManualGrantContract = c18.router({
 var zeroConnectorNoAuthGrantContract = c18.router({
   connect: {
     method: "POST",
-    path: "/api/zero/connectors/:type/no-auth",
+    path: "/api/zero/connectors/:connectorSlug/no-auth",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     body: external_exports.object({
       authMethod: connectorAuthMethodIdSchema,
       agentId: external_exports.uuid().optional(),
@@ -5379,9 +5453,9 @@ var zeroConnectorNoAuthGrantContract = c18.router({
 var zeroConnectorOauthDeviceAuthSessionContract = c18.router({
   create: {
     method: "POST",
-    path: "/api/zero/connectors/:type/oauth/device/sessions",
+    path: "/api/zero/connectors/:connectorSlug/oauth/device/sessions",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     body: external_exports.object({
       authMethod: connectorAuthMethodIdSchema,
       agentId: external_exports.uuid().optional(),
@@ -5399,10 +5473,10 @@ var zeroConnectorOauthDeviceAuthSessionContract = c18.router({
   },
   poll: {
     method: "POST",
-    path: "/api/zero/connectors/:type/oauth/device/sessions/:sessionId/poll",
+    path: "/api/zero/connectors/:connectorSlug/oauth/device/sessions/:sessionId/poll",
     headers: authHeadersSchema,
     pathParams: external_exports.object({
-      type: connectorSlugSchema,
+      connectorSlug: connectorSlugSchema,
       sessionId: external_exports.uuid()
     }),
     body: connectorOauthDeviceAuthSessionPollRequestSchema,
@@ -5420,9 +5494,9 @@ var zeroConnectorOauthDeviceAuthSessionContract = c18.router({
 var zeroConnectorExternalCodeSessionContract = c18.router({
   create: {
     method: "POST",
-    path: "/api/zero/connectors/:type/external-code/sessions",
+    path: "/api/zero/connectors/:connectorSlug/external-code/sessions",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     body: external_exports.object({
       authMethod: connectorAuthMethodIdSchema,
       agentId: external_exports.uuid().optional(),
@@ -5439,10 +5513,10 @@ var zeroConnectorExternalCodeSessionContract = c18.router({
   },
   complete: {
     method: "POST",
-    path: "/api/zero/connectors/:type/external-code/sessions/:sessionId/complete",
+    path: "/api/zero/connectors/:connectorSlug/external-code/sessions/:sessionId/complete",
     headers: authHeadersSchema,
     pathParams: external_exports.object({
-      type: connectorSlugSchema,
+      connectorSlug: connectorSlugSchema,
       sessionId: external_exports.uuid()
     }),
     body: connectorExternalCodeSessionCompleteRequestSchema,
@@ -5458,7 +5532,9 @@ var zeroConnectorExternalCodeSessionContract = c18.router({
   }
 });
 var connectorSearchItemSchema = external_exports.object({
+  // TODO(#23821): Remove this legacy response field after clients migrate.
   id: connectorSlugSchema,
+  slug: connectorSlugSchema.optional(),
   label: external_exports.string(),
   description: external_exports.string(),
   authMethods: external_exports.array(connectorAuthMethodIdSchema)
@@ -5595,8 +5671,9 @@ var publicConnectorCatalogCategoryMetadataSchema = external_exports.object({
   groups: external_exports.array(publicConnectorCatalogCategoryGroupSchema)
 });
 var publicConnectorCatalogItemSchema = external_exports.object({
-  // TODO(#23619): Rename catalog API fields after independent clients migrate.
+  // TODO(#23821): Remove this legacy API field after clients migrate.
   connectorRef: connectorSlugSchema,
+  slug: connectorSlugSchema.optional(),
   label: external_exports.string(),
   description: external_exports.string(),
   icon: publicConnectorCatalogIconSchema,
@@ -5680,8 +5757,9 @@ var publicConnectorCatalogDefaultPolicySchema = external_exports.object({
   unknownPolicy: publicFirewallPolicyValueSchema
 });
 var publicConnectorCatalogPermissionDetailSchema = external_exports.object({
-  // TODO(#23619): Rename this catalog API field after clients migrate.
+  // TODO(#23821): Remove this legacy API field after clients migrate.
   connectorRef: connectorSlugSchema,
+  connectorSlug: connectorSlugSchema.optional(),
   label: external_exports.string(),
   icon: publicConnectorCatalogIconSchema,
   permissionCount: external_exports.number().int().nonnegative(),
@@ -5693,8 +5771,7 @@ var publicConnectorCatalogPermissionDetailResponseSchema = external_exports.obje
   permissions: publicConnectorCatalogPermissionDetailSchema
 });
 var connectorCatalogPathParamsSchema = external_exports.object({
-  // TODO(#23619): Rename this path parameter and route in a compatible rollout.
-  connectorRef: connectorSlugSchema
+  connectorSlug: connectorSlugSchema
 });
 var zeroConnectorCatalogContract = c19.router({
   list: {
@@ -5735,7 +5812,7 @@ var zeroConnectorCatalogContract = c19.router({
   },
   get: {
     method: "GET",
-    path: "/api/zero/connector-catalog/:connectorRef",
+    path: "/api/zero/connector-catalog/:connectorSlug",
     headers: authHeadersSchema,
     pathParams: connectorCatalogPathParamsSchema,
     responses: {
@@ -5750,7 +5827,7 @@ var zeroConnectorCatalogContract = c19.router({
   },
   permissions: {
     method: "GET",
-    path: "/api/zero/connector-catalog/:connectorRef/permissions",
+    path: "/api/zero/connector-catalog/:connectorSlug/permissions",
     headers: authHeadersSchema,
     pathParams: connectorCatalogPathParamsSchema,
     responses: {
@@ -5773,8 +5850,9 @@ var connectorCheckUrlRequestSchema = external_exports.object({
   mode: external_exports.literal("url"),
   method: external_exports.string().min(1).max(16),
   url: external_exports.string().min(1).max(8192),
-  // TODO(#23619): Rename connector-check wire fields after clients migrate.
+  // TODO(#23821): Remove this legacy wire field after clients migrate.
   connectorRef: connectorSlugSchema.optional(),
+  connectorSlug: connectorSlugSchema.optional(),
   environmentName: boundedNameSchema.optional()
 }).strict();
 var connectorCheckEnvironmentRequestSchema = external_exports.object({
@@ -5785,17 +5863,42 @@ var connectorCheckEnvironmentRequestSchema = external_exports.object({
 var connectorCheckRequestSchema = external_exports.discriminatedUnion("mode", [
   connectorCheckUrlRequestSchema,
   connectorCheckEnvironmentRequestSchema
-]);
+]).superRefine((request, ctx) => {
+  if (request.mode === "url" && request.connectorRef !== void 0 && request.connectorSlug !== void 0 && request.connectorRef !== request.connectorSlug) {
+    ctx.addIssue({
+      code: "custom",
+      message: "connectorRef and connectorSlug must match",
+      path: ["connectorSlug"]
+    });
+  }
+}).transform((request) => {
+  if (request.mode === "environment") {
+    return request;
+  }
+  const { connectorRef, connectorSlug, ...rest } = request;
+  const normalizedConnectorSlug = connectorSlug ?? connectorRef;
+  return {
+    ...rest,
+    ...normalizedConnectorSlug === void 0 ? {} : {
+      connectorRef: normalizedConnectorSlug,
+      connectorSlug: normalizedConnectorSlug
+    }
+  };
+});
 var connectorCheckIdentitySchema = external_exports.object({
-  // TODO(#23619): Rename with the connector-check response contract.
+  // TODO(#23821): Remove this legacy response field after clients migrate.
   connectorRef: connectorSlugSchema,
+  // Capability-gated while supported legacy CLI schemas reject unknown fields.
+  connectorSlug: connectorSlugSchema.optional(),
   label: external_exports.string().min(1),
   visibility: external_exports.enum(["available", "unavailable"]),
   credentialResolution: external_exports.enum(["network-boundary", "none"])
 }).strict();
 var connectorCheckCandidateSchema = external_exports.object({
-  // TODO(#23619): Rename with the connector-check response contract.
+  // TODO(#23821): Remove this legacy response field after clients migrate.
   connectorRef: connectorSlugSchema,
+  // Capability-gated while supported legacy CLI schemas reject unknown fields.
+  connectorSlug: connectorSlugSchema.optional(),
   label: external_exports.string().min(1)
 }).strict();
 var connectorCheckNotScopedRunSchema = external_exports.object({ status: external_exports.literal("not-scoped") }).strict();
@@ -5956,10 +6059,9 @@ var connectorOauthCallbackResultSchema = external_exports.discriminatedUnion(
 var connectorsSlugCallbackContract = c21.router({
   callback: {
     method: "GET",
-    // TODO(#23619): Rename this path parameter and route compatibly.
-    path: "/api/connectors/:type/callback",
+    path: "/api/connectors/:connectorSlug/callback",
     headers: authHeadersSchema,
-    pathParams: external_exports.object({ type: connectorSlugSchema }),
+    pathParams: external_exports.object({ connectorSlug: connectorSlugSchema }),
     query: external_exports.object({
       code: external_exports.string().optional(),
       auth_code: external_exports.string().optional(),
@@ -6312,7 +6414,7 @@ async function getZeroConnectorCatalogPermissions(connectorSlug) {
   const config = await getClientConfig();
   const client2 = initClient(zeroConnectorCatalogContract, config);
   const result = await client2.permissions({
-    params: { connectorRef: connectorSlug }
+    params: { connectorSlug }
   });
   if (result.status === 200) {
     if (result.body.permissions.connectorRef !== connectorSlug) {
@@ -6346,7 +6448,7 @@ async function getZeroConnector(connectorSlug) {
   const config = await getClientConfig();
   const client2 = initClient(zeroConnectorsBySlugContract, config);
   const result = await client2.get({
-    params: { type: connectorSlug }
+    params: { connectorSlug }
   });
   if (result.status === 200) {
     return result.body;
@@ -6360,7 +6462,7 @@ async function connectZeroConnectorManualGrant(connectorSlug, authMethod, values
   const config = await getClientConfig();
   const client2 = initClient(zeroConnectorManualGrantContract, config);
   const result = await client2.connect({
-    params: { type: connectorSlug },
+    params: { connectorSlug },
     body: { authMethod, values }
   });
   if (result.status === 200) {
@@ -6419,7 +6521,7 @@ var SESSION_HISTORY_ENCODING_ZSTD = "zstd";
 var SESSION_HISTORY_DOWNLOAD_SOURCE_CONFIGURED_PUBLIC_ENDPOINT = "configured_public_endpoint";
 var SESSION_HISTORY_DOWNLOAD_SOURCE_DEFAULT_R2_ENDPOINT = "default_r2_endpoint";
 var SESSION_HISTORY_GZIP_MIN_BYTES = 64 * 1024;
-var NETWORK_POLICY_REFRESH_CONNECTOR_REFS_MAX = 256;
+var NETWORK_POLICY_REFRESH_CONNECTOR_SLUGS_MAX = 256;
 var RUNNER_BUILTIN_FIREWALL_RESOLVE_NAMES_MAX = 512;
 var sessionHistoryEncodingSchema = external_exports.enum([
   SESSION_HISTORY_ENCODING_IDENTITY,
@@ -6897,14 +6999,44 @@ var runnersNetworkPolicyRefreshContract = c23.router({
       runId: external_exports.uuid()
     }),
     body: external_exports.object({
-      // TODO(#23619): Rename runner wire fields in a compatibility-safe rollout.
-      connectorRefs: external_exports.array(connectorSlugSchema).min(1).max(NETWORK_POLICY_REFRESH_CONNECTOR_REFS_MAX)
+      connectorSlugs: external_exports.array(connectorSlugSchema).min(1).max(NETWORK_POLICY_REFRESH_CONNECTOR_SLUGS_MAX).optional(),
+      // TODO(#23827): Remove after every pre-bridge runner has drained.
+      connectorRefs: external_exports.array(connectorSlugSchema).min(1).max(NETWORK_POLICY_REFRESH_CONNECTOR_SLUGS_MAX).optional()
+    }).superRefine((body, context) => {
+      if (body.connectorSlugs === void 0 && body.connectorRefs === void 0) {
+        context.addIssue({
+          code: "custom",
+          path: ["connectorSlugs"],
+          message: "connectorSlugs or connectorRefs is required"
+        });
+        return;
+      }
+      if (body.connectorSlugs !== void 0 && body.connectorRefs !== void 0) {
+        const connectorSlugs = new Set(body.connectorSlugs);
+        const connectorRefs = new Set(body.connectorRefs);
+        if (connectorSlugs.size !== connectorRefs.size || [...connectorSlugs].some((connectorSlug) => {
+          return !connectorRefs.has(connectorSlug);
+        })) {
+          context.addIssue({
+            code: "custom",
+            path: ["connectorSlugs"],
+            message: "must identify the same connectors as connectorRefs"
+          });
+        }
+      }
+    }).transform((body) => {
+      return {
+        connectorSlugs: [
+          ...new Set(body.connectorSlugs ?? body.connectorRefs ?? [])
+        ]
+      };
     }),
     responses: {
       200: external_exports.object({
         refreshes: external_exports.array(
           external_exports.object({
-            // TODO(#23619): Keep the response aligned with the request rollout.
+            connectorSlug: connectorSlugSchema,
+            // TODO(#23827): Remove after every pre-bridge runner has drained.
             connectorRef: connectorSlugSchema,
             networkPolicy: networkPolicySchema,
             nextRefreshAt: external_exports.string().datetime({ offset: true }).nullable()
@@ -7618,8 +7750,7 @@ var webhookUsageEventItemSchema = external_exports.object({
   kind: external_exports.enum(["connector", "model", "image"]),
   provider: external_exports.string().min(1).max(100),
   category: external_exports.string().min(1).max(100),
-  quantity: external_exports.number().int().min(0),
-  grossCredits: external_exports.number().int().min(0).optional()
+  quantity: external_exports.number().int().min(0)
 }).strict();
 var webhookUsageEventContract = c24.router({
   send: {
@@ -8055,7 +8186,7 @@ async function listZeroChatEvents(options) {
   });
   if (result.status === 200) {
     return {
-      events: result.body.events,
+      events: result.body.events.filter(isCanonicalChatEventResponse),
       hasHistoryBefore: result.body.hasHistoryBefore ?? false
     };
   }
@@ -9052,8 +9183,9 @@ async function fetchComputerUsePluginContent(commandId) {
 init_esm_shims();
 var c28 = initContract();
 var ZERO_BROWSER_IDLE_LEASE_MINUTES = 10;
-var ZERO_BROWSER_DEFAULT_MAX_CREDITS = 500;
-var ZERO_BROWSER_MAX_CREDITS = 1e5;
+var ZERO_BROWSER_SCREEN_WIDTH = 1440;
+var ZERO_BROWSER_MIN_SCREEN_HEIGHT = 320;
+var ZERO_BROWSER_MAX_SCREEN_HEIGHT = 3456;
 var zeroBrowserStatusSchema = external_exports.enum([
   "creating",
   "active",
@@ -9067,10 +9199,16 @@ var zeroBrowserSuspensionReasonSchema = external_exports.enum([
   "run_end",
   "idle",
   "timeout",
+  // Historical reason kept for rows written before browser billing was removed.
   "budget",
   "provider",
   "reconcile"
 ]);
+var zeroBrowserScreenSchema = external_exports.object({
+  width: external_exports.literal(ZERO_BROWSER_SCREEN_WIDTH),
+  height: external_exports.number().int().min(ZERO_BROWSER_MIN_SCREEN_HEIGHT).max(ZERO_BROWSER_MAX_SCREEN_HEIGHT),
+  resizable: external_exports.boolean()
+});
 var zeroBrowserSessionSchema = external_exports.object({
   id: external_exports.uuid(),
   name: external_exports.string().min(1).max(64),
@@ -9079,9 +9217,15 @@ var zeroBrowserSessionSchema = external_exports.object({
   liveUrl: external_exports.url().nullable(),
   proxyCountryCode: external_exports.string().length(2).nullable(),
   timeoutMinutes: external_exports.number().int().positive(),
+  // Deprecated compatibility fields for clients deployed before browser
+  // billing moved to organization concurrency. Remove after that client
+  // version has drained.
   maxCredits: external_exports.number().int().positive(),
   grossCredits: external_exports.number().int().nonnegative(),
   creditsCharged: external_exports.number().int().nonnegative(),
+  // Optional so a newly deployed frontend remains compatible with the
+  // previous API during rollout. New APIs include it for live instances.
+  screen: zeroBrowserScreenSchema.optional(),
   // When Zero reclaims the live provider instance unless somebody leases it
   // again. Null once no provider instance is running.
   idleExpiresAt: external_exports.iso.datetime().nullable(),
@@ -9094,8 +9238,7 @@ var zeroBrowserCreateRequestSchema = external_exports.object({
   name: external_exports.string().trim().min(1).max(64).default("browser"),
   proxyCountryCode: external_exports.string().trim().length(2).transform((value) => {
     return value.toLowerCase();
-  }).nullable().default(null),
-  maxCredits: external_exports.number().int().min(1).max(ZERO_BROWSER_MAX_CREDITS).default(ZERO_BROWSER_DEFAULT_MAX_CREDITS)
+  }).nullable().default(null)
 });
 var browserIdParamsSchema = external_exports.object({
   browserId: external_exports.uuid()
@@ -9106,6 +9249,9 @@ var browserGetQuerySchema = external_exports.object({
 var browserResponseSchema = external_exports.object({
   browser: zeroBrowserSessionSchema
 });
+var browserResizeRequestSchema = external_exports.object({
+  aspectRatio: external_exports.number().positive().finite()
+});
 var browserAuthorizationRequestTokenPathParamsSchema = external_exports.object({
   requestToken: external_exports.string().min(1)
 });
@@ -9128,7 +9274,6 @@ var browserConnectionResponseSchema = browserResponseSchema.extend({
 var commonErrorResponses = {
   400: apiErrorSchema,
   401: apiErrorSchema,
-  402: apiErrorSchema,
   403: apiErrorSchema,
   404: apiErrorSchema,
   409: apiErrorSchema,
@@ -9202,7 +9347,19 @@ var zeroBrowserContract = c28.router({
       200: browserResponseSchema,
       ...commonErrorResponses
     },
-    summary: "Resume a suspended browser from its viewer and start billing it"
+    summary: "Resume a suspended browser from its viewer"
+  },
+  resizeById: {
+    method: "POST",
+    path: "/api/zero/browsers/:browserId/resize",
+    headers: authHeadersSchema,
+    pathParams: browserIdParamsSchema,
+    body: browserResizeRequestSchema,
+    responses: {
+      200: browserResponseSchema,
+      ...commonErrorResponses
+    },
+    summary: "Resize a live browser to match a viewer aspect ratio"
   },
   current: {
     method: "GET",
@@ -11155,8 +11312,9 @@ var zeroWorkflowConnectorReadinessStatusSchema = external_exports.enum([
   "unavailable"
 ]);
 var zeroWorkflowConnectorReadinessEntrySchema = external_exports.object({
-  // TODO(#23619): Rename this workflow readiness response field with clients.
+  // TODO(#23821): Remove this legacy response field after clients migrate.
   connectorRef: connectorSlugSchema,
+  connectorSlug: connectorSlugSchema.optional(),
   label: external_exports.string().min(1),
   icon: publicConnectorCatalogIconSchema,
   reason: external_exports.string().min(1),
@@ -13303,8 +13461,6 @@ export {
   fetchComputerUseScreenshot,
   fetchComputerUsePluginContent,
   ZERO_BROWSER_IDLE_LEASE_MINUTES,
-  ZERO_BROWSER_DEFAULT_MAX_CREDITS,
-  ZERO_BROWSER_MAX_CREDITS,
   zeroBrowserCreateRequestSchema,
   createBrowserAuthorizationRequest,
   createZeroBrowser,
@@ -13345,4 +13501,4 @@ export {
   getHostedSiteFiles,
   getHostedSiteDeployments
 };
-//# sourceMappingURL=chunk-K36BESR5.js.map
+//# sourceMappingURL=chunk-LYI45KHY.js.map