@vm0/cli 9.150.5 → 9.150.7

package/{chunk-USVVSPWL.js → chunk-VKCZANPE.js}

@@ -4629,8 +4629,8 @@ var require_browser = __commonJS({
       if (!this.useColors) {
         return;
       }
-      const c99 = "color: " + this.color;
-      args.splice(1, 0, c99, "color: inherit");
+      const c101 = "color: " + this.color;
+      args.splice(1, 0, c101, "color: inherit");
       let index = 0;
       let lastC = 0;
       args[0].replace(/%[a-zA-Z%]/g, (match) => {
@@ -4642,7 +4642,7 @@ var require_browser = __commonJS({
           lastC = index;
         }
       });
-      args.splice(lastC, 0, c99);
+      args.splice(lastC, 0, c101);
     }
     exports.log = console.debug || console.log || (() => {
     });
@@ -4930,8 +4930,8 @@ var require_node = __commonJS({
     function formatArgs(args) {
       const { namespace: name, useColors: useColors2 } = this;
       if (useColors2) {
-        const c99 = this.color;
-        const colorCode = "\x1B[3" + (c99 < 8 ? c99 : "8;5;" + c99);
+        const c101 = this.color;
+        const colorCode = "\x1B[3" + (c101 < 8 ? c101 : "8;5;" + c101);
         const prefix = `  ${colorCode};1m${name} \x1B[0m`;
         args[0] = prefix + args[0].split("\n").join("\n" + prefix);
         args.push(colorCode + "m+" + module2.exports.humanize(this.diff) + "\x1B[0m");
@@ -8981,27 +8981,27 @@ var require_commonjs2 = __commonJS({
           const pad = n.some(isPadded);
           N = [];
           for (let i = x2; test(i, y); i += incr) {
-            let c99;
+            let c101;
             if (isAlphaSequence) {
-              c99 = String.fromCharCode(i);
-              if (c99 === "\\") {
-                c99 = "";
+              c101 = String.fromCharCode(i);
+              if (c101 === "\\") {
+                c101 = "";
               }
             } else {
-              c99 = String(i);
+              c101 = String(i);
               if (pad) {
-                const need = width - c99.length;
+                const need = width - c101.length;
                 if (need > 0) {
                   const z3 = new Array(need + 1).join("0");
                   if (i < 0) {
-                    c99 = "-" + z3 + c99.slice(1);
+                    c101 = "-" + z3 + c101.slice(1);
                   } else {
-                    c99 = z3 + c99;
+                    c101 = z3 + c101;
                   }
                 }
               }
             }
-            N.push(c99);
+            N.push(c101);
           }
         } else {
           N = [];
@@ -9084,25 +9084,25 @@ var require_brace_expressions = __commonJS({
       let endPos = pos;
       let rangeStart = "";
       WHILE: while (i < glob.length) {
-        const c99 = glob.charAt(i);
-        if ((c99 === "!" || c99 === "^") && i === pos + 1) {
+        const c101 = glob.charAt(i);
+        if ((c101 === "!" || c101 === "^") && i === pos + 1) {
           negate = true;
           i++;
           continue;
         }
-        if (c99 === "]" && sawStart && !escaping) {
+        if (c101 === "]" && sawStart && !escaping) {
           endPos = i + 1;
           break;
         }
         sawStart = true;
-        if (c99 === "\\") {
+        if (c101 === "\\") {
           if (!escaping) {
             escaping = true;
             i++;
             continue;
           }
         }
-        if (c99 === "[" && !escaping) {
+        if (c101 === "[" && !escaping) {
           for (const [cls, [unip, u, neg]] of Object.entries(posixClasses)) {
             if (glob.startsWith(cls, i)) {
               if (rangeStart) {
@@ -9120,26 +9120,26 @@ var require_brace_expressions = __commonJS({
         }
         escaping = false;
         if (rangeStart) {
-          if (c99 > rangeStart) {
-            ranges.push(braceEscape(rangeStart) + "-" + braceEscape(c99));
-          } else if (c99 === rangeStart) {
-            ranges.push(braceEscape(c99));
+          if (c101 > rangeStart) {
+            ranges.push(braceEscape(rangeStart) + "-" + braceEscape(c101));
+          } else if (c101 === rangeStart) {
+            ranges.push(braceEscape(c101));
           }
           rangeStart = "";
           i++;
           continue;
         }
         if (glob.startsWith("-]", i + 1)) {
-          ranges.push(braceEscape(c99 + "-"));
+          ranges.push(braceEscape(c101 + "-"));
           i += 2;
           continue;
         }
         if (glob.startsWith("-", i + 1)) {
-          rangeStart = c99;
+          rangeStart = c101;
           i += 2;
           continue;
         }
-        ranges.push(braceEscape(c99));
+        ranges.push(braceEscape(c101));
         i++;
       }
       if (endPos < i) {
@@ -9189,8 +9189,8 @@ var require_ast = __commonJS({
     var brace_expressions_js_1 = require_brace_expressions();
     var unescape_js_1 = require_unescape();
     var types = /* @__PURE__ */ new Set(["!", "?", "+", "*", "@"]);
-    var isExtglobType = (c99) => types.has(c99);
-    var isExtglobAST = (c99) => isExtglobType(c99.type);
+    var isExtglobType = (c101) => types.has(c101);
+    var isExtglobAST = (c101) => isExtglobType(c101.type);
     var adoptionMap = /* @__PURE__ */ new Map([
       ["!", ["@"]],
       ["?", ["?", "@"]],
@@ -9387,11 +9387,11 @@ var require_ast = __commonJS({
           this.push(part.clone(this));
       }
       clone(parent) {
-        const c99 = new _a2(this.type, parent);
+        const c101 = new _a2(this.type, parent);
         for (const p of this.#parts) {
-          c99.copyIn(p);
+          c101.copyIn(p);
         }
-        return c99;
+        return c101;
       }
       static #parseAST(str, ast, pos, opt, extDepth) {
         const maxDepth = opt.maxExtglobRecursion ?? 2;
@@ -9403,39 +9403,39 @@ var require_ast = __commonJS({
           let i2 = pos;
           let acc2 = "";
           while (i2 < str.length) {
-            const c99 = str.charAt(i2++);
-            if (escaping || c99 === "\\") {
+            const c101 = str.charAt(i2++);
+            if (escaping || c101 === "\\") {
               escaping = !escaping;
-              acc2 += c99;
+              acc2 += c101;
               continue;
             }
             if (inBrace) {
               if (i2 === braceStart + 1) {
-                if (c99 === "^" || c99 === "!") {
+                if (c101 === "^" || c101 === "!") {
                   braceNeg = true;
                 }
-              } else if (c99 === "]" && !(i2 === braceStart + 2 && braceNeg)) {
+              } else if (c101 === "]" && !(i2 === braceStart + 2 && braceNeg)) {
                 inBrace = false;
               }
-              acc2 += c99;
+              acc2 += c101;
               continue;
-            } else if (c99 === "[") {
+            } else if (c101 === "[") {
               inBrace = true;
               braceStart = i2;
               braceNeg = false;
-              acc2 += c99;
+              acc2 += c101;
               continue;
             }
-            const doRecurse = !opt.noext && isExtglobType(c99) && str.charAt(i2) === "(" && extDepth <= maxDepth;
+            const doRecurse = !opt.noext && isExtglobType(c101) && str.charAt(i2) === "(" && extDepth <= maxDepth;
             if (doRecurse) {
               ast.push(acc2);
               acc2 = "";
-              const ext = new _a2(c99, ast);
+              const ext = new _a2(c101, ast);
               i2 = _a2.#parseAST(str, ext, i2, opt, extDepth + 1);
               ast.push(ext);
               continue;
             }
-            acc2 += c99;
+            acc2 += c101;
           }
           ast.push(acc2);
           return i2;
@@ -9445,48 +9445,48 @@ var require_ast = __commonJS({
         const parts = [];
         let acc = "";
         while (i < str.length) {
-          const c99 = str.charAt(i++);
-          if (escaping || c99 === "\\") {
+          const c101 = str.charAt(i++);
+          if (escaping || c101 === "\\") {
             escaping = !escaping;
-            acc += c99;
+            acc += c101;
             continue;
           }
           if (inBrace) {
             if (i === braceStart + 1) {
-              if (c99 === "^" || c99 === "!") {
+              if (c101 === "^" || c101 === "!") {
                 braceNeg = true;
               }
-            } else if (c99 === "]" && !(i === braceStart + 2 && braceNeg)) {
+            } else if (c101 === "]" && !(i === braceStart + 2 && braceNeg)) {
               inBrace = false;
             }
-            acc += c99;
+            acc += c101;
             continue;
-          } else if (c99 === "[") {
+          } else if (c101 === "[") {
             inBrace = true;
             braceStart = i;
             braceNeg = false;
-            acc += c99;
+            acc += c101;
             continue;
           }
-          const doRecurse = !opt.noext && isExtglobType(c99) && str.charAt(i) === "(" && /* c8 ignore start - the maxDepth is sufficient here */
-          (extDepth <= maxDepth || ast && ast.#canAdoptType(c99));
+          const doRecurse = !opt.noext && isExtglobType(c101) && str.charAt(i) === "(" && /* c8 ignore start - the maxDepth is sufficient here */
+          (extDepth <= maxDepth || ast && ast.#canAdoptType(c101));
           if (doRecurse) {
-            const depthAdd = ast && ast.#canAdoptType(c99) ? 0 : 1;
+            const depthAdd = ast && ast.#canAdoptType(c101) ? 0 : 1;
             part.push(acc);
             acc = "";
-            const ext = new _a2(c99, part);
+            const ext = new _a2(c101, part);
             part.push(ext);
             i = _a2.#parseAST(str, ext, i, opt, extDepth + depthAdd);
             continue;
           }
-          if (c99 === "|") {
+          if (c101 === "|") {
             part.push(acc);
             acc = "";
             parts.push(part);
             part = new _a2(null, ast);
             continue;
           }
-          if (c99 === ")") {
+          if (c101 === ")") {
             if (acc === "" && ast.#parts.length === 0) {
               ast.#emptyExt = true;
             }
@@ -9495,7 +9495,7 @@ var require_ast = __commonJS({
             ast.push(...parts, part);
             return i;
           }
-          acc += c99;
+          acc += c101;
         }
         ast.type = null;
         ast.#hasMagic = void 0;
@@ -9515,8 +9515,8 @@ var require_ast = __commonJS({
         }
         return this.#canAdoptType(gc.type, map2);
       }
-      #canAdoptType(c99, map2 = adoptionAnyMap) {
-        return !!map2.get(this.type)?.includes(c99);
+      #canAdoptType(c101, map2 = adoptionAnyMap) {
+        return !!map2.get(this.type)?.includes(c101);
       }
       #adoptWithSpace(child, index) {
         const gc = child.#parts[0];
@@ -9534,9 +9534,9 @@ var require_ast = __commonJS({
         }
         this.#toString = void 0;
       }
-      #canUsurpType(c99) {
+      #canUsurpType(c101) {
         const m = usurpMap.get(this.type);
-        return !!m?.has(c99);
+        return !!m?.has(c101);
       }
       #canUsurp(child) {
         if (!child || typeof child !== "object" || child.type !== null || child.#parts.length !== 1 || this.type === null || this.#parts.length !== 1) {
@@ -9749,18 +9749,18 @@ var require_ast = __commonJS({
           do {
             done = true;
             for (let i = 0; i < this.#parts.length; i++) {
-              const c99 = this.#parts[i];
-              if (typeof c99 === "object") {
-                c99.#flatten();
-                if (this.#canAdopt(c99)) {
+              const c101 = this.#parts[i];
+              if (typeof c101 === "object") {
+                c101.#flatten();
+                if (this.#canAdopt(c101)) {
                   done = false;
-                  this.#adopt(c99, i);
-                } else if (this.#canAdoptWithSpace(c99)) {
+                  this.#adopt(c101, i);
+                } else if (this.#canAdoptWithSpace(c101)) {
                   done = false;
-                  this.#adoptWithSpace(c99, i);
-                } else if (this.#canUsurp(c99)) {
+                  this.#adoptWithSpace(c101, i);
+                } else if (this.#canUsurp(c101)) {
                   done = false;
-                  this.#usurp(c99);
+                  this.#usurp(c101);
                 }
               }
             }
@@ -9784,13 +9784,13 @@ var require_ast = __commonJS({
         let uflag = false;
         let inStar = false;
         for (let i = 0; i < glob.length; i++) {
-          const c99 = glob.charAt(i);
+          const c101 = glob.charAt(i);
           if (escaping) {
             escaping = false;
-            re += (reSpecials.has(c99) ? "\\" : "") + c99;
+            re += (reSpecials.has(c101) ? "\\" : "") + c101;
             continue;
           }
-          if (c99 === "*") {
+          if (c101 === "*") {
             if (inStar)
               continue;
             inStar = true;
@@ -9800,7 +9800,7 @@ var require_ast = __commonJS({
           } else {
             inStar = false;
           }
-          if (c99 === "\\") {
+          if (c101 === "\\") {
             if (i === glob.length - 1) {
               re += "\\\\";
             } else {
@@ -9808,7 +9808,7 @@ var require_ast = __commonJS({
             }
             continue;
           }
-          if (c99 === "[") {
+          if (c101 === "[") {
             const [src, needUflag, consumed, magic] = (0, brace_expressions_js_1.parseClass)(glob, i);
             if (consumed) {
               re += src;
@@ -9818,12 +9818,12 @@ var require_ast = __commonJS({
               continue;
             }
           }
-          if (c99 === "?") {
+          if (c101 === "?") {
             re += qmark;
             hasMagic = true;
             continue;
           }
-          re += regExpEscape(c99);
+          re += regExpEscape(c101);
         }
         return [re, (0, unescape_js_1.unescape)(glob), !!hasMagic, uflag];
       }
@@ -13747,13 +13747,13 @@ var require_utils4 = __commonJS({
     }
     exports.arrayStringifyHelper = arrayStringifyHelper;
     function getPoolNameOld(pool) {
-      const c99 = pool.config.connectionConfig;
+      const c101 = pool.config.connectionConfig;
       let poolName = "";
-      poolName += c99.host ? `host: '${c99.host}', ` : "";
-      poolName += c99.port ? `port: ${c99.port}, ` : "";
-      poolName += c99.database ? `database: '${c99.database}', ` : "";
-      poolName += c99.user ? `user: '${c99.user}'` : "";
-      if (!c99.user) {
+      poolName += c101.host ? `host: '${c101.host}', ` : "";
+      poolName += c101.port ? `port: ${c101.port}, ` : "";
+      poolName += c101.database ? `database: '${c101.database}', ` : "";
+      poolName += c101.user ? `user: '${c101.user}'` : "";
+      if (!c101.user) {
         poolName = poolName.substring(0, poolName.length - 2);
       }
       return poolName.trim();
@@ -14105,7 +14105,7 @@ var require_src9 = __commonJS({
       return indexOpeningDashDashComment < indexClosingSlashComment;
     }
     function fixedEncodeURIComponent(str) {
-      return encodeURIComponent(str).replace(/[!'()*]/g, (c99) => `%${c99.charCodeAt(0).toString(16).toUpperCase()}`);
+      return encodeURIComponent(str).replace(/[!'()*]/g, (c101) => `%${c101.charCodeAt(0).toString(16).toUpperCase()}`);
     }
     function addSqlCommenterComment(span, query) {
       if (typeof query !== "string" || query.length === 0) {
@@ -22665,8 +22665,8 @@ var require_util = __commonJS({
     function isUSVString(val) {
       return hasIsWellFormed ? `${val}`.isWellFormed() : toUSVString(val) === `${val}`;
     }
-    function isTokenCharCode(c99) {
-      switch (c99) {
+    function isTokenCharCode(c101) {
+      switch (c101) {
         case 34:
         case 40:
         case 41:
@@ -22686,7 +22686,7 @@ var require_util = __commonJS({
         case 125:
           return false;
         default:
-          return c99 >= 33 && c99 <= 126;
+          return c101 >= 33 && c101 <= 126;
       }
     }
     function isValidHTTPToken(characters) {
@@ -24275,7 +24275,7 @@ var require_constants2 = __commonJS({
         exports.HEADER_CHARS.push(i);
       }
     }
-    exports.CONNECTION_TOKEN_CHARS = exports.HEADER_CHARS.filter((c99) => c99 !== 44);
+    exports.CONNECTION_TOKEN_CHARS = exports.HEADER_CHARS.filter((c101) => c101 !== 44);
     exports.MAJOR = exports.NUM_MAP;
     exports.MINOR = exports.MAJOR;
     var HEADER_STATE;
@@ -25421,10 +25421,10 @@ var require_util2 = __commonJS({
     }
     function isValidReasonPhrase(statusText) {
       for (let i = 0; i < statusText.length; ++i) {
-        const c99 = statusText.charCodeAt(i);
-        if (!(c99 === 9 || // HTAB
-        c99 >= 32 && c99 <= 126 || // SP / VCHAR
-        c99 >= 128 && c99 <= 255)) {
+        const c101 = statusText.charCodeAt(i);
+        if (!(c101 === 9 || // HTAB
+        c101 >= 32 && c101 <= 126 || // SP / VCHAR
+        c101 >= 128 && c101 <= 255)) {
           return false;
         }
       }
@@ -29398,7 +29398,7 @@ var require_pool_base = __commonJS({
             pool.emit("drain", origin, [pool, ...targets]);
           }
           if (pool[kClosedResolve] && queue.isEmpty()) {
-            Promise.all(pool[kClients].map((c99) => c99.close())).then(pool[kClosedResolve]);
+            Promise.all(pool[kClients].map((c101) => c101.close())).then(pool[kClosedResolve]);
           }
         };
         this[kOnConnect] = (origin, targets) => {
@@ -29447,7 +29447,7 @@ var require_pool_base = __commonJS({
       }
       async [kClose]() {
         if (this[kQueue].isEmpty()) {
-          await Promise.all(this[kClients].map((c99) => c99.close()));
+          await Promise.all(this[kClients].map((c101) => c101.close()));
         } else {
           await new Promise((resolve2) => {
             this[kClosedResolve] = resolve2;
@@ -29462,7 +29462,7 @@ var require_pool_base = __commonJS({
           }
           item.handler.onError(err);
         }
-        await Promise.all(this[kClients].map((c99) => c99.destroy(err)));
+        await Promise.all(this[kClients].map((c101) => c101.destroy(err)));
       }
       [kDispatch](opts, handler) {
         const dispatcher = this[kGetDispatcher]();
@@ -36232,8 +36232,8 @@ var require_util4 = __commonJS({
       return new TextDecoder(encoding).decode(sliced);
     }
     function BOMSniffing(ioQueue) {
-      const [a, b, c99] = ioQueue;
-      if (a === 239 && b === 187 && c99 === 191) {
+      const [a, b, c101] = ioQueue;
+      if (a === 239 && b === 187 && c101 === 191) {
         return "UTF-8";
       } else if (a === 254 && b === 255) {
         return "UTF-16BE";
@@ -40356,7 +40356,7 @@ var require_style = __commonJS({
   "../../node_modules/.pnpm/prompts@2.4.2/node_modules/prompts/dist/util/style.js"(exports, module2) {
     "use strict";
     init_esm_shims();
-    var c99 = require_kleur();
+    var c101 = require_kleur();
     var figures = require_figures();
     var styles3 = Object.freeze({
       password: {
@@ -40378,14 +40378,14 @@ var require_style = __commonJS({
     });
     var render = (type) => styles3[type] || styles3.default;
     var symbols = Object.freeze({
-      aborted: c99.red(figures.cross),
-      done: c99.green(figures.tick),
-      exited: c99.yellow(figures.cross),
-      default: c99.cyan("?")
+      aborted: c101.red(figures.cross),
+      done: c101.green(figures.tick),
+      exited: c101.yellow(figures.cross),
+      default: c101.cyan("?")
     });
     var symbol2 = (done, aborted2, exited) => aborted2 ? symbols.aborted : exited ? symbols.exited : done ? symbols.done : symbols.default;
-    var delimiter = (completing) => c99.gray(completing ? figures.ellipsis : figures.pointerSmall);
-    var item = (expandable, expanded) => c99.gray(expandable ? expanded ? figures.pointerSmall : "+" : figures.line);
+    var delimiter = (completing) => c101.gray(completing ? figures.ellipsis : figures.pointerSmall);
+    var item = (expandable, expanded) => c101.gray(expandable ? expanded ? figures.pointerSmall : "+" : figures.line);
     module2.exports = {
       styles: styles3,
       render,
@@ -40667,10 +40667,10 @@ var require_text = __commonJS({
         this.cursor = this.cursor + n;
         this.cursorOffset += n;
       }
-      _(c99, key) {
+      _(c101, key) {
         let s1 = this.value.slice(0, this.cursor);
         let s2 = this.value.slice(this.cursor);
-        this.value = `${s1}${c99}${s2}`;
+        this.value = `${s1}${c101}${s2}`;
         this.red = false;
         this.cursor = this.placeholder ? 0 : s1.length + 1;
         this.render();
@@ -40845,8 +40845,8 @@ var require_select = __commonJS({
         this.moveCursor((this.cursor + 1) % this.choices.length);
         this.render();
       }
-      _(c99, key) {
-        if (c99 === " ") return this.submit();
+      _(c101, key) {
+        if (c101 === " ") return this.submit();
       }
       get selection() {
         return this.choices[this.cursor];
@@ -40972,12 +40972,12 @@ var require_toggle = __commonJS({
         this.fire();
         this.render();
       }
-      _(c99, key) {
-        if (c99 === " ") {
+      _(c101, key) {
+        if (c101 === " ") {
           this.value = !this.value;
-        } else if (c99 === "1") {
+        } else if (c101 === "1") {
           this.value = true;
-        } else if (c99 === "0") {
+        } else if (c101 === "0") {
           this.value = false;
         } else return this.bell();
         this.render();
@@ -41485,9 +41485,9 @@ var require_date = __commonJS({
         this.moveCursor(next ? this.parts.indexOf(next) : this.parts.findIndex((part) => part instanceof DatePart));
         this.render();
       }
-      _(c99) {
-        if (/\d/.test(c99)) {
-          this.typed += c99;
+      _(c101) {
+        if (/\d/.test(c101)) {
+          this.typed += c101;
           this.parts[this.cursor].setTo(this.typed);
           this.render();
         }
@@ -41596,8 +41596,8 @@ var require_number = __commonJS({
       parse(x2) {
         return this.float ? parseFloat(x2) : parseInt(x2);
       }
-      valid(c99) {
-        return c99 === `-` || c99 === `.` && this.float || isNumber.test(c99);
+      valid(c101) {
+        return c101 === `-` || c101 === `.` && this.float || isNumber.test(c101);
       }
       reset() {
         this.typed = ``;
@@ -41690,14 +41690,14 @@ var require_number = __commonJS({
         this.fire();
         this.render();
       }
-      _(c99, key) {
-        if (!this.valid(c99)) return this.bell();
+      _(c101, key) {
+        if (!this.valid(c101)) return this.bell();
         const now = Date.now();
         if (now - this.lastHit > 1e3) this.typed = ``;
-        this.typed += c99;
+        this.typed += c101;
         this.lastHit = now;
         this.color = `cyan`;
-        if (c99 === `.`) return this.fire();
+        if (c101 === `.`) return this.fire();
         this.value = Math.min(this.parse(this.typed), this.max);
         if (this.value > this.max) this.value = this.max;
         if (this.value < this.min) this.value = this.min;
@@ -41861,10 +41861,10 @@ var require_multiselect = __commonJS({
         this.value.filter((v) => !v.disabled).forEach((v) => v.selected = newSelected);
         this.render();
       }
-      _(c99, key) {
-        if (c99 === " ") {
+      _(c101, key) {
+        if (c101 === " ") {
           this.handleSpaceToggle();
-        } else if (c99 === "a") {
+        } else if (c101 === "a") {
           this.toggleAll();
         } else {
           return this.bell();
@@ -42105,10 +42105,10 @@ var require_autocomplete = __commonJS({
         this.out.write("\n");
         this.close();
       }
-      _(c99, key) {
+      _(c101, key) {
         let s1 = this.input.slice(0, this.cursor);
         let s2 = this.input.slice(this.cursor);
-        this.input = `${s1}${c99}${s2}`;
+        this.input = `${s1}${c101}${s2}`;
         this.cursor = s1.length + 1;
         this.complete(this.render);
         this.render();
@@ -42308,15 +42308,15 @@ var require_autocompleteMultiselect = __commonJS({
           this.render();
         }
       }
-      handleInputChange(c99) {
-        this.inputValue = this.inputValue + c99;
+      handleInputChange(c101) {
+        this.inputValue = this.inputValue + c101;
         this.updateFilteredOptions();
       }
-      _(c99, key) {
-        if (c99 === " ") {
+      _(c101, key) {
+        if (c101 === " ") {
           this.handleSpaceToggle();
         } else {
-          this.handleInputChange(c99);
+          this.handleInputChange(c101);
         }
       }
       renderInstructions() {
@@ -42422,12 +42422,12 @@ var require_confirm = __commonJS({
         this.out.write("\n");
         this.close();
       }
-      _(c99, key) {
-        if (c99.toLowerCase() === "y") {
+      _(c101, key) {
+        if (c101.toLowerCase() === "y") {
           this.value = true;
           return this.submit();
         }
-        if (c99.toLowerCase() === "n") {
+        if (c101.toLowerCase() === "n") {
           this.value = false;
           return this.submit();
         }
@@ -42868,7 +42868,7 @@ var require_style2 = __commonJS({
   "../../node_modules/.pnpm/prompts@2.4.2/node_modules/prompts/lib/util/style.js"(exports, module2) {
     "use strict";
     init_esm_shims();
-    var c99 = require_kleur();
+    var c101 = require_kleur();
     var figures = require_figures2();
     var styles3 = Object.freeze({
       password: { scale: 1, render: (input) => "*".repeat(input.length) },
@@ -42878,14 +42878,14 @@ var require_style2 = __commonJS({
     });
     var render = (type) => styles3[type] || styles3.default;
     var symbols = Object.freeze({
-      aborted: c99.red(figures.cross),
-      done: c99.green(figures.tick),
-      exited: c99.yellow(figures.cross),
-      default: c99.cyan("?")
+      aborted: c101.red(figures.cross),
+      done: c101.green(figures.tick),
+      exited: c101.yellow(figures.cross),
+      default: c101.cyan("?")
     });
     var symbol2 = (done, aborted2, exited) => aborted2 ? symbols.aborted : exited ? symbols.exited : done ? symbols.done : symbols.default;
-    var delimiter = (completing) => c99.gray(completing ? figures.ellipsis : figures.pointerSmall);
-    var item = (expandable, expanded) => c99.gray(expandable ? expanded ? figures.pointerSmall : "+" : figures.line);
+    var delimiter = (completing) => c101.gray(completing ? figures.ellipsis : figures.pointerSmall);
+    var item = (expandable, expanded) => c101.gray(expandable ? expanded ? figures.pointerSmall : "+" : figures.line);
     module2.exports = {
       styles: styles3,
       render,
@@ -43118,10 +43118,10 @@ var require_text2 = __commonJS({
         this.cursor = this.cursor + n;
         this.cursorOffset += n;
       }
-      _(c99, key) {
+      _(c101, key) {
         let s1 = this.value.slice(0, this.cursor);
         let s2 = this.value.slice(this.cursor);
-        this.value = `${s1}${c99}${s2}`;
+        this.value = `${s1}${c101}${s2}`;
         this.red = false;
         this.cursor = this.placeholder ? 0 : s1.length + 1;
         this.render();
@@ -43295,8 +43295,8 @@ var require_select2 = __commonJS({
         this.moveCursor((this.cursor + 1) % this.choices.length);
         this.render();
       }
-      _(c99, key) {
-        if (c99 === " ") return this.submit();
+      _(c101, key) {
+        if (c101 === " ") return this.submit();
       }
       get selection() {
         return this.choices[this.cursor];
@@ -43420,12 +43420,12 @@ var require_toggle2 = __commonJS({
         this.fire();
         this.render();
       }
-      _(c99, key) {
-        if (c99 === " ") {
+      _(c101, key) {
+        if (c101 === " ") {
           this.value = !this.value;
-        } else if (c99 === "1") {
+        } else if (c101 === "1") {
           this.value = true;
-        } else if (c99 === "0") {
+        } else if (c101 === "0") {
           this.value = false;
         } else return this.bell();
         this.render();
@@ -43881,9 +43881,9 @@ var require_date2 = __commonJS({
         this.moveCursor(next ? this.parts.indexOf(next) : this.parts.findIndex((part) => part instanceof DatePart));
         this.render();
       }
-      _(c99) {
-        if (/\d/.test(c99)) {
-          this.typed += c99;
+      _(c101) {
+        if (/\d/.test(c101)) {
+          this.typed += c101;
           this.parts[this.cursor].setTo(this.typed);
           this.render();
         }
@@ -43965,8 +43965,8 @@ var require_number2 = __commonJS({
       parse(x2) {
         return this.float ? parseFloat(x2) : parseInt(x2);
       }
-      valid(c99) {
-        return c99 === `-` || c99 === `.` && this.float || isNumber.test(c99);
+      valid(c101) {
+        return c101 === `-` || c101 === `.` && this.float || isNumber.test(c101);
       }
       reset() {
         this.typed = ``;
@@ -44053,14 +44053,14 @@ var require_number2 = __commonJS({
         this.fire();
         this.render();
       }
-      _(c99, key) {
-        if (!this.valid(c99)) return this.bell();
+      _(c101, key) {
+        if (!this.valid(c101)) return this.bell();
         const now = Date.now();
         if (now - this.lastHit > 1e3) this.typed = ``;
-        this.typed += c99;
+        this.typed += c101;
         this.lastHit = now;
         this.color = `cyan`;
-        if (c99 === `.`) return this.fire();
+        if (c101 === `.`) return this.fire();
         this.value = Math.min(this.parse(this.typed), this.max);
         if (this.value > this.max) this.value = this.max;
         if (this.value < this.min) this.value = this.min;
@@ -44222,10 +44222,10 @@ var require_multiselect2 = __commonJS({
         this.value.filter((v) => !v.disabled).forEach((v) => v.selected = newSelected);
         this.render();
       }
-      _(c99, key) {
-        if (c99 === " ") {
+      _(c101, key) {
+        if (c101 === " ") {
           this.handleSpaceToggle();
-        } else if (c99 === "a") {
+        } else if (c101 === "a") {
           this.toggleAll();
         } else {
           return this.bell();
@@ -44422,10 +44422,10 @@ var require_autocomplete2 = __commonJS({
         this.out.write("\n");
         this.close();
       }
-      _(c99, key) {
+      _(c101, key) {
         let s1 = this.input.slice(0, this.cursor);
         let s2 = this.input.slice(this.cursor);
-        this.input = `${s1}${c99}${s2}`;
+        this.input = `${s1}${c101}${s2}`;
         this.cursor = s1.length + 1;
         this.complete(this.render);
         this.render();
@@ -44628,15 +44628,15 @@ var require_autocompleteMultiselect2 = __commonJS({
           this.render();
         }
       }
-      handleInputChange(c99) {
-        this.inputValue = this.inputValue + c99;
+      handleInputChange(c101) {
+        this.inputValue = this.inputValue + c101;
         this.updateFilteredOptions();
       }
-      _(c99, key) {
-        if (c99 === " ") {
+      _(c101, key) {
+        if (c101 === " ") {
           this.handleSpaceToggle();
         } else {
-          this.handleInputChange(c99);
+          this.handleInputChange(c101);
         }
       }
       renderInstructions() {
@@ -44743,12 +44743,12 @@ var require_confirm2 = __commonJS({
         this.out.write("\n");
         this.close();
       }
-      _(c99, key) {
-        if (c99.toLowerCase() === "y") {
+      _(c101, key) {
+        if (c101.toLowerCase() === "y") {
           this.value = true;
           return this.submit();
         }
-        if (c99.toLowerCase() === "n") {
+        if (c101.toLowerCase() === "n") {
           this.value = false;
           return this.submit();
         }
@@ -45634,9 +45634,9 @@ var require_Alias = __commonJS({
       } else if (identity.isCollection(node2)) {
         let count = 0;
         for (const item of node2.items) {
-          const c99 = getAliasCount(doc, item, anchors2);
-          if (c99 > count)
-            count = c99;
+          const c101 = getAliasCount(doc, item, anchors2);
+          if (c101 > count)
+            count = c101;
         }
         return count;
       } else if (identity.isPair(node2)) {
@@ -53176,8 +53176,8 @@ function _htmlElementAsString(el, keyAttrs) {
     const className = elem.className;
     if (className && isString(className)) {
       const classes = className.split(/\s+/);
-      for (const c99 of classes) {
-        out.push(`.${c99}`);
+      for (const c101 of classes) {
+        out.push(`.${c101}`);
       }
     }
   }
@@ -53409,9 +53409,9 @@ function uuid4(crypto = getCrypto()) {
   }
   return emptyUuid.replace(
     /[018]/g,
-    (c99) => (
+    (c101) => (
       // eslint-disable-next-line no-bitwise
-      (c99 ^ (getRandomByte() & 15) >> c99 / 4).toString(16)
+      (c101 ^ (getRandomByte() & 15) >> c101 / 4).toString(16)
     )
   );
 }
@@ -72468,16 +72468,16 @@ var HonoInstrumentation = class extends InstrumentationBase {
    */
   _wrapHandler(handler) {
     const instrumentation = this;
-    return function(c99, next) {
+    return function(c101, next) {
       if (!instrumentation.isEnabled()) {
-        return handler.apply(this, [c99, next]);
+        return handler.apply(this, [c101, next]);
       }
-      const path3 = c99.req.path;
+      const path3 = c101.req.path;
       const span = instrumentation.tracer.startSpan(path3);
       return context.with(trace.setSpan(context.active(), span), () => {
         return instrumentation._safeExecute(
           () => {
-            const result = handler.apply(this, [c99, next]);
+            const result = handler.apply(this, [c101, next]);
             if (isThenable(result)) {
               return result.then((result2) => {
                 const type = instrumentation._determineHandlerType(result2);
@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.150.5",
+    release: "9.150.7",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.150.5",
+    version: "9.150.7",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -77348,7 +77348,7 @@ var $ZodBase64 = /* @__PURE__ */ $constructor("$ZodBase64", (inst, def) => {
 function isValidBase64URL(data) {
   if (!base64url.test(data))
     return false;
-  const base643 = data.replace(/[-_]/g, (c99) => c99 === "-" ? "+" : "/");
+  const base643 = data.replace(/[-_]/g, (c101) => c101 === "-" ? "+" : "/");
   const padded = base643.padEnd(Math.ceil(base643.length / 4) * 4, "=");
   return isValidBase64(padded);
 }
@@ -87459,9 +87459,9 @@ var ZodDate = /* @__PURE__ */ $constructor("ZodDate", (inst, def) => {
   inst._zod.processJSONSchema = (ctx, json2, params) => dateProcessor(inst, ctx, json2, params);
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.max = (value, params) => inst.check(_lte(value, params));
-  const c99 = inst._zod.bag;
-  inst.minDate = c99.minimum ? new Date(c99.minimum) : null;
-  inst.maxDate = c99.maximum ? new Date(c99.maximum) : null;
+  const c101 = inst._zod.bag;
+  inst.minDate = c101.minimum ? new Date(c101.minimum) : null;
+  inst.maxDate = c101.maximum ? new Date(c101.maximum) : null;
 });
 function date3(params) {
   return _date(ZodDate, params);
@@ -95787,6 +95787,7 @@ var MODEL_PROVIDER_TYPES = {
       CLAUDE_CODE_SUBAGENT_MODEL: "$model"
     },
     models: [
+      "anthropic/claude-opus-4.7",
       "anthropic/claude-opus-4.6",
       "anthropic/claude-opus-4.5",
       "anthropic/claude-sonnet-4.6",
@@ -95799,6 +95800,53 @@ var MODEL_PROVIDER_TYPES = {
     ],
     defaultModel: "anthropic/claude-sonnet-4.6"
   },
+  // Codex-framework twin of openrouter-api-key. Same upstream gateway (OpenRouter)
+  // and same API key (shared secretName), but routes through OpenRouter's
+  // OpenAI-compatible endpoint surface for GPT models that codex CLI requires.
+  // Pairing rule: the claude-code entry serves Anthropic Messages API
+  // (/v1/messages); this codex entry serves OpenAI Chat Completions / Responses
+  // (/v1/chat/completions, /v1/responses) under the same /api/v1 prefix.
+  "openrouter-codex": {
+    framework: "codex",
+    secretName: "OPENROUTER_API_KEY",
+    label: "OpenRouter (Codex)",
+    secretLabel: "API key",
+    helpText: "Get your API key at: https://openrouter.ai/settings/keys",
+    environmentMapping: {
+      OPENAI_API_KEY: "$secret",
+      OPENAI_BASE_URL: "https://openrouter.ai/api/v1",
+      OPENAI_MODEL: "$model"
+    },
+    models: [
+      "openai/gpt-5.5",
+      "openai/gpt-5.4",
+      "openai/gpt-5.4-mini"
+    ],
+    defaultModel: "openai/gpt-5.5"
+  },
+  // Codex-framework twin of vercel-ai-gateway. Vercel exposes both
+  // Anthropic Messages and OpenAI Chat Completions / Responses on the same
+  // base URL, distinguished by path. The claude-code entry uses /v1/messages;
+  // this codex entry uses /v1/chat/completions or /v1/responses (codex CLI
+  // picks the path it needs).
+  "vercel-ai-gateway-codex": {
+    framework: "codex",
+    secretName: "VERCEL_AI_GATEWAY_API_KEY",
+    label: "Vercel AI Gateway (Codex)",
+    secretLabel: "API key",
+    helpText: "Get your API key from the Vercel AI Gateway dashboard",
+    environmentMapping: {
+      OPENAI_API_KEY: "$secret",
+      OPENAI_BASE_URL: "https://ai-gateway.vercel.sh/v1",
+      OPENAI_MODEL: "$model"
+    },
+    models: [
+      "openai/gpt-5.5",
+      "openai/gpt-5.4",
+      "openai/gpt-5.4-mini"
+    ],
+    defaultModel: "openai/gpt-5.5"
+  },
   "openai-api-key": {
     framework: "codex",
     secretName: "OPENAI_API_KEY",
@@ -96029,6 +96077,10 @@ function getFirewallBaseUrl(type) {
     return "https://chatgpt.com/backend-api/codex";
   }
   if (getFrameworkForType(type) === "codex") {
+    const overrideBase = getEnvironmentMapping(type)?.OPENAI_BASE_URL;
+    if (overrideBase) {
+      return overrideBase.replace(/\/+$/, "");
+    }
     return "https://api.openai.com/v1/responses";
   }
   const base = (getEnvironmentMapping(type)?.ANTHROPIC_BASE_URL ?? ANTHROPIC_API_BASE).replace(/\/+$/, "");
@@ -96114,6 +96166,25 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
     { name: "Authorization", valuePrefix: "Bearer" },
     "sk-CoffeeSafeLocalCoffeeSafeLocalCo"
   ),
+  // Codex-framework twin of openrouter-api-key. Same key shape as the
+  // claude-code entry; the difference is the firewall base URL — codex
+  // SDK hits OpenAI-compatible paths (/chat/completions, /responses)
+  // under https://openrouter.ai/api/v1, derived from the OPENAI_BASE_URL
+  // mapping by getFirewallBaseUrl.
+  "openrouter-codex": mpFirewall(
+    "openrouter-codex",
+    { name: "Authorization", valuePrefix: "Bearer" },
+    "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"
+  ),
+  // Codex-framework twin of vercel-ai-gateway. Same placeholder format
+  // (Vercel gateway proxies upstream); base URL scoped to /v1 prefix by
+  // getFirewallBaseUrl so codex can use either /chat/completions or
+  // /responses paths the gateway exposes.
+  "vercel-ai-gateway-codex": mpFirewall(
+    "vercel-ai-gateway-codex",
+    { name: "Authorization", valuePrefix: "Bearer" },
+    "sk-CoffeeSafeLocalCoffeeSafeLocalCo"
+  ),
   // Placeholder: sk-proj-{156 chars}T3BlbkFJ{156 chars} (typical project key shape)
   // Source: matches turbo/packages/connectors/src/firewalls/openai.generated.ts
   "openai-api-key": mpFirewall(
@@ -96190,6 +96261,8 @@ var modelProviderTypeSchema = external_exports.enum([
   "deepseek-api-key",
   "zai-api-key",
   "vercel-ai-gateway",
+  "openrouter-codex",
+  "vercel-ai-gateway-codex",
   "openai-api-key",
   "codex-oauth-token",
   "azure-foundry",
@@ -98736,6 +98809,28 @@ var reportei = {
   }
 };
 
+// ../../packages/connectors/src/connectors/local-browser.ts
+init_esm_shims();
+var localBrowser = {
+  "local-browser": {
+    label: "Local Browser",
+    category: "data-automation-infrastructure",
+    environmentMapping: {},
+    featureFlag: "localBrowserUse" /* LocalBrowserUse */,
+    strictFeatureFlag: true,
+    helpText: "Connect a local browser extension so Zero can use user-authorized browser context and page controls",
+    authMethods: {
+      api: {
+        label: "Browser Extension",
+        helpText: "1. Install the Zero Local Browser extension\n2. Pair the extension with your Zero account\n3. Keep the extension connected, then return here and click **Connect** once it appears online",
+        secrets: {}
+      }
+    },
+    defaultAuthMethod: "api",
+    tags: ["browser", "chrome", "extension", "local", "web"]
+  }
+};
+
 // ../../packages/connectors/src/connectors/remote-agent.ts
 init_esm_shims();
 var remoteAgent = {
@@ -103064,6 +103159,79 @@ var square = {
   }
 };
 
+// ../../packages/connectors/src/connectors/gong.ts
+init_esm_shims();
+var gong = {
+  gong: {
+    label: "Gong",
+    category: "sales-crm-business-operations",
+    tags: ["sales", "calls", "transcripts", "revenue-intelligence"],
+    environmentMapping: {
+      GONG_ACCESS_KEY: "$secrets.GONG_ACCESS_KEY",
+      GONG_ACCESS_KEY_SECRET: "$secrets.GONG_ACCESS_KEY_SECRET",
+      GONG_API_BASE: "$vars.GONG_API_BASE"
+    },
+    helpText: "Connect your Gong account to access calls, transcripts, users, and revenue intelligence data",
+    authMethods: {
+      "api-token": {
+        label: "Access Key",
+        helpText: "1. In Gong, go to **Company Settings \u2192 Ecosystem \u2192 API** (requires the Technical Administrator permission profile)\n2. Click **Create** to generate an Access Key and Access Key Secret\n3. Copy both values \u2014 the secret is shown only once\n4. Copy the **API Base URL** shown on the same screen (e.g. `api.gong.io`, or your region-specific host)",
+        secrets: {
+          GONG_ACCESS_KEY: {
+            label: "Access Key",
+            required: true
+          },
+          GONG_ACCESS_KEY_SECRET: {
+            label: "Access Key Secret",
+            required: true
+          },
+          GONG_API_BASE: {
+            label: "API Base URL",
+            required: true,
+            type: "variable",
+            placeholder: "api.gong.io"
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-token"
+  }
+};
+
+// ../../packages/connectors/src/connectors/ironclad.ts
+init_esm_shims();
+var ironclad = {
+  ironclad: {
+    label: "Ironclad",
+    category: "sales-crm-business-operations",
+    tags: ["contracts", "clm", "workflows", "legal"],
+    environmentMapping: {
+      IRONCLAD_API_KEY: "$secrets.IRONCLAD_API_KEY",
+      IRONCLAD_HOST: "$vars.IRONCLAD_HOST"
+    },
+    helpText: "Connect your Ironclad account to manage contract workflows, records, and documents",
+    authMethods: {
+      "api-token": {
+        label: "API Key",
+        helpText: "1. In Ironclad, go to **Company Settings \u2192 API**\n2. Generate an API key and copy it\n3. Set the API host to match your instance's data region: `ironcladapp.com` (North America), `eu1.ironcladapp.com` (Europe), or `demo.ironcladapp.com` (demo)",
+        secrets: {
+          IRONCLAD_API_KEY: {
+            label: "API Key",
+            required: true
+          },
+          IRONCLAD_HOST: {
+            label: "API Host",
+            required: true,
+            type: "variable",
+            placeholder: "ironcladapp.com"
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-token"
+  }
+};
+
 // ../../packages/connectors/src/connectors.ts
 var CONNECTOR_TYPES_DEF = {
   ...axiom,
@@ -103118,6 +103286,7 @@ var CONNECTOR_TYPES_DEF = {
   ...mercury,
   ...minimax,
   ...reportei,
+  ...localBrowser,
   ...remoteAgent,
   ...serpapi,
   ...salesforce,
@@ -103252,7 +103421,9 @@ var CONNECTOR_TYPES_DEF = {
   ...servicenow,
   ...testrail,
   ...twilio,
-  ...square
+  ...square,
+  ...gong,
+  ...ironclad
 };
 var CONNECTOR_TYPES = CONNECTOR_TYPES_DEF;
 var connectorTypeSchema = external_exports.enum(
@@ -103386,7 +103557,7 @@ var zeroConnectorAuthorizeContract = c16.router({
     summary: "Start connector OAuth authorization (zero proxy)"
   }
 });
-var connectorSearchAuthMethodSchema = external_exports.enum(["oauth", "api-token"]);
+var connectorSearchAuthMethodSchema = external_exports.enum(["oauth", "api-token", "api"]);
 var connectorSearchItemSchema = external_exports.object({
   id: external_exports.string(),
   label: external_exports.string(),
@@ -103496,6 +103667,22 @@ var zeroRemoteAgentConnectorContract = c16.router({
     summary: "Connect remote-agent connector"
   }
 });
+var zeroLocalBrowserConnectorContract = c16.router({
+  create: {
+    method: "POST",
+    path: "/api/zero/connectors/local-browser",
+    headers: authHeadersSchema,
+    body: external_exports.object({}).optional(),
+    responses: {
+      200: connectorResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Connect local-browser connector"
+  }
+});
 
 // src/lib/api/domains/zero-connectors.ts
 async function listZeroConnectors() {
@@ -103633,6 +103820,27 @@ var integrationsPhoneMessageContract = c17.router({
     summary: "Send an AgentPhone message"
   }
 });
+var phoneDownloadFileQuerySchema = external_exports.object({
+  file_id: external_exports.string().min(1, "file_id query parameter is required")
+});
+var integrationsPhoneDownloadFileContract = c17.router({
+  download: {
+    method: "GET",
+    path: "/api/zero/integrations/phone/download-file",
+    headers: authHeadersSchema,
+    query: phoneDownloadFileQuerySchema,
+    responses: {
+      200: c17.type(),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      413: apiErrorSchema,
+      502: apiErrorSchema
+    },
+    summary: "Download an AgentPhone media attachment"
+  }
+});
 var telegramBotTokenStatusSchema = external_exports.enum(["valid", "invalid", "unknown"]);
 var telegramConnectedUserSchema = external_exports.object({
   telegramUserId: external_exports.string(),
@@ -104403,17 +104611,229 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/webhooks.ts
 init_esm_shims();
+
+// ../../packages/api-contracts/src/contracts/runners.ts
+init_esm_shims();
 var c19 = initContract();
+var runnerGroupSchema = external_exports.string().regex(
+  /^[a-z0-9-]+\/[a-z0-9-]+$/,
+  "Runner group must be in vm0/<name> format (e.g., vm0/production)"
+);
+var jobSchema = external_exports.object({
+  runId: external_exports.uuid(),
+  prompt: external_exports.string(),
+  appendSystemPrompt: external_exports.string().nullable(),
+  agentComposeVersionId: external_exports.string().nullable(),
+  vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  checkpointId: external_exports.uuid().nullable(),
+  experimentalProfile: external_exports.string().optional()
+});
+var runnersPollContract = c19.router({
+  poll: {
+    method: "POST",
+    path: "/api/runners/poll",
+    headers: authHeadersSchema,
+    body: external_exports.object({
+      group: runnerGroupSchema,
+      profiles: external_exports.array(external_exports.string()).optional(),
+      heldSessions: external_exports.array(external_exports.string()).max(100).optional()
+    }),
+    responses: {
+      200: external_exports.object({
+        job: jobSchema.nullable()
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Poll for pending jobs (long-polling with 30s timeout)"
+  }
+});
+var storageEntrySchema = external_exports.object({
+  name: external_exports.string(),
+  mountPath: external_exports.string(),
+  vasStorageName: external_exports.string(),
+  vasVersionId: external_exports.string(),
+  instructionsTargetFilename: external_exports.string().optional(),
+  archiveUrl: external_exports.string()
+});
+var artifactEntrySchema = external_exports.object({
+  mountPath: external_exports.string(),
+  vasStorageName: external_exports.string(),
+  vasStorageId: external_exports.string(),
+  vasVersionId: external_exports.string(),
+  archiveUrl: external_exports.string(),
+  manifestUrl: external_exports.string().optional()
+});
+var storageManifestSchema = external_exports.object({
+  storages: external_exports.array(storageEntrySchema),
+  artifacts: external_exports.array(artifactEntrySchema)
+});
+var resumeSessionSchema = external_exports.object({
+  sessionId: external_exports.string(),
+  sessionHistory: external_exports.string()
+});
+var secretConnectorMetadataSchema = external_exports.object({
+  sourceType: external_exports.enum(["connector", "model-provider"]),
+  sourceUserId: external_exports.string().optional(),
+  metadataKey: external_exports.string().optional()
+});
+var secretConnectorMetadataMapSchema = external_exports.record(
+  external_exports.string(),
+  secretConnectorMetadataSchema
+);
+var storedExecutionContextSchema = external_exports.object({
+  workingDir: external_exports.string(),
+  storageManifest: storageManifestSchema.nullable(),
+  environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  resumeSession: resumeSessionSchema.nullable(),
+  encryptedSecrets: external_exports.string().nullable(),
+  // AES-256-GCM encrypted Record<string, string> (secret name → value)
+  // Maps secret names to OAuth connector types for runtime token refresh (e.g. { "GMAIL_ACCESS_TOKEN": "gmail" })
+  secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
+  // Per-secret refresh metadata, used when a handler needs owner-specific storage (e.g. personal model providers)
+  secretConnectorMetadataMap: secretConnectorMetadataMapSchema.nullable().optional(),
+  cliAgentType: external_exports.string(),
+  // Debug flag to force real Claude in mock environments (internal use only)
+  debugNoMockClaude: external_exports.boolean().optional(),
+  // Debug flag to force real Codex in mock environments (internal use only)
+  debugNoMockCodex: external_exports.boolean().optional(),
+  // Capture HTTP request headers, request bodies, and response bodies in network logs
+  captureNetworkBodies: external_exports.boolean().optional(),
+  // Dispatch timestamp for E2E timing metrics
+  apiStartTime: external_exports.number().optional(),
+  // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
+  userTimezone: external_exports.string().optional(),
+  // Firewall for proxy-side token replacement (complete config, all permissions)
+  firewalls: firewallsSchema.optional(),
+  // Per-firewall network policies: which permissions are granted + unknownPolicy
+  networkPolicies: networkPoliciesSchema.optional(),
+  // Tools to disable in Claude CLI (passed as --disallowed-tools)
+  disallowedTools: external_exports.array(external_exports.string()).optional(),
+  // Tools to make available in Claude CLI (passed as --tools)
+  tools: external_exports.array(external_exports.string()).optional(),
+  // Settings JSON to pass to Claude CLI (passed as --settings)
+  settings: external_exports.string().optional(),
+  // VM profile for resource allocation (e.g., "vm0/default")
+  experimentalProfile: external_exports.string().optional(),
+  // Feature flags evaluated at job creation time (all switch states for user/org)
+  featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
+  billableFirewalls: external_exports.array(external_exports.string()).optional(),
+  modelUsageProvider: external_exports.string().optional()
+});
+var executionContextSchema = external_exports.object({
+  runId: external_exports.uuid(),
+  prompt: external_exports.string(),
+  appendSystemPrompt: external_exports.string().nullable(),
+  agentComposeVersionId: external_exports.string().nullable(),
+  vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  checkpointId: external_exports.uuid().nullable(),
+  sandboxToken: external_exports.string(),
+  // New fields for E2B parity:
+  workingDir: external_exports.string(),
+  storageManifest: storageManifestSchema.nullable(),
+  environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  resumeSession: resumeSessionSchema.nullable(),
+  secretValues: external_exports.array(external_exports.string()).nullable(),
+  // AES-256-GCM encrypted Record<string, string> — passed through to mitm-addon for auth resolution
+  encryptedSecrets: external_exports.string().nullable(),
+  // Maps secret names to OAuth connector types for runtime token refresh
+  secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
+  // Per-secret refresh metadata, used when a handler needs owner-specific storage (e.g. personal model providers)
+  secretConnectorMetadataMap: secretConnectorMetadataMapSchema.nullable().optional(),
+  cliAgentType: external_exports.string(),
+  // Debug flag to force real Claude in mock environments (internal use only)
+  debugNoMockClaude: external_exports.boolean().optional(),
+  // Debug flag to force real Codex in mock environments (internal use only)
+  debugNoMockCodex: external_exports.boolean().optional(),
+  // Capture HTTP request headers, request bodies, and response bodies in network logs
+  captureNetworkBodies: external_exports.boolean().optional(),
+  // Dispatch timestamp for E2E timing metrics
+  apiStartTime: external_exports.number().optional(),
+  // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
+  userTimezone: external_exports.string().optional(),
+  // Firewall for proxy-side token replacement (complete config, all permissions)
+  firewalls: firewallsSchema.optional(),
+  // Per-firewall network policies: which permissions are granted + unknownPolicy
+  networkPolicies: networkPoliciesSchema.optional(),
+  // Tools to disable in Claude CLI (passed as --disallowed-tools)
+  disallowedTools: external_exports.array(external_exports.string()).optional(),
+  // Tools to make available in Claude CLI (passed as --tools)
+  tools: external_exports.array(external_exports.string()).optional(),
+  // Settings JSON to pass to Claude CLI (passed as --settings)
+  settings: external_exports.string().optional(),
+  // VM profile for resource allocation (e.g., "vm0/default")
+  experimentalProfile: external_exports.string().optional(),
+  // Feature flags evaluated at job creation time (all switch states for user/org)
+  featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
+  billableFirewalls: external_exports.array(external_exports.string()).optional(),
+  modelUsageProvider: external_exports.string().optional()
+});
+var runnersJobClaimContract = c19.router({
+  claim: {
+    method: "POST",
+    path: "/api/runners/jobs/:id/claim",
+    headers: authHeadersSchema,
+    pathParams: external_exports.object({
+      id: external_exports.uuid()
+    }),
+    body: external_exports.object({}),
+    responses: {
+      200: executionContextSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      // Job does not belong to user
+      404: apiErrorSchema,
+      409: apiErrorSchema,
+      // Already claimed
+      500: apiErrorSchema
+    },
+    summary: "Claim a pending job for execution"
+  }
+});
+var heartbeatBodySchema = external_exports.object({
+  runnerId: external_exports.uuid(),
+  runnerName: external_exports.string(),
+  group: runnerGroupSchema,
+  profiles: external_exports.array(external_exports.string()),
+  totalVcpu: external_exports.number().int().nonnegative(),
+  totalMemoryMb: external_exports.number().int().nonnegative(),
+  maxConcurrent: external_exports.number().int().nonnegative(),
+  allocatedVcpu: external_exports.number().int().nonnegative(),
+  allocatedMemoryMb: external_exports.number().int().nonnegative(),
+  runningCount: external_exports.number().int().nonnegative(),
+  heldSessions: external_exports.array(external_exports.string()),
+  mode: external_exports.enum(["running", "draining", "stopping"])
+});
+var runnersHeartbeatContract = c19.router({
+  heartbeat: {
+    method: "POST",
+    path: "/api/runners/heartbeat",
+    headers: authHeadersSchema,
+    body: heartbeatBodySchema,
+    responses: {
+      200: external_exports.object({ ok: external_exports.literal(true) }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Report runner heartbeat with capacity and state"
+  }
+});
+
+// ../../packages/api-contracts/src/contracts/webhooks.ts
+var c20 = initContract();
 var thirdPartyWebhookErrorSchema = external_exports.object({ error: external_exports.string() });
 var thirdPartyWebhookOkSchema = external_exports.union([
   external_exports.string(),
   external_exports.object({ message: external_exports.literal("pong") })
 ]);
-var webhookClerkContract = c19.router({
+var webhookClerkContract = c20.router({
   post: {
     method: "POST",
     path: "/api/webhooks/clerk",
-    body: c19.type(),
+    body: c20.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       401: thirdPartyWebhookErrorSchema
@@ -104421,11 +104841,11 @@ var webhookClerkContract = c19.router({
     summary: "Handle Clerk organization and user webhooks"
   }
 });
-var webhookGithubContract = c19.router({
+var webhookGithubContract = c20.router({
   post: {
     method: "POST",
     path: "/api/webhooks/github",
-    body: c19.type(),
+    body: c20.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -104435,11 +104855,11 @@ var webhookGithubContract = c19.router({
     summary: "Handle GitHub App webhooks"
   }
 });
-var webhookStripeContract = c19.router({
+var webhookStripeContract = c20.router({
   post: {
     method: "POST",
     path: "/api/webhooks/stripe",
-    body: c19.type(),
+    body: c20.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       401: thirdPartyWebhookErrorSchema,
@@ -104470,7 +104890,54 @@ var artifactSnapshotsSchema2 = external_exports.array(
 var volumeVersionsSnapshotSchema2 = external_exports.object({
   versions: external_exports.record(external_exports.string(), external_exports.string())
 });
-var webhookEventsContract = c19.router({
+var firewallAuthErrorSchema = external_exports.object({
+  error: external_exports.object({
+    message: external_exports.string(),
+    code: external_exports.string(),
+    connectors: external_exports.array(external_exports.string()).optional()
+  })
+});
+var firewallAuthResponseSchema = external_exports.object({
+  headers: external_exports.record(external_exports.string(), external_exports.string()),
+  base: external_exports.string().optional(),
+  query: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  expiresAt: external_exports.number().nullable(),
+  resolvedSecrets: external_exports.array(external_exports.string()),
+  refreshedConnectors: external_exports.array(external_exports.string()),
+  refreshedSecrets: external_exports.array(external_exports.string())
+});
+var webhookFirewallAuthContract = c20.router({
+  /**
+   * POST /api/webhooks/agent/firewall/auth
+   * Resolve firewall auth templates and refresh OAuth tokens on demand.
+   */
+  resolve: {
+    method: "POST",
+    path: "/api/webhooks/agent/firewall/auth",
+    headers: authHeadersSchema,
+    body: external_exports.object({
+      encryptedSecrets: external_exports.string().min(1),
+      authHeaders: external_exports.record(external_exports.string(), external_exports.string()),
+      authBase: external_exports.string().optional(),
+      authQuery: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+      secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+      secretConnectorMetadataMap: secretConnectorMetadataMapSchema.optional(),
+      vars: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+      forceRefresh: external_exports.boolean().optional()
+    }),
+    responses: {
+      200: firewallAuthResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      424: firewallAuthErrorSchema,
+      502: firewallAuthErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Resolve firewall auth templates"
+  }
+});
+var webhookEventsContract = c20.router({
   /**
    * POST /api/webhooks/agent/events
    * Receive agent events from sandbox
@@ -104497,7 +104964,7 @@ var webhookEventsContract = c19.router({
     summary: "Receive agent events from sandbox"
   }
 });
-var webhookCompleteContract = c19.router({
+var webhookCompleteContract = c20.router({
   /**
    * POST /api/webhooks/agent/complete
    * Handle agent run completion (success or failure)
@@ -104534,7 +105001,7 @@ var webhookCompleteContract = c19.router({
     summary: "Handle agent run completion"
   }
 });
-var webhookCheckpointsContract = c19.router({
+var webhookCheckpointsContract = c20.router({
   /**
    * POST /api/webhooks/agent/checkpoints
    * Create a recoverable checkpoint for an agent run.
@@ -104573,7 +105040,7 @@ var webhookCheckpointsContract = c19.router({
     summary: "Create checkpoint for agent run"
   }
 });
-var webhookCheckpointsPrepareHistoryContract = c19.router({
+var webhookCheckpointsPrepareHistoryContract = c20.router({
   prepare: {
     method: "POST",
     path: "/api/webhooks/agent/checkpoints/prepare-history",
@@ -104596,7 +105063,7 @@ var webhookCheckpointsPrepareHistoryContract = c19.router({
     summary: "Get presigned URL for uploading session history to S3"
   }
 });
-var webhookHeartbeatContract = c19.router({
+var webhookHeartbeatContract = c20.router({
   /**
    * POST /api/webhooks/agent/heartbeat
    * Receive heartbeat signals from sandbox
@@ -104620,7 +105087,7 @@ var webhookHeartbeatContract = c19.router({
     summary: "Receive heartbeat from sandbox"
   }
 });
-var webhookStoragesContract = c19.router({
+var webhookStoragesContract = c20.router({
   /**
    * POST /api/webhooks/agent/storages
    * Create a new version of a storage from sandbox
@@ -104636,7 +105103,7 @@ var webhookStoragesContract = c19.router({
     path: "/api/webhooks/agent/storages",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c19.type(),
+    body: c20.type(),
     responses: {
       200: external_exports.object({
         versionId: external_exports.string(),
@@ -104652,7 +105119,7 @@ var webhookStoragesContract = c19.router({
     summary: "Upload storage version from sandbox"
   }
 });
-var webhookStoragesIncrementalContract = c19.router({
+var webhookStoragesIncrementalContract = c20.router({
   /**
    * POST /api/webhooks/agent/storages/incremental
    * Create a new version using incremental upload
@@ -104670,7 +105137,7 @@ var webhookStoragesIncrementalContract = c19.router({
     path: "/api/webhooks/agent/storages/incremental",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c19.type(),
+    body: c20.type(),
     responses: {
       200: external_exports.object({
         versionId: external_exports.string(),
@@ -104708,7 +105175,7 @@ var sandboxOperationSchema = external_exports.object({
   success: external_exports.boolean(),
   error: external_exports.string().optional()
 });
-var webhookTelemetryContract = c19.router({
+var webhookTelemetryContract = c20.router({
   /**
    * POST /api/webhooks/agent/telemetry
    * Receive telemetry data (system log, metrics, network logs, and sandbox operations) from sandbox
@@ -104737,7 +105204,7 @@ var webhookTelemetryContract = c19.router({
     summary: "Receive telemetry data from sandbox"
   }
 });
-var webhookStoragesPrepareContract = c19.router({
+var webhookStoragesPrepareContract = c20.router({
   prepare: {
     method: "POST",
     path: "/api/webhooks/agent/storages/prepare",
@@ -104771,7 +105238,7 @@ var webhookStoragesPrepareContract = c19.router({
     summary: "Prepare for direct S3 upload from sandbox"
   }
 });
-var webhookStoragesCommitContract = c19.router({
+var webhookStoragesCommitContract = c20.router({
   commit: {
     method: "POST",
     path: "/api/webhooks/agent/storages/commit",
@@ -104813,7 +105280,7 @@ var webhookUsageEventItemSchema = external_exports.object({
   category: external_exports.string().min(1).max(100),
   quantity: external_exports.number().int().min(0)
 }).strict();
-var webhookUsageEventContract = c19.router({
+var webhookUsageEventContract = c20.router({
   send: {
     method: "POST",
     path: "/api/webhooks/agent/usage-event",
@@ -104849,8 +105316,8 @@ var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   agentId: external_exports.string().optional(),
   modelProvider: external_exports.string().optional()
 });
-var c20 = initContract();
-var zeroRunsMainContract = c20.router({
+var c21 = initContract();
+var zeroRunsMainContract = c21.router({
   create: {
     method: "POST",
     path: "/api/zero/runs",
@@ -104869,7 +105336,7 @@ var zeroRunsMainContract = c20.router({
     summary: "Create and execute agent run (zero proxy)"
   }
 });
-var zeroRunsByIdContract = c20.router({
+var zeroRunsByIdContract = c21.router({
   getById: {
     method: "GET",
     path: "/api/zero/runs/:id",
@@ -104887,7 +105354,7 @@ var zeroRunsByIdContract = c20.router({
     summary: "Get agent run by ID (zero proxy)"
   }
 });
-var zeroRunsCancelContract = c20.router({
+var zeroRunsCancelContract = c21.router({
   cancel: {
     method: "POST",
     path: "/api/zero/runs/:id/cancel",
@@ -104906,7 +105373,7 @@ var zeroRunsCancelContract = c20.router({
     summary: "Cancel a pending or running run (zero proxy)"
   }
 });
-var zeroRunsQueueContract = c20.router({
+var zeroRunsQueueContract = c21.router({
   getQueue: {
     method: "GET",
     path: "/api/zero/runs/queue",
@@ -104919,7 +105386,7 @@ var zeroRunsQueueContract = c20.router({
     summary: "Get org run queue status (zero proxy)"
   }
 });
-var zeroRunAgentEventsContract = c20.router({
+var zeroRunAgentEventsContract = c21.router({
   getAgentEvents: {
     method: "GET",
     path: "/api/zero/runs/:id/telemetry/agent",
@@ -104981,7 +105448,7 @@ var runContextResponseSchema = external_exports.object({
   artifact: runContextArtifactSchema.nullable(),
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).nullable()
 });
-var zeroRunContextContract = c20.router({
+var zeroRunContextContract = c21.router({
   getContext: {
     method: "GET",
     path: "/api/zero/runs/:id/context",
@@ -104999,7 +105466,7 @@ var zeroRunContextContract = c20.router({
     summary: "Get run execution context snapshot for debugging"
   }
 });
-var zeroRunNetworkLogsContract = c20.router({
+var zeroRunNetworkLogsContract = c21.router({
   getNetworkLogs: {
     method: "GET",
     path: "/api/zero/runs/:id/network",
@@ -105025,7 +105492,7 @@ var zeroRunNetworkLogsContract = c20.router({
 var runRunnerResponseSchema = external_exports.object({
   sandboxReuseResult: sandboxReuseResultSchema.nullable()
 });
-var zeroRunRunnerContract = c20.router({
+var zeroRunRunnerContract = c21.router({
   getRunner: {
     method: "GET",
     path: "/api/zero/runs/:id/runner",
@@ -105043,7 +105510,7 @@ var zeroRunRunnerContract = c20.router({
     summary: "Get runner-level metadata for a run"
   }
 });
-var zeroLogsSearchContract = c20.router({
+var zeroLogsSearchContract = c21.router({
   searchLogs: {
     method: "GET",
     path: "/api/zero/logs/search",
@@ -105143,7 +105610,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/chat-threads.ts
 init_esm_shims();
-var c21 = initContract();
+var c22 = initContract();
 var attachFileSchema = external_exports.object({
   id: external_exports.string(),
   filename: external_exports.string(),
@@ -105328,7 +105795,7 @@ var modelSelectionRequestSchema = external_exports.object({
   modelProviderId: external_exports.string().uuid(),
   selectedModel: external_exports.string().min(1)
 });
-var chatThreadsContract = c21.router({
+var chatThreadsContract = c22.router({
   create: {
     method: "POST",
     path: "/api/zero/chat-threads",
@@ -105364,7 +105831,7 @@ var chatThreadsContract = c21.router({
     summary: "List chat threads. When agentId is omitted, returns every thread the caller owns scoped by orgId."
   }
 });
-var chatThreadByIdContract = c21.router({
+var chatThreadByIdContract = c22.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id",
@@ -105387,7 +105854,7 @@ var chatThreadByIdContract = c21.router({
       draftAttachments: external_exports.array(persistedAttachmentSchema).nullable().optional()
     }),
     responses: {
-      204: c21.noBody(),
+      204: c22.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
@@ -105399,21 +105866,21 @@ var chatThreadByIdContract = c21.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string() }),
     responses: {
-      204: c21.noBody(),
+      204: c22.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Delete a chat thread",
-    body: c21.noBody()
+    body: c22.noBody()
   }
 });
-var chatThreadMarkReadContract = c21.router({
+var chatThreadMarkReadContract = c22.router({
   markRead: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/mark-read",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string() }),
-    body: c21.noBody(),
+    body: c22.noBody(),
     responses: {
       200: external_exports.object({
         lastReadMessageId: external_exports.string().nullable(),
@@ -105425,37 +105892,37 @@ var chatThreadMarkReadContract = c21.router({
     summary: "Mark a chat thread as read up to the latest message"
   }
 });
-var chatThreadPinContract = c21.router({
+var chatThreadPinContract = c22.router({
   pin: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/pin",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string() }),
-    body: c21.noBody(),
+    body: c22.noBody(),
     responses: {
-      204: c21.noBody(),
+      204: c22.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Pin a chat thread to the top of the sidebar"
   }
 });
-var chatThreadUnpinContract = c21.router({
+var chatThreadUnpinContract = c22.router({
   unpin: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/unpin",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string() }),
-    body: c21.noBody(),
+    body: c22.noBody(),
     responses: {
-      204: c21.noBody(),
+      204: c22.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Remove the pin from a chat thread"
   }
 });
-var chatThreadRenameContract = c21.router({
+var chatThreadRenameContract = c22.router({
   rename: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/rename",
@@ -105463,14 +105930,14 @@ var chatThreadRenameContract = c21.router({
     pathParams: external_exports.object({ id: external_exports.string() }),
     body: external_exports.object({ title: external_exports.string().min(1) }),
     responses: {
-      204: c21.noBody(),
+      204: c22.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Rename a chat thread (suppresses automated title generation)"
   }
 });
-var chatMessagesContract = c21.router({
+var chatMessagesContract = c22.router({
   send: {
     method: "POST",
     path: "/api/zero/chat/messages",
@@ -105599,7 +106066,7 @@ var chatSearchResponseSchema = external_exports.object({
   results: external_exports.array(chatSearchResultSchema),
   hasMore: external_exports.boolean()
 });
-var chatSearchContract = c21.router({
+var chatSearchContract = c22.router({
   search: {
     method: "GET",
     path: "/api/zero/chat/search",
@@ -105621,7 +106088,7 @@ var chatSearchContract = c21.router({
     summary: "Search chat messages within caller's org (zero proxy)"
   }
 });
-var chatThreadMessagesContract = c21.router({
+var chatThreadMessagesContract = c22.router({
   list: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/messages",
@@ -105643,7 +106110,7 @@ var chatThreadMessagesContract = c21.router({
     summary: "Get paginated chat messages for a thread"
   }
 });
-var chatThreadArtifactsContract = c21.router({
+var chatThreadArtifactsContract = c22.router({
   list: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/artifacts",
@@ -105793,7 +106260,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-developer-support.ts
 init_esm_shims();
-var c22 = initContract();
+var c23 = initContract();
 var developerSupportBodySchema = external_exports.object({
   title: external_exports.string().min(1, "Title is required"),
   description: external_exports.string().min(1, "Description is required"),
@@ -105805,7 +106272,7 @@ var consentCodeResponseSchema = external_exports.object({
 var submitResponseSchema = external_exports.object({
   reference: external_exports.string()
 });
-var zeroDeveloperSupportContract = c22.router({
+var zeroDeveloperSupportContract = c23.router({
   submit: {
     method: "POST",
     path: "/api/zero/developer-support",
@@ -105842,7 +106309,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-computer-use.ts
 init_esm_shims();
-var c23 = initContract();
+var c24 = initContract();
 var registerResponseSchema = external_exports.object({
   id: external_exports.string(),
   domain: external_exports.string(),
@@ -105854,12 +106321,12 @@ var hostResponseSchema = external_exports.object({
   domain: external_exports.string(),
   token: external_exports.string()
 });
-var zeroComputerUseRegisterContract = c23.router({
+var zeroComputerUseRegisterContract = c24.router({
   register: {
     method: "POST",
     path: "/api/zero/computer-use/register",
     headers: authHeadersSchema,
-    body: c23.noBody(),
+    body: c24.noBody(),
     responses: {
       200: registerResponseSchema,
       401: apiErrorSchema,
@@ -105869,14 +106336,14 @@ var zeroComputerUseRegisterContract = c23.router({
     summary: "Register a computer-use host"
   }
 });
-var zeroComputerUseUnregisterContract = c23.router({
+var zeroComputerUseUnregisterContract = c24.router({
   unregister: {
     method: "DELETE",
     path: "/api/zero/computer-use/unregister",
     headers: authHeadersSchema,
-    body: c23.noBody(),
+    body: c24.noBody(),
     responses: {
-      204: c23.noBody(),
+      204: c24.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -105884,7 +106351,7 @@ var zeroComputerUseUnregisterContract = c23.router({
     summary: "Unregister a computer-use host"
   }
 });
-var zeroComputerUseHostContract = c23.router({
+var zeroComputerUseHostContract = c24.router({
   getHost: {
     method: "GET",
     path: "/api/zero/computer-use/host",
@@ -105939,218 +106406,6 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/realtime.ts
 init_esm_shims();
-
-// ../../packages/api-contracts/src/contracts/runners.ts
-init_esm_shims();
-var c24 = initContract();
-var runnerGroupSchema = external_exports.string().regex(
-  /^[a-z0-9-]+\/[a-z0-9-]+$/,
-  "Runner group must be in vm0/<name> format (e.g., vm0/production)"
-);
-var jobSchema = external_exports.object({
-  runId: external_exports.uuid(),
-  prompt: external_exports.string(),
-  appendSystemPrompt: external_exports.string().nullable(),
-  agentComposeVersionId: external_exports.string().nullable(),
-  vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
-  checkpointId: external_exports.uuid().nullable(),
-  experimentalProfile: external_exports.string().optional()
-});
-var runnersPollContract = c24.router({
-  poll: {
-    method: "POST",
-    path: "/api/runners/poll",
-    headers: authHeadersSchema,
-    body: external_exports.object({
-      group: runnerGroupSchema,
-      profiles: external_exports.array(external_exports.string()).optional(),
-      heldSessions: external_exports.array(external_exports.string()).max(100).optional()
-    }),
-    responses: {
-      200: external_exports.object({
-        job: jobSchema.nullable()
-      }),
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      500: apiErrorSchema
-    },
-    summary: "Poll for pending jobs (long-polling with 30s timeout)"
-  }
-});
-var storageEntrySchema = external_exports.object({
-  name: external_exports.string(),
-  mountPath: external_exports.string(),
-  vasStorageName: external_exports.string(),
-  vasVersionId: external_exports.string(),
-  instructionsTargetFilename: external_exports.string().optional(),
-  archiveUrl: external_exports.string()
-});
-var artifactEntrySchema = external_exports.object({
-  mountPath: external_exports.string(),
-  vasStorageName: external_exports.string(),
-  vasStorageId: external_exports.string(),
-  vasVersionId: external_exports.string(),
-  archiveUrl: external_exports.string(),
-  manifestUrl: external_exports.string().optional()
-});
-var storageManifestSchema = external_exports.object({
-  storages: external_exports.array(storageEntrySchema),
-  artifacts: external_exports.array(artifactEntrySchema)
-});
-var resumeSessionSchema = external_exports.object({
-  sessionId: external_exports.string(),
-  sessionHistory: external_exports.string()
-});
-var secretConnectorMetadataSchema = external_exports.object({
-  sourceType: external_exports.enum(["connector", "model-provider"]),
-  sourceUserId: external_exports.string().optional(),
-  metadataKey: external_exports.string().optional()
-});
-var secretConnectorMetadataMapSchema = external_exports.record(
-  external_exports.string(),
-  secretConnectorMetadataSchema
-);
-var storedExecutionContextSchema = external_exports.object({
-  workingDir: external_exports.string(),
-  storageManifest: storageManifestSchema.nullable(),
-  environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
-  resumeSession: resumeSessionSchema.nullable(),
-  encryptedSecrets: external_exports.string().nullable(),
-  // AES-256-GCM encrypted Record<string, string> (secret name → value)
-  // Maps secret names to OAuth connector types for runtime token refresh (e.g. { "GMAIL_ACCESS_TOKEN": "gmail" })
-  secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
-  // Per-secret refresh metadata, used when a handler needs owner-specific storage (e.g. personal model providers)
-  secretConnectorMetadataMap: secretConnectorMetadataMapSchema.nullable().optional(),
-  cliAgentType: external_exports.string(),
-  // Debug flag to force real Claude in mock environments (internal use only)
-  debugNoMockClaude: external_exports.boolean().optional(),
-  // Debug flag to force real Codex in mock environments (internal use only)
-  debugNoMockCodex: external_exports.boolean().optional(),
-  // Capture HTTP request headers, request bodies, and response bodies in network logs
-  captureNetworkBodies: external_exports.boolean().optional(),
-  // Dispatch timestamp for E2E timing metrics
-  apiStartTime: external_exports.number().optional(),
-  // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
-  userTimezone: external_exports.string().optional(),
-  // Firewall for proxy-side token replacement (complete config, all permissions)
-  firewalls: firewallsSchema.optional(),
-  // Per-firewall network policies: which permissions are granted + unknownPolicy
-  networkPolicies: networkPoliciesSchema.optional(),
-  // Tools to disable in Claude CLI (passed as --disallowed-tools)
-  disallowedTools: external_exports.array(external_exports.string()).optional(),
-  // Tools to make available in Claude CLI (passed as --tools)
-  tools: external_exports.array(external_exports.string()).optional(),
-  // Settings JSON to pass to Claude CLI (passed as --settings)
-  settings: external_exports.string().optional(),
-  // VM profile for resource allocation (e.g., "vm0/default")
-  experimentalProfile: external_exports.string().optional(),
-  // Feature flags evaluated at job creation time (all switch states for user/org)
-  featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
-  billableFirewalls: external_exports.array(external_exports.string()).optional(),
-  modelUsageProvider: external_exports.string().optional()
-});
-var executionContextSchema = external_exports.object({
-  runId: external_exports.uuid(),
-  prompt: external_exports.string(),
-  appendSystemPrompt: external_exports.string().nullable(),
-  agentComposeVersionId: external_exports.string().nullable(),
-  vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
-  checkpointId: external_exports.uuid().nullable(),
-  sandboxToken: external_exports.string(),
-  // New fields for E2B parity:
-  workingDir: external_exports.string(),
-  storageManifest: storageManifestSchema.nullable(),
-  environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
-  resumeSession: resumeSessionSchema.nullable(),
-  secretValues: external_exports.array(external_exports.string()).nullable(),
-  // AES-256-GCM encrypted Record<string, string> — passed through to mitm-addon for auth resolution
-  encryptedSecrets: external_exports.string().nullable(),
-  // Maps secret names to OAuth connector types for runtime token refresh
-  secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
-  // Per-secret refresh metadata, used when a handler needs owner-specific storage (e.g. personal model providers)
-  secretConnectorMetadataMap: secretConnectorMetadataMapSchema.nullable().optional(),
-  cliAgentType: external_exports.string(),
-  // Debug flag to force real Claude in mock environments (internal use only)
-  debugNoMockClaude: external_exports.boolean().optional(),
-  // Debug flag to force real Codex in mock environments (internal use only)
-  debugNoMockCodex: external_exports.boolean().optional(),
-  // Capture HTTP request headers, request bodies, and response bodies in network logs
-  captureNetworkBodies: external_exports.boolean().optional(),
-  // Dispatch timestamp for E2E timing metrics
-  apiStartTime: external_exports.number().optional(),
-  // User's timezone preference (IANA format, e.g., "Asia/Shanghai")
-  userTimezone: external_exports.string().optional(),
-  // Firewall for proxy-side token replacement (complete config, all permissions)
-  firewalls: firewallsSchema.optional(),
-  // Per-firewall network policies: which permissions are granted + unknownPolicy
-  networkPolicies: networkPoliciesSchema.optional(),
-  // Tools to disable in Claude CLI (passed as --disallowed-tools)
-  disallowedTools: external_exports.array(external_exports.string()).optional(),
-  // Tools to make available in Claude CLI (passed as --tools)
-  tools: external_exports.array(external_exports.string()).optional(),
-  // Settings JSON to pass to Claude CLI (passed as --settings)
-  settings: external_exports.string().optional(),
-  // VM profile for resource allocation (e.g., "vm0/default")
-  experimentalProfile: external_exports.string().optional(),
-  // Feature flags evaluated at job creation time (all switch states for user/org)
-  featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).optional(),
-  billableFirewalls: external_exports.array(external_exports.string()).optional(),
-  modelUsageProvider: external_exports.string().optional()
-});
-var runnersJobClaimContract = c24.router({
-  claim: {
-    method: "POST",
-    path: "/api/runners/jobs/:id/claim",
-    headers: authHeadersSchema,
-    pathParams: external_exports.object({
-      id: external_exports.uuid()
-    }),
-    body: external_exports.object({}),
-    responses: {
-      200: executionContextSchema,
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      // Job does not belong to user
-      404: apiErrorSchema,
-      409: apiErrorSchema,
-      // Already claimed
-      500: apiErrorSchema
-    },
-    summary: "Claim a pending job for execution"
-  }
-});
-var heartbeatBodySchema = external_exports.object({
-  runnerId: external_exports.uuid(),
-  runnerName: external_exports.string(),
-  group: runnerGroupSchema,
-  profiles: external_exports.array(external_exports.string()),
-  totalVcpu: external_exports.number().int().nonnegative(),
-  totalMemoryMb: external_exports.number().int().nonnegative(),
-  maxConcurrent: external_exports.number().int().nonnegative(),
-  allocatedVcpu: external_exports.number().int().nonnegative(),
-  allocatedMemoryMb: external_exports.number().int().nonnegative(),
-  runningCount: external_exports.number().int().nonnegative(),
-  heldSessions: external_exports.array(external_exports.string()),
-  mode: external_exports.enum(["running", "draining", "stopping"])
-});
-var runnersHeartbeatContract = c24.router({
-  heartbeat: {
-    method: "POST",
-    path: "/api/runners/heartbeat",
-    headers: authHeadersSchema,
-    body: heartbeatBodySchema,
-    responses: {
-      200: external_exports.object({ ok: external_exports.literal(true) }),
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      500: apiErrorSchema
-    },
-    summary: "Report runner heartbeat with capacity and state"
-  }
-});
-
-// ../../packages/api-contracts/src/contracts/realtime.ts
 var c25 = initContract();
 var ablyTokenRequestSchema = external_exports.object({
   keyName: external_exports.string(),
@@ -120322,6 +120577,49 @@ var squareFirewall = {
   ]
 };
 
+// ../../packages/connectors/src/firewalls/gong.generated.ts
+init_esm_shims();
+var gongFirewall = {
+  name: "gong",
+  description: "Gong API (Access Key auth)",
+  placeholders: {
+    GONG_ACCESS_KEY: "CoffeeSafeLocalCoffeeSafeLocalCo",
+    GONG_ACCESS_KEY_SECRET: "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLoca"
+  },
+  apis: [
+    {
+      base: "https://${{ vars.GONG_API_BASE }}",
+      auth: {
+        headers: {
+          Authorization: "${{ basic(secrets.GONG_ACCESS_KEY, secrets.GONG_ACCESS_KEY_SECRET) }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
+// ../../packages/connectors/src/firewalls/ironclad.generated.ts
+init_esm_shims();
+var ironcladFirewall = {
+  name: "ironclad",
+  description: "Ironclad API (API key auth)",
+  placeholders: {
+    IRONCLAD_API_KEY: "CoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocalCoffeeSafeLocal"
+  },
+  apis: [
+    {
+      base: "https://${{ vars.IRONCLAD_HOST }}",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.IRONCLAD_API_KEY }}"
+        }
+      },
+      permissions: []
+    }
+  ]
+};
+
 // ../../packages/connectors/src/firewalls/index.ts
 var CONNECTOR_FIREWALLS = {
   agentmail: agentmailFirewall,
@@ -120505,7 +120803,9 @@ var CONNECTOR_FIREWALLS = {
   servicenow: servicenowFirewall,
   testrail: testrailFirewall,
   twilio: twilioFirewall,
-  square: squareFirewall
+  square: squareFirewall,
+  gong: gongFirewall,
+  ironclad: ironcladFirewall
 };
 function expandPlaceholders(firewall, connectorType) {
   if (!firewall.placeholders) return firewall;
@@ -120794,9 +121094,43 @@ var internalCallbacksTelegramContract = c31.router({
   }
 });
 
-// ../../packages/api-contracts/src/contracts/test-telegram-dispatch-probe.ts
+// ../../packages/api-contracts/src/contracts/internal-callbacks-agentphone.ts
 init_esm_shims();
 var c32 = initContract();
+var agentPhoneCallbackPayloadSchema = external_exports.object({
+  messageId: external_exports.string(),
+  conversationId: external_exports.string().nullable(),
+  channel: external_exports.string().optional(),
+  phoneHandle: external_exports.string(),
+  fromNumber: external_exports.string(),
+  toNumber: external_exports.string(),
+  userLinkId: external_exports.string(),
+  agentId: external_exports.string(),
+  agentphoneAgentId: external_exports.string(),
+  existingSessionId: external_exports.string().nullable().optional()
+}).passthrough();
+var internalCallbacksAgentPhoneContract = c32.router({
+  post: {
+    method: "POST",
+    path: "/api/internal/callbacks/agentphone",
+    headers: internalCallbackHeadersSchema,
+    body: internalCallbackBodySchema.extend({
+      payload: agentPhoneCallbackPayloadSchema
+    }),
+    responses: {
+      200: internalCallbackSuccessSchema,
+      400: internalCallbackErrorSchema,
+      401: internalCallbackErrorSchema,
+      404: internalCallbackErrorSchema,
+      502: internalCallbackErrorSchema
+    },
+    summary: "Handle callbacks for AgentPhone-triggered runs"
+  }
+});
+
+// ../../packages/api-contracts/src/contracts/test-telegram-dispatch-probe.ts
+init_esm_shims();
+var c33 = initContract();
 var testTelegramDispatchProbeBodySchema = external_exports.unknown().optional();
 var testTelegramDispatchProbeSuccessSchema = external_exports.object({
   ok: external_exports.literal(true)
@@ -120813,7 +121147,7 @@ var testTelegramDispatchProbeHandlerErrorSchema = external_exports.object({
     stack: external_exports.string().optional()
   })
 });
-var testTelegramDispatchProbeContract = c32.router({
+var testTelegramDispatchProbeContract = c33.router({
   post: {
     method: "POST",
     path: "/api/test/telegram-dispatch-probe",
@@ -120832,7 +121166,7 @@ var testTelegramDispatchProbeContract = c32.router({
 
 // ../../packages/api-contracts/src/contracts/internal-callbacks-slack-org.ts
 init_esm_shims();
-var c33 = initContract();
+var c34 = initContract();
 var slackOrgCallbackPayloadSchema = external_exports.object({
   workspaceId: external_exports.string(),
   channelId: external_exports.string(),
@@ -120842,7 +121176,7 @@ var slackOrgCallbackPayloadSchema = external_exports.object({
   agentId: external_exports.string(),
   existingSessionId: external_exports.string().optional()
 }).passthrough();
-var internalCallbacksSlackOrgContract = c33.router({
+var internalCallbacksSlackOrgContract = c34.router({
   post: {
     method: "POST",
     path: "/api/internal/callbacks/slack/org",
@@ -120864,11 +121198,11 @@ var internalCallbacksSlackOrgContract = c33.router({
 
 // ../../packages/api-contracts/src/contracts/internal-callbacks-voice-chat.ts
 init_esm_shims();
-var c34 = initContract();
+var c35 = initContract();
 var voiceChatCallbackPayloadSchema = external_exports.object({
   taskId: external_exports.string()
 }).passthrough();
-var internalCallbacksVoiceChatContract = c34.router({
+var internalCallbacksVoiceChatContract = c35.router({
   post: {
     method: "POST",
     path: "/api/internal/callbacks/voice-chat",
@@ -120889,7 +121223,7 @@ var internalCallbacksVoiceChatContract = c34.router({
 
 // ../../packages/api-contracts/src/contracts/zero-email.ts
 init_esm_shims();
-var c35 = initContract();
+var c36 = initContract();
 var emailRecipientsSchema = external_exports.array(external_exports.string()).optional();
 var zeroEmailReplyCallbackPayloadSchema = external_exports.object({
   emailThreadSessionId: external_exports.string(),
@@ -120912,7 +121246,7 @@ var zeroEmailTriggerCallbackPayloadSchema = external_exports.object({
   replyRecipientTo: emailRecipientsSchema,
   replyRecipientCc: emailRecipientsSchema
 }).passthrough();
-var zeroEmailReplyCallbackContract = c35.router({
+var zeroEmailReplyCallbackContract = c36.router({
   post: {
     method: "POST",
     path: "/api/zero/email/callbacks/reply",
@@ -120929,7 +121263,7 @@ var zeroEmailReplyCallbackContract = c35.router({
     summary: "Handle Zero email reply completion callbacks"
   }
 });
-var zeroEmailTriggerCallbackContract = c35.router({
+var zeroEmailTriggerCallbackContract = c36.router({
   post: {
     method: "POST",
     path: "/api/zero/email/callbacks/trigger",
@@ -120946,7 +121280,7 @@ var zeroEmailTriggerCallbackContract = c35.router({
     summary: "Handle Zero email trigger completion callbacks"
   }
 });
-var zeroEmailInboundContract = c35.router({
+var zeroEmailInboundContract = c36.router({
   post: {
     method: "POST",
     path: "/api/zero/email/inbound",
@@ -120966,8 +121300,8 @@ var zeroEmailInboundContract = c35.router({
 
 // ../../packages/api-contracts/src/contracts/auth.ts
 init_esm_shims();
-var c36 = initContract();
-var authContract = c36.router({
+var c37 = initContract();
+var authContract = c37.router({
   /**
    * GET /api/auth/me
    * Get current user information
@@ -120992,7 +121326,7 @@ var authContract = c36.router({
 
 // ../../packages/api-contracts/src/contracts/user-export.ts
 init_esm_shims();
-var c37 = initContract();
+var c38 = initContract();
 var exportJobStatusSchema = external_exports.enum([
   "pending",
   "running",
@@ -121017,7 +121351,7 @@ var userExportStartResponseSchema = external_exports.object({
   jobId: external_exports.string().uuid(),
   status: external_exports.enum(["pending", "running"])
 });
-var userExportContract = c37.router({
+var userExportContract = c38.router({
   get: {
     method: "GET",
     path: "/api/user/export",
@@ -121048,7 +121382,7 @@ var userExportContract = c37.router({
 
 // ../../packages/api-contracts/src/contracts/email-unsubscribe.ts
 init_esm_shims();
-var c38 = initContract();
+var c39 = initContract();
 var emailUnsubscribeQuerySchema = external_exports.object({
   token: external_exports.string().optional()
 });
@@ -121058,13 +121392,13 @@ var emailUnsubscribeResponseSchema = external_exports.object({
 var emailUnsubscribeErrorSchema = external_exports.object({
   error: external_exports.string()
 });
-var emailUnsubscribeContract = c38.router({
+var emailUnsubscribeContract = c39.router({
   get: {
     method: "GET",
     path: "/api/email/unsubscribe",
     query: emailUnsubscribeQuerySchema,
     responses: {
-      200: c38.otherResponse({
+      200: c39.otherResponse({
         contentType: "text/html",
         body: external_exports.unknown()
       }),
@@ -121087,8 +121421,8 @@ var emailUnsubscribeContract = c38.router({
 
 // ../../packages/api-contracts/src/contracts/connectors-type-authorize.ts
 init_esm_shims();
-var c39 = initContract();
-var connectorsTypeAuthorizeContract = c39.router({
+var c40 = initContract();
+var connectorsTypeAuthorizeContract = c40.router({
   authorize: {
     method: "GET",
     path: "/api/connectors/:type/authorize",
@@ -121096,7 +121430,7 @@ var connectorsTypeAuthorizeContract = c39.router({
     pathParams: external_exports.object({ type: external_exports.string() }),
     query: external_exports.object({ session: external_exports.string().optional() }),
     responses: {
-      307: c39.noBody(),
+      307: c40.noBody(),
       400: external_exports.object({ error: external_exports.string() }),
       500: external_exports.object({ error: external_exports.string() })
     },
@@ -121106,8 +121440,8 @@ var connectorsTypeAuthorizeContract = c39.router({
 
 // ../../packages/api-contracts/src/contracts/connectors-type-callback.ts
 init_esm_shims();
-var c40 = initContract();
-var connectorsTypeCallbackContract = c40.router({
+var c41 = initContract();
+var connectorsTypeCallbackContract = c41.router({
   callback: {
     method: "GET",
     path: "/api/connectors/:type/callback",
@@ -121120,7 +121454,7 @@ var connectorsTypeCallbackContract = c40.router({
       error_description: external_exports.string().optional()
     }),
     responses: {
-      307: c40.noBody()
+      307: c41.noBody()
     },
     summary: "Complete connector OAuth authorization"
   }
@@ -121128,7 +121462,7 @@ var connectorsTypeCallbackContract = c40.router({
 
 // ../../packages/api-contracts/src/contracts/test-oauth-provider-authorize.ts
 init_esm_shims();
-var c41 = initContract();
+var c42 = initContract();
 var testOAuthProviderAuthorizeErrorSchema = external_exports.object({
   error: external_exports.string()
 });
@@ -121140,13 +121474,13 @@ var testOAuthProviderAuthorizeQuerySchema = external_exports.object({
   scope: external_exports.string().optional(),
   state: external_exports.string().optional()
 });
-var testOAuthProviderAuthorizeContract = c41.router({
+var testOAuthProviderAuthorizeContract = c42.router({
   authorize: {
     method: "GET",
     path: "/api/test/oauth-provider/authorize",
     query: testOAuthProviderAuthorizeQuerySchema,
     responses: {
-      302: c41.noBody(),
+      302: c42.noBody(),
       400: testOAuthProviderAuthorizeErrorSchema,
       404: external_exports.string()
     },
@@ -121156,7 +121490,7 @@ var testOAuthProviderAuthorizeContract = c41.router({
 
 // ../../packages/api-contracts/src/contracts/test-oauth-provider-echo.ts
 init_esm_shims();
-var c42 = initContract();
+var c43 = initContract();
 var testOAuthProviderEchoErrorSchema = external_exports.object({
   error: external_exports.string()
 });
@@ -121164,7 +121498,7 @@ var testOAuthProviderEchoResponseSchema = external_exports.object({
   authorization: external_exports.string(),
   receivedAt: external_exports.string()
 });
-var testOAuthProviderEchoContract = c42.router({
+var testOAuthProviderEchoContract = c43.router({
   echo: {
     method: "GET",
     path: "/api/test/oauth-provider/echo",
@@ -121179,7 +121513,7 @@ var testOAuthProviderEchoContract = c42.router({
 
 // ../../packages/api-contracts/src/contracts/test-oauth-provider-token.ts
 init_esm_shims();
-var c43 = initContract();
+var c44 = initContract();
 var testOAuthProviderTokenErrorSchema = external_exports.object({
   error: external_exports.string(),
   error_description: external_exports.string().optional()
@@ -121191,11 +121525,11 @@ var testOAuthProviderTokenResponseSchema = external_exports.object({
   expires_in: external_exports.number(),
   scope: external_exports.string()
 });
-var testOAuthProviderTokenContract = c43.router({
+var testOAuthProviderTokenContract = c44.router({
   token: {
     method: "POST",
     path: "/api/test/oauth-provider/token",
-    body: c43.type(),
+    body: c44.type(),
     responses: {
       200: testOAuthProviderTokenResponseSchema,
       400: testOAuthProviderTokenErrorSchema,
@@ -121208,7 +121542,7 @@ var testOAuthProviderTokenContract = c43.router({
 
 // ../../packages/api-contracts/src/contracts/test-oauth-provider-userinfo.ts
 init_esm_shims();
-var c44 = initContract();
+var c45 = initContract();
 var testOAuthProviderUserinfoErrorSchema = external_exports.object({
   error: external_exports.string()
 });
@@ -121217,7 +121551,7 @@ var testOAuthProviderUserinfoResponseSchema = external_exports.object({
   id: external_exports.string(),
   username: external_exports.string()
 });
-var testOAuthProviderUserinfoContract = c44.router({
+var testOAuthProviderUserinfoContract = c45.router({
   userinfo: {
     method: "GET",
     path: "/api/test/oauth-provider/userinfo",
@@ -121232,7 +121566,7 @@ var testOAuthProviderUserinfoContract = c44.router({
 
 // ../../packages/api-contracts/src/contracts/test-slack-dispatch-probe.ts
 init_esm_shims();
-var c45 = initContract();
+var c46 = initContract();
 var testSlackDispatchProbeBodySchema = external_exports.object({
   team_id: external_exports.string(),
   channel_id: external_exports.string(),
@@ -121260,7 +121594,7 @@ var testSlackDispatchProbeResponseSchema = external_exports.union([
   testSlackDispatchProbeSuccessResponseSchema,
   testSlackDispatchProbeFailureResponseSchema
 ]);
-var testSlackDispatchProbeContract = c45.router({
+var testSlackDispatchProbeContract = c46.router({
   post: {
     method: "POST",
     path: "/api/test/slack-dispatch-probe",
@@ -121276,7 +121610,7 @@ var testSlackDispatchProbeContract = c45.router({
 
 // ../../packages/api-contracts/src/contracts/test-slack-state.ts
 init_esm_shims();
-var c46 = initContract();
+var c47 = initContract();
 var testSlackStateErrorSchema = external_exports.object({
   error: external_exports.string()
 });
@@ -121361,7 +121695,7 @@ var testSlackStateResponseSchema = external_exports.object({
     })
   )
 });
-var testSlackStateContract = c46.router({
+var testSlackStateContract = c47.router({
   get: {
     method: "GET",
     path: "/api/test/slack-state",
@@ -121403,7 +121737,7 @@ var testSlackStateContract = c46.router({
 
 // ../../packages/api-contracts/src/contracts/test-slack-mock.ts
 init_esm_shims();
-var c47 = initContract();
+var c48 = initContract();
 var slackMockRequestBodySchema = external_exports.unknown().optional();
 var slackMockNotFoundSchema = external_exports.string();
 var testSlackMockOkResponseSchema = external_exports.object({
@@ -121469,7 +121803,7 @@ var testSlackMockUsersInfoResponseSchema = testSlackMockOkResponseSchema.extend(
     })
   })
 });
-var testSlackMockContract = c47.router({
+var testSlackMockContract = c48.router({
   assistantThreadsSetStatus: {
     method: "POST",
     path: "/api/test/slack-mock/assistant.threads.setStatus",
@@ -121574,7 +121908,7 @@ var testSlackMockContract = c47.router({
 
 // ../../packages/api-contracts/src/contracts/test-telegram-mock.ts
 init_esm_shims();
-var c48 = initContract();
+var c49 = initContract();
 var testTelegramMockPathParamsSchema = external_exports.object({
   botToken: external_exports.string(),
   method: external_exports.string()
@@ -121587,7 +121921,7 @@ var testTelegramMockErrorResponseSchema = external_exports.object({
   ok: external_exports.literal(false),
   description: external_exports.string()
 });
-var testTelegramMockContract = c48.router({
+var testTelegramMockContract = c49.router({
   post: {
     method: "POST",
     path: "/api/test/telegram-mock/:botToken/:method",
@@ -121603,7 +121937,7 @@ var testTelegramMockContract = c48.router({
 
 // ../../packages/api-contracts/src/contracts/test-telegram-state.ts
 init_esm_shims();
-var c49 = initContract();
+var c50 = initContract();
 var testTelegramStateQuerySchema = external_exports.object({
   bot_id: external_exports.string().optional()
 });
@@ -121645,7 +121979,7 @@ var testTelegramStateSeedResponseSchema = external_exports.object({
   user_link_id: external_exports.string().nullable(),
   default_agent_id: external_exports.string()
 });
-var testTelegramStateContract = c49.router({
+var testTelegramStateContract = c50.router({
   get: {
     method: "GET",
     path: "/api/test/telegram-state",
@@ -121683,7 +122017,7 @@ var testTelegramStateContract = c49.router({
 
 // ../../packages/api-contracts/src/contracts/internal-event-consumers.ts
 init_esm_shims();
-var c50 = initContract();
+var c51 = initContract();
 var eventConsumerHeadersSchema = external_exports.object({
   "x-vm0-signature": external_exports.string().optional(),
   "x-vm0-timestamp": external_exports.string().optional()
@@ -121703,7 +122037,7 @@ var eventConsumerPayloadSchema = external_exports.object({
 var eventConsumerUnauthorizedSchema = external_exports.object({
   error: external_exports.string()
 });
-var internalEventConsumerTelegramTypingContract = c50.router({
+var internalEventConsumerTelegramTypingContract = c51.router({
   refresh: {
     method: "POST",
     path: "/api/internal/event-consumers/telegram-typing",
@@ -121716,7 +122050,7 @@ var internalEventConsumerTelegramTypingContract = c50.router({
     summary: "Refresh Telegram typing indicators for all pending callbacks of a run"
   }
 });
-var internalEventConsumerAgentPhoneTypingContract = c50.router({
+var internalEventConsumerAgentPhoneTypingContract = c51.router({
   refresh: {
     method: "POST",
     path: "/api/internal/event-consumers/agentphone-typing",
@@ -121729,7 +122063,7 @@ var internalEventConsumerAgentPhoneTypingContract = c50.router({
     summary: "Refresh AgentPhone typing indicators for all pending iMessage callbacks of a run"
   }
 });
-var internalEventConsumerAxiomContract = c50.router({
+var internalEventConsumerAxiomContract = c51.router({
   ingest: {
     method: "POST",
     path: "/api/internal/event-consumers/axiom",
@@ -121743,7 +122077,7 @@ var internalEventConsumerAxiomContract = c50.router({
     summary: "Ingest agent run events into Axiom"
   }
 });
-var internalEventConsumerChatAssistantContract = c50.router({
+var internalEventConsumerChatAssistantContract = c51.router({
   process: {
     method: "POST",
     path: "/api/internal/event-consumers/chat-assistant",
@@ -121756,7 +122090,7 @@ var internalEventConsumerChatAssistantContract = c50.router({
     summary: "Persist assistant-visible run events into chat threads"
   }
 });
-var internalEventConsumerVoiceChatContract = c50.router({
+var internalEventConsumerVoiceChatContract = c51.router({
   process: {
     method: "POST",
     path: "/api/internal/event-consumers/voice-chat",
@@ -121772,7 +122106,7 @@ var internalEventConsumerVoiceChatContract = c50.router({
 
 // ../../packages/api-contracts/src/contracts/cron.ts
 init_esm_shims();
-var c51 = initContract();
+var c52 = initContract();
 var cleanupResultSchema = external_exports.object({
   runId: external_exports.string(),
   sandboxId: external_exports.string().nullable(),
@@ -121783,9 +122117,11 @@ var cleanupResultSchema = external_exports.object({
 var cleanupResponseSchema = external_exports.object({
   cleaned: external_exports.number(),
   errors: external_exports.number(),
-  results: external_exports.array(cleanupResultSchema)
+  results: external_exports.array(cleanupResultSchema),
+  exportJobsCleaned: external_exports.number(),
+  exportJobsStuck: external_exports.number()
 });
-var cronCleanupSandboxesContract = c51.router({
+var cronCleanupSandboxesContract = c52.router({
   /**
    * GET /api/cron/cleanup-sandboxes
    * Cron job to cleanup sandboxes that have stopped sending heartbeats
@@ -121817,6 +122153,29 @@ var cronReconcileBillingEntitlementsResponseSchema = external_exports.object({
 var cronTelegramCleanupResponseSchema = external_exports.object({
   deleted: external_exports.number()
 });
+var cronVoiceChatCleanupResponseSchema = external_exports.object({
+  success: external_exports.literal(true),
+  reasonerReset: external_exports.number()
+});
+var cronDrainEmailOutboxResponseSchema = external_exports.object({
+  success: external_exports.literal(true),
+  drained: external_exports.number(),
+  cleaned: external_exports.number()
+});
+var cronSyncSkillsResponseSchema = external_exports.object({
+  success: external_exports.literal(true),
+  commitSha: external_exports.string(),
+  synced: external_exports.number(),
+  skipped: external_exports.number(),
+  failed: external_exports.number(),
+  removed: external_exports.number(),
+  total: external_exports.number()
+});
+var cronExecuteSchedulesResponseSchema = external_exports.object({
+  success: external_exports.literal(true),
+  executed: external_exports.number(),
+  skipped: external_exports.number()
+});
 var cronAggregateInsightsSkippedResponseSchema = external_exports.object({
   users: external_exports.number(),
   skipped: external_exports.literal(true)
@@ -121830,7 +122189,7 @@ var cronAggregateInsightsResponseSchema = external_exports.union([
   cronAggregateInsightsSkippedResponseSchema,
   cronAggregateInsightsAggregatedResponseSchema
 ]);
-var cronAggregateUsageContract = c51.router({
+var cronAggregateUsageContract = c52.router({
   aggregate: {
     method: "GET",
     path: "/api/cron/aggregate-usage",
@@ -121842,7 +122201,7 @@ var cronAggregateUsageContract = c51.router({
     summary: "Aggregate daily usage cache"
   }
 });
-var cronProcessUsageEventsContract = c51.router({
+var cronProcessUsageEventsContract = c52.router({
   process: {
     method: "GET",
     path: "/api/cron/process-usage-events",
@@ -121854,7 +122213,7 @@ var cronProcessUsageEventsContract = c51.router({
     summary: "Process pending usage events"
   }
 });
-var cronReconcileBillingEntitlementsContract = c51.router({
+var cronReconcileBillingEntitlementsContract = c52.router({
   reconcile: {
     method: "GET",
     path: "/api/cron/reconcile-billing-entitlements",
@@ -121866,7 +122225,7 @@ var cronReconcileBillingEntitlementsContract = c51.router({
     summary: "Reconcile billing entitlements"
   }
 });
-var cronTelegramCleanupContract = c51.router({
+var cronTelegramCleanupContract = c52.router({
   cleanup: {
     method: "GET",
     path: "/api/cron/telegram-cleanup",
@@ -121878,7 +122237,55 @@ var cronTelegramCleanupContract = c51.router({
     summary: "Delete expired Telegram messages"
   }
 });
-var cronAggregateInsightsContract = c51.router({
+var cronVoiceChatCleanupContract = c52.router({
+  cleanup: {
+    method: "GET",
+    path: "/api/cron/voice-chat-cleanup",
+    headers: authHeadersSchema,
+    responses: {
+      200: cronVoiceChatCleanupResponseSchema,
+      401: apiErrorSchema
+    },
+    summary: "Reset stuck voice-chat reasoners"
+  }
+});
+var cronDrainEmailOutboxContract = c52.router({
+  drain: {
+    method: "GET",
+    path: "/api/cron/drain-email-outbox",
+    headers: authHeadersSchema,
+    responses: {
+      200: cronDrainEmailOutboxResponseSchema,
+      401: apiErrorSchema
+    },
+    summary: "Drain pending email outbox messages"
+  }
+});
+var cronSyncSkillsContract = c52.router({
+  sync: {
+    method: "GET",
+    path: "/api/cron/sync-skills",
+    headers: authHeadersSchema,
+    responses: {
+      200: cronSyncSkillsResponseSchema,
+      401: apiErrorSchema
+    },
+    summary: "Sync official skills from the skills repository"
+  }
+});
+var cronExecuteSchedulesContract = c52.router({
+  execute: {
+    method: "GET",
+    path: "/api/cron/execute-schedules",
+    headers: authHeadersSchema,
+    responses: {
+      200: cronExecuteSchedulesResponseSchema,
+      401: apiErrorSchema
+    },
+    summary: "Execute due schedules"
+  }
+});
+var cronAggregateInsightsContract = c52.router({
   aggregate: {
     method: "GET",
     path: "/api/cron/aggregate-insights",
@@ -121893,7 +122300,7 @@ var cronAggregateInsightsContract = c51.router({
 
 // ../../packages/api-contracts/src/contracts/chat-threads-v1.ts
 init_esm_shims();
-var c52 = initContract();
+var c53 = initContract();
 var v1ThreadSchema = external_exports.object({
   id: external_exports.string(),
   title: external_exports.string().nullable(),
@@ -121907,7 +122314,7 @@ var v1MessageSchema = external_exports.object({
   error: external_exports.string().optional(),
   createdAt: external_exports.string()
 });
-var chatThreadV1GetContract = c52.router({
+var chatThreadV1GetContract = c53.router({
   get: {
     method: "GET",
     path: "/api/v1/chat-threads/:threadId",
@@ -121922,7 +122329,7 @@ var chatThreadV1GetContract = c52.router({
     summary: "Get a chat thread"
   }
 });
-var chatThreadV1MessagesContract = c52.router({
+var chatThreadV1MessagesContract = c53.router({
   list: {
     method: "GET",
     path: "/api/v1/chat-threads/:threadId/messages",
@@ -121942,7 +122349,7 @@ var chatThreadV1MessagesContract = c52.router({
     summary: "List messages in a chat thread"
   }
 });
-var chatThreadV1SendContract = c52.router({
+var chatThreadV1SendContract = c53.router({
   send: {
     method: "POST",
     path: "/api/v1/chat-threads/messages",
@@ -121973,7 +122380,7 @@ var chatThreadV1SendContract = c52.router({
 
 // ../../packages/api-contracts/src/contracts/device-token.ts
 init_esm_shims();
-var c53 = initContract();
+var c54 = initContract();
 var bb0DeviceCodeSchema = external_exports.string().regex(/^[A-Z2-9]{4}-[A-Z2-9]{4}$/);
 var bleSessionNonceSchema = external_exports.string().min(16).max(128).regex(/^[A-Za-z0-9._:-]+$/);
 var pollTokenSchema = external_exports.string().min(32).max(256).regex(/^[A-Za-z0-9._-]+$/);
@@ -122012,7 +122419,7 @@ var confirmBb0DeviceRequestSchema = external_exports.object({
 var confirmBb0DeviceResponseSchema = external_exports.object({
   status: external_exports.literal("approved")
 });
-var deviceTokenContract = c53.router({
+var deviceTokenContract = c54.router({
   create: {
     method: "POST",
     path: "/api/device-token",
@@ -122037,7 +122444,7 @@ var deviceTokenContract = c53.router({
     summary: "Poll a bb0 device code for approval and final credentials"
   }
 });
-var bb0DeviceConfirmContract = c53.router({
+var bb0DeviceConfirmContract = c54.router({
   confirm: {
     method: "POST",
     path: "/api/zero/devices/bb0/confirm",
@@ -122056,16 +122463,16 @@ var bb0DeviceConfirmContract = c53.router({
 
 // ../../packages/api-contracts/src/contracts/audio-transcriptions-v1.ts
 init_esm_shims();
-var c54 = initContract();
+var c55 = initContract();
 var audioTranscriptionV1Schema = external_exports.object({
   text: external_exports.string()
 });
-var audioTranscriptionsV1Contract = c54.router({
+var audioTranscriptionsV1Contract = c55.router({
   transcribe: {
     method: "POST",
     path: "/api/v1/audio/transcriptions",
     headers: authHeadersSchema,
-    body: c54.type(),
+    body: c55.type(),
     responses: {
       200: audioTranscriptionV1Schema,
       400: apiErrorSchema,
@@ -122082,7 +122489,7 @@ var audioTranscriptionsV1Contract = c54.router({
 
 // ../../packages/api-contracts/src/contracts/generate-image.ts
 init_esm_shims();
-var c55 = initContract();
+var c56 = initContract();
 var generateImageRequestSchema = external_exports.object({
   prompt: external_exports.unknown().optional()
 }).passthrough();
@@ -122093,7 +122500,7 @@ var generatedImageSchema = external_exports.object({
 var generateImageResponseSchema = external_exports.object({
   images: external_exports.array(generatedImageSchema)
 });
-var generateImageContract = c55.router({
+var generateImageContract = c56.router({
   post: {
     method: "POST",
     path: "/api/generate-image",
@@ -122194,14 +122601,14 @@ function findMatchingPermissions(method, path3, config4) {
 
 // ../../packages/api-contracts/src/contracts/zero-feature-switches.ts
 init_esm_shims();
-var c56 = initContract();
+var c57 = initContract();
 var featureSwitchesResponseSchema = external_exports.object({
   switches: external_exports.record(external_exports.string(), external_exports.boolean())
 });
 var updateFeatureSwitchesRequestSchema = external_exports.object({
   switches: external_exports.record(external_exports.string(), external_exports.boolean())
 });
-var zeroFeatureSwitchesContract = c56.router({
+var zeroFeatureSwitchesContract = c57.router({
   get: {
     method: "GET",
     path: "/api/zero/feature-switches",
@@ -122230,7 +122637,7 @@ var zeroFeatureSwitchesContract = c56.router({
     method: "DELETE",
     path: "/api/zero/feature-switches",
     headers: authHeadersSchema,
-    body: c56.noBody(),
+    body: c57.noBody(),
     responses: {
       200: external_exports.object({ deleted: external_exports.literal(true) }),
       401: apiErrorSchema,
@@ -122242,7 +122649,7 @@ var zeroFeatureSwitchesContract = c56.router({
 
 // ../../packages/api-contracts/src/contracts/onboarding.ts
 init_esm_shims();
-var c57 = initContract();
+var c58 = initContract();
 var onboardingStatusResponseSchema = external_exports.object({
   needsOnboarding: external_exports.boolean(),
   isAdmin: external_exports.boolean(),
@@ -122255,7 +122662,7 @@ var onboardingStatusResponseSchema = external_exports.object({
     sound: external_exports.string().optional()
   }).nullable()
 });
-var onboardingStatusContract = c57.router({
+var onboardingStatusContract = c58.router({
   getStatus: {
     method: "GET",
     path: "/api/zero/onboarding/status",
@@ -122267,7 +122674,7 @@ var onboardingStatusContract = c57.router({
     summary: "Get onboarding status for current user"
   }
 });
-var onboardingCompleteContract = c57.router({
+var onboardingCompleteContract = c58.router({
   complete: {
     method: "POST",
     path: "/api/zero/onboarding/complete",
@@ -122282,7 +122689,7 @@ var onboardingCompleteContract = c57.router({
     summary: "Mark member onboarding as complete"
   }
 });
-var onboardingSetupContract = c57.router({
+var onboardingSetupContract = c58.router({
   setup: {
     method: "POST",
     path: "/api/zero/onboarding/setup",
@@ -122313,14 +122720,68 @@ var skillFrontmatterSchema = external_exports.object({
   description: external_exports.string().optional()
 });
 
+// ../../packages/api-contracts/src/contracts/zero-connectors-cli-auth-stripe.ts
+init_esm_shims();
+var c59 = initContract();
+var cliAuthStripeStartResponseSchema = external_exports.object({
+  sessionToken: external_exports.string(),
+  type: external_exports.literal("stripe"),
+  status: external_exports.literal("pending"),
+  browserUrl: external_exports.url(),
+  verificationCode: external_exports.string().min(1),
+  expiresIn: external_exports.number().int().positive(),
+  interval: external_exports.number().int().positive()
+});
+var cliAuthStripeCompleteResponseSchema = external_exports.discriminatedUnion("status", [
+  external_exports.object({
+    status: external_exports.literal("pending"),
+    errorMessage: external_exports.string().nullable()
+  }),
+  external_exports.object({
+    status: external_exports.literal("complete"),
+    connector: connectorResponseSchema
+  })
+]);
+var zeroCliAuthStripeContract = c59.router({
+  start: {
+    method: "POST",
+    path: "/api/zero/connectors/stripe/cli-auth/sessions",
+    headers: authHeadersSchema,
+    body: external_exports.object({}).optional(),
+    responses: {
+      200: cliAuthStripeStartResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      503: apiErrorSchema
+    },
+    summary: "Start CLI auth for Stripe in a sandbox"
+  },
+  complete: {
+    method: "POST",
+    path: "/api/zero/connectors/stripe/cli-auth/sessions/complete",
+    headers: authHeadersSchema,
+    body: external_exports.object({ sessionToken: external_exports.string().min(1) }),
+    responses: {
+      200: cliAuthStripeCompleteResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      503: apiErrorSchema
+    },
+    summary: "Complete CLI auth for Stripe and import the Stripe token"
+  }
+});
+
 // ../../packages/api-contracts/src/contracts/zero-org-logo.ts
 init_esm_shims();
-var c58 = initContract();
+var c60 = initContract();
 var zeroOrgLogoResponseSchema = external_exports.object({
   logoUrl: external_exports.string().nullable(),
   hasImage: external_exports.boolean()
 });
-var zeroOrgLogoContract = c58.router({
+var zeroOrgLogoContract = c60.router({
   get: {
     method: "GET",
     path: "/api/zero/org/logo",
@@ -122337,7 +122798,7 @@ var zeroOrgLogoContract = c58.router({
     path: "/api/zero/org/logo",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c58.type(),
+    body: c60.type(),
     responses: {
       200: zeroOrgLogoResponseSchema,
       400: apiErrorSchema,
@@ -122364,8 +122825,8 @@ var zeroOrgLogoContract = c58.router({
 
 // ../../packages/api-contracts/src/contracts/zero-org-domains.ts
 init_esm_shims();
-var c59 = initContract();
-var zeroOrgDomainsContract = c59.router({
+var c61 = initContract();
+var zeroOrgDomainsContract = c61.router({
   list: {
     method: "GET",
     path: "/api/zero/org/domains",
@@ -122422,8 +122883,8 @@ var zeroOrgDomainsContract = c59.router({
 
 // ../../packages/api-contracts/src/contracts/zero-composes.ts
 init_esm_shims();
-var c60 = initContract();
-var zeroComposesMainContract = c60.router({
+var c62 = initContract();
+var zeroComposesMainContract = c62.router({
   getByName: {
     method: "GET",
     path: "/api/zero/composes",
@@ -122441,7 +122902,7 @@ var zeroComposesMainContract = c60.router({
     summary: "Get agent compose by name (zero proxy)"
   }
 });
-var zeroComposesByIdContract = c60.router({
+var zeroComposesByIdContract = c62.router({
   getById: {
     method: "GET",
     path: "/api/zero/composes/:id",
@@ -122465,9 +122926,9 @@ var zeroComposesByIdContract = c60.router({
     pathParams: external_exports.object({
       id: external_exports.string().uuid("Compose ID is required")
     }),
-    body: c60.noBody(),
+    body: c62.noBody(),
     responses: {
-      204: c60.noBody(),
+      204: c62.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -122476,7 +122937,7 @@ var zeroComposesByIdContract = c60.router({
     summary: "Delete agent compose (zero proxy)"
   }
 });
-var zeroComposesMetadataContract = c60.router({
+var zeroComposesMetadataContract = c62.router({
   update: {
     method: "PATCH",
     path: "/api/zero/composes/:id/metadata",
@@ -122497,7 +122958,7 @@ var zeroComposesMetadataContract = c60.router({
     summary: "Update agent compose metadata (zero proxy)"
   }
 });
-var zeroComposesListContract = c60.router({
+var zeroComposesListContract = c62.router({
   list: {
     method: "GET",
     path: "/api/zero/composes/list",
@@ -122517,8 +122978,8 @@ var zeroComposesListContract = c60.router({
 
 // ../../packages/api-contracts/src/contracts/zero-personal-model-providers.ts
 init_esm_shims();
-var c61 = initContract();
-var zeroPersonalModelProvidersMainContract = c61.router({
+var c63 = initContract();
+var zeroPersonalModelProvidersMainContract = c63.router({
   list: {
     method: "GET",
     path: "/api/zero/me/model-providers",
@@ -122547,7 +123008,7 @@ var zeroPersonalModelProvidersMainContract = c61.router({
     summary: "Create or update a personal model provider for the requesting user"
   }
 });
-var zeroPersonalModelProvidersByTypeContract = c61.router({
+var zeroPersonalModelProvidersByTypeContract = c63.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/me/model-providers/:type",
@@ -122556,7 +123017,7 @@ var zeroPersonalModelProvidersByTypeContract = c61.router({
       type: modelProviderTypeSchema
     }),
     responses: {
-      204: c61.noBody(),
+      204: c63.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -122564,13 +123025,13 @@ var zeroPersonalModelProvidersByTypeContract = c61.router({
     summary: "Delete a personal model provider for the requesting user"
   }
 });
-var zeroPersonalModelProvidersCodexOauthContract = c61.router({
+var zeroPersonalModelProvidersCodexOauthContract = c63.router({
   authorize: {
     method: "GET",
     path: "/api/zero/me/model-providers/codex-oauth-token/oauth/authorize",
     headers: authHeadersSchema,
     responses: {
-      307: c61.noBody(),
+      307: c63.noBody(),
       404: external_exports.object({ error: external_exports.string() }),
       500: external_exports.object({ error: external_exports.string() })
     },
@@ -122587,7 +123048,7 @@ var zeroPersonalModelProvidersCodexOauthContract = c61.router({
       error_description: external_exports.string().optional()
     }),
     responses: {
-      307: c61.noBody()
+      307: c63.noBody()
     },
     summary: "Complete Codex OAuth for a personal model provider"
   }
@@ -122595,7 +123056,7 @@ var zeroPersonalModelProvidersCodexOauthContract = c61.router({
 
 // ../../packages/api-contracts/src/contracts/api-keys.ts
 init_esm_shims();
-var c62 = initContract();
+var c64 = initContract();
 var apiKeyItemSchema = external_exports.object({
   id: external_exports.string().uuid(),
   name: external_exports.string(),
@@ -122614,7 +123075,7 @@ var createApiKeyRequestSchema = external_exports.object({
 var createApiKeyResponseSchema = apiKeyItemSchema.extend({
   token: external_exports.string()
 });
-var apiKeysContract = c62.router({
+var apiKeysContract = c64.router({
   list: {
     method: "GET",
     path: "/api/zero/api-keys",
@@ -122640,14 +123101,14 @@ var apiKeysContract = c62.router({
     summary: "Create a new API key (token returned once)"
   }
 });
-var apiKeysByIdContract = c62.router({
+var apiKeysByIdContract = c64.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/api-keys/:id",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c62.noBody(),
+      204: c64.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -122658,7 +123119,7 @@ var apiKeysByIdContract = c62.router({
 
 // ../../packages/api-contracts/src/contracts/zero-custom-connectors.ts
 init_esm_shims();
-var c63 = initContract();
+var c65 = initContract();
 var customConnectorResponseSchema = external_exports.object({
   id: external_exports.string().uuid(),
   slug: external_exports.string(),
@@ -122686,7 +123147,7 @@ var setCustomConnectorSecretBodySchema = external_exports.object({
 var patchCustomConnectorBodySchema = external_exports.object({
   displayName: external_exports.string().min(1).max(128)
 });
-var zeroCustomConnectorsContract = c63.router({
+var zeroCustomConnectorsContract = c65.router({
   list: {
     method: "GET",
     path: "/api/zero/custom-connectors",
@@ -122713,14 +123174,14 @@ var zeroCustomConnectorsContract = c63.router({
     summary: "Create an org custom connector"
   }
 });
-var zeroCustomConnectorByIdContract = c63.router({
+var zeroCustomConnectorByIdContract = c65.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/custom-connectors/:id",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c63.noBody(),
+      204: c65.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -122745,7 +123206,7 @@ var zeroCustomConnectorByIdContract = c63.router({
     summary: "Rename an org custom connector"
   }
 });
-var zeroCustomConnectorSecretContract = c63.router({
+var zeroCustomConnectorSecretContract = c65.router({
   set: {
     method: "PUT",
     path: "/api/zero/custom-connectors/:id/secret",
@@ -122753,7 +123214,7 @@ var zeroCustomConnectorSecretContract = c63.router({
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     body: setCustomConnectorSecretBodySchema,
     responses: {
-      204: c63.noBody(),
+      204: c65.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema,
@@ -122767,7 +123228,7 @@ var zeroCustomConnectorSecretContract = c63.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c63.noBody(),
+      204: c65.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -122778,11 +123239,11 @@ var zeroCustomConnectorSecretContract = c63.router({
 
 // ../../packages/api-contracts/src/contracts/zero-agent-custom-connectors.ts
 init_esm_shims();
-var c64 = initContract();
+var c66 = initContract();
 var agentCustomConnectorEnabledIdsSchema = external_exports.object({
   enabledIds: external_exports.array(external_exports.string().uuid())
 });
-var zeroAgentCustomConnectorsContract = c64.router({
+var zeroAgentCustomConnectorsContract = c66.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/custom-connectors",
@@ -122815,7 +123276,7 @@ var zeroAgentCustomConnectorsContract = c64.router({
 
 // ../../packages/api-contracts/src/contracts/integrations-github.ts
 init_esm_shims();
-var c65 = initContract();
+var c67 = initContract();
 var githubInstallationEnvironmentSchema = external_exports.object({
   requiredSecrets: external_exports.array(external_exports.string()),
   requiredVars: external_exports.array(external_exports.string()),
@@ -122849,7 +123310,7 @@ var patchGithubInstallationBodySchema = external_exports.object({
 var updateGithubInstallationResponseSchema = external_exports.object({
   ok: external_exports.literal(true)
 });
-var integrationsGithubContract = c65.router({
+var integrationsGithubContract = c67.router({
   getInstallation: {
     method: "GET",
     path: "/api/integrations/github",
@@ -122867,7 +123328,7 @@ var integrationsGithubContract = c65.router({
     method: "DELETE",
     path: "/api/integrations/github",
     headers: authHeadersSchema,
-    body: c65.noBody(),
+    body: c67.noBody(),
     responses: {
       200: deleteGithubInstallationResponseSchema,
       401: apiErrorSchema,
@@ -122896,7 +123357,7 @@ var integrationsGithubContract = c65.router({
 
 // ../../packages/api-contracts/src/contracts/github-oauth.ts
 init_esm_shims();
-var c66 = initContract();
+var c68 = initContract();
 var jsonErrorSchema = external_exports.object({ error: external_exports.string() });
 var githubOauthInstallQuerySchema = external_exports.object({
   vm0UserId: external_exports.string().optional(),
@@ -122909,13 +123370,13 @@ var githubOauthCallbackQuerySchema = external_exports.object({
   target_id: external_exports.string().optional(),
   target_type: external_exports.string().optional()
 });
-var githubOauthContract = c66.router({
+var githubOauthContract = c68.router({
   install: {
     method: "GET",
     path: "/api/github/oauth/install",
     query: githubOauthInstallQuerySchema,
     responses: {
-      307: c66.noBody(),
+      307: c68.noBody(),
       503: jsonErrorSchema
     },
     summary: "Start GitHub App OAuth install"
@@ -122925,7 +123386,7 @@ var githubOauthContract = c66.router({
     path: "/api/github/oauth/callback",
     query: githubOauthCallbackQuerySchema,
     responses: {
-      307: c66.noBody()
+      307: c68.noBody()
     },
     summary: "Handle GitHub App OAuth callback"
   }
@@ -122933,7 +123394,7 @@ var githubOauthContract = c66.router({
 
 // ../../packages/api-contracts/src/contracts/zero-billing.ts
 init_esm_shims();
-var c67 = initContract();
+var c69 = initContract();
 var autoRechargeSchema = external_exports.object({
   enabled: external_exports.boolean(),
   threshold: external_exports.number().nullable(),
@@ -123021,7 +123482,7 @@ var redeemRequestSchema = external_exports.object({
   successUrl: external_exports.string().url(),
   cancelUrl: external_exports.string().url()
 });
-var zeroBillingStatusContract = c67.router({
+var zeroBillingStatusContract = c69.router({
   get: {
     method: "GET",
     path: "/api/zero/billing/status",
@@ -123034,7 +123495,7 @@ var zeroBillingStatusContract = c67.router({
     summary: "Get billing status for current org"
   }
 });
-var zeroBillingCheckoutContract = c67.router({
+var zeroBillingCheckoutContract = c69.router({
   create: {
     method: "POST",
     path: "/api/zero/billing/checkout",
@@ -123051,7 +123512,7 @@ var zeroBillingCheckoutContract = c67.router({
     summary: "Create Stripe checkout session"
   }
 });
-var zeroBillingPortalContract = c67.router({
+var zeroBillingPortalContract = c69.router({
   create: {
     method: "POST",
     path: "/api/zero/billing/portal",
@@ -123068,7 +123529,7 @@ var zeroBillingPortalContract = c67.router({
     summary: "Create Stripe billing portal session"
   }
 });
-var zeroBillingAutoRechargeContract = c67.router({
+var zeroBillingAutoRechargeContract = c69.router({
   get: {
     method: "GET",
     path: "/api/zero/billing/auto-recharge",
@@ -123106,7 +123567,7 @@ var invoiceSchema = external_exports.object({
 var billingInvoicesResponseSchema = external_exports.object({
   invoices: external_exports.array(invoiceSchema)
 });
-var zeroBillingInvoicesContract = c67.router({
+var zeroBillingInvoicesContract = c69.router({
   get: {
     method: "GET",
     path: "/api/zero/billing/invoices",
@@ -123127,7 +123588,7 @@ var downgradeResponseSchema = external_exports.object({
   success: external_exports.boolean(),
   effectiveDate: external_exports.string().nullable()
 });
-var zeroBillingDowngradeContract = c67.router({
+var zeroBillingDowngradeContract = c69.router({
   create: {
     method: "POST",
     path: "/api/zero/billing/downgrade",
@@ -123145,7 +123606,7 @@ var zeroBillingDowngradeContract = c67.router({
     summary: "Downgrade subscription to a lower tier"
   }
 });
-var zeroBillingRedeemContract = c67.router({
+var zeroBillingRedeemContract = c69.router({
   create: {
     method: "POST",
     path: "/api/zero/billing/redeem/:campaign",
@@ -123166,7 +123627,7 @@ var zeroBillingRedeemContract = c67.router({
 
 // ../../packages/api-contracts/src/contracts/zero-usage.ts
 init_esm_shims();
-var c68 = initContract();
+var c70 = initContract();
 var memberUsageSchema = external_exports.object({
   userId: external_exports.string(),
   email: external_exports.string(),
@@ -123184,7 +123645,7 @@ var usageMembersResponseSchema = external_exports.object({
   }).nullable(),
   members: external_exports.array(memberUsageSchema)
 });
-var zeroUsageMembersContract = c68.router({
+var zeroUsageMembersContract = c70.router({
   get: {
     method: "GET",
     path: "/api/zero/usage/members",
@@ -123200,7 +123661,7 @@ var zeroUsageMembersContract = c68.router({
 
 // ../../packages/api-contracts/src/contracts/zero-usage-daily.ts
 init_esm_shims();
-var c69 = initContract();
+var c71 = initContract();
 var usageRunSchema = external_exports.object({
   runId: external_exports.string(),
   agentName: external_exports.string().nullable(),
@@ -123227,7 +123688,7 @@ var usageRunsResponseSchema = external_exports.object({
     total: external_exports.number()
   })
 });
-var zeroUsageRunsContract = c69.router({
+var zeroUsageRunsContract = c71.router({
   get: {
     method: "GET",
     path: "/api/zero/usage/runs",
@@ -123253,7 +123714,7 @@ var zeroUsageRunsContract = c69.router({
 
 // ../../packages/api-contracts/src/contracts/zero-usage-insight.ts
 init_esm_shims();
-var c70 = initContract();
+var c72 = initContract();
 var usageInsightBucketSchema = external_exports.object({
   ts: external_exports.string(),
   // ISO string for the bucket start
@@ -123290,7 +123751,7 @@ var usageInsightResponseSchema = external_exports.object({
   grandTotalCredits: external_exports.number(),
   grandTotalTokens: external_exports.number()
 });
-var zeroUsageInsightContract = c70.router({
+var zeroUsageInsightContract = c72.router({
   get: {
     method: "GET",
     path: "/api/zero/usage/insight",
@@ -123313,7 +123774,7 @@ var zeroUsageInsightContract = c70.router({
 
 // ../../packages/api-contracts/src/contracts/usage.ts
 init_esm_shims();
-var c71 = initContract();
+var c73 = initContract();
 var dailyUsageSchema = external_exports.object({
   date: external_exports.string(),
   run_count: external_exports.number(),
@@ -123330,7 +123791,7 @@ var usageResponseSchema = external_exports.object({
   }),
   daily: external_exports.array(dailyUsageSchema)
 });
-var usageContract = c71.router({
+var usageContract = c73.router({
   get: {
     method: "GET",
     path: "/api/usage",
@@ -123351,7 +123812,7 @@ var usageContract = c71.router({
 
 // ../../packages/api-contracts/src/contracts/zero-team.ts
 init_esm_shims();
-var c72 = initContract();
+var c74 = initContract();
 var teamComposeItemSchema = external_exports.object({
   id: external_exports.string(),
   ownerId: external_exports.string().optional(),
@@ -123363,7 +123824,7 @@ var teamComposeItemSchema = external_exports.object({
   headVersionId: external_exports.string().nullable(),
   updatedAt: external_exports.string()
 });
-var zeroTeamContract = c72.router({
+var zeroTeamContract = c74.router({
   list: {
     method: "GET",
     path: "/api/zero/team",
@@ -123380,7 +123841,7 @@ var zeroTeamContract = c72.router({
 
 // ../../packages/api-contracts/src/contracts/zero-integrations-slack.ts
 init_esm_shims();
-var c73 = initContract();
+var c75 = initContract();
 var slackEnvironmentSchema = external_exports.object({
   requiredSecrets: external_exports.array(external_exports.string()),
   requiredVars: external_exports.array(external_exports.string()),
@@ -123402,7 +123863,7 @@ var slackOrgStatusSchema = external_exports.object({
   /** OAuth install URL for re-authorization (admin-only, when scopeMismatch). */
   reinstallUrl: external_exports.string().nullable().optional()
 });
-var zeroIntegrationsSlackContract = c73.router({
+var zeroIntegrationsSlackContract = c75.router({
   getStatus: {
     method: "GET",
     path: "/api/zero/integrations/slack",
@@ -123417,7 +123878,7 @@ var zeroIntegrationsSlackContract = c73.router({
     method: "DELETE",
     path: "/api/zero/integrations/slack",
     headers: authHeadersSchema,
-    body: c73.noBody(),
+    body: c75.noBody(),
     query: external_exports.object({
       action: external_exports.string().optional()
     }),
@@ -123433,7 +123894,7 @@ var zeroIntegrationsSlackContract = c73.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-connect.ts
 init_esm_shims();
-var c74 = initContract();
+var c76 = initContract();
 var slackConnectStatusSchema = external_exports.object({
   isConnected: external_exports.boolean(),
   isAdmin: external_exports.boolean(),
@@ -123445,7 +123906,7 @@ var slackConnectResponseSchema = external_exports.object({
   connectionId: external_exports.string(),
   role: external_exports.string()
 });
-var zeroSlackConnectContract = c74.router({
+var zeroSlackConnectContract = c76.router({
   getStatus: {
     method: "GET",
     path: "/api/zero/integrations/slack/connect",
@@ -123479,12 +123940,12 @@ var zeroSlackConnectContract = c74.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-commands.ts
 init_esm_shims();
-var c75 = initContract();
-var zeroSlackCommandsContract = c75.router({
+var c77 = initContract();
+var zeroSlackCommandsContract = c77.router({
   post: {
     method: "POST",
     path: "/api/zero/slack/commands",
-    body: c75.type(),
+    body: c77.type(),
     responses: {
       200: external_exports.unknown(),
       401: external_exports.object({ error: external_exports.string() }),
@@ -123496,12 +123957,12 @@ var zeroSlackCommandsContract = c75.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-events.ts
 init_esm_shims();
-var c76 = initContract();
-var zeroSlackEventsContract = c76.router({
+var c78 = initContract();
+var zeroSlackEventsContract = c78.router({
   post: {
     method: "POST",
     path: "/api/zero/slack/events",
-    body: c76.type(),
+    body: c78.type(),
     responses: {
       200: external_exports.unknown(),
       400: external_exports.object({ error: external_exports.string() }),
@@ -123514,12 +123975,12 @@ var zeroSlackEventsContract = c76.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-interactive.ts
 init_esm_shims();
-var c77 = initContract();
-var zeroSlackInteractiveContract = c77.router({
+var c79 = initContract();
+var zeroSlackInteractiveContract = c79.router({
   post: {
     method: "POST",
     path: "/api/zero/slack/interactive",
-    body: c77.type(),
+    body: c79.type(),
     responses: {
       200: external_exports.unknown(),
       400: external_exports.object({ error: external_exports.string() }),
@@ -123532,7 +123993,7 @@ var zeroSlackInteractiveContract = c77.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-browser-connect.ts
 init_esm_shims();
-var c78 = initContract();
+var c80 = initContract();
 var zeroSlackBrowserConnectQuerySchema = external_exports.object({
   w: external_exports.string().optional(),
   u: external_exports.string().optional(),
@@ -123540,13 +124001,13 @@ var zeroSlackBrowserConnectQuerySchema = external_exports.object({
   t: external_exports.string().optional(),
   orgId: external_exports.string().optional()
 });
-var zeroSlackBrowserConnectContract = c78.router({
+var zeroSlackBrowserConnectContract = c80.router({
   connect: {
     method: "GET",
     path: "/api/zero/slack/connect",
     query: zeroSlackBrowserConnectQuerySchema,
     responses: {
-      307: c78.noBody(),
+      307: c80.noBody(),
       500: external_exports.object({ error: external_exports.string() })
     },
     summary: "Browser Slack connect flow"
@@ -123555,7 +124016,7 @@ var zeroSlackBrowserConnectContract = c78.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-oauth.ts
 init_esm_shims();
-var c79 = initContract();
+var c81 = initContract();
 var jsonErrorSchema2 = external_exports.object({ error: external_exports.string() });
 var zeroSlackOauthInstallQuerySchema = external_exports.object({
   orgId: external_exports.string().optional(),
@@ -123573,13 +124034,13 @@ var zeroSlackOauthCallbackQuerySchema = external_exports.object({
   error: external_exports.string().optional(),
   state: external_exports.string().optional()
 });
-var zeroSlackOauthContract = c79.router({
+var zeroSlackOauthContract = c81.router({
   install: {
     method: "GET",
     path: "/api/zero/slack/oauth/install",
     query: zeroSlackOauthInstallQuerySchema,
     responses: {
-      307: c79.noBody(),
+      307: c81.noBody(),
       503: jsonErrorSchema2
     },
     summary: "Start Slack bot OAuth install"
@@ -123589,7 +124050,7 @@ var zeroSlackOauthContract = c79.router({
     path: "/api/zero/slack/oauth/connect",
     query: zeroSlackOauthConnectQuerySchema,
     responses: {
-      307: c79.noBody(),
+      307: c81.noBody(),
       400: jsonErrorSchema2,
       404: jsonErrorSchema2,
       503: jsonErrorSchema2
@@ -123601,7 +124062,7 @@ var zeroSlackOauthContract = c79.router({
     path: "/api/zero/slack/oauth/callback",
     query: zeroSlackOauthCallbackQuerySchema,
     responses: {
-      307: c79.noBody(),
+      307: c81.noBody(),
       400: jsonErrorSchema2,
       503: jsonErrorSchema2
     },
@@ -123611,12 +124072,12 @@ var zeroSlackOauthContract = c79.router({
 
 // ../../packages/api-contracts/src/contracts/zero-slack-channels.ts
 init_esm_shims();
-var c80 = initContract();
+var c82 = initContract();
 var slackChannelSchema = external_exports.object({
   id: external_exports.string(),
   name: external_exports.string()
 });
-var zeroSlackChannelsContract = c80.router({
+var zeroSlackChannelsContract = c82.router({
   list: {
     method: "GET",
     path: "/api/zero/slack/channels",
@@ -123632,12 +124093,12 @@ var zeroSlackChannelsContract = c80.router({
 
 // ../../packages/api-contracts/src/contracts/zero-queue-position.ts
 init_esm_shims();
-var c81 = initContract();
+var c83 = initContract();
 var queuePositionResponseSchema = external_exports.object({
   position: external_exports.number(),
   total: external_exports.number()
 });
-var zeroQueuePositionContract = c81.router({
+var zeroQueuePositionContract = c83.router({
   getPosition: {
     method: "GET",
     path: "/api/zero/queue-position",
@@ -123657,13 +124118,13 @@ var zeroQueuePositionContract = c81.router({
 
 // ../../packages/api-contracts/src/contracts/zero-member-credit-cap.ts
 init_esm_shims();
-var c82 = initContract();
+var c84 = initContract();
 var memberCreditCapResponseSchema = external_exports.object({
   userId: external_exports.string(),
   creditCap: external_exports.number().nullable(),
   creditEnabled: external_exports.boolean()
 });
-var zeroMemberCreditCapContract = c82.router({
+var zeroMemberCreditCapContract = c84.router({
   get: {
     method: "GET",
     path: "/api/zero/org/members/credit-cap",
@@ -123698,7 +124159,7 @@ var zeroMemberCreditCapContract = c82.router({
 
 // ../../packages/api-contracts/src/contracts/zero-report-error.ts
 init_esm_shims();
-var c83 = initContract();
+var c85 = initContract();
 var reportErrorBodySchema = external_exports.object({
   runId: external_exports.uuid("Run ID must be a valid UUID"),
   title: external_exports.string().min(1, "Title is required"),
@@ -123707,7 +124168,7 @@ var reportErrorBodySchema = external_exports.object({
 var reportErrorResponseSchema = external_exports.object({
   reference: external_exports.string()
 });
-var zeroReportErrorContract = c83.router({
+var zeroReportErrorContract = c85.router({
   submit: {
     method: "POST",
     path: "/api/zero/report-error",
@@ -123726,7 +124187,7 @@ var zeroReportErrorContract = c83.router({
 
 // ../../packages/api-contracts/src/contracts/zero-insights.ts
 init_esm_shims();
-var c84 = initContract();
+var c86 = initContract();
 var insightAgentSchema = external_exports.object({
   agentName: external_exports.string(),
   agentId: external_exports.string().nullable(),
@@ -123791,7 +124252,7 @@ var insightsRangeResponseSchema = external_exports.object({
   maxDate: external_exports.string().nullable(),
   totalDays: external_exports.number()
 });
-var zeroInsightsContract = c84.router({
+var zeroInsightsContract = c86.router({
   get: {
     method: "GET",
     path: "/api/zero/insights",
@@ -123806,7 +124267,7 @@ var zeroInsightsContract = c84.router({
     summary: "Get daily insights for the authenticated org"
   }
 });
-var zeroInsightsRangeContract = c84.router({
+var zeroInsightsRangeContract = c86.router({
   get: {
     method: "GET",
     path: "/api/zero/insights/range",
@@ -123821,8 +124282,8 @@ var zeroInsightsRangeContract = c84.router({
 
 // ../../packages/api-contracts/src/contracts/push-subscriptions.ts
 init_esm_shims();
-var c85 = initContract();
-var pushSubscriptionsContract = c85.router({
+var c87 = initContract();
+var pushSubscriptionsContract = c87.router({
   register: {
     method: "POST",
     path: "/api/zero/push-subscriptions",
@@ -123846,7 +124307,7 @@ var pushSubscriptionsContract = c85.router({
 
 // ../../packages/api-contracts/src/contracts/zero-image-io-generate.ts
 init_esm_shims();
-var c86 = initContract();
+var c88 = initContract();
 var zeroImageIoGenerateRequestSchema = external_exports.object({
   prompt: external_exports.unknown().optional(),
   size: external_exports.unknown().optional(),
@@ -123879,7 +124340,7 @@ var zeroImageIoGenerateResponseSchema = external_exports.object({
   revisedPrompt: external_exports.string().optional(),
   usage: zeroImageIoUsageSchema
 });
-var zeroImageIoGenerateContract = c86.router({
+var zeroImageIoGenerateContract = c88.router({
   post: {
     method: "POST",
     path: "/api/zero/image-io/generate",
@@ -123901,7 +124362,7 @@ var zeroImageIoGenerateContract = c86.router({
 
 // ../../packages/api-contracts/src/contracts/zero-video-io-generate.ts
 init_esm_shims();
-var c87 = initContract();
+var c89 = initContract();
 var zeroVideoIoGenerateRequestSchema = external_exports.object({
   prompt: external_exports.unknown().optional(),
   model: external_exports.unknown().optional(),
@@ -123930,7 +124391,7 @@ var zeroVideoIoGenerateResponseSchema = external_exports.object({
   sourceUrl: external_exports.string(),
   requestId: external_exports.string().optional()
 });
-var zeroVideoIoGenerateContract = c87.router({
+var zeroVideoIoGenerateContract = c89.router({
   post: {
     method: "POST",
     path: "/api/zero/video-io/generate",
@@ -123953,8 +124414,8 @@ var zeroVideoIoGenerateContract = c87.router({
 
 // ../../packages/api-contracts/src/contracts/internal-callbacks-agent.ts
 init_esm_shims();
-var c88 = initContract();
-var internalCallbacksAgentContract = c88.router({
+var c90 = initContract();
+var internalCallbacksAgentContract = c90.router({
   post: {
     method: "POST",
     path: "/api/internal/callbacks/agent",
@@ -123972,7 +124433,7 @@ var internalCallbacksAgentContract = c88.router({
 
 // ../../packages/api-contracts/src/contracts/internal-callbacks-github-issues.ts
 init_esm_shims();
-var c89 = initContract();
+var c91 = initContract();
 var githubIssuesCallbackPayloadSchema = external_exports.object({
   installationId: external_exports.string(),
   repo: external_exports.string(),
@@ -123983,7 +124444,7 @@ var githubIssuesCallbackPayloadSchema = external_exports.object({
   triggerReactionId: external_exports.string().optional(),
   triggerCommentBody: external_exports.string().optional()
 }).passthrough();
-var internalCallbacksGithubIssuesContract = c89.router({
+var internalCallbacksGithubIssuesContract = c91.router({
   post: {
     method: "POST",
     path: "/api/internal/callbacks/github/issues",
@@ -124004,7 +124465,7 @@ var internalCallbacksGithubIssuesContract = c89.router({
 
 // ../../packages/api-contracts/src/contracts/internal-callbacks-schedule.ts
 init_esm_shims();
-var c90 = initContract();
+var c92 = initContract();
 var scheduleLoopCallbackPayloadSchema = external_exports.object({
   scheduleId: external_exports.string()
 }).passthrough();
@@ -124012,7 +124473,7 @@ var scheduleCronCallbackPayloadSchema = scheduleLoopCallbackPayloadSchema.extend
   timezone: external_exports.string(),
   cronExpression: external_exports.string().optional()
 }).passthrough();
-var internalCallbacksScheduleContract = c90.router({
+var internalCallbacksScheduleContract = c92.router({
   cron: {
     method: "POST",
     path: "/api/internal/callbacks/schedule/cron",
@@ -124047,13 +124508,13 @@ var internalCallbacksScheduleContract = c90.router({
 
 // ../../packages/api-contracts/src/contracts/zero-voice-io-quota.ts
 init_esm_shims();
-var c91 = initContract();
+var c93 = initContract();
 var audioInputQuotaResponseSchema = external_exports.object({
   allowed: external_exports.boolean(),
   count: external_exports.number().int().nonnegative(),
   limit: external_exports.number().int().positive().nullable()
 });
-var zeroVoiceIoQuotaContract = c91.router({
+var zeroVoiceIoQuotaContract = c93.router({
   get: {
     method: "GET",
     path: "/api/zero/voice-io/quota",
@@ -124069,7 +124530,7 @@ var zeroVoiceIoQuotaContract = c91.router({
 
 // ../../packages/api-contracts/src/contracts/zero-voice-io-speech.ts
 init_esm_shims();
-var c92 = initContract();
+var c94 = initContract();
 var zeroVoiceIoSpeechRequestSchema = external_exports.object({
   text: external_exports.unknown().optional(),
   voice: external_exports.unknown().optional(),
@@ -124086,7 +124547,7 @@ var zeroVoiceIoSpeechResponseSchema = external_exports.object({
   model: external_exports.string(),
   voice: external_exports.string()
 });
-var zeroVoiceIoSpeechContract = c92.router({
+var zeroVoiceIoSpeechContract = c94.router({
   post: {
     method: "POST",
     path: "/api/zero/voice-io/speech",
@@ -124108,7 +124569,7 @@ var zeroVoiceIoSpeechContract = c92.router({
 
 // ../../packages/api-contracts/src/contracts/zero-voice-io-stt.ts
 init_esm_shims();
-var c93 = initContract();
+var c95 = initContract();
 var zeroVoiceIoSttResponseSchema = external_exports.object({
   text: external_exports.string()
 });
@@ -124118,13 +124579,13 @@ var zeroVoiceIoSttQuotaErrorSchema = apiErrorSchema.extend({
     limit: external_exports.number().nullable()
   }).optional()
 });
-var zeroVoiceIoSttContract = c93.router({
+var zeroVoiceIoSttContract = c95.router({
   post: {
     method: "POST",
     path: "/api/zero/voice-io/stt",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c93.type(),
+    body: c95.type(),
     responses: {
       200: zeroVoiceIoSttResponseSchema,
       400: apiErrorSchema,
@@ -124140,18 +124601,18 @@ var zeroVoiceIoSttContract = c93.router({
 
 // ../../packages/api-contracts/src/contracts/zero-voice-io-tts.ts
 init_esm_shims();
-var c94 = initContract();
+var c96 = initContract();
 var zeroVoiceIoTtsRequestSchema = external_exports.object({
   text: external_exports.unknown().optional()
 }).passthrough();
-var zeroVoiceIoTtsContract = c94.router({
+var zeroVoiceIoTtsContract = c96.router({
   post: {
     method: "POST",
     path: "/api/zero/voice-io/tts",
     headers: authHeadersSchema,
     body: zeroVoiceIoTtsRequestSchema,
     responses: {
-      200: c94.otherResponse({
+      200: c96.otherResponse({
         contentType: "application/octet-stream",
         body: external_exports.unknown()
       }),
@@ -124166,7 +124627,7 @@ var zeroVoiceIoTtsContract = c94.router({
 
 // ../../packages/api-contracts/src/contracts/zero-voice-chat.ts
 init_esm_shims();
-var c95 = initContract();
+var c97 = initContract();
 var voiceChatItemRoleSchema = external_exports.enum([
   "user",
   "assistant",
@@ -124263,7 +124724,7 @@ var sessionEndedBodySchema = external_exports.object({
   relaySessionId: external_exports.uuid()
 });
 var okResponseSchema = external_exports.object({ ok: external_exports.literal(true) });
-var zeroVoiceChatContract = c95.router({
+var zeroVoiceChatContract = c97.router({
   createSession: {
     method: "POST",
     path: "/api/zero/voice-chat",
@@ -124438,7 +124899,7 @@ var zeroVoiceChatContract = c95.router({
 
 // ../../packages/api-contracts/src/contracts/zero-uploads.ts
 init_esm_shims();
-var c96 = initContract();
+var c98 = initContract();
 var prepareRequestSchema = external_exports.object({
   filename: external_exports.string().min(1).max(255),
   contentType: external_exports.string().min(1).max(200),
@@ -124465,7 +124926,7 @@ var completeResponseSchema = external_exports.object({
   size: external_exports.number(),
   url: external_exports.string().url()
 });
-var zeroUploadsContract = c96.router({
+var zeroUploadsContract = c98.router({
   prepare: {
     method: "POST",
     path: "/api/zero/uploads/prepare",
@@ -124499,7 +124960,7 @@ var zeroUploadsContract = c96.router({
 
 // ../../packages/api-contracts/src/contracts/zero-integrations-telegram.ts
 init_esm_shims();
-var c97 = initContract();
+var c99 = initContract();
 var telegramEnvironmentSchema = external_exports.object({
   requiredSecrets: external_exports.array(external_exports.string()),
   requiredVars: external_exports.array(external_exports.string()),
@@ -124598,7 +125059,7 @@ var telegramSetupStatusSchema = external_exports.object({
 var telegramWebhookPathParamsSchema = external_exports.object({
   telegramBotId: external_exports.string().min(1)
 });
-var zeroIntegrationsTelegramContract = c97.router({
+var zeroIntegrationsTelegramContract = c99.router({
   list: {
     method: "GET",
     path: "/api/integrations/telegram",
@@ -124641,9 +125102,9 @@ var zeroIntegrationsTelegramContract = c97.router({
     path: "/api/integrations/telegram/:botId",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ botId: external_exports.string().min(1) }),
-    body: c97.noBody(),
+    body: c99.noBody(),
     responses: {
-      204: c97.noBody(),
+      204: c99.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -124654,10 +125115,10 @@ var zeroIntegrationsTelegramContract = c97.router({
     method: "DELETE",
     path: "/api/integrations/telegram/link",
     headers: authHeadersSchema,
-    body: c97.noBody(),
+    body: c99.noBody(),
     query: external_exports.object({ botId: external_exports.string().optional() }),
     responses: {
-      204: c97.noBody(),
+      204: c99.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
@@ -124688,7 +125149,7 @@ var zeroIntegrationsTelegramContract = c97.router({
       sig: external_exports.string().optional()
     }),
     responses: {
-      200: c97.otherResponse({
+      200: c99.otherResponse({
         contentType: "application/octet-stream",
         body: external_exports.unknown()
       }),
@@ -124703,7 +125164,7 @@ var zeroIntegrationsTelegramContract = c97.router({
     method: "GET",
     path: "/api/integrations/telegram/auth-callback",
     responses: {
-      200: c97.otherResponse({
+      200: c99.otherResponse({
         contentType: "text/html",
         body: external_exports.unknown()
       })
@@ -124762,19 +125223,19 @@ var zeroIntegrationsTelegramContract = c97.router({
     pathParams: telegramWebhookPathParamsSchema,
     body: external_exports.unknown(),
     responses: {
-      200: c97.otherResponse({
+      200: c99.otherResponse({
         contentType: "text/plain",
         body: external_exports.string()
       }),
-      400: c97.otherResponse({
+      400: c99.otherResponse({
         contentType: "text/plain",
         body: external_exports.string()
       }),
-      401: c97.otherResponse({
+      401: c99.otherResponse({
         contentType: "text/plain",
         body: external_exports.string()
       }),
-      404: c97.otherResponse({
+      404: c99.otherResponse({
         contentType: "text/plain",
         body: external_exports.string()
       })
@@ -124785,7 +125246,7 @@ var zeroIntegrationsTelegramContract = c97.router({
 
 // ../../packages/api-contracts/src/contracts/zero-integrations-agentphone.ts
 init_esm_shims();
-var c98 = initContract();
+var c100 = initContract();
 var agentPhoneConnectBodySchema = external_exports.object({
   phoneHandle: external_exports.string().min(1),
   agentphoneAgentId: external_exports.string().min(1),
@@ -124796,6 +125257,12 @@ var agentPhoneConnectBodySchema = external_exports.object({
 var agentPhoneConnectResponseSchema = external_exports.object({
   phoneHandle: external_exports.string()
 });
+var agentPhoneWebhookHeadersSchema = external_exports.object({
+  "x-webhook-signature": external_exports.string().optional(),
+  "x-webhook-timestamp": external_exports.string().optional(),
+  "x-webhook-event": external_exports.string().optional(),
+  "x-webhook-id": external_exports.string().optional()
+});
 var agentPhoneLinkStatusResponseSchema = external_exports.discriminatedUnion("linked", [
   external_exports.object({
     linked: external_exports.literal(true),
@@ -124816,7 +125283,7 @@ var agentPhoneStartLinkResponseSchema = external_exports.object({
   phoneHandle: external_exports.string(),
   verificationSent: external_exports.literal(true)
 });
-var zeroIntegrationsAgentPhoneContract = c98.router({
+var zeroIntegrationsAgentPhoneContract = c100.router({
   connectAgentPhone: {
     method: "POST",
     path: "/api/agentphone/connect",
@@ -124830,6 +125297,19 @@ var zeroIntegrationsAgentPhoneContract = c98.router({
     },
     summary: "Link the authenticated VM0 user to an AgentPhone phone handle"
   },
+  webhook: {
+    method: "POST",
+    path: "/api/agentphone/webhook",
+    headers: agentPhoneWebhookHeadersSchema,
+    body: c100.type(),
+    responses: {
+      200: external_exports.string(),
+      400: external_exports.string(),
+      401: external_exports.string(),
+      404: external_exports.string()
+    },
+    summary: "Handle AgentPhone inbound message webhooks"
+  },
   getLinkStatus: {
     method: "GET",
     path: "/api/integrations/agentphone/link",
@@ -124861,9 +125341,9 @@ var zeroIntegrationsAgentPhoneContract = c98.router({
     method: "DELETE",
     path: "/api/integrations/agentphone/link",
     headers: authHeadersSchema,
-    body: c98.noBody(),
+    body: c100.noBody(),
     responses: {
-      204: c98.noBody(),
+      204: c100.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -125083,9 +125563,9 @@ var FEATURE_SWITCHES = {
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
-  ["stripeCliAuth" /* StripeCliAuth */]: {
+  ["cliAuthStripe" /* CliAuthStripe */]: {
     maintainer: "liangyou@vm0.ai",
-    description: "Gate Stripe-specific CLI auth UI and API surfaces. Stripe CLI auth consumers should also require CliAuth.",
+    description: "Gate Stripe-specific CLI auth UI and API surfaces. CLI auth for Stripe consumers should also require CliAuth.",
     enabled: false,
     enabledOrgIdHashes: STAFF_ORG_ID_HASHES
   },
@@ -125129,6 +125609,12 @@ var FEATURE_SWITCHES = {
     description: "Enable remote desktop host registration",
     enabled: false
   },
+  ["localBrowserUse" /* LocalBrowserUse */]: {
+    maintainer: "ethan@vm0.ai",
+    description: "Enable the Local Browser connector and user-authorized browser host lifecycle",
+    enabled: false,
+    enabledOrgIdHashes: STAFF_ORG_ID_HASHES
+  },
   ["remoteAgent" /* RemoteAgent */]: {
     maintainer: "lancy@vm0.ai",
     description: "Enable remote-agent device pairing and local Codex/Claude host heartbeat endpoints.",
@@ -125609,9 +126095,9 @@ var CodexEventParser = class {
     if (!item.changes || item.changes.length === 0) {
       return null;
     }
-    const changes = item.changes.map((c99) => {
-      const action = c99.kind === "add" ? "Created" : c99.kind === "modify" ? "Modified" : "Deleted";
-      return `${action}: ${c99.path}`;
+    const changes = item.changes.map((c101) => {
+      const action = c101.kind === "add" ? "Created" : c101.kind === "modify" ? "Modified" : "Deleted";
+      return `${action}: ${c101.path}`;
     }).join("\n");
     return {
       type: "text",
@@ -126787,4 +127273,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-USVVSPWL.js.map
+//# sourceMappingURL=chunk-VKCZANPE.js.map