@vm0/cli 9.215.1 → 9.215.3

package/{agent-H6EHGFPZ.js → agent-AZQKRG4B.js}

@@ -4,10 +4,10 @@ const require = __createRequire(import.meta.url);
 import {
   loadConnectorPermissionInfos,
   policyIcon
-} from "./chunk-KZJ4S6U5.js";
+} from "./chunk-RVZTMBZ7.js";
 import {
   permissionGrantsToFirewallPolicies
-} from "./chunk-INN5SRMT.js";
+} from "./chunk-WL7EL2UG.js";
 import {
   isInteractive,
   promptConfirm
@@ -23,7 +23,7 @@ import {
   listZeroUserPermissionGrants,
   updateZeroAgent,
   updateZeroAgentInstructions
-} from "./chunk-L6GC6AUS.js";
+} from "./chunk-DMAXHLSM.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -595,4 +595,4 @@ Notes:
 export {
   zeroAgentCommand
 };
-//# sourceMappingURL=agent-H6EHGFPZ.js.map
+//# sourceMappingURL=agent-AZQKRG4B.js.map

package/{automation-QV3AWLCI.js → automation-ZIEV4Q72.js}

@@ -23,7 +23,7 @@ import {
   showAutomation,
   updateAutomation,
   updateAutomationTrigger
-} from "./chunk-L6GC6AUS.js";
+} from "./chunk-DMAXHLSM.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -490,4 +490,4 @@ Examples:
 export {
   zeroAutomationCommand
 };
-//# sourceMappingURL=automation-QV3AWLCI.js.map
+//# sourceMappingURL=automation-ZIEV4Q72.js.map

package/{banking-HZVGHSLM.js → banking-2CDU223M.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   callZeroBanking
-} from "./chunk-L6GC6AUS.js";
+} from "./chunk-DMAXHLSM.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -115,4 +115,4 @@ Notes:
 export {
   zeroBankingCommand
 };
-//# sourceMappingURL=banking-HZVGHSLM.js.map
+//# sourceMappingURL=banking-2CDU223M.js.map

package/{chunk-LRUD7ROI.js → chunk-2MYK53HJ.js}

@@ -5,7 +5,7 @@ import {
   CONNECTOR_TYPES,
   CONNECTOR_TYPE_KEYS,
   connectorAuthMethodIdSchema
-} from "./chunk-L6GC6AUS.js";
+} from "./chunk-DMAXHLSM.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -181,4 +181,4 @@ export {
   hasRequiredConnectorAuthMethodScopes,
   getConnectorAuthMethodScopeDiff
 };
-//# sourceMappingURL=chunk-LRUD7ROI.js.map
+//# sourceMappingURL=chunk-2MYK53HJ.js.map

package/{chunk-L6GC6AUS.js → chunk-DMAXHLSM.js}

@@ -3787,6 +3787,11 @@ function pathSegmentHasUnsafeSyntax(segment2, rejectPathStructure) {
   const decoded = percentDecodePathSegment(current, rejectPathStructure);
   return decoded === null || decoded !== current;
 }
+function hasUnsafeFirewallPath(path) {
+  return path.split("/").some((segment2) => {
+    return pathSegmentHasUnsafeSyntax(segment2, false);
+  });
+}
 function validateBaseUrlVariablePercentEncoding({
   base,
   serviceName,
@@ -6101,6 +6106,9 @@ var chatThreadUnreadsSchema = external_exports.object({
     })
   )
 });
+var chatThreadUnreadAgentsSchema = external_exports.object({
+  agentIds: external_exports.array(external_exports.string())
+});
 var chatThreadListItemSchema = external_exports.object({
   id: external_exports.string(),
   title: external_exports.string().nullable(),
@@ -6400,7 +6408,18 @@ var chatThreadsContract = c15.router({
       200: chatThreadUnreadsSchema,
       401: apiErrorSchema
     },
-    summary: "List the caller's unread chat threads under an agent, each with the timestamp of the message that made it unread. Fetched separately from the thread list; mark-read returns the same snapshot so read state needs no broadcast."
+    summary: "List the caller's unread chat threads under an agent, each with the timestamp of the message that made it unread."
+  },
+  unreadAgents: {
+    method: "GET",
+    path: "/api/zero/chat-thread-unread-agents",
+    headers: authHeadersSchema,
+    responses: {
+      200: chatThreadUnreadAgentsSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema
+    },
+    summary: "List agent IDs with at least one unread chat thread for the caller."
   }
 });
 var chatThreadIdPathParamsSchema = external_exports.object({ id: external_exports.string().uuid() });
@@ -6466,8 +6485,8 @@ var chatThreadMarkReadContract = c15.router({
         lastReadMessageId: external_exports.string().nullable(),
         /**
          * Fresh unread snapshot for the thread's agent (same shape as the
-         * unreads endpoint), so the caller syncs read state from the response
-         * instead of a broadcast-triggered refetch.
+         * unreads endpoint). Kept for response compatibility; clients should
+         * treat `chatThreadReadCursorUpdated` as read-state invalidation.
          */
         unreads: chatThreadUnreadsSchema.shape.unreads
       }),
@@ -6475,7 +6494,7 @@ var chatThreadMarkReadContract = c15.router({
       401: apiErrorSchema,
       404: apiErrorSchema
     },
-    summary: "Mark a chat thread as read up to the latest message and return the agent's unread snapshot"
+    summary: "Mark a chat thread as read up to the latest message"
   }
 });
 var chatThreadPinContract = c15.router({
@@ -27340,6 +27359,7 @@ export {
   splitPathSegments,
   UNKNOWN_PERMISSION_GRANT,
   firewallPoliciesSchema,
+  hasUnsafeFirewallPath,
   resolveFirewallBaseUrlTemplate,
   hasBaseUrlParams,
   validateBaseUrl,
@@ -27502,4 +27522,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-L6GC6AUS.js.map
+//# sourceMappingURL=chunk-DMAXHLSM.js.map