@vm0/cli 9.240.8 → 9.240.10

package/{chunk-5REPUXEK.js → chunk-UETYUI63.js}

@@ -22,7 +22,7 @@ import {
   updateOrgModelPoliciesRequestSchema,
   upsertModelProviderRequestSchema,
   upsertModelProviderResponseSchema
-} from "./chunk-EEKVCESE.js";
+} from "./chunk-TTOETZE7.js";
 import {
   __commonJS,
   __esm,
@@ -3582,8 +3582,118 @@ var zeroGoalsContract = c14.router({
   }
 });
 
-// ../../packages/api-contracts/src/contracts/chat-threads.ts
+// ../../packages/api-contracts/src/contracts/zero-mail.ts
+init_esm_shims();
 var c15 = initContract();
+var zeroMailProviderSchema = external_exports.enum(["gmail", "outlook"]);
+var zeroMailDraftStatusSchema = external_exports.enum([
+  "draft",
+  "sending",
+  "sent",
+  "cancelled",
+  "failed",
+  "delivery_unknown"
+]);
+var mailSubjectSchema = external_exports.string().min(1).refine((value) => {
+  return !value.includes("\r") && !value.includes("\n");
+}, "Subject must not contain line breaks");
+var zeroMailDraftSchema = external_exports.object({
+  version: external_exports.literal(1),
+  provider: zeroMailProviderSchema,
+  from: external_exports.email(),
+  to: external_exports.array(external_exports.email()).min(1),
+  subject: mailSubjectSchema,
+  body: external_exports.string().min(1),
+  status: zeroMailDraftStatusSchema,
+  error: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string(),
+  sentAt: external_exports.string().optional()
+});
+var zeroMailDraftFieldsSchema = external_exports.object({
+  to: external_exports.array(external_exports.email()).min(1),
+  subject: mailSubjectSchema,
+  body: external_exports.string().min(1)
+});
+var zeroMailDraftResponseSchema = external_exports.object({
+  messageId: external_exports.string().uuid(),
+  mailDraft: zeroMailDraftSchema
+});
+var zeroMailDraftPathParamsSchema = external_exports.object({
+  threadId: external_exports.string().uuid(),
+  messageId: external_exports.string().uuid()
+});
+var zeroMailContract = c15.router({
+  createDraft: {
+    method: "POST",
+    path: "/api/zero/mail/drafts",
+    headers: authHeadersSchema,
+    body: zeroMailDraftFieldsSchema.extend({
+      threadId: external_exports.string().uuid(),
+      agentId: external_exports.string().uuid(),
+      provider: zeroMailProviderSchema.optional()
+    }),
+    responses: {
+      201: zeroMailDraftResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Create a persistent email draft card in a web chat thread"
+  },
+  updateDraft: {
+    method: "PATCH",
+    path: "/api/zero/mail/drafts/:threadId/:messageId",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    body: zeroMailDraftFieldsSchema,
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Persist edits to an email draft card"
+  },
+  cancelDraft: {
+    method: "POST",
+    path: "/api/zero/mail/drafts/:threadId/:messageId/cancel",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    body: c15.noBody(),
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Cancel an email draft card"
+  },
+  sendDraft: {
+    method: "POST",
+    path: "/api/zero/mail/drafts/:threadId/:messageId/send",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    body: zeroMailDraftFieldsSchema,
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Persist the latest edits and send an email draft exactly once"
+  }
+});
+
+// ../../packages/api-contracts/src/contracts/chat-threads.ts
+var c16 = initContract();
 var attachFileSchema = external_exports.object({
   id: external_exports.string(),
   filename: external_exports.string(),
@@ -3820,6 +3930,7 @@ var pagedChatMessageBaseSchema = external_exports.object({
   error: external_exports.string().optional(),
   attachFiles: external_exports.array(resolvedAttachFileSchema).optional(),
   generationTemplate: generationTemplateRequestSchema.optional(),
+  mailDraft: zeroMailDraftSchema.optional(),
   sequenceNumber: external_exports.number().nullable().optional(),
   workflowSnapshot: external_exports.object({
     id: external_exports.string().uuid().optional(),
@@ -3975,7 +4086,7 @@ var chatMessageNormalSendBodySchema = external_exports.preprocess(
     interruptsRunId: external_exports.undefined().optional()
   })
 );
-var chatThreadsContract = c15.router({
+var chatThreadsContract = c16.router({
   snapshot: {
     method: "GET",
     path: "/api/zero/chat-threads/snapshot",
@@ -4086,7 +4197,7 @@ var chatThreadThreadIdPathParamsSchema = external_exports.object({
 var chatThreadMessagePathParamsSchema = chatThreadThreadIdPathParamsSchema.extend({
   messageId: external_exports.string().uuid()
 });
-var chatThreadByIdContract = c15.router({
+var chatThreadByIdContract = c16.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id",
@@ -4110,7 +4221,7 @@ var chatThreadByIdContract = c15.router({
       draftAttachments: external_exports.array(persistedAttachmentSchema).nullable().optional()
     }),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4124,17 +4235,17 @@ var chatThreadByIdContract = c15.router({
     pathParams: chatThreadIdPathParamsSchema,
     query: external_exports.object({ eventId: chatThreadEventIdSchema.optional() }).optional(),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       402: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Delete a chat thread",
-    body: c15.noBody()
+    body: c16.noBody()
   }
 });
-var chatThreadDraftContract = c15.router({
+var chatThreadDraftContract = c16.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id/draft",
@@ -4149,13 +4260,13 @@ var chatThreadDraftContract = c15.router({
     summary: "Get chat thread draft content and attachments"
   }
 });
-var chatThreadMarkReadContract = c15.router({
+var chatThreadMarkReadContract = c16.router({
   markRead: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/mark-read",
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
-    body: c15.noBody(),
+    body: c16.noBody(),
     responses: {
       200: external_exports.object({
         lastReadAt: external_exports.string().nullable(),
@@ -4173,7 +4284,7 @@ var chatThreadMarkReadContract = c15.router({
     summary: "Mark a chat thread as read up to the latest run-finish marker"
   }
 });
-var chatThreadMarkAgentReadContract = c15.router({
+var chatThreadMarkAgentReadContract = c16.router({
   markAgentRead: {
     method: "POST",
     path: "/api/zero/chat-thread-unreads/mark-read",
@@ -4182,7 +4293,7 @@ var chatThreadMarkAgentReadContract = c15.router({
       agentId: external_exports.string().min(1)
     }),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema
@@ -4190,16 +4301,16 @@ var chatThreadMarkAgentReadContract = c15.router({
     summary: "Mark all unread chat threads under an agent as read"
   }
 });
-var chatThreadPinContract = c15.router({
+var chatThreadPinContract = c16.router({
   pin: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/pin",
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
     query: external_exports.object({ eventId: chatThreadEventIdSchema.optional() }).optional(),
-    body: c15.noBody(),
+    body: c16.noBody(),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4207,16 +4318,16 @@ var chatThreadPinContract = c15.router({
     summary: "Pin a chat thread to the top of the sidebar"
   }
 });
-var chatThreadUnpinContract = c15.router({
+var chatThreadUnpinContract = c16.router({
   unpin: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/unpin",
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
     query: external_exports.object({ eventId: chatThreadEventIdSchema.optional() }).optional(),
-    body: c15.noBody(),
+    body: c16.noBody(),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4224,7 +4335,7 @@ var chatThreadUnpinContract = c15.router({
     summary: "Remove the pin from a chat thread"
   }
 });
-var chatThreadRenameContract = c15.router({
+var chatThreadRenameContract = c16.router({
   rename: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/rename",
@@ -4235,7 +4346,7 @@ var chatThreadRenameContract = c15.router({
       eventId: chatThreadEventIdSchema.optional()
     }),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4244,7 +4355,7 @@ var chatThreadRenameContract = c15.router({
     summary: "Rename a chat thread (suppresses automated title generation)"
   }
 });
-var chatThreadMetadataContract = c15.router({
+var chatThreadMetadataContract = c16.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id/metadata",
@@ -4260,7 +4371,7 @@ var chatThreadMetadataContract = c15.router({
     summary: "Get chat thread metadata"
   }
 });
-var chatThreadModelSelectionContract = c15.router({
+var chatThreadModelSelectionContract = c16.router({
   update: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/model-selection",
@@ -4268,7 +4379,7 @@ var chatThreadModelSelectionContract = c15.router({
     pathParams: chatThreadIdPathParamsSchema,
     body: chatThreadModelSelectionUpdateBodySchema,
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       402: apiErrorSchema,
@@ -4278,7 +4389,7 @@ var chatThreadModelSelectionContract = c15.router({
     summary: "Update a chat thread model selection"
   }
 });
-var chatThreadComputerUseHostContract = c15.router({
+var chatThreadComputerUseHostContract = c16.router({
   update: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/computer-use-host",
@@ -4288,7 +4399,7 @@ var chatThreadComputerUseHostContract = c15.router({
       computerUseHostId: external_exports.string().uuid().nullable()
     }),
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4297,7 +4408,7 @@ var chatThreadComputerUseHostContract = c15.router({
     summary: "Update a chat thread Computer Use host binding"
   }
 });
-var chatMessagesContract = c15.router({
+var chatMessagesContract = c16.router({
   send: {
     method: "POST",
     path: "/api/zero/chat/messages",
@@ -4379,7 +4490,7 @@ var chatSearchResponseSchema = external_exports.object({
   results: external_exports.array(chatSearchResultSchema),
   hasMore: external_exports.boolean()
 });
-var chatSearchContract = c15.router({
+var chatSearchContract = c16.router({
   search: {
     method: "GET",
     path: "/api/zero/chat/search",
@@ -4401,7 +4512,7 @@ var chatSearchContract = c15.router({
     summary: "Search chat messages within caller's org (zero proxy)"
   }
 });
-var chatThreadMessagesContract = c15.router({
+var chatThreadMessagesContract = c16.router({
   list: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/messages",
@@ -4436,7 +4547,7 @@ var chatThreadMessagesContract = c15.router({
     summary: "Get a chat message by id for a thread"
   }
 });
-var chatThreadArtifactsContract = c15.router({
+var chatThreadArtifactsContract = c16.router({
   list: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/artifacts",
@@ -4490,7 +4601,7 @@ var chatThreadArtifactsContract = c15.router({
     pathParams: chatThreadThreadIdPathParamsSchema,
     query: htmlArtifactEditSnapshotQuerySchema,
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4526,7 +4637,7 @@ var chatThreadArtifactsContract = c15.router({
     headers: authHeadersSchema,
     pathParams: chatThreadThreadIdPathParamsSchema,
     contentType: "multipart/form-data",
-    body: c15.type(),
+    body: c16.type(),
     responses: {
       200: external_exports.object({
         id: external_exports.string(),
@@ -4542,7 +4653,7 @@ var chatThreadArtifactsContract = c15.router({
     summary: "Upload a presentation artifact to the user's Google Drive as a native Google Slides deck"
   }
 });
-var artifactsContract = c15.router({
+var artifactsContract = c16.router({
   list: {
     method: "GET",
     path: "/api/zero/artifacts",
@@ -4561,7 +4672,7 @@ var artifactsContract = c15.router({
     headers: authHeadersSchema,
     body: artifactFavoriteBodySchema,
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4575,7 +4686,7 @@ var artifactsContract = c15.router({
     headers: authHeadersSchema,
     body: artifactFavoriteBodySchema,
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4604,7 +4715,7 @@ var artifactsContract = c15.router({
     body: imageArtifactEditSnapshotUpsertSchema,
     responses: {
       200: imageArtifactEditSnapshotSchema,
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4618,7 +4729,7 @@ var artifactsContract = c15.router({
     headers: authHeadersSchema,
     query: imageArtifactEditSnapshotQuerySchema,
     responses: {
-      204: c15.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4629,7 +4740,7 @@ var artifactsContract = c15.router({
 });
 
 // ../../packages/api-contracts/src/contracts/zero-agents.ts
-var c16 = initContract();
+var c17 = initContract();
 var zeroAgentVisibilitySchema = external_exports.enum(["public", "private"]);
 var zeroAgentResponseSchema = external_exports.object({
   agentId: external_exports.string(),
@@ -4672,7 +4783,7 @@ var zeroAgentDraftRequestSchema = external_exports.object({
   draftContent: external_exports.string().nullable().optional(),
   draftAttachments: external_exports.array(persistedAttachmentSchema).nullable().optional()
 });
-var zeroAgentsMainContract = c16.router({
+var zeroAgentsMainContract = c17.router({
   create: {
     method: "POST",
     path: "/api/zero/agents",
@@ -4700,7 +4811,7 @@ var zeroAgentsMainContract = c16.router({
     summary: "List zero agents"
   }
 });
-var zeroAgentsByIdContract = c16.router({
+var zeroAgentsByIdContract = c17.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id",
@@ -4753,9 +4864,9 @@ var zeroAgentsByIdContract = c16.router({
     path: "/api/zero/agents/:id",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
-    body: c16.noBody(),
+    body: c17.noBody(),
     responses: {
-      204: c16.noBody(),
+      204: c17.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4765,7 +4876,7 @@ var zeroAgentsByIdContract = c16.router({
     summary: "Delete zero agent by id"
   }
 });
-var zeroAgentInstructionsContract = c16.router({
+var zeroAgentInstructionsContract = c17.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/instructions",
@@ -4797,7 +4908,7 @@ var zeroAgentInstructionsContract = c16.router({
     summary: "Update zero agent instructions"
   }
 });
-var zeroAgentDraftContract = c16.router({
+var zeroAgentDraftContract = c17.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/draft",
@@ -4819,7 +4930,7 @@ var zeroAgentDraftContract = c16.router({
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     body: zeroAgentDraftRequestSchema,
     responses: {
-      204: c16.noBody(),
+      204: c17.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4838,7 +4949,7 @@ var CONNECTOR_REF_MAX_LENGTH = 64;
 var connectorRefSchema = external_exports.string().min(1).max(CONNECTOR_REF_MAX_LENGTH);
 
 // ../../packages/api-contracts/src/contracts/zero-user-permission-grants.ts
-var c17 = initContract();
+var c18 = initContract();
 var agentIdSchema = external_exports.string().uuid();
 var permissionSchema = external_exports.string().min(1).max(128);
 var userPermissionGrantActionSchema = external_exports.enum(["allow", "deny"]);
@@ -4885,7 +4996,7 @@ var applyUserPermissionGrantsRequestSchema = userPermissionGrantScopeSchema.and(
     grants: external_exports.array(applyUserPermissionGrantSchema)
   })
 );
-var zeroUserPermissionGrantsContract = c17.router({
+var zeroUserPermissionGrantsContract = c18.router({
   list: {
     method: "GET",
     path: "/api/zero/user-permission-grants",
@@ -4929,7 +5040,7 @@ var connectorCatalogRefSchema = external_exports.string().min(1).max(CONNECTOR_C
 var connectorCatalogAuthMethodIdSchema = external_exports.string().min(1).max(CONNECTOR_CATALOG_AUTH_METHOD_ID_MAX_LENGTH).regex(connectorCatalogIdentityPattern);
 
 // ../../packages/api-contracts/src/contracts/user-connectors.ts
-var c18 = initContract();
+var c19 = initContract();
 var userConnectorEnabledTypesSchema = external_exports.object({
   enabledTypes: external_exports.array(connectorCatalogRefSchema)
 });
@@ -4938,7 +5049,7 @@ var userConnectorUpdateSchema = userConnectorEnabledTypesSchema.extend(
     operation: external_exports.enum(["replace", "add", "remove"]).optional()
   }
 );
-var zeroUserConnectorsContract = c18.router({
+var zeroUserConnectorsContract = c19.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/user-connectors",
@@ -4971,14 +5082,14 @@ var zeroUserConnectorsContract = c18.router({
 
 // ../../packages/api-contracts/src/contracts/zero-agent-custom-connectors.ts
 init_esm_shims();
-var c19 = initContract();
+var c20 = initContract();
 var agentCustomConnectorEnabledIdsSchema = external_exports.object({
   enabledIds: external_exports.array(external_exports.string().uuid())
 });
 var agentCustomConnectorUpdateSchema = agentCustomConnectorEnabledIdsSchema.extend({
   operation: external_exports.enum(["replace", "add", "remove"]).optional()
 });
-var zeroAgentCustomConnectorsContract = c19.router({
+var zeroAgentCustomConnectorsContract = c20.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/custom-connectors",
@@ -5288,8 +5399,8 @@ var connectorExternalCodeSessionCompleteResponseSchema = external_exports.object
 });
 
 // ../../packages/api-contracts/src/contracts/zero-connectors.ts
-var c20 = initContract();
-var zeroConnectorsMainContract = c20.router({
+var c21 = initContract();
+var zeroConnectorsMainContract = c21.router({
   list: {
     method: "GET",
     path: "/api/zero/connectors",
@@ -5303,7 +5414,7 @@ var zeroConnectorsMainContract = c20.router({
     summary: "List all connectors (zero proxy)"
   }
 });
-var zeroConnectorsByTypeContract = c20.router({
+var zeroConnectorsByTypeContract = c21.router({
   get: {
     method: "GET",
     path: "/api/zero/connectors/:type",
@@ -5323,14 +5434,14 @@ var zeroConnectorsByTypeContract = c20.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ type: connectorCatalogRefSchema }),
     responses: {
-      204: c20.noBody(),
+      204: c21.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Disconnect a connector (zero proxy)"
   }
 });
-var zeroConnectorScopeDiffContract = c20.router({
+var zeroConnectorScopeDiffContract = c21.router({
   getScopeDiff: {
     method: "GET",
     path: "/api/zero/connectors/:type/scope-diff",
@@ -5345,7 +5456,7 @@ var zeroConnectorScopeDiffContract = c20.router({
     summary: "Get scope diff for a connector"
   }
 });
-var zeroConnectorOauthStartContract = c20.router({
+var zeroConnectorOauthStartContract = c21.router({
   start: {
     method: "POST",
     path: "/api/zero/connectors/:type/oauth/start",
@@ -5362,7 +5473,7 @@ var zeroConnectorOauthStartContract = c20.router({
     summary: "Create connector OAuth handoff and authorization URL"
   }
 });
-var zeroConnectorOpenIdStartContract = c20.router({
+var zeroConnectorOpenIdStartContract = c21.router({
   start: {
     method: "POST",
     path: "/api/zero/connectors/:type/openid/start",
@@ -5379,7 +5490,7 @@ var zeroConnectorOpenIdStartContract = c20.router({
     summary: "Create connector OpenID handoff and authorization URL"
   }
 });
-var zeroConnectorManualGrantContract = c20.router({
+var zeroConnectorManualGrantContract = c21.router({
   connect: {
     method: "POST",
     path: "/api/zero/connectors/:type/manual-grant",
@@ -5400,7 +5511,7 @@ var zeroConnectorManualGrantContract = c20.router({
     summary: "Connect a connector with a manual grant"
   }
 });
-var zeroConnectorNoAuthGrantContract = c20.router({
+var zeroConnectorNoAuthGrantContract = c21.router({
   connect: {
     method: "POST",
     path: "/api/zero/connectors/:type/no-auth",
@@ -5420,7 +5531,7 @@ var zeroConnectorNoAuthGrantContract = c20.router({
     summary: "Enable a connector with a no-auth grant"
   }
 });
-var zeroConnectorOauthDeviceAuthSessionContract = c20.router({
+var zeroConnectorOauthDeviceAuthSessionContract = c21.router({
   create: {
     method: "POST",
     path: "/api/zero/connectors/:type/oauth/device/sessions",
@@ -5459,7 +5570,7 @@ var zeroConnectorOauthDeviceAuthSessionContract = c20.router({
     summary: "Poll connector OAuth device authorization session"
   }
 });
-var zeroConnectorExternalCodeSessionContract = c20.router({
+var zeroConnectorExternalCodeSessionContract = c21.router({
   create: {
     method: "POST",
     path: "/api/zero/connectors/:type/external-code/sessions",
@@ -5506,7 +5617,7 @@ var connectorSearchItemSchema = external_exports.object({
 var connectorSearchResponseSchema = external_exports.object({
   connectors: external_exports.array(connectorSearchItemSchema)
 });
-var zeroConnectorsSearchContract = c20.router({
+var zeroConnectorsSearchContract = c21.router({
   search: {
     method: "GET",
     path: "/api/zero/connectors/search",
@@ -5523,7 +5634,7 @@ var zeroConnectorsSearchContract = c20.router({
 
 // ../../packages/api-contracts/src/contracts/zero-connector-catalog.ts
 init_esm_shims();
-var c21 = initContract();
+var c22 = initContract();
 var publicConnectorCatalogAuthMethodSummarySchema = external_exports.object({
   id: connectorCatalogAuthMethodIdSchema,
   label: external_exports.string(),
@@ -5663,7 +5774,7 @@ var publicConnectorCatalogPermissionDetailResponseSchema = external_exports.obje
 var connectorCatalogPathParamsSchema = external_exports.object({
   connectorRef: connectorCatalogRefSchema
 });
-var zeroConnectorCatalogContract = c21.router({
+var zeroConnectorCatalogContract = c22.router({
   list: {
     method: "GET",
     path: "/api/zero/connector-catalog",
@@ -5718,7 +5829,7 @@ var zeroConnectorCatalogContract = c21.router({
 
 // ../../packages/api-contracts/src/contracts/zero-connector-check.ts
 init_esm_shims();
-var c22 = initContract();
+var c23 = initContract();
 var boundedNameSchema = external_exports.string().min(1).max(255);
 var connectorCheckUrlRequestSchema = external_exports.object({
   mode: external_exports.literal("url"),
@@ -5864,7 +5975,7 @@ var connectorCheckDiagnosticResultSchema = external_exports.union([
   connectorCheckUnresolvedDynamicBaseSchema,
   connectorCheckRunContextUnavailableSchema
 ]);
-var zeroConnectorCheckContract = c22.router({
+var zeroConnectorCheckContract = c23.router({
   check: {
     method: "POST",
     path: "/api/zero/connectors/diagnostics/check",
@@ -5884,7 +5995,7 @@ var zeroConnectorCheckContract = c22.router({
 
 // ../../packages/api-contracts/src/contracts/zero-connector-permission-deny.ts
 init_esm_shims();
-var c23 = initContract();
+var c24 = initContract();
 var connectorPermissionDenyRequestSchema = external_exports.object({
   method: external_exports.string().min(1).max(16),
   url: external_exports.string().min(1).max(8192)
@@ -5923,7 +6034,7 @@ var connectorPermissionDenyDiagnosticResultSchema = external_exports.discriminat
   connectorPermissionDenyUnresolvedDynamicBaseSchema,
   connectorPermissionDenyUnsafeInputSchema
 ]);
-var zeroConnectorPermissionDenyContract = c23.router({
+var zeroConnectorPermissionDenyContract = c24.router({
   diagnose: {
     method: "POST",
     path: "/api/zero/connectors/:connectorRef/diagnostics/permission-deny",
@@ -5943,7 +6054,7 @@ var zeroConnectorPermissionDenyContract = c23.router({
 
 // ../../packages/api-contracts/src/contracts/zero-custom-connectors.ts
 init_esm_shims();
-var c24 = initContract();
+var c25 = initContract();
 var customConnectorFieldKindSchema = external_exports.enum(["secret", "variable"]);
 var customConnectorFieldSchema = external_exports.object({
   key: external_exports.string().min(1).max(64),
@@ -6029,7 +6140,7 @@ var saveCustomConnectorProposalResponseSchema = external_exports.object({
   connector: customConnectorResponseSchema,
   authorizedAgentId: external_exports.string().uuid().optional()
 });
-var zeroCustomConnectorsContract = c24.router({
+var zeroCustomConnectorsContract = c25.router({
   list: {
     method: "GET",
     path: "/api/zero/custom-connectors",
@@ -6056,7 +6167,7 @@ var zeroCustomConnectorsContract = c24.router({
     summary: "Create an org custom connector"
   }
 });
-var zeroCustomConnectorByIdContract = c24.router({
+var zeroCustomConnectorByIdContract = c25.router({
   get: {
     method: "GET",
     path: "/api/zero/custom-connectors/:id",
@@ -6077,7 +6188,7 @@ var zeroCustomConnectorByIdContract = c24.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c24.noBody(),
+      204: c25.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -6102,7 +6213,7 @@ var zeroCustomConnectorByIdContract = c24.router({
     summary: "Rename an org custom connector"
   }
 });
-var zeroCustomConnectorSecretContract = c24.router({
+var zeroCustomConnectorSecretContract = c25.router({
   set: {
     method: "PUT",
     path: "/api/zero/custom-connectors/:id/secret",
@@ -6110,7 +6221,7 @@ var zeroCustomConnectorSecretContract = c24.router({
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     body: setCustomConnectorSecretBodySchema,
     responses: {
-      204: c24.noBody(),
+      204: c25.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema,
@@ -6124,7 +6235,7 @@ var zeroCustomConnectorSecretContract = c24.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c24.noBody(),
+      204: c25.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -6132,7 +6243,7 @@ var zeroCustomConnectorSecretContract = c24.router({
     summary: "Clear the calling user's secret for a custom connector"
   }
 });
-var zeroCustomConnectorProposalContract = c24.router({
+var zeroCustomConnectorProposalContract = c25.router({
   save: {
     method: "POST",
     path: "/api/zero/custom-connectors/proposals/save",
@@ -6289,7 +6400,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/runners.ts
 init_esm_shims();
-var c25 = initContract();
+var c26 = initContract();
 var MIN_EPOCH_MS_TIMESTAMP = 1e12;
 var apiStartTimeSchema = external_exports.number().int().min(MIN_EPOCH_MS_TIMESTAMP);
 var CANONICAL_GUEST_HOME_DIR = "/home/user";
@@ -6393,6 +6504,7 @@ var jobSchema = external_exports.object({
   experimentalProfile: external_exports.string().optional(),
   cliAgentSessionId: external_exports.string().nullable().optional(),
   historyGenerationRunId: external_exports.uuid().optional(),
+  historyGenerationAffinityProtectedUntil: external_exports.string().datetime({ offset: true }).nullable().optional(),
   affinityProtectedUntil: external_exports.string().datetime({ offset: true }).nullable().optional()
 });
 var heldSessionStateSchema = external_exports.object({
@@ -6401,10 +6513,11 @@ var heldSessionStateSchema = external_exports.object({
   sessionId: external_exports.string(),
   lastCompletedAt: external_exports.string().datetime({ offset: true }),
   reusableSandbox: external_exports.object({
-    profile: external_exports.string()
+    profile: external_exports.string(),
+    historyGenerationRunId: external_exports.uuid().optional()
   }).optional()
 });
-var runnersPollContract = c25.router({
+var runnersPollContract = c26.router({
   poll: {
     method: "POST",
     path: "/api/runners/poll",
@@ -6643,7 +6756,7 @@ var executionContextSchema = external_exports.object({
   // API-owned Codex provider/runtime metadata forwarded through the runner.
   codexRuntimeConfig: modelProviderCodexRuntimeConfigSchema.nullable().optional()
 });
-var runnersJobClaimContract = c25.router({
+var runnersJobClaimContract = c26.router({
   claim: {
     method: "POST",
     path: "/api/runners/jobs/:id/claim",
@@ -6667,7 +6780,7 @@ var runnersJobClaimContract = c25.router({
     summary: "Claim a pending job for execution"
   }
 });
-var runnersNetworkPolicyRefreshContract = c25.router({
+var runnersNetworkPolicyRefreshContract = c26.router({
   refresh: {
     method: "POST",
     path: "/api/runners/runs/:runId/network-policy-refresh",
@@ -6697,7 +6810,7 @@ var runnersNetworkPolicyRefreshContract = c25.router({
     summary: "Refresh active run network policies"
   }
 });
-var runnersBuiltinFirewallsResolveContract = c25.router({
+var runnersBuiltinFirewallsResolveContract = c26.router({
   resolve: {
     method: "POST",
     path: "/api/runners/builtin-firewalls/resolve",
@@ -6726,7 +6839,7 @@ var heartbeatBodySchema = external_exports.object({
   heldSessionStates: external_exports.array(heldSessionStateSchema).max(1024),
   mode: external_exports.enum(["starting", "running", "draining", "stopping"])
 });
-var runnersHeartbeatContract = c25.router({
+var runnersHeartbeatContract = c26.router({
   heartbeat: {
     method: "POST",
     path: "/api/runners/heartbeat",
@@ -6744,7 +6857,7 @@ var runnersHeartbeatContract = c25.router({
 
 // ../../packages/api-contracts/src/contracts/storages.ts
 init_esm_shims();
-var c26 = initContract();
+var c27 = initContract();
 var storageTypeSchema = external_exports.enum(["volume", "artifact"]);
 var versionQuerySchema = external_exports.string().regex(/^[a-f0-9]{8,64}$/i, "Version must be 8-64 hex characters").optional();
 var uploadStorageResponseSchema = external_exports.object({
@@ -6755,7 +6868,7 @@ var uploadStorageResponseSchema = external_exports.object({
   type: storageTypeSchema,
   deduplicated: external_exports.boolean()
 });
-var storagesContract = c26.router({
+var storagesContract = c27.router({
   /**
    * POST /api/storages
    * Upload a storage (tar.gz file)
@@ -6772,7 +6885,7 @@ var storagesContract = c26.router({
     path: "/api/storages",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c26.type(),
+    body: c27.type(),
     responses: {
       200: uploadStorageResponseSchema,
       400: apiErrorSchema,
@@ -6801,9 +6914,9 @@ var storagesContract = c26.router({
     }),
     responses: {
       // Binary response - actual handling done at route level
-      200: c26.otherResponse({
+      200: c27.otherResponse({
         contentType: "application/gzip",
-        body: c26.type()
+        body: c27.type()
       }),
       400: apiErrorSchema,
       401: apiErrorSchema,
@@ -6828,7 +6941,7 @@ var presignedUploadSchema = external_exports.object({
   key: external_exports.string(),
   presignedUrl: external_exports.url()
 });
-var storagesPrepareContract = c26.router({
+var storagesPrepareContract = c27.router({
   prepare: {
     method: "POST",
     path: "/api/storages/prepare",
@@ -6863,7 +6976,7 @@ var storagesPrepareContract = c26.router({
     summary: "Prepare for direct S3 upload"
   }
 });
-var storagesCommitContract = c26.router({
+var storagesCommitContract = c27.router({
   commit: {
     method: "POST",
     path: "/api/storages/commit",
@@ -6897,7 +7010,7 @@ var storagesCommitContract = c26.router({
     summary: "Commit uploaded storage"
   }
 });
-var storagesDownloadContract = c26.router({
+var storagesDownloadContract = c27.router({
   download: {
     method: "GET",
     path: "/api/storages/download",
@@ -6933,7 +7046,7 @@ var storagesDownloadContract = c26.router({
     summary: "Get presigned download URL"
   }
 });
-var storagesListContract = c26.router({
+var storagesListContract = c27.router({
   list: {
     method: "GET",
     path: "/api/storages/list",
@@ -6961,7 +7074,7 @@ var storagesListContract = c26.router({
 });
 
 // ../../packages/api-contracts/src/contracts/webhooks.ts
-var c27 = initContract();
+var c28 = initContract();
 var sha256HexSchema = external_exports.string().regex(
   /^[a-f0-9]{64}$/,
   "hash must be a lowercase 64-character SHA-256 hex string"
@@ -6971,11 +7084,11 @@ var thirdPartyWebhookOkSchema = external_exports.union([
   external_exports.string(),
   external_exports.object({ message: external_exports.literal("pong") })
 ]);
-var webhookClerkContract = c27.router({
+var webhookClerkContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/clerk",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       401: thirdPartyWebhookErrorSchema
@@ -6983,11 +7096,11 @@ var webhookClerkContract = c27.router({
     summary: "Handle Clerk organization and user webhooks"
   }
 });
-var webhookGithubContract = c27.router({
+var webhookGithubContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/github",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -6997,11 +7110,11 @@ var webhookGithubContract = c27.router({
     summary: "Handle GitHub App webhooks"
   }
 });
-var webhookStripeContract = c27.router({
+var webhookStripeContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/stripe",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       401: thirdPartyWebhookErrorSchema,
@@ -7040,11 +7153,11 @@ var workflowAutomationWebhookResponseSchema = external_exports.object({
   duplicate: external_exports.boolean(),
   runId: external_exports.string().uuid().optional()
 });
-var webhookGmailContract = c27.router({
+var webhookGmailContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/gmail",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: gmailWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7055,11 +7168,11 @@ var webhookGmailContract = c27.router({
     summary: "Handle Gmail Pub/Sub push notifications"
   }
 });
-var webhookGoogleCalendarContract = c27.router({
+var webhookGoogleCalendarContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/google-calendar",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: googleCalendarWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7070,11 +7183,11 @@ var webhookGoogleCalendarContract = c27.router({
     summary: "Handle Google Calendar push notifications"
   }
 });
-var webhookGoogleWorkspaceEventsContract = c27.router({
+var webhookGoogleWorkspaceEventsContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/google-workspace-events",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: googleWorkspaceEventsWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7085,11 +7198,11 @@ var webhookGoogleWorkspaceEventsContract = c27.router({
     summary: "Handle Google Workspace Events Pub/Sub push notifications"
   }
 });
-var webhookNotionContract = c27.router({
+var webhookNotionContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/notion",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: notionWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7104,7 +7217,7 @@ var workflowAutomationWebhookPostRoute = {
   pathParams: external_exports.object({
     token: external_exports.string().min(1)
   }),
-  body: c27.type(),
+  body: c28.type(),
   responses: {
     200: workflowAutomationWebhookResponseSchema,
     400: thirdPartyWebhookErrorSchema,
@@ -7115,21 +7228,21 @@ var workflowAutomationWebhookPostRoute = {
     500: thirdPartyWebhookErrorSchema
   }
 };
-var webhookWorkflowAutomationContract = c27.router({
+var webhookWorkflowAutomationContract = c28.router({
   post: {
     ...workflowAutomationWebhookPostRoute,
     path: "/api/webhooks/workflow-automations/:token",
     summary: "Handle inbound workflow automation webhooks"
   }
 });
-var legacyWebhookWorkflowAutomationContract = c27.router({
+var legacyWebhookWorkflowAutomationContract = c28.router({
   post: {
     ...workflowAutomationWebhookPostRoute,
     path: "/api/webhooks/workflow-triggers/:token",
     summary: "Handle inbound automation webhooks through the legacy path"
   }
 });
-var webhookBuiltInGenerationFalContract = c27.router({
+var webhookBuiltInGenerationFalContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/built-in-generations/fal/:generationId",
@@ -7140,7 +7253,7 @@ var webhookBuiltInGenerationFalContract = c27.router({
       token: external_exports.string().min(1),
       visualKey: external_exports.string().min(1).optional()
     }),
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7150,7 +7263,7 @@ var webhookBuiltInGenerationFalContract = c27.router({
     summary: "Handle fal built-in generation webhooks"
   }
 });
-var webhookBuiltInGenerationBytePlusContract = c27.router({
+var webhookBuiltInGenerationBytePlusContract = c28.router({
   post: {
     method: "POST",
     path: "/api/webhooks/built-in-generations/byteplus/:generationId",
@@ -7161,7 +7274,7 @@ var webhookBuiltInGenerationBytePlusContract = c27.router({
       token: external_exports.string().min(1),
       visualKey: external_exports.string().min(1).optional()
     }),
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7221,7 +7334,7 @@ var firewallAuthResponseSchema = external_exports.object({
   refreshedConnectors: external_exports.array(external_exports.string()),
   refreshedSecrets: external_exports.array(external_exports.string())
 });
-var webhookFirewallAuthContract = c27.router({
+var webhookFirewallAuthContract = c28.router({
   /**
    * POST /api/webhooks/agent/firewall/auth
    * Resolve firewall auth templates and refresh access tokens on demand.
@@ -7263,7 +7376,7 @@ var webhookFirewallAuthContract = c27.router({
     summary: "Resolve firewall auth templates"
   }
 });
-var webhookEventsContract = c27.router({
+var webhookEventsContract = c28.router({
   /**
    * POST /api/webhooks/agent/events
    * Receive agent events from sandbox
@@ -7290,7 +7403,7 @@ var webhookEventsContract = c27.router({
     summary: "Receive agent events from sandbox"
   }
 });
-var webhookCompleteContract = c27.router({
+var webhookCompleteContract = c28.router({
   /**
    * POST /api/webhooks/agent/complete
    * Handle agent run completion (success or failure)
@@ -7327,7 +7440,7 @@ var webhookCompleteContract = c27.router({
     summary: "Handle agent run completion"
   }
 });
-var webhookCheckpointsContract = c27.router({
+var webhookCheckpointsContract = c28.router({
   /**
    * POST /api/webhooks/agent/checkpoints
    * Create a recoverable checkpoint for an agent run.
@@ -7363,7 +7476,7 @@ var webhookCheckpointsContract = c27.router({
     summary: "Create checkpoint for agent run"
   }
 });
-var webhookCheckpointsPrepareHistoryContract = c27.router({
+var webhookCheckpointsPrepareHistoryContract = c28.router({
   prepare: {
     method: "POST",
     path: "/api/webhooks/agent/checkpoints/prepare-history",
@@ -7389,7 +7502,7 @@ var webhookCheckpointsPrepareHistoryContract = c27.router({
     summary: "Get presigned URL for uploading session history to S3"
   }
 });
-var webhookHeartbeatContract = c27.router({
+var webhookHeartbeatContract = c28.router({
   /**
    * POST /api/webhooks/agent/heartbeat
    * Receive heartbeat signals from sandbox
@@ -7413,7 +7526,7 @@ var webhookHeartbeatContract = c27.router({
     summary: "Receive heartbeat from sandbox"
   }
 });
-var webhookStoragesContract = c27.router({
+var webhookStoragesContract = c28.router({
   /**
    * POST /api/webhooks/agent/storages
    * Create a new version of a storage from sandbox
@@ -7429,7 +7542,7 @@ var webhookStoragesContract = c27.router({
     path: "/api/webhooks/agent/storages",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: external_exports.object({
         versionId: external_exports.string(),
@@ -7445,7 +7558,7 @@ var webhookStoragesContract = c27.router({
     summary: "Upload storage version from sandbox"
   }
 });
-var webhookStoragesIncrementalContract = c27.router({
+var webhookStoragesIncrementalContract = c28.router({
   /**
    * POST /api/webhooks/agent/storages/incremental
    * Create a new version using incremental upload
@@ -7463,7 +7576,7 @@ var webhookStoragesIncrementalContract = c27.router({
     path: "/api/webhooks/agent/storages/incremental",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c27.type(),
+    body: c28.type(),
     responses: {
       200: external_exports.object({
         versionId: external_exports.string(),
@@ -7557,7 +7670,7 @@ var sandboxOperationSchema = external_exports.object({
   session_history_transfer_encoding_state: sessionHistoryTransferEncodingStateSchema.optional(),
   session_history_download_source: sandboxOperationDownloadSourceSchema
 });
-var webhookTelemetryContract = c27.router({
+var webhookTelemetryContract = c28.router({
   /**
    * POST /api/webhooks/agent/telemetry
    * Receive telemetry data (system log, metrics, network logs, and sandbox operations) from sandbox
@@ -7586,7 +7699,7 @@ var webhookTelemetryContract = c27.router({
     summary: "Receive telemetry data from sandbox"
   }
 });
-var webhookStoragesPrepareContract = c27.router({
+var webhookStoragesPrepareContract = c28.router({
   prepare: {
     method: "POST",
     path: "/api/webhooks/agent/storages/prepare",
@@ -7620,7 +7733,7 @@ var webhookStoragesPrepareContract = c27.router({
     summary: "Prepare for direct S3 upload from sandbox"
   }
 });
-var webhookStoragesCommitContract = c27.router({
+var webhookStoragesCommitContract = c28.router({
   commit: {
     method: "POST",
     path: "/api/webhooks/agent/storages/commit",
@@ -7662,7 +7775,7 @@ var webhookUsageEventItemSchema = external_exports.object({
   category: external_exports.string().min(1).max(100),
   quantity: external_exports.number().int().min(0)
 }).strict();
-var webhookUsageEventContract = c27.router({
+var webhookUsageEventContract = c28.router({
   send: {
     method: "POST",
     path: "/api/webhooks/agent/usage-event",
@@ -7695,7 +7808,7 @@ var webhookModelUsageObservationItemSchema = external_exports.object({
   category: modelUsageObservationCategorySchema,
   quantity: external_exports.number().int().min(1)
 }).strict();
-var webhookModelUsageObservationContract = c27.router({
+var webhookModelUsageObservationContract = c28.router({
   send: {
     method: "POST",
     path: "/api/webhooks/agent/model-usage-observation",
@@ -7733,7 +7846,7 @@ var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   agentId: external_exports.string().optional(),
   modelProvider: external_exports.string().optional()
 });
-var c28 = initContract();
+var c29 = initContract();
 var zeroLogPaginationQuerySchema = createLogPaginationQuerySchema({
   cursorKind: "sequence"
 });
@@ -7743,7 +7856,7 @@ var zeroNetworkLogPaginationQuerySchema = createLogPaginationQuerySchema({
   defaultLimit: 500,
   defaultOrder: "asc"
 });
-var zeroRunsMainContract = c28.router({
+var zeroRunsMainContract = c29.router({
   create: {
     method: "POST",
     path: "/api/zero/runs",
@@ -7762,7 +7875,7 @@ var zeroRunsMainContract = c28.router({
     summary: "Create and execute agent run (zero proxy)"
   }
 });
-var zeroRunsByIdContract = c28.router({
+var zeroRunsByIdContract = c29.router({
   getById: {
     method: "GET",
     path: "/api/zero/runs/:id",
@@ -7780,7 +7893,7 @@ var zeroRunsByIdContract = c28.router({
     summary: "Get agent run by ID (zero proxy)"
   }
 });
-var zeroRunsCancelContract = c28.router({
+var zeroRunsCancelContract = c29.router({
   cancel: {
     method: "POST",
     path: "/api/zero/runs/:id/cancel",
@@ -7799,7 +7912,7 @@ var zeroRunsCancelContract = c28.router({
     summary: "Cancel a pending or running run (zero proxy)"
   }
 });
-var zeroRunsQueueContract = c28.router({
+var zeroRunsQueueContract = c29.router({
   getQueue: {
     method: "GET",
     path: "/api/zero/runs/queue",
@@ -7812,7 +7925,7 @@ var zeroRunsQueueContract = c28.router({
     summary: "Get org run queue status (zero proxy)"
   }
 });
-var zeroRunAgentEventsContract = c28.router({
+var zeroRunAgentEventsContract = c29.router({
   getAgentEvents: {
     method: "GET",
     path: "/api/zero/runs/:id/telemetry/agent",
@@ -7876,7 +7989,7 @@ var runContextResponseSchema = external_exports.object({
   artifact: runContextArtifactSchema.nullable(),
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).nullable()
 });
-var zeroRunContextContract = c28.router({
+var zeroRunContextContract = c29.router({
   getContext: {
     method: "GET",
     path: "/api/zero/runs/:id/context",
@@ -7894,7 +8007,7 @@ var zeroRunContextContract = c28.router({
     summary: "Get run execution context snapshot for debugging"
   }
 });
-var zeroRunNetworkLogsContract = c28.router({
+var zeroRunNetworkLogsContract = c29.router({
   getNetworkLogs: {
     method: "GET",
     path: "/api/zero/runs/:id/network",
@@ -7916,7 +8029,7 @@ var zeroRunNetworkLogsContract = c28.router({
 var runRunnerResponseSchema = external_exports.object({
   sandboxReuseResult: sandboxReuseResultSchema.nullable()
 });
-var zeroRunRunnerContract = c28.router({
+var zeroRunRunnerContract = c29.router({
   getRunner: {
     method: "GET",
     path: "/api/zero/runs/:id/runner",
@@ -7934,7 +8047,7 @@ var zeroRunRunnerContract = c28.router({
     summary: "Get runner-level metadata for a run"
   }
 });
-var zeroLogsSearchContract = c28.router({
+var zeroLogsSearchContract = c29.router({
   searchLogs: {
     method: "GET",
     path: "/api/zero/logs/search",
@@ -8030,7 +8143,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-developer-support.ts
 init_esm_shims();
-var c29 = initContract();
+var c30 = initContract();
 var developerSupportBodySchema = external_exports.object({
   title: external_exports.string().min(1, "Title is required"),
   description: external_exports.string().min(1, "Description is required"),
@@ -8042,7 +8155,7 @@ var consentCodeResponseSchema = external_exports.object({
 var submitResponseSchema = external_exports.object({
   reference: external_exports.string()
 });
-var zeroDeveloperSupportContract = c29.router({
+var zeroDeveloperSupportContract = c30.router({
   submit: {
     method: "POST",
     path: "/api/zero/developer-support",
@@ -8238,7 +8351,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-computer-use.ts
 init_esm_shims();
-var c30 = initContract();
+var c31 = initContract();
 var computerUseHostStatusSchema = external_exports.enum(["online", "offline"]);
 var computerUseReadCommandKindSchema = external_exports.enum([
   "apps.list",
@@ -8613,7 +8726,7 @@ var computerUseAuditEventSchema = external_exports.object({
 var computerUseAuditEventListResponseSchema = external_exports.object({
   auditEvents: external_exports.array(computerUseAuditEventSchema)
 });
-var zeroComputerUseHostsContract = c30.router({
+var zeroComputerUseHostsContract = c31.router({
   start: {
     method: "POST",
     path: "/api/zero/computer-use/hosts/start",
@@ -8652,7 +8765,7 @@ var zeroComputerUseHostsContract = c30.router({
     summary: "Delete a desktop computer-use host"
   }
 });
-var zeroComputerUseHeartbeatContract = c30.router({
+var zeroComputerUseHeartbeatContract = c31.router({
   heartbeat: {
     method: "POST",
     path: "/api/zero/computer-use/heartbeat",
@@ -8677,7 +8790,7 @@ var zeroComputerUseHeartbeatContract = c30.router({
     summary: "Stop a desktop computer-use host"
   }
 });
-var zeroComputerUseAuthorizationRequestsContract = c30.router({
+var zeroComputerUseAuthorizationRequestsContract = c31.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/authorization-requests",
@@ -8724,7 +8837,7 @@ var zeroComputerUseAuthorizationRequestsContract = c30.router({
     summary: "Bind a Computer Use host for a delegated authorization request"
   }
 });
-var zeroComputerUseCommandContract = c30.router({
+var zeroComputerUseCommandContract = c31.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/commands",
@@ -8759,7 +8872,7 @@ var zeroComputerUseCommandContract = c30.router({
     headers: authHeadersSchema,
     pathParams: commandIdPathParamsSchema,
     responses: {
-      200: c30.type(),
+      200: c31.type(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -8772,7 +8885,7 @@ var zeroComputerUseCommandContract = c30.router({
     headers: authHeadersSchema,
     pathParams: commandIdPathParamsSchema,
     responses: {
-      200: c30.type(),
+      200: c31.type(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -8780,7 +8893,7 @@ var zeroComputerUseCommandContract = c30.router({
     summary: "Download offloaded desktop computer-use plugin content"
   }
 });
-var zeroComputerUseWriteCommandContract = c30.router({
+var zeroComputerUseWriteCommandContract = c31.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/write-commands",
@@ -8797,7 +8910,7 @@ var zeroComputerUseWriteCommandContract = c30.router({
     summary: "Create a desktop computer-use write command"
   }
 });
-var zeroComputerUsePluginCommandContract = c30.router({
+var zeroComputerUsePluginCommandContract = c31.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/plugin-commands",
@@ -8814,7 +8927,7 @@ var zeroComputerUsePluginCommandContract = c30.router({
     summary: "Create a desktop computer-use plugin command"
   }
 });
-var zeroComputerUseHostCommandsContract = c30.router({
+var zeroComputerUseHostCommandsContract = c31.router({
   next: {
     method: "POST",
     path: "/api/zero/computer-use/host/commands/next",
@@ -8842,7 +8955,7 @@ var zeroComputerUseHostCommandsContract = c30.router({
     summary: "Complete a desktop computer-use command"
   }
 });
-var zeroComputerUseAuditEventsContract = c30.router({
+var zeroComputerUseAuditEventsContract = c31.router({
   list: {
     method: "GET",
     path: "/api/zero/computer-use/audit-events",
@@ -9078,7 +9191,7 @@ async function callZeroMaps(operation, body) {
 
 // ../../packages/api-contracts/src/contracts/zero-scrape.ts
 init_esm_shims();
-var c31 = initContract();
+var c32 = initContract();
 var zeroScrapeFormatSchema = external_exports.enum(["markdown", "links"]);
 var zeroScrapeModeSchema = external_exports.enum(["standard", "enhanced"]);
 var zeroScrapeBillingCategorySchema = external_exports.enum([
@@ -9158,7 +9271,7 @@ var scrapeResponses = {
   502: apiErrorSchema,
   503: apiErrorSchema
 };
-var zeroScrapeContract = c31.router({
+var zeroScrapeContract = c32.router({
   scrape: {
     method: "POST",
     path: "/api/zero/scrape",
@@ -9181,6 +9294,98 @@ async function callZeroScrape(body) {
   handleError(result, "Failed to scrape page");
 }
 
+// ../../packages/api-contracts/src/contracts/zero-web-search.ts
+init_esm_shims();
+var c33 = initContract();
+var ZERO_WEB_SEARCH_DEFAULT_LIMIT = 5;
+var ZERO_WEB_SEARCH_MAX_LIMIT = 10;
+var ZERO_WEB_SEARCH_MAX_QUERY_CHARS = 2048;
+var ZERO_WEB_SEARCH_MAX_DOMAINS = 20;
+var ZERO_WEB_SEARCH_MAX_DOMAIN_CHARS = 253;
+var ZERO_WEB_SEARCH_MAX_TITLE_CHARS = 512;
+var ZERO_WEB_SEARCH_MAX_URL_CHARS = 2048;
+var ZERO_WEB_SEARCH_MAX_SNIPPET_CHARS = 8e3;
+var ZERO_WEB_SEARCH_MAX_DATE_CHARS = 64;
+var domainLabelPattern = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i;
+function isDomain(value) {
+  const labels = value.split(".");
+  return labels.length >= 2 && labels.every((label) => {
+    return domainLabelPattern.test(label);
+  });
+}
+var zeroWebSearchRecencySchema = external_exports.enum([
+  "hour",
+  "day",
+  "week",
+  "month",
+  "year"
+]);
+var zeroWebSearchDomainSchema = external_exports.string().trim().min(1).max(ZERO_WEB_SEARCH_MAX_DOMAIN_CHARS).refine(isDomain, {
+  message: "Domain must be a domain or subdomain without a protocol or path"
+}).transform((domain) => {
+  return domain.toLowerCase();
+});
+var zeroWebSearchDomainsSchema = external_exports.array(zeroWebSearchDomainSchema).max(ZERO_WEB_SEARCH_MAX_DOMAINS).transform((domains) => {
+  return [...new Set(domains)];
+});
+var zeroWebSearchRequestSchema = external_exports.object({
+  query: external_exports.string().trim().min(1).max(ZERO_WEB_SEARCH_MAX_QUERY_CHARS),
+  limit: external_exports.number().int().min(1).max(ZERO_WEB_SEARCH_MAX_LIMIT).default(ZERO_WEB_SEARCH_DEFAULT_LIMIT),
+  recency: zeroWebSearchRecencySchema.optional(),
+  domains: zeroWebSearchDomainsSchema.optional()
+});
+var zeroWebSearchHttpUrlSchema = external_exports.string().max(ZERO_WEB_SEARCH_MAX_URL_CHARS).url().regex(/^https?:\/\//i, "Result URL must use http or https");
+var zeroWebSearchResultSchema = external_exports.object({
+  rank: external_exports.number().int().min(1).max(ZERO_WEB_SEARCH_MAX_LIMIT),
+  title: external_exports.string().max(ZERO_WEB_SEARCH_MAX_TITLE_CHARS),
+  url: zeroWebSearchHttpUrlSchema,
+  snippet: external_exports.string().max(ZERO_WEB_SEARCH_MAX_SNIPPET_CHARS),
+  publishedDate: external_exports.string().max(ZERO_WEB_SEARCH_MAX_DATE_CHARS).optional(),
+  lastUpdatedDate: external_exports.string().max(ZERO_WEB_SEARCH_MAX_DATE_CHARS).optional()
+});
+var zeroWebSearchResponseSchema = external_exports.object({
+  query: external_exports.string().max(ZERO_WEB_SEARCH_MAX_QUERY_CHARS),
+  limit: external_exports.number().int().min(1).max(ZERO_WEB_SEARCH_MAX_LIMIT),
+  recency: zeroWebSearchRecencySchema.optional(),
+  domains: external_exports.array(zeroWebSearchDomainSchema).max(ZERO_WEB_SEARCH_MAX_DOMAINS).optional(),
+  provider: external_exports.literal("perplexity"),
+  billingCategory: external_exports.literal("request"),
+  billingQuantity: external_exports.literal(1),
+  creditsCharged: external_exports.number().int().nonnegative(),
+  results: external_exports.array(zeroWebSearchResultSchema).max(ZERO_WEB_SEARCH_MAX_LIMIT)
+});
+var webSearchResponses = {
+  200: zeroWebSearchResponseSchema,
+  400: apiErrorSchema,
+  401: apiErrorSchema,
+  402: apiErrorSchema,
+  403: apiErrorSchema,
+  502: apiErrorSchema,
+  503: apiErrorSchema
+};
+var zeroWebSearchContract = c33.router({
+  search: {
+    method: "POST",
+    path: "/api/zero/web-search",
+    headers: authHeadersSchema,
+    body: zeroWebSearchRequestSchema,
+    responses: webSearchResponses,
+    summary: "Search the public web through managed Zero Web Search"
+  }
+});
+
+// src/lib/api/domains/zero-web-search.ts
+init_esm_shims();
+async function callZeroWebSearch(body) {
+  const config = await getClientConfig();
+  const client = initClient(zeroWebSearchContract, config);
+  const result = await client.search({ headers: {}, body });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to search the web");
+}
+
 // src/lib/api/domains/zero-banking.ts
 init_esm_shims();
 function authenticatedJsonHeaders2(token) {
@@ -9246,7 +9451,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/composes.ts
 init_esm_shims();
-var c32 = initContract();
+var c34 = initContract();
 var MOUNT_PATH_TEMPLATE = "${{ working_dir }}";
 var composeVersionQuerySchema = external_exports.string().min(1, "Missing version query parameter").regex(
   /^[a-f0-9]{8,64}$|^latest$/i,
@@ -9366,7 +9571,7 @@ var createComposeResponseSchema = external_exports.object({
   action: external_exports.enum(["created", "existing"]),
   updatedAt: external_exports.string()
 });
-var composesMainContract = c32.router({
+var composesMainContract = c34.router({
   /**
    * GET /api/agent/composes?name={name}&org={org}
    * Get agent compose by name with HEAD version content
@@ -9412,7 +9617,7 @@ var composesMainContract = c32.router({
     summary: "Create or update agent compose version"
   }
 });
-var composesByIdContract = c32.router({
+var composesByIdContract = c34.router({
   /**
    * GET /api/agent/composes/:id
    * Get agent compose by ID with HEAD version content
@@ -9434,7 +9639,7 @@ var composesByIdContract = c32.router({
     summary: "Get agent compose by ID"
   }
 });
-var composesVersionsContract = c32.router({
+var composesVersionsContract = c34.router({
   /**
    * GET /api/agent/composes/versions?composeId={id}&version={hash|tag}
    * Resolve a version specifier to a full version ID
@@ -9588,7 +9793,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/sessions.ts
 init_esm_shims();
-var c33 = initContract();
+var c35 = initContract();
 var sessionResponseSchema = external_exports.object({
   id: external_exports.string(),
   agentComposeId: external_exports.string(),
@@ -9629,7 +9834,7 @@ var checkpointResponseSchema = external_exports.object({
   volumeVersionsSnapshot: volumeVersionsSnapshotSchema2.nullable(),
   createdAt: external_exports.string()
 });
-var sessionsByIdContract = c33.router({
+var sessionsByIdContract = c35.router({
   /**
    * GET /api/agent/sessions/:id
    * Get session by ID
@@ -9650,7 +9855,7 @@ var sessionsByIdContract = c33.router({
     summary: "Get session by ID"
   }
 });
-var checkpointsByIdContract = c33.router({
+var checkpointsByIdContract = c35.router({
   /**
    * GET /api/agent/checkpoints/:id
    * Get checkpoint by ID
@@ -9803,8 +10008,8 @@ var setVariableRequestSchema = external_exports.object({
 });
 
 // ../../packages/api-contracts/src/contracts/zero-secrets.ts
-var c34 = initContract();
-var zeroSecretsContract = c34.router({
+var c36 = initContract();
+var zeroSecretsContract = c36.router({
   list: {
     method: "GET",
     path: "/api/zero/secrets",
@@ -9831,7 +10036,7 @@ var zeroSecretsContract = c34.router({
     summary: "Create or update a secret"
   }
 });
-var zeroSecretsByNameContract = c34.router({
+var zeroSecretsByNameContract = c36.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/secrets/:name",
@@ -9840,7 +10045,7 @@ var zeroSecretsByNameContract = c34.router({
       name: secretNameSchema
     }),
     responses: {
-      204: c34.noBody(),
+      204: c36.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -9848,7 +10053,7 @@ var zeroSecretsByNameContract = c34.router({
     summary: "Delete a secret by name"
   }
 });
-var zeroVariablesContract = c34.router({
+var zeroVariablesContract = c36.router({
   list: {
     method: "GET",
     path: "/api/zero/variables",
@@ -9875,7 +10080,7 @@ var zeroVariablesContract = c34.router({
     summary: "Create or update a variable"
   }
 });
-var zeroVariablesByNameContract = c34.router({
+var zeroVariablesByNameContract = c36.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/variables/:name",
@@ -9884,7 +10089,7 @@ var zeroVariablesByNameContract = c34.router({
       name: variableNameSchema
     }),
     responses: {
-      204: c34.noBody(),
+      204: c36.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -10025,9 +10230,9 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-model-providers.ts
 init_esm_shims();
-var c35 = initContract();
+var c37 = initContract();
 var orgUpsertModelProviderRequestSchema = upsertModelProviderRequestSchema.omit({ selectedModel: true });
-var zeroModelProvidersMainContract = c35.router({
+var zeroModelProvidersMainContract = c37.router({
   list: {
     method: "GET",
     path: "/api/zero/model-providers",
@@ -10056,7 +10261,7 @@ var zeroModelProvidersMainContract = c35.router({
     summary: "Create or update an org-level model provider (admin only)"
   }
 });
-var zeroModelProvidersByTypeContract = c35.router({
+var zeroModelProvidersByTypeContract = c37.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/model-providers/:type",
@@ -10065,7 +10270,7 @@ var zeroModelProvidersByTypeContract = c35.router({
       type: modelProviderTypeSchema
     }),
     responses: {
-      204: c35.noBody(),
+      204: c37.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -10111,7 +10316,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-workflows.ts
 init_esm_shims();
-var c36 = initContract();
+var c38 = initContract();
 var zeroWorkflowVisibilitySchema = external_exports.enum(["public", "private"]);
 var zeroWorkflowNameSchema = external_exports.string().min(2).max(64).regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$/);
 var RESERVED_SKILL_FILE = "SKILL.md";
@@ -10775,7 +10980,7 @@ var zeroWorkflowConnectorReadinessResponseSchema = external_exports.object({
   connectors: external_exports.array(zeroWorkflowConnectorReadinessEntrySchema)
 }).strict();
 var workflowIdParams = external_exports.object({ workflowId: external_exports.string().uuid() });
-var zeroWorkflowsCollectionContract = c36.router({
+var zeroWorkflowsCollectionContract = c38.router({
   list: {
     method: "GET",
     path: "/api/zero/workflows",
@@ -10804,7 +11009,7 @@ var zeroWorkflowsCollectionContract = c36.router({
     summary: "Create a workflow under an agent"
   }
 });
-var zeroWorkflowsDetailContract = c36.router({
+var zeroWorkflowsDetailContract = c38.router({
   get: {
     method: "GET",
     path: "/api/zero/workflows/:workflowId",
@@ -10839,9 +11044,9 @@ var zeroWorkflowsDetailContract = c36.router({
     path: "/api/zero/workflows/:workflowId",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
-      204: c36.noBody(),
+      204: c38.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -10869,7 +11074,7 @@ var zeroWorkflowsDetailContract = c36.router({
     path: "/api/zero/workflows/:workflowId/chat-thread",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowChatThreadResponseSchema,
       401: apiErrorSchema,
@@ -10883,7 +11088,7 @@ var zeroWorkflowsDetailContract = c36.router({
     path: "/api/zero/workflows/:workflowId/run",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowRunResponseSchema,
       401: apiErrorSchema,
@@ -10898,7 +11103,7 @@ var zeroWorkflowsDetailContract = c36.router({
     path: "/api/zero/workflows/:workflowId/connector-readiness",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowConnectorReadinessResponseSchema,
       400: apiErrorSchema,
@@ -10911,13 +11116,13 @@ var zeroWorkflowsDetailContract = c36.router({
     summary: "Detect the built-in connectors a workflow may need and report their readiness"
   }
 });
-var zeroWorkflowVisibilityContract = c36.router({
+var zeroWorkflowVisibilityContract = c38.router({
   publish: {
     method: "POST",
     path: "/api/zero/workflows/:workflowId/publish",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowSummarySchema,
       400: apiErrorSchema,
@@ -10933,7 +11138,7 @@ var zeroWorkflowVisibilityContract = c36.router({
     path: "/api/zero/workflows/:workflowId/demote",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowSummarySchema,
       400: apiErrorSchema,
@@ -10951,7 +11156,7 @@ var zeroWorkflowWebhookSecretResponseSchema = external_exports.object({
   webhookUrl: external_exports.url(),
   webhookSecret: external_exports.string().min(1)
 });
-var legacyZeroWorkflowAutomationsContract = c36.router({
+var legacyZeroWorkflowAutomationsContract = c38.router({
   listWorkspace: {
     method: "GET",
     path: "/api/zero/workflow-triggers",
@@ -11040,9 +11245,9 @@ var legacyZeroWorkflowAutomationsContract = c36.router({
     path: "/api/zero/workflow-triggers/:id",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
-      204: c36.noBody(),
+      204: c38.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -11054,7 +11259,7 @@ var legacyZeroWorkflowAutomationsContract = c36.router({
     path: "/api/zero/workflow-triggers/:id/enable",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowAutomationSummarySchema,
       400: apiErrorSchema,
@@ -11071,7 +11276,7 @@ var legacyZeroWorkflowAutomationsContract = c36.router({
     path: "/api/zero/workflow-triggers/:id/disable",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowAutomationSummarySchema,
       401: apiErrorSchema,
@@ -11085,7 +11290,7 @@ var legacyZeroWorkflowAutomationsContract = c36.router({
     path: "/api/zero/workflow-triggers/:id/run",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       201: zeroWorkflowRunResponseSchema,
       400: apiErrorSchema,
@@ -11101,7 +11306,7 @@ var legacyZeroWorkflowAutomationsContract = c36.router({
     path: "/api/zero/workflow-triggers/:id/webhook-secret",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c36.noBody(),
+    body: c38.noBody(),
     responses: {
       200: zeroWorkflowWebhookSecretResponseSchema,
       401: apiErrorSchema,
@@ -11111,7 +11316,7 @@ var legacyZeroWorkflowAutomationsContract = c36.router({
     summary: "Reveal automation webhook credentials through the legacy path"
   }
 });
-var zeroWorkflowAutomationsContract = c36.router({
+var zeroWorkflowAutomationsContract = c38.router({
   listWorkspace: {
     ...legacyZeroWorkflowAutomationsContract.listWorkspace,
     path: "/api/zero/workflow-automations",
@@ -11272,6 +11477,20 @@ async function disableWorkflowAutomation(id) {
   handleError(result, `Failed to disable workflow automation "${id}"`);
 }
 
+// src/lib/api/domains/zero-mail.ts
+init_esm_shims();
+async function createZeroMailDraft(args) {
+  const config = await getClientConfig();
+  const client = initClient(zeroMailContract, config);
+  const result = await client.createDraft({
+    body: { ...args, to: [...args.to] }
+  });
+  if (result.status === 201) {
+    return result.body;
+  }
+  handleError(result, "Failed to create mail draft");
+}
+
 // src/lib/api/domains/integrations-slack.ts
 init_esm_shims();
 import { createWriteStream } from "fs";
@@ -11280,7 +11499,7 @@ import { pipeline } from "stream/promises";
 
 // ../../packages/api-contracts/src/contracts/integrations.ts
 init_esm_shims();
-var c37 = initContract();
+var c39 = initContract();
 var sendSlackMessageBodySchema = external_exports.object({
   channel: external_exports.string().min(1, "Channel ID is required").optional(),
   user: external_exports.string().min(1, "User ID is required").optional(),
@@ -11298,7 +11517,7 @@ var sendSlackMessageResponseSchema = external_exports.object({
   ts: external_exports.string().optional(),
   channel: external_exports.string().optional()
 });
-var integrationsSlackMessageContract = c37.router({
+var integrationsSlackMessageContract = c39.router({
   sendMessage: {
     method: "POST",
     path: "/api/zero/integrations/slack/message",
@@ -11326,7 +11545,7 @@ var sendTelegramMessageResponseSchema = external_exports.object({
   messageId: external_exports.number().int(),
   chatId: external_exports.string()
 });
-var integrationsTelegramMessageContract = c37.router({
+var integrationsTelegramMessageContract = c39.router({
   sendMessage: {
     method: "POST",
     path: "/api/zero/integrations/telegram/message",
@@ -11385,7 +11604,7 @@ var sendTeamsMessageResponseSchema = external_exports.object({
   activityId: external_exports.string().optional(),
   conversationId: external_exports.string()
 });
-var integrationsTeamsMessageContract = c37.router({
+var integrationsTeamsMessageContract = c39.router({
   sendMessage: {
     method: "POST",
     path: "/api/zero/integrations/teams/message",
@@ -11413,7 +11632,7 @@ var sendPhoneMessageResponseSchema = external_exports.object({
   channel: external_exports.string().nullable(),
   toNumber: external_exports.string()
 });
-var integrationsPhoneMessageContract = c37.router({
+var integrationsPhoneMessageContract = c39.router({
   sendMessage: {
     method: "POST",
     path: "/api/zero/integrations/phone/message",
@@ -11433,14 +11652,14 @@ var integrationsPhoneMessageContract = c37.router({
 var phoneDownloadFileQuerySchema = external_exports.object({
   file_id: external_exports.string().min(1, "file_id query parameter is required")
 });
-var integrationsPhoneDownloadFileContract = c37.router({
+var integrationsPhoneDownloadFileContract = c39.router({
   download: {
     method: "GET",
     path: "/api/zero/integrations/phone/download-file",
     headers: authHeadersSchema,
     query: phoneDownloadFileQuerySchema,
     responses: {
-      200: c37.type(),
+      200: c39.type(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -11475,7 +11694,7 @@ var telegramBotListItemSchema = external_exports.object({
 var listTelegramBotsResponseSchema = external_exports.object({
   bots: external_exports.array(telegramBotListItemSchema)
 });
-var integrationsTelegramBotListContract = c37.router({
+var integrationsTelegramBotListContract = c39.router({
   listBots: {
     method: "GET",
     path: "/api/zero/integrations/telegram/bots",
@@ -11496,7 +11715,7 @@ var slackUploadInitResponseSchema = external_exports.object({
   uploadUrl: external_exports.string(),
   fileId: external_exports.string()
 });
-var integrationsSlackUploadInitContract = c37.router({
+var integrationsSlackUploadInitContract = c39.router({
   init: {
     method: "POST",
     path: "/api/zero/integrations/slack/upload-file/init",
@@ -11525,7 +11744,7 @@ var telegramUploadInitResponseSchema = external_exports.object({
   contentType: external_exports.string(),
   size: external_exports.number().int().nonnegative()
 });
-var integrationsTelegramUploadInitContract = c37.router({
+var integrationsTelegramUploadInitContract = c39.router({
   init: {
     method: "POST",
     path: "/api/zero/integrations/telegram/upload-file/init",
@@ -11553,7 +11772,7 @@ var teamsUploadInitResponseSchema = external_exports.object({
   contentType: external_exports.string(),
   size: external_exports.number().int().nonnegative()
 });
-var integrationsTeamsUploadInitContract = c37.router({
+var integrationsTeamsUploadInitContract = c39.router({
   init: {
     method: "POST",
     path: "/api/zero/integrations/teams/upload-file/init",
@@ -11585,7 +11804,7 @@ var telegramUploadCompleteResponseSchema = external_exports.object({
   size: external_exports.number().int().nonnegative(),
   url: external_exports.string()
 });
-var integrationsTelegramUploadCompleteContract = c37.router({
+var integrationsTelegramUploadCompleteContract = c39.router({
   complete: {
     method: "POST",
     path: "/api/zero/integrations/telegram/upload-file/complete",
@@ -11617,7 +11836,7 @@ var teamsUploadCompleteResponseSchema = external_exports.object({
   size: external_exports.number().int().nonnegative(),
   url: external_exports.string()
 });
-var integrationsTeamsUploadCompleteContract = c37.router({
+var integrationsTeamsUploadCompleteContract = c39.router({
   complete: {
     method: "POST",
     path: "/api/zero/integrations/teams/upload-file/complete",
@@ -11647,7 +11866,7 @@ var githubUploadInitResponseSchema = external_exports.object({
   contentType: external_exports.string(),
   size: external_exports.number().int().nonnegative()
 });
-var integrationsGithubUploadInitContract = c37.router({
+var integrationsGithubUploadInitContract = c39.router({
   init: {
     method: "POST",
     path: "/api/zero/integrations/github/upload-file/init",
@@ -11681,7 +11900,7 @@ var githubUploadCompleteResponseSchema = external_exports.object({
   size: external_exports.number().int().nonnegative(),
   url: external_exports.string()
 });
-var integrationsGithubUploadCompleteContract = c37.router({
+var integrationsGithubUploadCompleteContract = c39.router({
   complete: {
     method: "POST",
     path: "/api/zero/integrations/github/upload-file/complete",
@@ -11712,7 +11931,7 @@ var phoneUploadInitResponseSchema = external_exports.object({
   contentType: external_exports.string(),
   size: external_exports.number().int().nonnegative()
 });
-var integrationsPhoneUploadInitContract = c37.router({
+var integrationsPhoneUploadInitContract = c39.router({
   init: {
     method: "POST",
     path: "/api/zero/integrations/phone/upload-file/init",
@@ -11743,7 +11962,7 @@ var phoneUploadCompleteResponseSchema = external_exports.object({
   size: external_exports.number().int().nonnegative(),
   url: external_exports.string()
 });
-var integrationsPhoneUploadCompleteContract = c37.router({
+var integrationsPhoneUploadCompleteContract = c39.router({
   complete: {
     method: "POST",
     path: "/api/zero/integrations/phone/upload-file/complete",
@@ -11771,7 +11990,7 @@ var slackUploadCompleteResponseSchema = external_exports.object({
   fileId: external_exports.string(),
   permalink: external_exports.string()
 });
-var integrationsSlackUploadCompleteContract = c37.router({
+var integrationsSlackUploadCompleteContract = c39.router({
   complete: {
     method: "POST",
     path: "/api/zero/integrations/slack/upload-file/complete",
@@ -12218,7 +12437,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-relationships.ts
 init_esm_shims();
-var c38 = initContract();
+var c40 = initContract();
 var RELATIONSHIP_SEARCH_DEFAULT_LIMIT = 100;
 var RELATIONSHIP_SEARCH_MAX_LIMIT = 100;
 var relationshipEntityTypeSchema = external_exports.enum(["person", "organization"]);
@@ -12333,7 +12552,7 @@ var resolveQuerySchema = external_exports.object({
     message: "Provide exactly one of id, email, or domain"
   }
 );
-var zeroRelationshipsContract = c38.router({
+var zeroRelationshipsContract = c40.router({
   gmailStatus: {
     method: "GET",
     path: "/api/zero/relationships/gmail/status",
@@ -12460,7 +12679,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-memory.ts
 init_esm_shims();
-var c39 = initContract();
+var c41 = initContract();
 var memoryFileSchema = external_exports.object({
   path: external_exports.string(),
   size: external_exports.number()
@@ -13008,7 +13227,7 @@ var memoryDetailResponseSchema = external_exports.object({
   files: external_exports.array(memoryFileSchema),
   fileContents: external_exports.array(memoryFileContentSchema)
 });
-var zeroMemoryContract = c39.router({
+var zeroMemoryContract = c41.router({
   get: {
     method: "GET",
     path: "/api/zero/memory",
@@ -13897,6 +14116,7 @@ export {
   connectZeroConnectorManualGrant,
   listZeroCustomConnectors,
   getZeroCustomConnector,
+  createZeroMailDraft,
   sendSlackMessage,
   initSlackFileUpload,
   completeSlackFileUpload,
@@ -13959,9 +14179,16 @@ export {
   zeroScrapeFormatSchema,
   zeroScrapeModeSchema,
   callZeroScrape,
+  ZERO_WEB_SEARCH_DEFAULT_LIMIT,
+  ZERO_WEB_SEARCH_MAX_LIMIT,
+  ZERO_WEB_SEARCH_MAX_DOMAINS,
+  zeroWebSearchRecencySchema,
+  zeroWebSearchDomainSchema,
+  zeroWebSearchRequestSchema,
+  callZeroWebSearch,
   callZeroBanking,
   prepareHostedSite,
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-5REPUXEK.js.map
+//# sourceMappingURL=chunk-UETYUI63.js.map