@vm0/cli 9.241.5 → 9.241.7

package/{chunk-7FHS53YV.js → chunk-KNATFPLD.js}

@@ -22,7 +22,7 @@ import {
   updateOrgModelPoliciesRequestSchema,
   upsertModelProviderRequestSchema,
   upsertModelProviderResponseSchema
-} from "./chunk-76WX34ZC.js";
+} from "./chunk-AMJAGFT7.js";
 import {
   __commonJS,
   __esm,
@@ -1435,6 +1435,8 @@ var usageAllowanceSchema = external_exports.object({
 });
 var billingStatusResponseSchema = external_exports.object({
   tier: external_exports.string(),
+  supportByok: external_exports.boolean().optional(),
+  restrictedVm0Models: external_exports.boolean().optional(),
   credits: external_exports.number(),
   onboardingPaymentPending: external_exports.boolean(),
   subscriptionStatus: external_exports.string().nullable(),
@@ -3582,118 +3584,8 @@ var zeroGoalsContract = c14.router({
   }
 });
 
-// ../../packages/api-contracts/src/contracts/zero-mail.ts
-init_esm_shims();
-var c15 = initContract();
-var zeroMailProviderSchema = external_exports.enum(["gmail", "outlook"]);
-var zeroMailDraftStatusSchema = external_exports.enum([
-  "draft",
-  "sending",
-  "sent",
-  "cancelled",
-  "failed",
-  "delivery_unknown"
-]);
-var mailSubjectSchema = external_exports.string().min(1).refine((value) => {
-  return !value.includes("\r") && !value.includes("\n");
-}, "Subject must not contain line breaks");
-var zeroMailDraftSchema = external_exports.object({
-  version: external_exports.literal(1),
-  provider: zeroMailProviderSchema,
-  from: external_exports.email(),
-  to: external_exports.array(external_exports.email()).min(1),
-  subject: mailSubjectSchema,
-  body: external_exports.string().min(1),
-  status: zeroMailDraftStatusSchema,
-  error: external_exports.string().optional(),
-  createdAt: external_exports.string(),
-  updatedAt: external_exports.string(),
-  sentAt: external_exports.string().optional()
-});
-var zeroMailDraftFieldsSchema = external_exports.object({
-  to: external_exports.array(external_exports.email()).min(1),
-  subject: mailSubjectSchema,
-  body: external_exports.string().min(1)
-});
-var zeroMailDraftResponseSchema = external_exports.object({
-  messageId: external_exports.string().uuid(),
-  mailDraft: zeroMailDraftSchema
-});
-var zeroMailDraftPathParamsSchema = external_exports.object({
-  threadId: external_exports.string().uuid(),
-  messageId: external_exports.string().uuid()
-});
-var zeroMailContract = c15.router({
-  createDraft: {
-    method: "POST",
-    path: "/api/zero/mail/drafts",
-    headers: authHeadersSchema,
-    body: zeroMailDraftFieldsSchema.extend({
-      threadId: external_exports.string().uuid(),
-      agentId: external_exports.string().uuid(),
-      provider: zeroMailProviderSchema.optional()
-    }),
-    responses: {
-      201: zeroMailDraftResponseSchema,
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema,
-      409: apiErrorSchema
-    },
-    summary: "Create a persistent email draft card in a web chat thread"
-  },
-  updateDraft: {
-    method: "PATCH",
-    path: "/api/zero/mail/drafts/:threadId/:messageId",
-    headers: authHeadersSchema,
-    pathParams: zeroMailDraftPathParamsSchema,
-    body: zeroMailDraftFieldsSchema,
-    responses: {
-      200: zeroMailDraftResponseSchema,
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema,
-      409: apiErrorSchema
-    },
-    summary: "Persist edits to an email draft card"
-  },
-  cancelDraft: {
-    method: "POST",
-    path: "/api/zero/mail/drafts/:threadId/:messageId/cancel",
-    headers: authHeadersSchema,
-    pathParams: zeroMailDraftPathParamsSchema,
-    body: c15.noBody(),
-    responses: {
-      200: zeroMailDraftResponseSchema,
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema,
-      409: apiErrorSchema
-    },
-    summary: "Cancel an email draft card"
-  },
-  sendDraft: {
-    method: "POST",
-    path: "/api/zero/mail/drafts/:threadId/:messageId/send",
-    headers: authHeadersSchema,
-    pathParams: zeroMailDraftPathParamsSchema,
-    body: zeroMailDraftFieldsSchema,
-    responses: {
-      200: zeroMailDraftResponseSchema,
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema,
-      409: apiErrorSchema
-    },
-    summary: "Persist the latest edits and send an email draft exactly once"
-  }
-});
-
 // ../../packages/api-contracts/src/contracts/chat-threads.ts
-var c16 = initContract();
+var c15 = initContract();
 var attachFileSchema = external_exports.object({
   id: external_exports.string(),
   filename: external_exports.string(),
@@ -3947,7 +3839,7 @@ var pagedChatMessageBaseSchema = external_exports.object({
   error: external_exports.string().optional(),
   attachFiles: external_exports.array(resolvedAttachFileSchema).optional(),
   generationTemplate: generationTemplateRequestSchema.optional(),
-  mailDraft: zeroMailDraftSchema.optional(),
+  mailDraftId: external_exports.string().uuid().optional(),
   sequenceNumber: external_exports.number().nullable().optional(),
   workflowSnapshot: workflowSnapshotSchema.optional(),
   createdAt: external_exports.string()
@@ -4095,7 +3987,7 @@ var chatMessageNormalSendBodySchema = external_exports.preprocess(
     interruptsRunId: external_exports.undefined().optional()
   })
 );
-var chatThreadsContract = c16.router({
+var chatThreadsContract = c15.router({
   snapshot: {
     method: "GET",
     path: "/api/zero/chat-threads/snapshot",
@@ -4206,7 +4098,7 @@ var chatThreadThreadIdPathParamsSchema = external_exports.object({
 var chatThreadMessagePathParamsSchema = chatThreadThreadIdPathParamsSchema.extend({
   messageId: external_exports.string().uuid()
 });
-var chatThreadByIdContract = c16.router({
+var chatThreadByIdContract = c15.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id",
@@ -4230,7 +4122,7 @@ var chatThreadByIdContract = c16.router({
       draftAttachments: external_exports.array(persistedAttachmentSchema).nullable().optional()
     }),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4244,17 +4136,17 @@ var chatThreadByIdContract = c16.router({
     pathParams: chatThreadIdPathParamsSchema,
     query: external_exports.object({ eventId: chatThreadEventIdSchema.optional() }).optional(),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       402: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Delete a chat thread",
-    body: c16.noBody()
+    body: c15.noBody()
   }
 });
-var chatThreadDraftContract = c16.router({
+var chatThreadDraftContract = c15.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id/draft",
@@ -4269,13 +4161,13 @@ var chatThreadDraftContract = c16.router({
     summary: "Get chat thread draft content and attachments"
   }
 });
-var chatThreadMarkReadContract = c16.router({
+var chatThreadMarkReadContract = c15.router({
   markRead: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/mark-read",
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
-    body: c16.noBody(),
+    body: c15.noBody(),
     responses: {
       200: external_exports.object({
         lastReadAt: external_exports.string().nullable(),
@@ -4293,7 +4185,7 @@ var chatThreadMarkReadContract = c16.router({
     summary: "Mark a chat thread as read up to the latest run-finish marker"
   }
 });
-var chatThreadMarkAgentReadContract = c16.router({
+var chatThreadMarkAgentReadContract = c15.router({
   markAgentRead: {
     method: "POST",
     path: "/api/zero/chat-thread-unreads/mark-read",
@@ -4302,7 +4194,7 @@ var chatThreadMarkAgentReadContract = c16.router({
       agentId: external_exports.string().min(1)
     }),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema
@@ -4310,16 +4202,16 @@ var chatThreadMarkAgentReadContract = c16.router({
     summary: "Mark all unread chat threads under an agent as read"
   }
 });
-var chatThreadPinContract = c16.router({
+var chatThreadPinContract = c15.router({
   pin: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/pin",
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
     query: external_exports.object({ eventId: chatThreadEventIdSchema.optional() }).optional(),
-    body: c16.noBody(),
+    body: c15.noBody(),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4327,16 +4219,16 @@ var chatThreadPinContract = c16.router({
     summary: "Pin a chat thread to the top of the sidebar"
   }
 });
-var chatThreadUnpinContract = c16.router({
+var chatThreadUnpinContract = c15.router({
   unpin: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/unpin",
     headers: authHeadersSchema,
     pathParams: chatThreadIdPathParamsSchema,
     query: external_exports.object({ eventId: chatThreadEventIdSchema.optional() }).optional(),
-    body: c16.noBody(),
+    body: c15.noBody(),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4344,7 +4236,7 @@ var chatThreadUnpinContract = c16.router({
     summary: "Remove the pin from a chat thread"
   }
 });
-var chatThreadRenameContract = c16.router({
+var chatThreadRenameContract = c15.router({
   rename: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/rename",
@@ -4355,7 +4247,7 @@ var chatThreadRenameContract = c16.router({
       eventId: chatThreadEventIdSchema.optional()
     }),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4364,7 +4256,7 @@ var chatThreadRenameContract = c16.router({
     summary: "Rename a chat thread (suppresses automated title generation)"
   }
 });
-var chatThreadMetadataContract = c16.router({
+var chatThreadMetadataContract = c15.router({
   get: {
     method: "GET",
     path: "/api/zero/chat-threads/:id/metadata",
@@ -4380,7 +4272,7 @@ var chatThreadMetadataContract = c16.router({
     summary: "Get chat thread metadata"
   }
 });
-var chatThreadModelSelectionContract = c16.router({
+var chatThreadModelSelectionContract = c15.router({
   update: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/model-selection",
@@ -4388,7 +4280,7 @@ var chatThreadModelSelectionContract = c16.router({
     pathParams: chatThreadIdPathParamsSchema,
     body: chatThreadModelSelectionUpdateBodySchema,
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       402: apiErrorSchema,
@@ -4398,7 +4290,7 @@ var chatThreadModelSelectionContract = c16.router({
     summary: "Update a chat thread model selection"
   }
 });
-var chatThreadComputerUseHostContract = c16.router({
+var chatThreadComputerUseHostContract = c15.router({
   update: {
     method: "POST",
     path: "/api/zero/chat-threads/:id/computer-use-host",
@@ -4408,7 +4300,7 @@ var chatThreadComputerUseHostContract = c16.router({
       computerUseHostId: external_exports.string().uuid().nullable()
     }),
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4417,7 +4309,7 @@ var chatThreadComputerUseHostContract = c16.router({
     summary: "Update a chat thread Computer Use host binding"
   }
 });
-var chatMessagesContract = c16.router({
+var chatMessagesContract = c15.router({
   send: {
     method: "POST",
     path: "/api/zero/chat/messages",
@@ -4499,7 +4391,7 @@ var chatSearchResponseSchema = external_exports.object({
   results: external_exports.array(chatSearchResultSchema),
   hasMore: external_exports.boolean()
 });
-var chatSearchContract = c16.router({
+var chatSearchContract = c15.router({
   search: {
     method: "GET",
     path: "/api/zero/chat/search",
@@ -4521,7 +4413,7 @@ var chatSearchContract = c16.router({
     summary: "Search chat messages within caller's org (zero proxy)"
   }
 });
-var chatThreadMessagesContract = c16.router({
+var chatThreadMessagesContract = c15.router({
   list: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/messages",
@@ -4556,7 +4448,7 @@ var chatThreadMessagesContract = c16.router({
     summary: "Get a chat message by id for a thread"
   }
 });
-var chatThreadArtifactsContract = c16.router({
+var chatThreadArtifactsContract = c15.router({
   list: {
     method: "GET",
     path: "/api/zero/chat-threads/:threadId/artifacts",
@@ -4610,7 +4502,7 @@ var chatThreadArtifactsContract = c16.router({
     pathParams: chatThreadThreadIdPathParamsSchema,
     query: htmlArtifactEditSnapshotQuerySchema,
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
@@ -4646,7 +4538,7 @@ var chatThreadArtifactsContract = c16.router({
     headers: authHeadersSchema,
     pathParams: chatThreadThreadIdPathParamsSchema,
     contentType: "multipart/form-data",
-    body: c16.type(),
+    body: c15.type(),
     responses: {
       200: external_exports.object({
         id: external_exports.string(),
@@ -4662,7 +4554,7 @@ var chatThreadArtifactsContract = c16.router({
     summary: "Upload a presentation artifact to the user's Google Drive as a native Google Slides deck"
   }
 });
-var artifactsContract = c16.router({
+var artifactsContract = c15.router({
   list: {
     method: "GET",
     path: "/api/zero/artifacts",
@@ -4681,7 +4573,7 @@ var artifactsContract = c16.router({
     headers: authHeadersSchema,
     body: artifactFavoriteBodySchema,
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4695,7 +4587,7 @@ var artifactsContract = c16.router({
     headers: authHeadersSchema,
     body: artifactFavoriteBodySchema,
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4724,7 +4616,7 @@ var artifactsContract = c16.router({
     body: imageArtifactEditSnapshotUpsertSchema,
     responses: {
       200: imageArtifactEditSnapshotSchema,
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4738,7 +4630,7 @@ var artifactsContract = c16.router({
     headers: authHeadersSchema,
     query: imageArtifactEditSnapshotQuerySchema,
     responses: {
-      204: c16.noBody(),
+      204: c15.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4749,7 +4641,7 @@ var artifactsContract = c16.router({
 });
 
 // ../../packages/api-contracts/src/contracts/zero-agents.ts
-var c17 = initContract();
+var c16 = initContract();
 var zeroAgentVisibilitySchema = external_exports.enum(["public", "private"]);
 var zeroAgentResponseSchema = external_exports.object({
   agentId: external_exports.string(),
@@ -4792,7 +4684,7 @@ var zeroAgentDraftRequestSchema = external_exports.object({
   draftContent: external_exports.string().nullable().optional(),
   draftAttachments: external_exports.array(persistedAttachmentSchema).nullable().optional()
 });
-var zeroAgentsMainContract = c17.router({
+var zeroAgentsMainContract = c16.router({
   create: {
     method: "POST",
     path: "/api/zero/agents",
@@ -4820,7 +4712,7 @@ var zeroAgentsMainContract = c17.router({
     summary: "List zero agents"
   }
 });
-var zeroAgentsByIdContract = c17.router({
+var zeroAgentsByIdContract = c16.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id",
@@ -4873,9 +4765,9 @@ var zeroAgentsByIdContract = c17.router({
     path: "/api/zero/agents/:id",
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
-    body: c17.noBody(),
+    body: c16.noBody(),
     responses: {
-      204: c17.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4885,7 +4777,7 @@ var zeroAgentsByIdContract = c17.router({
     summary: "Delete zero agent by id"
   }
 });
-var zeroAgentInstructionsContract = c17.router({
+var zeroAgentInstructionsContract = c16.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/instructions",
@@ -4917,7 +4809,7 @@ var zeroAgentInstructionsContract = c17.router({
     summary: "Update zero agent instructions"
   }
 });
-var zeroAgentDraftContract = c17.router({
+var zeroAgentDraftContract = c16.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/draft",
@@ -4939,7 +4831,7 @@ var zeroAgentDraftContract = c17.router({
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     body: zeroAgentDraftRequestSchema,
     responses: {
-      204: c17.noBody(),
+      204: c16.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
@@ -4958,7 +4850,7 @@ var CONNECTOR_REF_MAX_LENGTH = 64;
 var connectorRefSchema = external_exports.string().min(1).max(CONNECTOR_REF_MAX_LENGTH);
 
 // ../../packages/api-contracts/src/contracts/zero-user-permission-grants.ts
-var c18 = initContract();
+var c17 = initContract();
 var agentIdSchema = external_exports.string().uuid();
 var permissionSchema = external_exports.string().min(1).max(128);
 var userPermissionGrantActionSchema = external_exports.enum(["allow", "deny"]);
@@ -5005,7 +4897,7 @@ var applyUserPermissionGrantsRequestSchema = userPermissionGrantScopeSchema.and(
     grants: external_exports.array(applyUserPermissionGrantSchema)
   })
 );
-var zeroUserPermissionGrantsContract = c18.router({
+var zeroUserPermissionGrantsContract = c17.router({
   list: {
     method: "GET",
     path: "/api/zero/user-permission-grants",
@@ -5049,7 +4941,7 @@ var connectorCatalogRefSchema = external_exports.string().min(1).max(CONNECTOR_C
 var connectorCatalogAuthMethodIdSchema = external_exports.string().min(1).max(CONNECTOR_CATALOG_AUTH_METHOD_ID_MAX_LENGTH).regex(connectorCatalogIdentityPattern);
 
 // ../../packages/api-contracts/src/contracts/user-connectors.ts
-var c19 = initContract();
+var c18 = initContract();
 var userConnectorEnabledTypesSchema = external_exports.object({
   enabledTypes: external_exports.array(connectorCatalogRefSchema)
 });
@@ -5058,7 +4950,7 @@ var userConnectorUpdateSchema = userConnectorEnabledTypesSchema.extend(
     operation: external_exports.enum(["replace", "add", "remove"]).optional()
   }
 );
-var zeroUserConnectorsContract = c19.router({
+var zeroUserConnectorsContract = c18.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/user-connectors",
@@ -5091,14 +4983,14 @@ var zeroUserConnectorsContract = c19.router({
 
 // ../../packages/api-contracts/src/contracts/zero-agent-custom-connectors.ts
 init_esm_shims();
-var c20 = initContract();
+var c19 = initContract();
 var agentCustomConnectorEnabledIdsSchema = external_exports.object({
   enabledIds: external_exports.array(external_exports.string().uuid())
 });
 var agentCustomConnectorUpdateSchema = agentCustomConnectorEnabledIdsSchema.extend({
   operation: external_exports.enum(["replace", "add", "remove"]).optional()
 });
-var zeroAgentCustomConnectorsContract = c20.router({
+var zeroAgentCustomConnectorsContract = c19.router({
   get: {
     method: "GET",
     path: "/api/zero/agents/:id/custom-connectors",
@@ -5408,8 +5300,8 @@ var connectorExternalCodeSessionCompleteResponseSchema = external_exports.object
 });
 
 // ../../packages/api-contracts/src/contracts/zero-connectors.ts
-var c21 = initContract();
-var zeroConnectorsMainContract = c21.router({
+var c20 = initContract();
+var zeroConnectorsMainContract = c20.router({
   list: {
     method: "GET",
     path: "/api/zero/connectors",
@@ -5423,7 +5315,7 @@ var zeroConnectorsMainContract = c21.router({
     summary: "List all connectors (zero proxy)"
   }
 });
-var zeroConnectorsByTypeContract = c21.router({
+var zeroConnectorsByTypeContract = c20.router({
   get: {
     method: "GET",
     path: "/api/zero/connectors/:type",
@@ -5443,14 +5335,14 @@ var zeroConnectorsByTypeContract = c21.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ type: connectorCatalogRefSchema }),
     responses: {
-      204: c21.noBody(),
+      204: c20.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema
     },
     summary: "Disconnect a connector (zero proxy)"
   }
 });
-var zeroConnectorScopeDiffContract = c21.router({
+var zeroConnectorScopeDiffContract = c20.router({
   getScopeDiff: {
     method: "GET",
     path: "/api/zero/connectors/:type/scope-diff",
@@ -5465,7 +5357,7 @@ var zeroConnectorScopeDiffContract = c21.router({
     summary: "Get scope diff for a connector"
   }
 });
-var zeroConnectorOauthStartContract = c21.router({
+var zeroConnectorOauthStartContract = c20.router({
   start: {
     method: "POST",
     path: "/api/zero/connectors/:type/oauth/start",
@@ -5486,7 +5378,7 @@ var zeroConnectorOauthStartContract = c21.router({
     summary: "Create connector OAuth handoff and authorization URL"
   }
 });
-var zeroConnectorOpenIdStartContract = c21.router({
+var zeroConnectorOpenIdStartContract = c20.router({
   start: {
     method: "POST",
     path: "/api/zero/connectors/:type/openid/start",
@@ -5507,7 +5399,7 @@ var zeroConnectorOpenIdStartContract = c21.router({
     summary: "Create connector OpenID handoff and authorization URL"
   }
 });
-var zeroConnectorManualGrantContract = c21.router({
+var zeroConnectorManualGrantContract = c20.router({
   connect: {
     method: "POST",
     path: "/api/zero/connectors/:type/manual-grant",
@@ -5530,7 +5422,7 @@ var zeroConnectorManualGrantContract = c21.router({
     summary: "Connect a connector with a manual grant"
   }
 });
-var zeroConnectorNoAuthGrantContract = c21.router({
+var zeroConnectorNoAuthGrantContract = c20.router({
   connect: {
     method: "POST",
     path: "/api/zero/connectors/:type/no-auth",
@@ -5552,7 +5444,7 @@ var zeroConnectorNoAuthGrantContract = c21.router({
     summary: "Enable a connector with a no-auth grant"
   }
 });
-var zeroConnectorOauthDeviceAuthSessionContract = c21.router({
+var zeroConnectorOauthDeviceAuthSessionContract = c20.router({
   create: {
     method: "POST",
     path: "/api/zero/connectors/:type/oauth/device/sessions",
@@ -5593,7 +5485,7 @@ var zeroConnectorOauthDeviceAuthSessionContract = c21.router({
     summary: "Poll connector OAuth device authorization session"
   }
 });
-var zeroConnectorExternalCodeSessionContract = c21.router({
+var zeroConnectorExternalCodeSessionContract = c20.router({
   create: {
     method: "POST",
     path: "/api/zero/connectors/:type/external-code/sessions",
@@ -5642,7 +5534,7 @@ var connectorSearchItemSchema = external_exports.object({
 var connectorSearchResponseSchema = external_exports.object({
   connectors: external_exports.array(connectorSearchItemSchema)
 });
-var zeroConnectorsSearchContract = c21.router({
+var zeroConnectorsSearchContract = c20.router({
   search: {
     method: "GET",
     path: "/api/zero/connectors/search",
@@ -5660,7 +5552,7 @@ var zeroConnectorsSearchContract = c21.router({
 
 // ../../packages/api-contracts/src/contracts/zero-connector-catalog.ts
 init_esm_shims();
-var c22 = initContract();
+var c21 = initContract();
 var publicConnectorCatalogAuthMethodSummarySchema = external_exports.object({
   id: connectorCatalogAuthMethodIdSchema,
   label: external_exports.string(),
@@ -5800,7 +5692,7 @@ var publicConnectorCatalogPermissionDetailResponseSchema = external_exports.obje
 var connectorCatalogPathParamsSchema = external_exports.object({
   connectorRef: connectorCatalogRefSchema
 });
-var zeroConnectorCatalogContract = c22.router({
+var zeroConnectorCatalogContract = c21.router({
   list: {
     method: "GET",
     path: "/api/zero/connector-catalog",
@@ -5859,7 +5751,7 @@ var zeroConnectorCatalogContract = c22.router({
 
 // ../../packages/api-contracts/src/contracts/zero-connector-check.ts
 init_esm_shims();
-var c23 = initContract();
+var c22 = initContract();
 var boundedNameSchema = external_exports.string().min(1).max(255);
 var connectorCheckUrlRequestSchema = external_exports.object({
   mode: external_exports.literal("url"),
@@ -6005,7 +5897,7 @@ var connectorCheckDiagnosticResultSchema = external_exports.union([
   connectorCheckUnresolvedDynamicBaseSchema,
   connectorCheckRunContextUnavailableSchema
 ]);
-var zeroConnectorCheckContract = c23.router({
+var zeroConnectorCheckContract = c22.router({
   check: {
     method: "POST",
     path: "/api/zero/connectors/diagnostics/check",
@@ -6025,7 +5917,7 @@ var zeroConnectorCheckContract = c23.router({
 
 // ../../packages/api-contracts/src/contracts/zero-connector-permission-deny.ts
 init_esm_shims();
-var c24 = initContract();
+var c23 = initContract();
 var connectorPermissionDenyRequestSchema = external_exports.object({
   method: external_exports.string().min(1).max(16),
   url: external_exports.string().min(1).max(8192)
@@ -6064,7 +5956,7 @@ var connectorPermissionDenyDiagnosticResultSchema = external_exports.discriminat
   connectorPermissionDenyUnresolvedDynamicBaseSchema,
   connectorPermissionDenyUnsafeInputSchema
 ]);
-var zeroConnectorPermissionDenyContract = c24.router({
+var zeroConnectorPermissionDenyContract = c23.router({
   diagnose: {
     method: "POST",
     path: "/api/zero/connectors/:connectorRef/diagnostics/permission-deny",
@@ -6084,7 +5976,7 @@ var zeroConnectorPermissionDenyContract = c24.router({
 
 // ../../packages/api-contracts/src/contracts/zero-custom-connectors.ts
 init_esm_shims();
-var c25 = initContract();
+var c24 = initContract();
 var customConnectorFieldKindSchema = external_exports.enum(["secret", "variable"]);
 var customConnectorFieldSchema = external_exports.object({
   key: external_exports.string().min(1).max(64),
@@ -6170,7 +6062,7 @@ var saveCustomConnectorProposalResponseSchema = external_exports.object({
   connector: customConnectorResponseSchema,
   authorizedAgentId: external_exports.string().uuid().optional()
 });
-var zeroCustomConnectorsContract = c25.router({
+var zeroCustomConnectorsContract = c24.router({
   list: {
     method: "GET",
     path: "/api/zero/custom-connectors",
@@ -6197,7 +6089,7 @@ var zeroCustomConnectorsContract = c25.router({
     summary: "Create an org custom connector"
   }
 });
-var zeroCustomConnectorByIdContract = c25.router({
+var zeroCustomConnectorByIdContract = c24.router({
   get: {
     method: "GET",
     path: "/api/zero/custom-connectors/:id",
@@ -6218,7 +6110,7 @@ var zeroCustomConnectorByIdContract = c25.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c25.noBody(),
+      204: c24.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -6243,7 +6135,7 @@ var zeroCustomConnectorByIdContract = c25.router({
     summary: "Rename an org custom connector"
   }
 });
-var zeroCustomConnectorSecretContract = c25.router({
+var zeroCustomConnectorSecretContract = c24.router({
   set: {
     method: "PUT",
     path: "/api/zero/custom-connectors/:id/secret",
@@ -6251,7 +6143,7 @@ var zeroCustomConnectorSecretContract = c25.router({
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     body: setCustomConnectorSecretBodySchema,
     responses: {
-      204: c25.noBody(),
+      204: c24.noBody(),
       400: apiErrorSchema,
       401: apiErrorSchema,
       404: apiErrorSchema,
@@ -6265,7 +6157,7 @@ var zeroCustomConnectorSecretContract = c25.router({
     headers: authHeadersSchema,
     pathParams: external_exports.object({ id: external_exports.string().uuid() }),
     responses: {
-      204: c25.noBody(),
+      204: c24.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -6273,7 +6165,7 @@ var zeroCustomConnectorSecretContract = c25.router({
     summary: "Clear the calling user's secret for a custom connector"
   }
 });
-var zeroCustomConnectorProposalContract = c25.router({
+var zeroCustomConnectorProposalContract = c24.router({
   save: {
     method: "POST",
     path: "/api/zero/custom-connectors/proposals/save",
@@ -6430,7 +6322,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/runners.ts
 init_esm_shims();
-var c26 = initContract();
+var c25 = initContract();
 var MIN_EPOCH_MS_TIMESTAMP = 1e12;
 var apiStartTimeSchema = external_exports.number().int().min(MIN_EPOCH_MS_TIMESTAMP);
 var CANONICAL_GUEST_HOME_DIR = "/home/user";
@@ -6551,9 +6443,14 @@ var heldSessionStateSchema = external_exports.object({
   reusableSandbox: external_exports.object({
     profile: external_exports.string(),
     historyGenerationRunId: external_exports.uuid().optional()
-  }).optional()
+  }).optional(),
+  workspaceCaches: external_exports.array(
+    external_exports.object({
+      profile: external_exports.string()
+    })
+  ).max(8).optional()
 });
-var runnersPollContract = c26.router({
+var runnersPollContract = c25.router({
   poll: {
     method: "POST",
     path: "/api/runners/poll",
@@ -6792,7 +6689,7 @@ var executionContextSchema = external_exports.object({
   // API-owned Codex provider/runtime metadata forwarded through the runner.
   codexRuntimeConfig: modelProviderCodexRuntimeConfigSchema.nullable().optional()
 });
-var runnersJobClaimContract = c26.router({
+var runnersJobClaimContract = c25.router({
   claim: {
     method: "POST",
     path: "/api/runners/jobs/:id/claim",
@@ -6816,7 +6713,7 @@ var runnersJobClaimContract = c26.router({
     summary: "Claim a pending job for execution"
   }
 });
-var runnersNetworkPolicyRefreshContract = c26.router({
+var runnersNetworkPolicyRefreshContract = c25.router({
   refresh: {
     method: "POST",
     path: "/api/runners/runs/:runId/network-policy-refresh",
@@ -6846,7 +6743,7 @@ var runnersNetworkPolicyRefreshContract = c26.router({
     summary: "Refresh active run network policies"
   }
 });
-var runnersBuiltinFirewallsResolveContract = c26.router({
+var runnersBuiltinFirewallsResolveContract = c25.router({
   resolve: {
     method: "POST",
     path: "/api/runners/builtin-firewalls/resolve",
@@ -6874,8 +6771,23 @@ var heartbeatBodySchema = external_exports.object({
   admittableProfiles: runnerProfileListSchema,
   heldSessionStates: external_exports.array(heldSessionStateSchema).max(1024),
   mode: external_exports.enum(["starting", "running", "draining", "stopping"])
+}).superRefine((heartbeat, ctx) => {
+  const workspaceCacheCount = heartbeat.heldSessionStates.reduce(
+    (count, state) => {
+      return count + (state.workspaceCaches?.length ?? 0);
+    },
+    0
+  );
+  if (workspaceCacheCount <= 1024) {
+    return;
+  }
+  ctx.addIssue({
+    code: external_exports.ZodIssueCode.custom,
+    path: ["heldSessionStates"],
+    message: "heldSessionStates may contain at most 1024 workspace caches"
+  });
 });
-var runnersHeartbeatContract = c26.router({
+var runnersHeartbeatContract = c25.router({
   heartbeat: {
     method: "POST",
     path: "/api/runners/heartbeat",
@@ -6893,7 +6805,7 @@ var runnersHeartbeatContract = c26.router({
 
 // ../../packages/api-contracts/src/contracts/storages.ts
 init_esm_shims();
-var c27 = initContract();
+var c26 = initContract();
 var storageTypeSchema = external_exports.enum(["volume", "artifact"]);
 var versionQuerySchema = external_exports.string().regex(/^[a-f0-9]{8,64}$/i, "Version must be 8-64 hex characters").optional();
 var uploadStorageResponseSchema = external_exports.object({
@@ -6904,7 +6816,7 @@ var uploadStorageResponseSchema = external_exports.object({
   type: storageTypeSchema,
   deduplicated: external_exports.boolean()
 });
-var storagesContract = c27.router({
+var storagesContract = c26.router({
   /**
    * POST /api/storages
    * Upload a storage (tar.gz file)
@@ -6921,7 +6833,7 @@ var storagesContract = c27.router({
     path: "/api/storages",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c27.type(),
+    body: c26.type(),
     responses: {
       200: uploadStorageResponseSchema,
       400: apiErrorSchema,
@@ -6950,9 +6862,9 @@ var storagesContract = c27.router({
     }),
     responses: {
       // Binary response - actual handling done at route level
-      200: c27.otherResponse({
+      200: c26.otherResponse({
         contentType: "application/gzip",
-        body: c27.type()
+        body: c26.type()
       }),
       400: apiErrorSchema,
       401: apiErrorSchema,
@@ -6977,7 +6889,7 @@ var presignedUploadSchema = external_exports.object({
   key: external_exports.string(),
   presignedUrl: external_exports.url()
 });
-var storagesPrepareContract = c27.router({
+var storagesPrepareContract = c26.router({
   prepare: {
     method: "POST",
     path: "/api/storages/prepare",
@@ -7012,7 +6924,7 @@ var storagesPrepareContract = c27.router({
     summary: "Prepare for direct S3 upload"
   }
 });
-var storagesCommitContract = c27.router({
+var storagesCommitContract = c26.router({
   commit: {
     method: "POST",
     path: "/api/storages/commit",
@@ -7046,7 +6958,7 @@ var storagesCommitContract = c27.router({
     summary: "Commit uploaded storage"
   }
 });
-var storagesDownloadContract = c27.router({
+var storagesDownloadContract = c26.router({
   download: {
     method: "GET",
     path: "/api/storages/download",
@@ -7082,7 +6994,7 @@ var storagesDownloadContract = c27.router({
     summary: "Get presigned download URL"
   }
 });
-var storagesListContract = c27.router({
+var storagesListContract = c26.router({
   list: {
     method: "GET",
     path: "/api/storages/list",
@@ -7110,7 +7022,7 @@ var storagesListContract = c27.router({
 });
 
 // ../../packages/api-contracts/src/contracts/webhooks.ts
-var c28 = initContract();
+var c27 = initContract();
 var sha256HexSchema = external_exports.string().regex(
   /^[a-f0-9]{64}$/,
   "hash must be a lowercase 64-character SHA-256 hex string"
@@ -7120,11 +7032,11 @@ var thirdPartyWebhookOkSchema = external_exports.union([
   external_exports.string(),
   external_exports.object({ message: external_exports.literal("pong") })
 ]);
-var webhookClerkContract = c28.router({
+var webhookClerkContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/clerk",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       401: thirdPartyWebhookErrorSchema
@@ -7132,11 +7044,11 @@ var webhookClerkContract = c28.router({
     summary: "Handle Clerk organization and user webhooks"
   }
 });
-var webhookGithubContract = c28.router({
+var webhookGithubContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/github",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7146,11 +7058,11 @@ var webhookGithubContract = c28.router({
     summary: "Handle GitHub App webhooks"
   }
 });
-var webhookStripeContract = c28.router({
+var webhookStripeContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/stripe",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       401: thirdPartyWebhookErrorSchema,
@@ -7189,11 +7101,11 @@ var workflowAutomationWebhookResponseSchema = external_exports.object({
   duplicate: external_exports.boolean(),
   runId: external_exports.string().uuid().optional()
 });
-var webhookGmailContract = c28.router({
+var webhookGmailContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/gmail",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: gmailWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7204,11 +7116,11 @@ var webhookGmailContract = c28.router({
     summary: "Handle Gmail Pub/Sub push notifications"
   }
 });
-var webhookGoogleCalendarContract = c28.router({
+var webhookGoogleCalendarContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/google-calendar",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: googleCalendarWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7219,11 +7131,11 @@ var webhookGoogleCalendarContract = c28.router({
     summary: "Handle Google Calendar push notifications"
   }
 });
-var webhookGoogleWorkspaceEventsContract = c28.router({
+var webhookGoogleWorkspaceEventsContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/google-workspace-events",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: googleWorkspaceEventsWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7234,11 +7146,11 @@ var webhookGoogleWorkspaceEventsContract = c28.router({
     summary: "Handle Google Workspace Events Pub/Sub push notifications"
   }
 });
-var webhookNotionContract = c28.router({
+var webhookNotionContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/notion",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: notionWebhookResponseSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7253,7 +7165,7 @@ var workflowAutomationWebhookPostRoute = {
   pathParams: external_exports.object({
     token: external_exports.string().min(1)
   }),
-  body: c28.type(),
+  body: c27.type(),
   responses: {
     200: workflowAutomationWebhookResponseSchema,
     400: thirdPartyWebhookErrorSchema,
@@ -7264,14 +7176,14 @@ var workflowAutomationWebhookPostRoute = {
     500: thirdPartyWebhookErrorSchema
   }
 };
-var webhookWorkflowAutomationContract = c28.router({
+var webhookWorkflowAutomationContract = c27.router({
   post: {
     ...workflowAutomationWebhookPostRoute,
     path: "/api/webhooks/workflow-automations/:token",
     summary: "Handle inbound workflow automation webhooks"
   }
 });
-var webhookBuiltInGenerationFalContract = c28.router({
+var webhookBuiltInGenerationFalContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/built-in-generations/fal/:generationId",
@@ -7282,7 +7194,7 @@ var webhookBuiltInGenerationFalContract = c28.router({
       token: external_exports.string().min(1),
       visualKey: external_exports.string().min(1).optional()
     }),
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7292,7 +7204,7 @@ var webhookBuiltInGenerationFalContract = c28.router({
     summary: "Handle fal built-in generation webhooks"
   }
 });
-var webhookBuiltInGenerationBytePlusContract = c28.router({
+var webhookBuiltInGenerationBytePlusContract = c27.router({
   post: {
     method: "POST",
     path: "/api/webhooks/built-in-generations/byteplus/:generationId",
@@ -7303,7 +7215,7 @@ var webhookBuiltInGenerationBytePlusContract = c28.router({
       token: external_exports.string().min(1),
       visualKey: external_exports.string().min(1).optional()
     }),
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: thirdPartyWebhookOkSchema,
       400: thirdPartyWebhookErrorSchema,
@@ -7363,7 +7275,7 @@ var firewallAuthResponseSchema = external_exports.object({
   refreshedConnectors: external_exports.array(external_exports.string()),
   refreshedSecrets: external_exports.array(external_exports.string())
 });
-var webhookFirewallAuthContract = c28.router({
+var webhookFirewallAuthContract = c27.router({
   /**
    * POST /api/webhooks/agent/firewall/auth
    * Resolve firewall auth templates and refresh access tokens on demand.
@@ -7405,7 +7317,7 @@ var webhookFirewallAuthContract = c28.router({
     summary: "Resolve firewall auth templates"
   }
 });
-var webhookEventsContract = c28.router({
+var webhookEventsContract = c27.router({
   /**
    * POST /api/webhooks/agent/events
    * Receive agent events from sandbox
@@ -7432,7 +7344,7 @@ var webhookEventsContract = c28.router({
     summary: "Receive agent events from sandbox"
   }
 });
-var webhookCompleteContract = c28.router({
+var webhookCompleteContract = c27.router({
   /**
    * POST /api/webhooks/agent/complete
    * Handle agent run completion (success or failure)
@@ -7469,7 +7381,7 @@ var webhookCompleteContract = c28.router({
     summary: "Handle agent run completion"
   }
 });
-var webhookCheckpointsContract = c28.router({
+var webhookCheckpointsContract = c27.router({
   /**
    * POST /api/webhooks/agent/checkpoints
    * Create a recoverable checkpoint for an agent run.
@@ -7505,7 +7417,7 @@ var webhookCheckpointsContract = c28.router({
     summary: "Create checkpoint for agent run"
   }
 });
-var webhookCheckpointsPrepareHistoryContract = c28.router({
+var webhookCheckpointsPrepareHistoryContract = c27.router({
   prepare: {
     method: "POST",
     path: "/api/webhooks/agent/checkpoints/prepare-history",
@@ -7531,7 +7443,7 @@ var webhookCheckpointsPrepareHistoryContract = c28.router({
     summary: "Get presigned URL for uploading session history to S3"
   }
 });
-var webhookHeartbeatContract = c28.router({
+var webhookHeartbeatContract = c27.router({
   /**
    * POST /api/webhooks/agent/heartbeat
    * Receive heartbeat signals from sandbox
@@ -7555,7 +7467,7 @@ var webhookHeartbeatContract = c28.router({
     summary: "Receive heartbeat from sandbox"
   }
 });
-var webhookStoragesContract = c28.router({
+var webhookStoragesContract = c27.router({
   /**
    * POST /api/webhooks/agent/storages
    * Create a new version of a storage from sandbox
@@ -7571,7 +7483,7 @@ var webhookStoragesContract = c28.router({
     path: "/api/webhooks/agent/storages",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: external_exports.object({
         versionId: external_exports.string(),
@@ -7587,7 +7499,7 @@ var webhookStoragesContract = c28.router({
     summary: "Upload storage version from sandbox"
   }
 });
-var webhookStoragesIncrementalContract = c28.router({
+var webhookStoragesIncrementalContract = c27.router({
   /**
    * POST /api/webhooks/agent/storages/incremental
    * Create a new version using incremental upload
@@ -7605,7 +7517,7 @@ var webhookStoragesIncrementalContract = c28.router({
     path: "/api/webhooks/agent/storages/incremental",
     headers: authHeadersSchema,
     contentType: "multipart/form-data",
-    body: c28.type(),
+    body: c27.type(),
     responses: {
       200: external_exports.object({
         versionId: external_exports.string(),
@@ -7699,7 +7611,7 @@ var sandboxOperationSchema = external_exports.object({
   session_history_transfer_encoding_state: sessionHistoryTransferEncodingStateSchema.optional(),
   session_history_download_source: sandboxOperationDownloadSourceSchema
 });
-var webhookTelemetryContract = c28.router({
+var webhookTelemetryContract = c27.router({
   /**
    * POST /api/webhooks/agent/telemetry
    * Receive telemetry data (system log, metrics, network logs, and sandbox operations) from sandbox
@@ -7728,7 +7640,7 @@ var webhookTelemetryContract = c28.router({
     summary: "Receive telemetry data from sandbox"
   }
 });
-var webhookStoragesPrepareContract = c28.router({
+var webhookStoragesPrepareContract = c27.router({
   prepare: {
     method: "POST",
     path: "/api/webhooks/agent/storages/prepare",
@@ -7762,7 +7674,7 @@ var webhookStoragesPrepareContract = c28.router({
     summary: "Prepare for direct S3 upload from sandbox"
   }
 });
-var webhookStoragesCommitContract = c28.router({
+var webhookStoragesCommitContract = c27.router({
   commit: {
     method: "POST",
     path: "/api/webhooks/agent/storages/commit",
@@ -7801,11 +7713,11 @@ var webhookUsageEventItemSchema = external_exports.object({
   idempotencyKey: external_exports.uuid(),
   kind: external_exports.enum(["connector", "model", "image"]),
   provider: external_exports.string().min(1).max(100),
-  billingSku: external_exports.string().min(1).max(100).optional(),
   category: external_exports.string().min(1).max(100),
-  quantity: external_exports.number().int().min(0)
+  quantity: external_exports.number().int().min(0),
+  grossCredits: external_exports.number().int().min(0).optional()
 }).strict();
-var webhookUsageEventContract = c28.router({
+var webhookUsageEventContract = c27.router({
   send: {
     method: "POST",
     path: "/api/webhooks/agent/usage-event",
@@ -7838,7 +7750,7 @@ var webhookModelUsageObservationItemSchema = external_exports.object({
   category: modelUsageObservationCategorySchema,
   quantity: external_exports.number().int().min(1)
 }).strict();
-var webhookModelUsageObservationContract = c28.router({
+var webhookModelUsageObservationContract = c27.router({
   send: {
     method: "POST",
     path: "/api/webhooks/agent/model-usage-observation",
@@ -7876,7 +7788,7 @@ var zeroRunRequestSchema = unifiedRunRequestSchema.omit({
   agentId: external_exports.string().optional(),
   modelProvider: external_exports.string().optional()
 });
-var c29 = initContract();
+var c28 = initContract();
 var zeroLogPaginationQuerySchema = createLogPaginationQuerySchema({
   cursorKind: "sequence"
 });
@@ -7886,7 +7798,7 @@ var zeroNetworkLogPaginationQuerySchema = createLogPaginationQuerySchema({
   defaultLimit: 500,
   defaultOrder: "asc"
 });
-var zeroRunsMainContract = c29.router({
+var zeroRunsMainContract = c28.router({
   create: {
     method: "POST",
     path: "/api/zero/runs",
@@ -7905,7 +7817,7 @@ var zeroRunsMainContract = c29.router({
     summary: "Create and execute agent run (zero proxy)"
   }
 });
-var zeroRunsByIdContract = c29.router({
+var zeroRunsByIdContract = c28.router({
   getById: {
     method: "GET",
     path: "/api/zero/runs/:id",
@@ -7923,7 +7835,7 @@ var zeroRunsByIdContract = c29.router({
     summary: "Get agent run by ID (zero proxy)"
   }
 });
-var zeroRunsCancelContract = c29.router({
+var zeroRunsCancelContract = c28.router({
   cancel: {
     method: "POST",
     path: "/api/zero/runs/:id/cancel",
@@ -7942,7 +7854,7 @@ var zeroRunsCancelContract = c29.router({
     summary: "Cancel a pending or running run (zero proxy)"
   }
 });
-var zeroRunsQueueContract = c29.router({
+var zeroRunsQueueContract = c28.router({
   getQueue: {
     method: "GET",
     path: "/api/zero/runs/queue",
@@ -7955,7 +7867,7 @@ var zeroRunsQueueContract = c29.router({
     summary: "Get org run queue status (zero proxy)"
   }
 });
-var zeroRunAgentEventsContract = c29.router({
+var zeroRunAgentEventsContract = c28.router({
   getAgentEvents: {
     method: "GET",
     path: "/api/zero/runs/:id/telemetry/agent",
@@ -8019,7 +7931,7 @@ var runContextResponseSchema = external_exports.object({
   artifact: runContextArtifactSchema.nullable(),
   featureFlags: external_exports.record(external_exports.string(), external_exports.boolean()).nullable()
 });
-var zeroRunContextContract = c29.router({
+var zeroRunContextContract = c28.router({
   getContext: {
     method: "GET",
     path: "/api/zero/runs/:id/context",
@@ -8037,7 +7949,7 @@ var zeroRunContextContract = c29.router({
     summary: "Get run execution context snapshot for debugging"
   }
 });
-var zeroRunNetworkLogsContract = c29.router({
+var zeroRunNetworkLogsContract = c28.router({
   getNetworkLogs: {
     method: "GET",
     path: "/api/zero/runs/:id/network",
@@ -8059,7 +7971,7 @@ var zeroRunNetworkLogsContract = c29.router({
 var runRunnerResponseSchema = external_exports.object({
   sandboxReuseResult: sandboxReuseResultSchema.nullable()
 });
-var zeroRunRunnerContract = c29.router({
+var zeroRunRunnerContract = c28.router({
   getRunner: {
     method: "GET",
     path: "/api/zero/runs/:id/runner",
@@ -8077,7 +7989,7 @@ var zeroRunRunnerContract = c29.router({
     summary: "Get runner-level metadata for a run"
   }
 });
-var zeroLogsSearchContract = c29.router({
+var zeroLogsSearchContract = c28.router({
   searchLogs: {
     method: "GET",
     path: "/api/zero/logs/search",
@@ -8173,7 +8085,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-developer-support.ts
 init_esm_shims();
-var c30 = initContract();
+var c29 = initContract();
 var developerSupportBodySchema = external_exports.object({
   title: external_exports.string().min(1, "Title is required"),
   description: external_exports.string().min(1, "Description is required"),
@@ -8185,7 +8097,7 @@ var consentCodeResponseSchema = external_exports.object({
 var submitResponseSchema = external_exports.object({
   reference: external_exports.string()
 });
-var zeroDeveloperSupportContract = c30.router({
+var zeroDeveloperSupportContract = c29.router({
   submit: {
     method: "POST",
     path: "/api/zero/developer-support",
@@ -8381,7 +8293,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-computer-use.ts
 init_esm_shims();
-var c31 = initContract();
+var c30 = initContract();
 var computerUseHostStatusSchema = external_exports.enum(["online", "offline"]);
 var computerUseReadCommandKindSchema = external_exports.enum([
   "apps.list",
@@ -8756,7 +8668,7 @@ var computerUseAuditEventSchema = external_exports.object({
 var computerUseAuditEventListResponseSchema = external_exports.object({
   auditEvents: external_exports.array(computerUseAuditEventSchema)
 });
-var zeroComputerUseHostsContract = c31.router({
+var zeroComputerUseHostsContract = c30.router({
   start: {
     method: "POST",
     path: "/api/zero/computer-use/hosts/start",
@@ -8795,7 +8707,7 @@ var zeroComputerUseHostsContract = c31.router({
     summary: "Delete a desktop computer-use host"
   }
 });
-var zeroComputerUseHeartbeatContract = c31.router({
+var zeroComputerUseHeartbeatContract = c30.router({
   heartbeat: {
     method: "POST",
     path: "/api/zero/computer-use/heartbeat",
@@ -8820,7 +8732,7 @@ var zeroComputerUseHeartbeatContract = c31.router({
     summary: "Stop a desktop computer-use host"
   }
 });
-var zeroComputerUseAuthorizationRequestsContract = c31.router({
+var zeroComputerUseAuthorizationRequestsContract = c30.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/authorization-requests",
@@ -8867,7 +8779,7 @@ var zeroComputerUseAuthorizationRequestsContract = c31.router({
     summary: "Bind a Computer Use host for a delegated authorization request"
   }
 });
-var zeroComputerUseCommandContract = c31.router({
+var zeroComputerUseCommandContract = c30.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/commands",
@@ -8902,7 +8814,7 @@ var zeroComputerUseCommandContract = c31.router({
     headers: authHeadersSchema,
     pathParams: commandIdPathParamsSchema,
     responses: {
-      200: c31.type(),
+      200: c30.type(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -8915,7 +8827,7 @@ var zeroComputerUseCommandContract = c31.router({
     headers: authHeadersSchema,
     pathParams: commandIdPathParamsSchema,
     responses: {
-      200: c31.type(),
+      200: c30.type(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -8923,7 +8835,7 @@ var zeroComputerUseCommandContract = c31.router({
     summary: "Download offloaded desktop computer-use plugin content"
   }
 });
-var zeroComputerUseWriteCommandContract = c31.router({
+var zeroComputerUseWriteCommandContract = c30.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/write-commands",
@@ -8940,7 +8852,7 @@ var zeroComputerUseWriteCommandContract = c31.router({
     summary: "Create a desktop computer-use write command"
   }
 });
-var zeroComputerUsePluginCommandContract = c31.router({
+var zeroComputerUsePluginCommandContract = c30.router({
   create: {
     method: "POST",
     path: "/api/zero/computer-use/plugin-commands",
@@ -8957,7 +8869,7 @@ var zeroComputerUsePluginCommandContract = c31.router({
     summary: "Create a desktop computer-use plugin command"
   }
 });
-var zeroComputerUseHostCommandsContract = c31.router({
+var zeroComputerUseHostCommandsContract = c30.router({
   next: {
     method: "POST",
     path: "/api/zero/computer-use/host/commands/next",
@@ -8985,7 +8897,7 @@ var zeroComputerUseHostCommandsContract = c31.router({
     summary: "Complete a desktop computer-use command"
   }
 });
-var zeroComputerUseAuditEventsContract = c31.router({
+var zeroComputerUseAuditEventsContract = c30.router({
   list: {
     method: "GET",
     path: "/api/zero/computer-use/audit-events",
@@ -9221,7 +9133,7 @@ async function callZeroMaps(operation, body) {
 
 // ../../packages/api-contracts/src/contracts/zero-scrape.ts
 init_esm_shims();
-var c32 = initContract();
+var c31 = initContract();
 var zeroScrapeFormatSchema = external_exports.enum(["markdown", "links"]);
 var zeroScrapeModeSchema = external_exports.enum(["standard", "enhanced"]);
 var zeroScrapeBillingCategorySchema = external_exports.enum([
@@ -9301,7 +9213,7 @@ var scrapeResponses = {
   502: apiErrorSchema,
   503: apiErrorSchema
 };
-var zeroScrapeContract = c32.router({
+var zeroScrapeContract = c31.router({
   scrape: {
     method: "POST",
     path: "/api/zero/scrape",
@@ -9326,7 +9238,7 @@ async function callZeroScrape(body) {
 
 // ../../packages/api-contracts/src/contracts/zero-web-search.ts
 init_esm_shims();
-var c33 = initContract();
+var c32 = initContract();
 var ZERO_WEB_SEARCH_DEFAULT_LIMIT = 5;
 var ZERO_WEB_SEARCH_MAX_LIMIT = 10;
 var ZERO_WEB_SEARCH_MAX_QUERY_CHARS = 2048;
@@ -9393,7 +9305,7 @@ var webSearchResponses = {
   502: apiErrorSchema,
   503: apiErrorSchema
 };
-var zeroWebSearchContract = c33.router({
+var zeroWebSearchContract = c32.router({
   search: {
     method: "POST",
     path: "/api/zero/web-search",
@@ -9481,7 +9393,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/composes.ts
 init_esm_shims();
-var c34 = initContract();
+var c33 = initContract();
 var MOUNT_PATH_TEMPLATE = "${{ working_dir }}";
 var composeVersionQuerySchema = external_exports.string().min(1, "Missing version query parameter").regex(
   /^[a-f0-9]{8,64}$|^latest$/i,
@@ -9601,7 +9513,7 @@ var createComposeResponseSchema = external_exports.object({
   action: external_exports.enum(["created", "existing"]),
   updatedAt: external_exports.string()
 });
-var composesMainContract = c34.router({
+var composesMainContract = c33.router({
   /**
    * GET /api/agent/composes?name={name}&org={org}
    * Get agent compose by name with HEAD version content
@@ -9647,7 +9559,7 @@ var composesMainContract = c34.router({
     summary: "Create or update agent compose version"
   }
 });
-var composesByIdContract = c34.router({
+var composesByIdContract = c33.router({
   /**
    * GET /api/agent/composes/:id
    * Get agent compose by ID with HEAD version content
@@ -9669,7 +9581,7 @@ var composesByIdContract = c34.router({
     summary: "Get agent compose by ID"
   }
 });
-var composesVersionsContract = c34.router({
+var composesVersionsContract = c33.router({
   /**
    * GET /api/agent/composes/versions?composeId={id}&version={hash|tag}
    * Resolve a version specifier to a full version ID
@@ -9823,7 +9735,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/sessions.ts
 init_esm_shims();
-var c35 = initContract();
+var c34 = initContract();
 var sessionResponseSchema = external_exports.object({
   id: external_exports.string(),
   agentComposeId: external_exports.string(),
@@ -9864,7 +9776,7 @@ var checkpointResponseSchema = external_exports.object({
   volumeVersionsSnapshot: volumeVersionsSnapshotSchema2.nullable(),
   createdAt: external_exports.string()
 });
-var sessionsByIdContract = c35.router({
+var sessionsByIdContract = c34.router({
   /**
    * GET /api/agent/sessions/:id
    * Get session by ID
@@ -9885,7 +9797,7 @@ var sessionsByIdContract = c35.router({
     summary: "Get session by ID"
   }
 });
-var checkpointsByIdContract = c35.router({
+var checkpointsByIdContract = c34.router({
   /**
    * GET /api/agent/checkpoints/:id
    * Get checkpoint by ID
@@ -10038,8 +9950,8 @@ var setVariableRequestSchema = external_exports.object({
 });
 
 // ../../packages/api-contracts/src/contracts/zero-secrets.ts
-var c36 = initContract();
-var zeroSecretsContract = c36.router({
+var c35 = initContract();
+var zeroSecretsContract = c35.router({
   list: {
     method: "GET",
     path: "/api/zero/secrets",
@@ -10066,7 +9978,7 @@ var zeroSecretsContract = c36.router({
     summary: "Create or update a secret"
   }
 });
-var zeroSecretsByNameContract = c36.router({
+var zeroSecretsByNameContract = c35.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/secrets/:name",
@@ -10075,7 +9987,7 @@ var zeroSecretsByNameContract = c36.router({
       name: secretNameSchema
     }),
     responses: {
-      204: c36.noBody(),
+      204: c35.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -10083,7 +9995,7 @@ var zeroSecretsByNameContract = c36.router({
     summary: "Delete a secret by name"
   }
 });
-var zeroVariablesContract = c36.router({
+var zeroVariablesContract = c35.router({
   list: {
     method: "GET",
     path: "/api/zero/variables",
@@ -10110,7 +10022,7 @@ var zeroVariablesContract = c36.router({
     summary: "Create or update a variable"
   }
 });
-var zeroVariablesByNameContract = c36.router({
+var zeroVariablesByNameContract = c35.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/variables/:name",
@@ -10119,7 +10031,7 @@ var zeroVariablesByNameContract = c36.router({
       name: variableNameSchema
     }),
     responses: {
-      204: c36.noBody(),
+      204: c35.noBody(),
       401: apiErrorSchema,
       404: apiErrorSchema,
       500: apiErrorSchema
@@ -10260,9 +10172,9 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-model-providers.ts
 init_esm_shims();
-var c37 = initContract();
+var c36 = initContract();
 var orgUpsertModelProviderRequestSchema = upsertModelProviderRequestSchema.omit({ selectedModel: true });
-var zeroModelProvidersMainContract = c37.router({
+var zeroModelProvidersMainContract = c36.router({
   list: {
     method: "GET",
     path: "/api/zero/model-providers",
@@ -10291,7 +10203,7 @@ var zeroModelProvidersMainContract = c37.router({
     summary: "Create or update an org-level model provider (admin only)"
   }
 });
-var zeroModelProvidersByTypeContract = c37.router({
+var zeroModelProvidersByTypeContract = c36.router({
   delete: {
     method: "DELETE",
     path: "/api/zero/model-providers/:type",
@@ -10300,7 +10212,7 @@ var zeroModelProvidersByTypeContract = c37.router({
       type: modelProviderTypeSchema
     }),
     responses: {
-      204: c37.noBody(),
+      204: c36.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema,
@@ -10346,7 +10258,7 @@ init_esm_shims();
 
 // ../../packages/api-contracts/src/contracts/zero-workflows.ts
 init_esm_shims();
-var c38 = initContract();
+var c37 = initContract();
 var zeroWorkflowVisibilitySchema = external_exports.enum(["public", "private"]);
 var zeroWorkflowNameSchema = external_exports.string().min(2).max(64).regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$/);
 var RESERVED_SKILL_FILE = "SKILL.md";
@@ -10989,7 +10901,7 @@ var zeroWorkflowConnectorReadinessResponseSchema = external_exports.object({
   connectors: external_exports.array(zeroWorkflowConnectorReadinessEntrySchema)
 }).strict();
 var workflowIdParams = external_exports.object({ workflowId: external_exports.string().uuid() });
-var zeroWorkflowsCollectionContract = c38.router({
+var zeroWorkflowsCollectionContract = c37.router({
   list: {
     method: "GET",
     path: "/api/zero/workflows",
@@ -11018,7 +10930,7 @@ var zeroWorkflowsCollectionContract = c38.router({
     summary: "Create a workflow under an agent"
   }
 });
-var zeroWorkflowsDetailContract = c38.router({
+var zeroWorkflowsDetailContract = c37.router({
   get: {
     method: "GET",
     path: "/api/zero/workflows/:workflowId",
@@ -11053,9 +10965,9 @@ var zeroWorkflowsDetailContract = c38.router({
     path: "/api/zero/workflows/:workflowId",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
-      204: c38.noBody(),
+      204: c37.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -11083,7 +10995,7 @@ var zeroWorkflowsDetailContract = c38.router({
     path: "/api/zero/workflows/:workflowId/chat-thread",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowChatThreadResponseSchema,
       401: apiErrorSchema,
@@ -11097,7 +11009,7 @@ var zeroWorkflowsDetailContract = c38.router({
     path: "/api/zero/workflows/:workflowId/run",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowRunResponseSchema,
       401: apiErrorSchema,
@@ -11112,7 +11024,7 @@ var zeroWorkflowsDetailContract = c38.router({
     path: "/api/zero/workflows/:workflowId/connector-readiness",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowConnectorReadinessResponseSchema,
       400: apiErrorSchema,
@@ -11125,13 +11037,13 @@ var zeroWorkflowsDetailContract = c38.router({
     summary: "Detect the built-in connectors a workflow may need and report their readiness"
   }
 });
-var zeroWorkflowVisibilityContract = c38.router({
+var zeroWorkflowVisibilityContract = c37.router({
   publish: {
     method: "POST",
     path: "/api/zero/workflows/:workflowId/publish",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowSummarySchema,
       400: apiErrorSchema,
@@ -11147,7 +11059,7 @@ var zeroWorkflowVisibilityContract = c38.router({
     path: "/api/zero/workflows/:workflowId/demote",
     headers: authHeadersSchema,
     pathParams: workflowIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowSummarySchema,
       400: apiErrorSchema,
@@ -11165,7 +11077,7 @@ var zeroWorkflowWebhookSecretResponseSchema = external_exports.object({
   webhookUrl: external_exports.url(),
   webhookSecret: external_exports.string().min(1)
 });
-var zeroWorkflowAutomationsContract = c38.router({
+var zeroWorkflowAutomationsContract = c37.router({
   listWorkspace: {
     method: "GET",
     path: "/api/zero/workflow-automations",
@@ -11254,9 +11166,9 @@ var zeroWorkflowAutomationsContract = c38.router({
     path: "/api/zero/workflow-automations/:id",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
-      204: c38.noBody(),
+      204: c37.noBody(),
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -11268,7 +11180,7 @@ var zeroWorkflowAutomationsContract = c38.router({
     path: "/api/zero/workflow-automations/:id/enable",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowAutomationSummarySchema,
       400: apiErrorSchema,
@@ -11285,7 +11197,7 @@ var zeroWorkflowAutomationsContract = c38.router({
     path: "/api/zero/workflow-automations/:id/disable",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowAutomationSummarySchema,
       401: apiErrorSchema,
@@ -11299,7 +11211,7 @@ var zeroWorkflowAutomationsContract = c38.router({
     path: "/api/zero/workflow-automations/:id/run",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       201: zeroWorkflowRunResponseSchema,
       400: apiErrorSchema,
@@ -11315,7 +11227,7 @@ var zeroWorkflowAutomationsContract = c38.router({
     path: "/api/zero/workflow-automations/:id/webhook-secret",
     headers: authHeadersSchema,
     pathParams: automationIdParams,
-    body: c38.noBody(),
+    body: c37.noBody(),
     responses: {
       200: zeroWorkflowWebhookSecretResponseSchema,
       401: apiErrorSchema,
@@ -11427,6 +11339,130 @@ async function disableWorkflowAutomation(id) {
 
 // src/lib/api/domains/zero-mail.ts
 init_esm_shims();
+
+// ../../packages/api-contracts/src/contracts/zero-mail.ts
+init_esm_shims();
+var c38 = initContract();
+var zeroMailProviderSchema = external_exports.enum(["gmail", "outlook"]);
+var zeroMailDraftStatusSchema = external_exports.enum([
+  "draft",
+  "sending",
+  "sent",
+  "cancelled",
+  "failed",
+  "delivery_unknown"
+]);
+var mailSubjectSchema = external_exports.string().min(1).refine((value) => {
+  return !value.includes("\r") && !value.includes("\n");
+}, "Subject must not contain line breaks");
+var zeroMailDraftSchema = external_exports.object({
+  version: external_exports.literal(1),
+  provider: zeroMailProviderSchema,
+  from: external_exports.email(),
+  to: external_exports.array(external_exports.email()).min(1),
+  subject: mailSubjectSchema,
+  body: external_exports.string().min(1),
+  status: zeroMailDraftStatusSchema,
+  error: external_exports.string().optional(),
+  createdAt: external_exports.string(),
+  updatedAt: external_exports.string(),
+  sentAt: external_exports.string().optional()
+});
+var zeroMailDraftFieldsSchema = external_exports.object({
+  to: external_exports.array(external_exports.email()).min(1),
+  subject: mailSubjectSchema,
+  body: external_exports.string().min(1)
+});
+var zeroMailDraftResponseSchema = external_exports.object({
+  mailDraftId: external_exports.string().uuid(),
+  mailDraft: zeroMailDraftSchema
+});
+var zeroMailDraftPathParamsSchema = external_exports.object({
+  mailDraftId: external_exports.string().uuid()
+});
+var zeroMailContract = c38.router({
+  createDraft: {
+    method: "POST",
+    path: "/api/zero/mail/drafts",
+    headers: authHeadersSchema,
+    body: zeroMailDraftFieldsSchema.extend({
+      threadId: external_exports.string().uuid(),
+      agentId: external_exports.string().uuid(),
+      provider: zeroMailProviderSchema.optional()
+    }),
+    responses: {
+      201: zeroMailDraftResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Create a persistent email draft card in a web chat thread"
+  },
+  getDraft: {
+    method: "GET",
+    path: "/api/zero/mail/drafts/:mailDraftId",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Get an email draft by ID"
+  },
+  updateDraft: {
+    method: "PATCH",
+    path: "/api/zero/mail/drafts/:mailDraftId",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    body: zeroMailDraftFieldsSchema,
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Persist edits to an email draft card"
+  },
+  cancelDraft: {
+    method: "POST",
+    path: "/api/zero/mail/drafts/:mailDraftId/cancel",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    body: c38.noBody(),
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Cancel an email draft card"
+  },
+  sendDraft: {
+    method: "POST",
+    path: "/api/zero/mail/drafts/:mailDraftId/send",
+    headers: authHeadersSchema,
+    pathParams: zeroMailDraftPathParamsSchema,
+    body: zeroMailDraftFieldsSchema,
+    responses: {
+      200: zeroMailDraftResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      404: apiErrorSchema,
+      409: apiErrorSchema
+    },
+    summary: "Persist the latest edits and send an email draft exactly once"
+  }
+});
+
+// src/lib/api/domains/zero-mail.ts
 async function createZeroMailDraft(args) {
   const config = await getClientConfig();
   const client = initClient(zeroMailContract, config);
@@ -14139,4 +14175,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-7FHS53YV.js.map
+//# sourceMappingURL=chunk-KNATFPLD.js.map