@vm0/cli 9.76.0 → 9.77.0

package/index.js

@@ -47,7 +47,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.76.0",
+    release: "9.77.0",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -66,7 +66,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.76.0",
+    version: "9.77.0",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -85,7 +85,7 @@ process.stdout.on("error", handleEpipe);
 process.stderr.on("error", handleEpipe);
 
 // src/index.ts
-import { Command as Command122 } from "commander";
+import { Command as Command137 } from "commander";
 
 // src/lib/network/proxy.ts
 import { EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
@@ -3410,6 +3410,8 @@ var scheduleResponseSchema = z20.object({
   id: z20.uuid(),
   composeId: z20.uuid(),
   composeName: z20.string(),
+  zeroAgentId: z20.uuid(),
+  agentName: z20.string(),
   orgSlug: z20.string(),
   userId: z20.string(),
   name: z20.string(),
@@ -12446,6 +12448,598 @@ var slackFirewall = {
   ]
 };
 
+// ../../packages/core/src/firewalls/vercel.generated.ts
+var vercelFirewall = {
+  name: "vercel",
+  description: "Vercel API",
+  placeholders: {
+    VERCEL_TOKEN: "vcp_Vm0PlaceHolder000000000000000000000000000000000000000000"
+  },
+  apis: [
+    {
+      base: "https://api.vercel.com",
+      auth: {
+        headers: {
+          Authorization: "Bearer ${{ secrets.VERCEL_TOKEN }}"
+        }
+      },
+      permissions: [
+        {
+          name: "unrestricted",
+          description: "Allow all endpoints",
+          rules: ["ANY /{path*}"]
+        },
+        {
+          name: "access-groups:read",
+          rules: [
+            "GET /v1/access-groups",
+            "GET /v1/access-groups/{accessGroupIdOrName}/projects/{projectId}",
+            "GET /v1/access-groups/{idOrName}",
+            "GET /v1/access-groups/{idOrName}/members",
+            "GET /v1/access-groups/{idOrName}/projects"
+          ]
+        },
+        {
+          name: "access-groups:write",
+          rules: [
+            "POST /v1/access-groups",
+            "POST /v1/access-groups/{accessGroupIdOrName}/projects",
+            "PATCH /v1/access-groups/{accessGroupIdOrName}/projects/{projectId}",
+            "DELETE /v1/access-groups/{accessGroupIdOrName}/projects/{projectId}",
+            "POST /v1/access-groups/{idOrName}",
+            "DELETE /v1/access-groups/{idOrName}"
+          ]
+        },
+        {
+          name: "aliases:read",
+          rules: [
+            "GET /v2/deployments/{id}/aliases",
+            "GET /v4/aliases",
+            "GET /v4/aliases/{idOrAlias}"
+          ]
+        },
+        {
+          name: "aliases:write",
+          rules: [
+            "PATCH /aliases/{id}/protection-bypass",
+            "DELETE /v2/aliases/{aliasId}",
+            "POST /v2/deployments/{id}/aliases"
+          ]
+        },
+        {
+          name: "artifacts:read",
+          rules: [
+            "GET /v8/artifacts/status",
+            "GET /v8/artifacts/{hash}",
+            "HEAD /v8/artifacts/{hash}"
+          ]
+        },
+        {
+          name: "artifacts:write",
+          rules: [
+            "POST /v8/artifacts",
+            "POST /v8/artifacts/events",
+            "PUT /v8/artifacts/{hash}"
+          ]
+        },
+        {
+          name: "authentication:read",
+          rules: ["GET /v5/user/tokens", "GET /v5/user/tokens/{tokenId}"]
+        },
+        {
+          name: "authentication:write",
+          rules: ["POST /v3/user/tokens", "DELETE /v3/user/tokens/{tokenId}"]
+        },
+        {
+          name: "billing:read",
+          rules: [
+            "GET /v1/billing/charges",
+            "GET /v1/billing/contract-commitments"
+          ]
+        },
+        {
+          name: "billing:write",
+          rules: ["POST /v1/billing/buy"]
+        },
+        {
+          name: "bulk-redirects:read",
+          rules: ["GET /v1/bulk-redirects", "GET /v1/bulk-redirects/versions"]
+        },
+        {
+          name: "bulk-redirects:write",
+          rules: [
+            "PUT /v1/bulk-redirects",
+            "PATCH /v1/bulk-redirects",
+            "DELETE /v1/bulk-redirects",
+            "POST /v1/bulk-redirects/restore",
+            "POST /v1/bulk-redirects/versions"
+          ]
+        },
+        {
+          name: "certs:read",
+          rules: ["GET /v8/certs/{id}"]
+        },
+        {
+          name: "certs:write",
+          rules: ["POST /v8/certs", "PUT /v8/certs", "DELETE /v8/certs/{id}"]
+        },
+        {
+          name: "checks-v2:read",
+          rules: [
+            "GET /v2/deployments/{deploymentId}/check-runs",
+            "GET /v2/deployments/{deploymentId}/check-runs/{checkRunId}",
+            "GET /v2/projects/{projectIdOrName}/checks",
+            "GET /v2/projects/{projectIdOrName}/checks/{checkId}",
+            "GET /v2/projects/{projectIdOrName}/checks/{checkId}/runs"
+          ]
+        },
+        {
+          name: "checks-v2:write",
+          rules: [
+            "POST /v2/deployments/{deploymentId}/check-runs",
+            "PATCH /v2/deployments/{deploymentId}/check-runs/{checkRunId}",
+            "POST /v2/projects/{projectIdOrName}/checks",
+            "PATCH /v2/projects/{projectIdOrName}/checks/{checkId}",
+            "DELETE /v2/projects/{projectIdOrName}/checks/{checkId}"
+          ]
+        },
+        {
+          name: "checks:read",
+          rules: [
+            "GET /v1/deployments/{deploymentId}/checks",
+            "GET /v1/deployments/{deploymentId}/checks/{checkId}"
+          ]
+        },
+        {
+          name: "checks:write",
+          rules: [
+            "POST /v1/deployments/{deploymentId}/checks",
+            "PATCH /v1/deployments/{deploymentId}/checks/{checkId}",
+            "POST /v1/deployments/{deploymentId}/checks/{checkId}/rerequest"
+          ]
+        },
+        {
+          name: "connect:read",
+          rules: [
+            "GET /v1/connect/networks",
+            "GET /v1/connect/networks/{networkId}"
+          ]
+        },
+        {
+          name: "connect:write",
+          rules: [
+            "POST /v1/connect/networks",
+            "PATCH /v1/connect/networks/{networkId}",
+            "DELETE /v1/connect/networks/{networkId}",
+            "PATCH /v1/projects/{idOrName}/shared-connect-links"
+          ]
+        },
+        {
+          name: "deployments:read",
+          rules: [
+            "GET /v13/deployments/{idOrUrl}",
+            "GET /v3/deployments/{idOrUrl}/events",
+            "GET /v6/deployments",
+            "GET /v6/deployments/{id}/files",
+            "GET /v8/deployments/{id}/files/{fileId}"
+          ]
+        },
+        {
+          name: "deployments:write",
+          rules: [
+            "PATCH /v1/deployments/{deploymentId}/integrations/{integrationConfigurationId}/resources/{resourceId}/actions/{action}",
+            "PATCH /v12/deployments/{id}/cancel",
+            "POST /v13/deployments",
+            "DELETE /v13/deployments/{id}",
+            "POST /v2/files"
+          ]
+        },
+        {
+          name: "dns:read",
+          rules: ["GET /v5/domains/{domain}/records"]
+        },
+        {
+          name: "dns:write",
+          rules: [
+            "PATCH /v1/domains/records/{recordId}",
+            "POST /v2/domains/{domain}/records",
+            "DELETE /v2/domains/{domain}/records/{recordId}"
+          ]
+        },
+        {
+          name: "domains-registrar:read",
+          rules: [
+            "GET /v1/registrar/domains/{domain}/auth-code",
+            "GET /v1/registrar/domains/{domain}/availability",
+            "GET /v1/registrar/domains/{domain}/contact-info/schema",
+            "GET /v1/registrar/domains/{domain}/price",
+            "GET /v1/registrar/domains/{domain}/transfer",
+            "GET /v1/registrar/orders/{orderId}",
+            "GET /v1/registrar/tlds/supported",
+            "GET /v1/registrar/tlds/{tld}",
+            "GET /v1/registrar/tlds/{tld}/price"
+          ]
+        },
+        {
+          name: "domains-registrar:write",
+          rules: [
+            "POST /v1/registrar/domains/availability",
+            "POST /v1/registrar/domains/buy",
+            "PATCH /v1/registrar/domains/{domain}/auto-renew",
+            "POST /v1/registrar/domains/{domain}/buy",
+            "PATCH /v1/registrar/domains/{domain}/nameservers",
+            "POST /v1/registrar/domains/{domain}/renew",
+            "POST /v1/registrar/domains/{domain}/transfer"
+          ]
+        },
+        {
+          name: "domains:read",
+          rules: [
+            "GET /v5/domains",
+            "GET /v5/domains/{domain}",
+            "GET /v6/domains/{domain}/config"
+          ]
+        },
+        {
+          name: "domains:write",
+          rules: [
+            "PATCH /v3/domains/{domain}",
+            "DELETE /v6/domains/{domain}",
+            "POST /v7/domains"
+          ]
+        },
+        {
+          name: "drains:read",
+          rules: ["GET /v1/drains", "GET /v1/drains/{id}"]
+        },
+        {
+          name: "drains:write",
+          rules: [
+            "POST /v1/drains",
+            "POST /v1/drains/test",
+            "PATCH /v1/drains/{id}",
+            "DELETE /v1/drains/{id}"
+          ]
+        },
+        {
+          name: "edge-cache:write",
+          rules: [
+            "POST /v1/edge-cache/dangerously-delete-by-src-images",
+            "POST /v1/edge-cache/dangerously-delete-by-tags",
+            "POST /v1/edge-cache/invalidate-by-src-images",
+            "POST /v1/edge-cache/invalidate-by-tags"
+          ]
+        },
+        {
+          name: "edge-config:read",
+          rules: [
+            "GET /v1/edge-config",
+            "GET /v1/edge-config/{edgeConfigId}",
+            "GET /v1/edge-config/{edgeConfigId}/backups",
+            "GET /v1/edge-config/{edgeConfigId}/backups/{edgeConfigBackupVersionId}",
+            "GET /v1/edge-config/{edgeConfigId}/item/{edgeConfigItemKey}",
+            "GET /v1/edge-config/{edgeConfigId}/items",
+            "GET /v1/edge-config/{edgeConfigId}/schema",
+            "GET /v1/edge-config/{edgeConfigId}/token/{token}",
+            "GET /v1/edge-config/{edgeConfigId}/tokens"
+          ]
+        },
+        {
+          name: "edge-config:write",
+          rules: [
+            "POST /v1/edge-config",
+            "PUT /v1/edge-config/{edgeConfigId}",
+            "DELETE /v1/edge-config/{edgeConfigId}",
+            "PATCH /v1/edge-config/{edgeConfigId}/items",
+            "POST /v1/edge-config/{edgeConfigId}/schema",
+            "DELETE /v1/edge-config/{edgeConfigId}/schema",
+            "POST /v1/edge-config/{edgeConfigId}/token",
+            "DELETE /v1/edge-config/{edgeConfigId}/tokens"
+          ]
+        },
+        {
+          name: "environment:read",
+          rules: [
+            "GET /v1/env",
+            "GET /v1/env/{id}",
+            "GET /v9/projects/{idOrName}/custom-environments",
+            "GET /v9/projects/{idOrName}/custom-environments/{environmentSlugOrId}"
+          ]
+        },
+        {
+          name: "environment:write",
+          rules: [
+            "POST /v1/env",
+            "PATCH /v1/env",
+            "DELETE /v1/env",
+            "PATCH /v1/env/{id}/unlink/{projectId}",
+            "POST /v9/projects/{idOrName}/custom-environments",
+            "PATCH /v9/projects/{idOrName}/custom-environments/{environmentSlugOrId}",
+            "DELETE /v9/projects/{idOrName}/custom-environments/{environmentSlugOrId}"
+          ]
+        },
+        {
+          name: "feature-flags:read",
+          rules: [
+            "GET /v1/deployments/{deploymentId}/feature-flags",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/flags",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/flags/{flagIdOrSlug}",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/flags/{flagIdOrSlug}/versions",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/sdk-keys",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/segments",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/segments/{segmentIdOrSlug}",
+            "GET /v1/projects/{projectIdOrName}/feature-flags/settings",
+            "GET /v1/teams/{teamId}/feature-flags/flags",
+            "GET /v1/teams/{teamId}/feature-flags/settings"
+          ]
+        },
+        {
+          name: "feature-flags:write",
+          rules: [
+            "PUT /v1/projects/{projectIdOrName}/feature-flags/flags",
+            "PATCH /v1/projects/{projectIdOrName}/feature-flags/flags/{flagIdOrSlug}",
+            "DELETE /v1/projects/{projectIdOrName}/feature-flags/flags/{flagIdOrSlug}",
+            "PUT /v1/projects/{projectIdOrName}/feature-flags/sdk-keys",
+            "DELETE /v1/projects/{projectIdOrName}/feature-flags/sdk-keys/{hashKey}",
+            "PUT /v1/projects/{projectIdOrName}/feature-flags/segments",
+            "PATCH /v1/projects/{projectIdOrName}/feature-flags/segments/{segmentIdOrSlug}",
+            "DELETE /v1/projects/{projectIdOrName}/feature-flags/segments/{segmentIdOrSlug}",
+            "PATCH /v1/projects/{projectIdOrName}/feature-flags/settings"
+          ]
+        },
+        {
+          name: "integrations:read",
+          rules: [
+            "GET /v1/integrations/configuration/{id}",
+            "GET /v1/integrations/configuration/{id}/products",
+            "GET /v1/integrations/configurations",
+            "GET /v1/integrations/git-namespaces",
+            "GET /v1/integrations/integration/{integrationIdOrSlug}/products/{productIdOrSlug}/plans",
+            "GET /v1/integrations/search-repo"
+          ]
+        },
+        {
+          name: "integrations:write",
+          rules: [
+            "PATCH /v1/deployments/{deploymentId}/integrations/{integrationConfigurationId}/resources/{resourceId}/actions/{action}",
+            "DELETE /v1/integrations/configuration/{id}",
+            "POST /v1/integrations/installations/{integrationConfigurationId}/resources/{resourceId}/connections",
+            "POST /v1/storage/stores/integration/direct"
+          ]
+        },
+        {
+          name: "logDrains:read",
+          rules: [
+            "GET /v1/log-drains",
+            "GET /v1/log-drains/{id}",
+            "GET /v2/integrations/log-drains"
+          ]
+        },
+        {
+          name: "logDrains:write",
+          rules: [
+            "DELETE /v1/integrations/log-drains/{id}",
+            "POST /v1/log-drains",
+            "DELETE /v1/log-drains/{id}",
+            "POST /v2/integrations/log-drains"
+          ]
+        },
+        {
+          name: "logs:read",
+          rules: [
+            "GET /v1/projects/{projectId}/deployments/{deploymentId}/runtime-logs"
+          ]
+        },
+        {
+          name: "marketplace:read",
+          rules: [
+            "GET /v1/installations/{integrationConfigurationId}/account",
+            "GET /v1/installations/{integrationConfigurationId}/billing/invoices/{invoiceId}",
+            "GET /v1/installations/{integrationConfigurationId}/member/{memberId}",
+            "GET /v1/installations/{integrationConfigurationId}/resources",
+            "GET /v1/installations/{integrationConfigurationId}/resources/{resourceId}",
+            "GET /v1/installations/{integrationConfigurationId}/resources/{resourceId}/experimentation/edge-config",
+            "HEAD /v1/installations/{integrationConfigurationId}/resources/{resourceId}/experimentation/edge-config"
+          ]
+        },
+        {
+          name: "marketplace:write",
+          rules: [
+            "PATCH /v1/installations/{integrationConfigurationId}",
+            "POST /v1/installations/{integrationConfigurationId}/billing",
+            "POST /v1/installations/{integrationConfigurationId}/billing/balance",
+            "POST /v1/installations/{integrationConfigurationId}/billing/finalize",
+            "POST /v1/installations/{integrationConfigurationId}/billing/invoices",
+            "POST /v1/installations/{integrationConfigurationId}/billing/invoices/{invoiceId}/actions",
+            "POST /v1/installations/{integrationConfigurationId}/events",
+            "PUT /v1/installations/{integrationConfigurationId}/products/{integrationProductIdOrSlug}/resources/{resourceId}/secrets",
+            "PUT /v1/installations/{integrationConfigurationId}/resources/{resourceId}",
+            "PATCH /v1/installations/{integrationConfigurationId}/resources/{resourceId}",
+            "DELETE /v1/installations/{integrationConfigurationId}/resources/{resourceId}",
+            "PUT /v1/installations/{integrationConfigurationId}/resources/{resourceId}/experimentation/edge-config",
+            "POST /v1/installations/{integrationConfigurationId}/resources/{resourceId}/experimentation/items",
+            "PATCH /v1/installations/{integrationConfigurationId}/resources/{resourceId}/experimentation/items/{itemId}",
+            "DELETE /v1/installations/{integrationConfigurationId}/resources/{resourceId}/experimentation/items/{itemId}",
+            "PUT /v1/installations/{integrationConfigurationId}/resources/{resourceId}/secrets"
+          ]
+        },
+        {
+          name: "project-routes:read",
+          rules: [
+            "GET /v1/projects/{projectId}/routes",
+            "GET /v1/projects/{projectId}/routes/versions"
+          ]
+        },
+        {
+          name: "project-routes:write",
+          rules: [
+            "POST /v1/projects/{projectId}/routes",
+            "PUT /v1/projects/{projectId}/routes",
+            "DELETE /v1/projects/{projectId}/routes",
+            "POST /v1/projects/{projectId}/routes/generate",
+            "POST /v1/projects/{projectId}/routes/versions",
+            "PATCH /v1/projects/{projectId}/routes/{routeId}"
+          ]
+        },
+        {
+          name: "projectMembers:read",
+          rules: ["GET /v1/projects/{idOrName}/members"]
+        },
+        {
+          name: "projectMembers:write",
+          rules: [
+            "POST /v1/projects/{idOrName}/members",
+            "DELETE /v1/projects/{idOrName}/members/{uid}"
+          ]
+        },
+        {
+          name: "projects:read",
+          rules: [
+            "GET /v1/projects/{idOrName}/env/{id}",
+            "GET /v1/projects/{projectId}/promote/aliases",
+            "GET /v10/projects",
+            "GET /v10/projects/{idOrName}/env",
+            "GET /v9/projects/{idOrName}",
+            "GET /v9/projects/{idOrName}/domains",
+            "GET /v9/projects/{idOrName}/domains/{domain}"
+          ]
+        },
+        {
+          name: "projects:write",
+          rules: [
+            "PUT /projects/transfer-request/{code}",
+            "POST /projects/{idOrName}/transfer-request",
+            "POST /v1/projects/{idOrName}/domains/{domain}/move",
+            "DELETE /v1/projects/{idOrName}/env",
+            "PATCH /v1/projects/{idOrName}/protection-bypass",
+            "POST /v1/projects/{projectId}/pause",
+            "POST /v1/projects/{projectId}/rollback/{deploymentId}",
+            "POST /v1/projects/{projectId}/unpause",
+            "POST /v10/projects/{idOrName}/domains",
+            "POST /v10/projects/{idOrName}/env",
+            "POST /v10/projects/{projectId}/promote/{deploymentId}",
+            "POST /v11/projects",
+            "PATCH /v9/projects/{idOrName}",
+            "DELETE /v9/projects/{idOrName}",
+            "PATCH /v9/projects/{idOrName}/domains/{domain}",
+            "DELETE /v9/projects/{idOrName}/domains/{domain}",
+            "POST /v9/projects/{idOrName}/domains/{domain}/verify",
+            "PATCH /v9/projects/{idOrName}/env/{id}",
+            "DELETE /v9/projects/{idOrName}/env/{id}"
+          ]
+        },
+        {
+          name: "rolling-release:read",
+          rules: [
+            "GET /v1/projects/{idOrName}/rolling-release",
+            "GET /v1/projects/{idOrName}/rolling-release/billing",
+            "GET /v1/projects/{idOrName}/rolling-release/config"
+          ]
+        },
+        {
+          name: "rolling-release:write",
+          rules: [
+            "POST /v1/projects/{idOrName}/rolling-release/approve-stage",
+            "POST /v1/projects/{idOrName}/rolling-release/complete",
+            "PATCH /v1/projects/{idOrName}/rolling-release/config",
+            "DELETE /v1/projects/{idOrName}/rolling-release/config"
+          ]
+        },
+        {
+          name: "sandboxes:read",
+          rules: [
+            "GET /v1/sandboxes",
+            "GET /v1/sandboxes/snapshots",
+            "GET /v1/sandboxes/snapshots/{snapshotId}",
+            "GET /v1/sandboxes/{sandboxId}",
+            "GET /v1/sandboxes/{sandboxId}/cmd",
+            "GET /v1/sandboxes/{sandboxId}/cmd/{cmdId}",
+            "GET /v1/sandboxes/{sandboxId}/cmd/{cmdId}/logs"
+          ]
+        },
+        {
+          name: "sandboxes:write",
+          rules: [
+            "POST /v1/sandboxes",
+            "DELETE /v1/sandboxes/snapshots/{snapshotId}",
+            "POST /v1/sandboxes/{sandboxId}/cmd",
+            "POST /v1/sandboxes/{sandboxId}/extend-timeout",
+            "POST /v1/sandboxes/{sandboxId}/fs/mkdir",
+            "POST /v1/sandboxes/{sandboxId}/fs/read",
+            "POST /v1/sandboxes/{sandboxId}/fs/write",
+            "POST /v1/sandboxes/{sandboxId}/network-policy",
+            "POST /v1/sandboxes/{sandboxId}/snapshot",
+            "POST /v1/sandboxes/{sandboxId}/stop",
+            "POST /v1/sandboxes/{sandboxId}/{cmdId}/kill"
+          ]
+        },
+        {
+          name: "security:read",
+          rules: [
+            "GET /v1/security/firewall/attack-status",
+            "GET /v1/security/firewall/bypass",
+            "GET /v1/security/firewall/config/{configVersion}"
+          ]
+        },
+        {
+          name: "security:write",
+          rules: [
+            "POST /v1/security/attack-mode",
+            "POST /v1/security/firewall/bypass",
+            "DELETE /v1/security/firewall/bypass",
+            "PUT /v1/security/firewall/config",
+            "PATCH /v1/security/firewall/config"
+          ]
+        },
+        {
+          name: "static-ips:write",
+          rules: ["PATCH /v1/projects/{idOrName}/shared-connect-links"]
+        },
+        {
+          name: "teams:read",
+          rules: [
+            "GET /v1/teams/{teamId}/request/{userId}",
+            "GET /v2/teams",
+            "GET /v2/teams/{teamId}",
+            "GET /v3/teams/{teamId}/members"
+          ]
+        },
+        {
+          name: "teams:write",
+          rules: [
+            "POST /v1/teams",
+            "DELETE /v1/teams/{teamId}",
+            "POST /v1/teams/{teamId}/dsync-roles",
+            "DELETE /v1/teams/{teamId}/invites/{inviteId}",
+            "POST /v1/teams/{teamId}/members/teams/join",
+            "PATCH /v1/teams/{teamId}/members/{uid}",
+            "DELETE /v1/teams/{teamId}/members/{uid}",
+            "POST /v1/teams/{teamId}/request",
+            "PATCH /v2/teams/{teamId}",
+            "POST /v2/teams/{teamId}/members"
+          ]
+        },
+        {
+          name: "user:read",
+          rules: ["GET /v1/events/types", "GET /v2/user", "GET /v3/events"]
+        },
+        {
+          name: "user:write",
+          rules: ["DELETE /v1/user"]
+        },
+        {
+          name: "webhooks:read",
+          rules: ["GET /v1/webhooks", "GET /v1/webhooks/{id}"]
+        },
+        {
+          name: "webhooks:write",
+          rules: ["POST /v1/webhooks", "DELETE /v1/webhooks/{id}"]
+        }
+      ]
+    }
+  ]
+};
+
 // ../../packages/core/src/firewalls/index.ts
 var builtinFirewalls = {
   confluence: confluenceFirewall,
@@ -12458,7 +13052,8 @@ var builtinFirewalls = {
   "google-sheets": googleSheetsFirewall,
   jira: jiraFirewall,
   notion: notionFirewall,
-  slack: slackFirewall
+  slack: slackFirewall,
+  vercel: vercelFirewall
 };
 
 // ../../packages/core/src/firewall-loader.ts
@@ -13581,12 +14176,42 @@ var zeroRunAgentEventsContract = c33.router({
 // ../../packages/core/src/contracts/zero-schedules.ts
 import { z as z36 } from "zod";
 var c34 = initContract();
-var zeroSchedulesMainContract = c34.router({
-  deploy: {
-    method: "POST",
-    path: "/api/zero/schedules",
+var zeroDeployScheduleRequestSchema = z36.object({
+  name: z36.string().min(1).max(64, "Schedule name max 64 chars"),
+  cronExpression: z36.string().optional(),
+  atTime: z36.string().optional(),
+  intervalSeconds: z36.number().int().min(0).optional(),
+  timezone: z36.string().default("UTC"),
+  prompt: z36.string().min(1, "Prompt required"),
+  description: z36.string().optional(),
+  appendSystemPrompt: z36.string().optional(),
+  artifactName: z36.string().optional(),
+  artifactVersion: z36.string().optional(),
+  volumeVersions: z36.record(z36.string(), z36.string()).optional(),
+  // Resolved zero agent ID (platform resolves org/name → zeroAgentId)
+  zeroAgentId: z36.string().uuid("Invalid agent ID"),
+  enabled: z36.boolean().optional(),
+  notifyEmail: z36.boolean().optional(),
+  notifySlack: z36.boolean().optional()
+}).refine(
+  (data) => {
+    const triggers = [
+      data.cronExpression,
+      data.atTime,
+      data.intervalSeconds
+    ].filter((v) => v !== void 0);
+    return triggers.length === 1;
+  },
+  {
+    message: "Exactly one of 'cronExpression', 'atTime', or 'intervalSeconds' must be specified"
+  }
+);
+var zeroSchedulesMainContract = c34.router({
+  deploy: {
+    method: "POST",
+    path: "/api/zero/schedules",
     headers: authHeadersSchema,
-    body: deployScheduleRequestSchema,
+    body: zeroDeployScheduleRequestSchema,
     responses: {
       200: deployScheduleResponseSchema,
       201: deployScheduleResponseSchema,
@@ -13618,7 +14243,7 @@ var zeroSchedulesByNameContract = c34.router({
       name: z36.string().min(1, "Schedule name required")
     }),
     query: z36.object({
-      composeId: z36.string().uuid("Compose ID required")
+      zeroAgentId: z36.string().uuid("Agent ID required")
     }),
     responses: {
       204: c34.noBody(),
@@ -13638,7 +14263,7 @@ var zeroSchedulesEnableContract = c34.router({
       name: z36.string().min(1, "Schedule name required")
     }),
     body: z36.object({
-      composeId: z36.string().uuid("Compose ID required")
+      zeroAgentId: z36.string().uuid("Agent ID required")
     }),
     responses: {
       200: scheduleResponseSchema,
@@ -13657,7 +14282,7 @@ var zeroSchedulesEnableContract = c34.router({
       name: z36.string().min(1, "Schedule name required")
     }),
     body: z36.object({
-      composeId: z36.string().uuid("Compose ID required")
+      zeroAgentId: z36.string().uuid("Agent ID required")
     }),
     responses: {
       200: scheduleResponseSchema,
@@ -14709,7 +15334,7 @@ function getConfigPath() {
   return join2(homedir2(), ".vm0", "config.json");
 }
 var infoCommand = new Command6().name("info").description("Display environment and debug information").action(async () => {
-  console.log(chalk4.bold(`VM0 CLI v${"9.76.0"}`));
+  console.log(chalk4.bold(`VM0 CLI v${"9.77.0"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -15566,11 +16191,75 @@ async function deleteZeroOrg(slug) {
   handleError(result, "Failed to delete organization");
 }
 
-// src/lib/api/domains/zero-org-secrets.ts
+// src/lib/api/domains/zero-secrets.ts
 import { initClient as initClient15 } from "@ts-rest/core";
-async function listZeroOrgSecrets() {
+async function listZeroSecrets() {
+  const config = await getClientConfig();
+  const client = initClient15(zeroSecretsContract, config);
+  const result = await client.list({ headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to list secrets");
+}
+async function setZeroSecret(body) {
   const config = await getClientConfig();
   const client = initClient15(zeroSecretsContract, config);
+  const result = await client.set({ body });
+  if (result.status === 200 || result.status === 201) {
+    return result.body;
+  }
+  handleError(result, "Failed to set secret");
+}
+async function deleteZeroSecret(name) {
+  const config = await getClientConfig();
+  const client = initClient15(zeroSecretsByNameContract, config);
+  const result = await client.delete({
+    params: { name }
+  });
+  if (result.status === 204) {
+    return;
+  }
+  handleError(result, `Secret "${name}" not found`);
+}
+
+// src/lib/api/domains/zero-variables.ts
+import { initClient as initClient16 } from "@ts-rest/core";
+async function listZeroVariables() {
+  const config = await getClientConfig();
+  const client = initClient16(zeroVariablesContract, config);
+  const result = await client.list({ headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to list variables");
+}
+async function setZeroVariable(body) {
+  const config = await getClientConfig();
+  const client = initClient16(zeroVariablesContract, config);
+  const result = await client.set({ body });
+  if (result.status === 200 || result.status === 201) {
+    return result.body;
+  }
+  handleError(result, "Failed to set variable");
+}
+async function deleteZeroVariable(name) {
+  const config = await getClientConfig();
+  const client = initClient16(zeroVariablesByNameContract, config);
+  const result = await client.delete({
+    params: { name }
+  });
+  if (result.status === 204) {
+    return;
+  }
+  handleError(result, `Variable "${name}" not found`);
+}
+
+// src/lib/api/domains/zero-org-secrets.ts
+import { initClient as initClient17 } from "@ts-rest/core";
+async function listZeroOrgSecrets() {
+  const config = await getClientConfig();
+  const client = initClient17(zeroSecretsContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -15579,7 +16268,7 @@ async function listZeroOrgSecrets() {
 }
 async function setZeroOrgSecret(body) {
   const config = await getClientConfig();
-  const client = initClient15(zeroSecretsContract, config);
+  const client = initClient17(zeroSecretsContract, config);
   const result = await client.set({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -15588,7 +16277,7 @@ async function setZeroOrgSecret(body) {
 }
 async function deleteZeroOrgSecret(name) {
   const config = await getClientConfig();
-  const client = initClient15(zeroSecretsByNameContract, config);
+  const client = initClient17(zeroSecretsByNameContract, config);
   const result = await client.delete({
     params: { name }
   });
@@ -15599,10 +16288,10 @@ async function deleteZeroOrgSecret(name) {
 }
 
 // src/lib/api/domains/zero-org-variables.ts
-import { initClient as initClient16 } from "@ts-rest/core";
+import { initClient as initClient18 } from "@ts-rest/core";
 async function listZeroOrgVariables() {
   const config = await getClientConfig();
-  const client = initClient16(zeroVariablesContract, config);
+  const client = initClient18(zeroVariablesContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -15611,7 +16300,7 @@ async function listZeroOrgVariables() {
 }
 async function setZeroOrgVariable(body) {
   const config = await getClientConfig();
-  const client = initClient16(zeroVariablesContract, config);
+  const client = initClient18(zeroVariablesContract, config);
   const result = await client.set({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -15620,7 +16309,7 @@ async function setZeroOrgVariable(body) {
 }
 async function deleteZeroOrgVariable(name) {
   const config = await getClientConfig();
-  const client = initClient16(zeroVariablesByNameContract, config);
+  const client = initClient18(zeroVariablesByNameContract, config);
   const result = await client.delete({
     params: { name }
   });
@@ -15631,10 +16320,10 @@ async function deleteZeroOrgVariable(name) {
 }
 
 // src/lib/api/domains/zero-org-model-providers.ts
-import { initClient as initClient17 } from "@ts-rest/core";
+import { initClient as initClient19 } from "@ts-rest/core";
 async function listZeroOrgModelProviders() {
   const config = await getClientConfig();
-  const client = initClient17(zeroModelProvidersMainContract, config);
+  const client = initClient19(zeroModelProvidersMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -15643,7 +16332,7 @@ async function listZeroOrgModelProviders() {
 }
 async function upsertZeroOrgModelProvider(body) {
   const config = await getClientConfig();
-  const client = initClient17(zeroModelProvidersMainContract, config);
+  const client = initClient19(zeroModelProvidersMainContract, config);
   const result = await client.upsert({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -15652,7 +16341,7 @@ async function upsertZeroOrgModelProvider(body) {
 }
 async function deleteZeroOrgModelProvider(type2) {
   const config = await getClientConfig();
-  const client = initClient17(zeroModelProvidersByTypeContract, config);
+  const client = initClient19(zeroModelProvidersByTypeContract, config);
   const result = await client.delete({
     params: { type: type2 }
   });
@@ -15663,7 +16352,7 @@ async function deleteZeroOrgModelProvider(type2) {
 }
 async function setZeroOrgModelProviderDefault(type2) {
   const config = await getClientConfig();
-  const client = initClient17(zeroModelProvidersDefaultContract, config);
+  const client = initClient19(zeroModelProvidersDefaultContract, config);
   const result = await client.setDefault({
     params: { type: type2 }
   });
@@ -15674,7 +16363,7 @@ async function setZeroOrgModelProviderDefault(type2) {
 }
 async function updateZeroOrgModelProviderModel(type2, selectedModel) {
   const config = await getClientConfig();
-  const client = initClient17(zeroModelProvidersUpdateModelContract, config);
+  const client = initClient19(zeroModelProvidersUpdateModelContract, config);
   const result = await client.updateModel({
     params: { type: type2 },
     body: { selectedModel }
@@ -15686,52 +16375,52 @@ async function updateZeroOrgModelProviderModel(type2, selectedModel) {
 }
 
 // src/lib/api/domains/zero-agents.ts
-import { initClient as initClient18 } from "@ts-rest/core";
+import { initClient as initClient20 } from "@ts-rest/core";
 async function createZeroAgent(body) {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentsMainContract, config);
+  const client = initClient20(zeroAgentsMainContract, config);
   const result = await client.create({ body });
   if (result.status === 201) return result.body;
   handleError(result, "Failed to create zero agent");
 }
 async function listZeroAgents() {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentsMainContract, config);
+  const client = initClient20(zeroAgentsMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) return result.body;
   handleError(result, "Failed to list zero agents");
 }
 async function getZeroAgent(name) {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentsByNameContract, config);
+  const client = initClient20(zeroAgentsByNameContract, config);
   const result = await client.get({ params: { name } });
   if (result.status === 200) return result.body;
   handleError(result, `Zero agent "${name}" not found`);
 }
 async function updateZeroAgent(name, body) {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentsByNameContract, config);
+  const client = initClient20(zeroAgentsByNameContract, config);
   const result = await client.update({ params: { name }, body });
   if (result.status === 200) return result.body;
   handleError(result, `Failed to update zero agent "${name}"`);
 }
 async function deleteZeroAgent(name) {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentsByNameContract, config);
+  const client = initClient20(zeroAgentsByNameContract, config);
   const result = await client.delete({ params: { name } });
   if (result.status === 204) return;
   handleError(result, `Zero agent "${name}" not found`);
 }
 async function getZeroAgentInstructions(name) {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentInstructionsContract, config);
+  const client = initClient20(zeroAgentInstructionsContract, config);
   const result = await client.get({ params: { name } });
   if (result.status === 200) return result.body;
   handleError(result, `Failed to get instructions for zero agent "${name}"`);
 }
 async function updateZeroAgentInstructions(name, content) {
   const config = await getClientConfig();
-  const client = initClient18(zeroAgentInstructionsContract, config);
+  const client = initClient20(zeroAgentInstructionsContract, config);
   const result = await client.update({
     params: { name },
     body: { content }
@@ -15740,6 +16429,87 @@ async function updateZeroAgentInstructions(name, content) {
   handleError(result, `Failed to update instructions for zero agent "${name}"`);
 }
 
+// src/lib/api/domains/zero-schedules.ts
+import { initClient as initClient21 } from "@ts-rest/core";
+async function deployZeroSchedule(body) {
+  const config = await getClientConfig();
+  const client = initClient21(zeroSchedulesMainContract, config);
+  const result = await client.deploy({ body });
+  if (result.status === 200 || result.status === 201) {
+    return result.body;
+  }
+  handleError(result, "Failed to deploy schedule");
+}
+async function listZeroSchedules() {
+  const config = await getClientConfig();
+  const client = initClient21(zeroSchedulesMainContract, config);
+  const result = await client.list({ headers: {} });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, "Failed to list schedules");
+}
+async function deleteZeroSchedule(params) {
+  const config = await getClientConfig();
+  const client = initClient21(zeroSchedulesByNameContract, config);
+  const result = await client.delete({
+    params: { name: params.name },
+    query: { zeroAgentId: params.zeroAgentId }
+  });
+  if (result.status === 204) {
+    return;
+  }
+  handleError(result, `Schedule "${params.name}" not found on remote`);
+}
+async function enableZeroSchedule(params) {
+  const config = await getClientConfig();
+  const client = initClient21(zeroSchedulesEnableContract, config);
+  const result = await client.enable({
+    params: { name: params.name },
+    body: { zeroAgentId: params.zeroAgentId }
+  });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, `Failed to enable schedule "${params.name}"`);
+}
+async function disableZeroSchedule(params) {
+  const config = await getClientConfig();
+  const client = initClient21(zeroSchedulesEnableContract, config);
+  const result = await client.disable({
+    params: { name: params.name },
+    body: { zeroAgentId: params.zeroAgentId }
+  });
+  if (result.status === 200) {
+    return result.body;
+  }
+  handleError(result, `Failed to disable schedule "${params.name}"`);
+}
+async function resolveZeroScheduleByAgent(agentName, scheduleName) {
+  const { schedules } = await listZeroSchedules();
+  const agentSchedules = schedules.filter((s) => s.agentName === agentName);
+  if (agentSchedules.length === 0) {
+    throw new Error(`No schedule found for agent "${agentName}"`);
+  }
+  if (scheduleName) {
+    const match = agentSchedules.find((s) => s.name === scheduleName);
+    if (!match) {
+      const available2 = agentSchedules.map((s) => s.name).join(", ");
+      throw new Error(
+        `Schedule "${scheduleName}" not found for agent "${agentName}". Available schedules: ${available2}`
+      );
+    }
+    return match;
+  }
+  if (agentSchedules.length === 1) {
+    return agentSchedules[0];
+  }
+  const available = agentSchedules.map((s) => s.name).join(", ");
+  throw new Error(
+    `Agent "${agentName}" has multiple schedules. Use --name to specify which one: ${available}`
+  );
+}
+
 // src/lib/domain/yaml-validator.ts
 import { z as z43 } from "zod";
 var cliAgentNameSchema = z43.string().min(3, "Agent name must be at least 3 characters").max(64, "Agent name must be 64 characters or less").regex(
@@ -17012,7 +17782,7 @@ var composeCommand = new Command7().name("compose").description("Create or updat
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.76.0");
+        await startSilentUpgrade("9.77.0");
       }
       try {
         let result;
@@ -17847,7 +18617,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.76.0");
+        await startSilentUpgrade("9.77.0");
       }
       const { org, name, version } = parseIdentifier(identifier);
       let composeId;
@@ -19603,7 +20373,7 @@ var cookAction = new Command35().name("cook").description("Quick start: prepare,
   withErrorHandler(
     async (prompt, options) => {
       if (options.autoUpdate !== false) {
-        const shouldExit = await checkAndUpgrade("9.76.0", prompt);
+        const shouldExit = await checkAndUpgrade("9.77.0", prompt);
         if (shouldExit) {
           process.exit(0);
         }
@@ -19789,7 +20559,7 @@ import { Command as Command40 } from "commander";
 import chalk36 from "chalk";
 
 // src/lib/api/api-client.ts
-import { initClient as initClient19 } from "@ts-rest/core";
+import { initClient as initClient22 } from "@ts-rest/core";
 var ApiClient = class {
   async getHeaders() {
     const token = await getActiveToken();
@@ -19815,7 +20585,7 @@ var ApiClient = class {
   async getComposeByName(name, org) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(composesMainContract, {
+    const client = initClient22(composesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -19836,7 +20606,7 @@ var ApiClient = class {
   async getComposeById(id) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(composesByIdContract, {
+    const client = initClient22(composesByIdContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -19858,7 +20628,7 @@ var ApiClient = class {
   async getComposeVersion(composeId, version) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(composesVersionsContract, {
+    const client = initClient22(composesVersionsContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -19879,7 +20649,7 @@ var ApiClient = class {
   async createOrUpdateCompose(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(composesMainContract, {
+    const client = initClient22(composesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -19902,7 +20672,7 @@ var ApiClient = class {
   async createRun(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(runsMainContract, {
+    const client = initClient22(runsMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -19917,7 +20687,7 @@ var ApiClient = class {
   }
   async getEvents(runId, options) {
     const config = await getClientConfig();
-    const client = initClient19(runEventsContract, config);
+    const client = initClient22(runEventsContract, config);
     const result = await client.getEvents({
       params: { id: runId },
       query: {
@@ -19934,7 +20704,7 @@ var ApiClient = class {
   }
   async getSystemLog(runId, options) {
     const config = await getClientConfig();
-    const client = initClient19(runSystemLogContract, config);
+    const client = initClient22(runSystemLogContract, config);
     const result = await client.getSystemLog({
       params: { id: runId },
       query: {
@@ -19952,7 +20722,7 @@ var ApiClient = class {
   }
   async getMetrics(runId, options) {
     const config = await getClientConfig();
-    const client = initClient19(runMetricsContract, config);
+    const client = initClient22(runMetricsContract, config);
     const result = await client.getMetrics({
       params: { id: runId },
       query: {
@@ -19970,7 +20740,7 @@ var ApiClient = class {
   }
   async getAgentEvents(runId, options) {
     const config = await getClientConfig();
-    const client = initClient19(runAgentEventsContract, config);
+    const client = initClient22(runAgentEventsContract, config);
     const result = await client.getAgentEvents({
       params: { id: runId },
       query: {
@@ -19988,7 +20758,7 @@ var ApiClient = class {
   }
   async getNetworkLogs(runId, options) {
     const config = await getClientConfig();
-    const client = initClient19(runNetworkLogsContract, config);
+    const client = initClient22(runNetworkLogsContract, config);
     const result = await client.getNetworkLogs({
       params: { id: runId },
       query: {
@@ -20010,7 +20780,7 @@ var ApiClient = class {
   async getOrg() {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(orgContract, {
+    const client = initClient22(orgContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20029,7 +20799,7 @@ var ApiClient = class {
   async updateOrg(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(orgContract, {
+    const client = initClient22(orgContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20049,7 +20819,7 @@ var ApiClient = class {
   async getSession(sessionId) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(sessionsByIdContract, {
+    const client = initClient22(sessionsByIdContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20070,7 +20840,7 @@ var ApiClient = class {
    */
   async getCheckpoint(checkpointId) {
     const config = await getClientConfig();
-    const client = initClient19(checkpointsByIdContract, config);
+    const client = initClient22(checkpointsByIdContract, config);
     const result = await client.getById({
       params: { id: checkpointId }
     });
@@ -20087,7 +20857,7 @@ var ApiClient = class {
   async prepareStorage(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(storagesPrepareContract, {
+    const client = initClient22(storagesPrepareContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20106,7 +20876,7 @@ var ApiClient = class {
   async commitStorage(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(storagesCommitContract, {
+    const client = initClient22(storagesCommitContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20125,7 +20895,7 @@ var ApiClient = class {
   async getStorageDownload(query) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(storagesDownloadContract, {
+    const client = initClient22(storagesDownloadContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20150,7 +20920,7 @@ var ApiClient = class {
   async listStorages(query) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(storagesListContract, {
+    const client = initClient22(storagesListContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20170,7 +20940,7 @@ var ApiClient = class {
   async deploySchedule(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(schedulesMainContract, {
+    const client = initClient22(schedulesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20189,7 +20959,7 @@ var ApiClient = class {
   async listSchedules() {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(schedulesMainContract, {
+    const client = initClient22(schedulesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20208,7 +20978,7 @@ var ApiClient = class {
   async getScheduleByName(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(schedulesByNameContract, {
+    const client = initClient22(schedulesByNameContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20230,7 +21000,7 @@ var ApiClient = class {
   async deleteSchedule(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(schedulesByNameContract, {
+    const client = initClient22(schedulesByNameContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20252,7 +21022,7 @@ var ApiClient = class {
   async enableSchedule(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(schedulesEnableContract, {
+    const client = initClient22(schedulesEnableContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20274,7 +21044,7 @@ var ApiClient = class {
   async disableSchedule(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(schedulesDisableContract, {
+    const client = initClient22(schedulesDisableContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20296,7 +21066,7 @@ var ApiClient = class {
   async listScheduleRuns(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient19(scheduleRunsContract, {
+    const client = initClient22(scheduleRunsContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -20384,7 +21154,7 @@ var ApiClient = class {
   }
   async searchLogs(options) {
     const config = await getClientConfig();
-    const client = initClient19(logsSearchContract, config);
+    const client = initClient22(logsSearchContract, config);
     const result = await client.searchLogs({
       query: {
         keyword: options.keyword,
@@ -23490,7 +24260,7 @@ import { Command as Command88 } from "commander";
 // src/commands/connector/connect.ts
 import { Command as Command84 } from "commander";
 import chalk74 from "chalk";
-import { initClient as initClient20 } from "@ts-rest/core";
+import { initClient as initClient23 } from "@ts-rest/core";
 
 // src/commands/connector/lib/computer/start-services.ts
 import { spawn as spawn2 } from "child_process";
@@ -23737,7 +24507,7 @@ async function connectViaApiToken(connectorType, tokenValue) {
 async function connectComputer(apiUrl, headers) {
   await checkComputerDependencies();
   console.log(chalk74.cyan("Setting up computer connector..."));
-  const computerClient = initClient20(computerConnectorContract, {
+  const computerClient = initClient23(computerConnectorContract, {
     baseUrl: apiUrl,
     baseHeaders: headers,
     jsonQuery: false
@@ -23793,7 +24563,7 @@ async function resolveAuthMethod(connectorType, tokenFlag) {
 }
 async function connectViaOAuth(connectorType, apiUrl, headers) {
   console.log(`Connecting ${chalk74.cyan(connectorType)}...`);
-  const sessionsClient = initClient20(connectorSessionsContract, {
+  const sessionsClient = initClient23(connectorSessionsContract, {
     baseUrl: apiUrl,
     baseHeaders: headers,
     jsonQuery: false
@@ -23816,7 +24586,7 @@ To connect, visit: ${verificationUrl}`));
 The session expires in ${Math.floor(session.expiresIn / 60)} minutes.`
   );
   console.log("\nWaiting for authorization...");
-  const sessionClient = initClient20(connectorSessionByIdContract, {
+  const sessionClient = initClient23(connectorSessionByIdContract, {
     baseUrl: apiUrl,
     baseHeaders: headers,
     jsonQuery: false
@@ -24156,13 +24926,13 @@ var upgradeCommand = new Command90().name("upgrade").description("Upgrade vm0 CL
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.76.0") {
-      console.log(chalk79.green(`\u2713 Already up to date (${"9.76.0"})`));
+    if (latestVersion === "9.77.0") {
+      console.log(chalk79.green(`\u2713 Already up to date (${"9.77.0"})`));
       return;
     }
     console.log(
       chalk79.yellow(
-        `Current version: ${"9.76.0"} -> Latest version: ${latestVersion}`
+        `Current version: ${"9.77.0"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -24189,7 +24959,7 @@ var upgradeCommand = new Command90().name("upgrade").description("Upgrade vm0 CL
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        chalk79.green(`\u2713 Upgraded from ${"9.76.0"} to ${latestVersion}`)
+        chalk79.green(`\u2713 Upgraded from ${"9.77.0"} to ${latestVersion}`)
       );
       return;
     }
@@ -24262,7 +25032,7 @@ var whoamiCommand = new Command91().name("whoami").description("Show current ide
 );
 
 // src/commands/zero/index.ts
-import { Command as Command121 } from "commander";
+import { Command as Command136 } from "commander";
 
 // src/commands/zero/org/index.ts
 import { Command as Command114 } from "commander";
@@ -25097,12 +25867,983 @@ var deleteCommand6 = new Command119().name("delete").alias("rm").description("De
 // src/commands/zero/agent/index.ts
 var agentCommand2 = new Command120("agent").description("Manage zero agents").addCommand(createCommand).addCommand(editCommand).addCommand(viewCommand).addCommand(listCommand18).addCommand(deleteCommand6);
 
+// src/commands/zero/schedule/index.ts
+import { Command as Command127 } from "commander";
+
+// src/commands/zero/schedule/setup.ts
+import { Command as Command121 } from "commander";
+import chalk105 from "chalk";
+var FREQUENCY_CHOICES2 = [
+  { title: "Daily", value: "daily", description: "Run every day" },
+  {
+    title: "Weekly",
+    value: "weekly",
+    description: "Run once per week"
+  },
+  {
+    title: "Monthly",
+    value: "monthly",
+    description: "Run once per month"
+  },
+  {
+    title: "One-time",
+    value: "once",
+    description: "Run once at specific time"
+  },
+  {
+    title: "Loop",
+    value: "loop",
+    description: "Run repeatedly at fixed intervals"
+  }
+];
+var DAY_OF_WEEK_CHOICES2 = [
+  { title: "Monday", value: 1 },
+  { title: "Tuesday", value: 2 },
+  { title: "Wednesday", value: 3 },
+  { title: "Thursday", value: 4 },
+  { title: "Friday", value: 5 },
+  { title: "Saturday", value: 6 },
+  { title: "Sunday", value: 0 }
+];
+function parseDayOption2(day, frequency) {
+  if (frequency === "weekly") {
+    const dayMap = {
+      sun: 0,
+      mon: 1,
+      tue: 2,
+      wed: 3,
+      thu: 4,
+      fri: 5,
+      sat: 6
+    };
+    return dayMap[day.toLowerCase()];
+  } else if (frequency === "monthly") {
+    const num = parseInt(day, 10);
+    if (num >= 1 && num <= 31) {
+      return num;
+    }
+  }
+  return void 0;
+}
+function formatInTimezone2(isoDate, timezone) {
+  const date = new Date(isoDate);
+  const parts = new Intl.DateTimeFormat("en-CA", {
+    timeZone: timezone,
+    year: "numeric",
+    month: "2-digit",
+    day: "2-digit",
+    hour: "2-digit",
+    minute: "2-digit",
+    hour12: false
+  }).formatToParts(date);
+  const get = (type2) => parts.find((p) => p.type === type2)?.value ?? "";
+  return `${get("year")}-${get("month")}-${get("day")} ${get("hour")}:${get("minute")}`;
+}
+function parseFrequencyFromCron2(cron) {
+  const parts = cron.split(" ");
+  if (parts.length !== 5) return null;
+  const [minute, hour, dayOfMonth, , dayOfWeek] = parts;
+  const time = `${hour.padStart(2, "0")}:${minute.padStart(2, "0")}`;
+  if (dayOfMonth === "*" && dayOfWeek === "*") {
+    return { frequency: "daily", time };
+  } else if (dayOfMonth === "*" && dayOfWeek !== "*") {
+    return { frequency: "weekly", day: parseInt(dayOfWeek, 10), time };
+  } else if (dayOfMonth !== "*" && dayOfWeek === "*") {
+    return { frequency: "monthly", day: parseInt(dayOfMonth, 10), time };
+  }
+  return null;
+}
+function getExistingDefaults2(existingSchedule) {
+  const defaults = {};
+  if (existingSchedule?.triggerType === "loop") {
+    defaults.frequency = "loop";
+    defaults.intervalSeconds = existingSchedule.intervalSeconds ?? void 0;
+  } else if (existingSchedule?.cronExpression) {
+    const parsed = parseFrequencyFromCron2(existingSchedule.cronExpression);
+    if (parsed) {
+      defaults.frequency = parsed.frequency;
+      defaults.day = parsed.day;
+      defaults.time = parsed.time;
+    }
+  } else if (existingSchedule?.atTime) {
+    defaults.frequency = "once";
+  }
+  return defaults;
+}
+async function gatherFrequency2(optionFrequency, existingFrequency) {
+  let frequency = optionFrequency;
+  if (frequency && ["daily", "weekly", "monthly", "once", "loop"].includes(frequency)) {
+    return frequency;
+  }
+  if (!isInteractive()) {
+    throw new Error("--frequency is required (daily|weekly|monthly|once|loop)");
+  }
+  const defaultIndex = existingFrequency ? FREQUENCY_CHOICES2.findIndex((c42) => c42.value === existingFrequency) : 0;
+  frequency = await promptSelect(
+    "Schedule frequency",
+    FREQUENCY_CHOICES2,
+    defaultIndex >= 0 ? defaultIndex : 0
+  );
+  return frequency || null;
+}
+async function gatherDay2(frequency, optionDay, existingDay) {
+  if (frequency !== "weekly" && frequency !== "monthly") {
+    return null;
+  }
+  if (optionDay) {
+    const day2 = parseDayOption2(optionDay, frequency);
+    if (day2 === void 0) {
+      throw new Error(
+        `Invalid day: ${optionDay}. Use mon-sun for weekly or 1-31 for monthly.`
+      );
+    }
+    return day2;
+  }
+  if (!isInteractive()) {
+    throw new Error("--day is required for weekly/monthly");
+  }
+  if (frequency === "weekly") {
+    const defaultDayIndex = existingDay !== void 0 ? DAY_OF_WEEK_CHOICES2.findIndex((c42) => c42.value === existingDay) : 0;
+    const day2 = await promptSelect(
+      "Day of week",
+      DAY_OF_WEEK_CHOICES2,
+      defaultDayIndex >= 0 ? defaultDayIndex : 0
+    );
+    return day2 ?? null;
+  }
+  const dayStr = await promptText(
+    "Day of month (1-31)",
+    existingDay?.toString() || "1"
+  );
+  if (!dayStr) return null;
+  const day = parseInt(dayStr, 10);
+  if (isNaN(day) || day < 1 || day > 31) {
+    throw new Error("Day must be between 1 and 31");
+  }
+  return day;
+}
+async function gatherRecurringTime2(optionTime, existingTime) {
+  if (optionTime) {
+    const validation = validateTimeFormat(optionTime);
+    if (validation !== true) {
+      throw new Error(`Invalid time: ${validation}`);
+    }
+    return optionTime;
+  }
+  if (!isInteractive()) {
+    throw new Error("--time is required (HH:MM format)");
+  }
+  return await promptText(
+    "Time (HH:MM)",
+    existingTime || "09:00",
+    validateTimeFormat
+  );
+}
+async function gatherOneTimeSchedule2(optionDay, optionTime, existingTime) {
+  if (optionDay && optionTime) {
+    if (!validateDateFormat(optionDay)) {
+      throw new Error(
+        `Invalid date format: ${optionDay}. Use YYYY-MM-DD format.`
+      );
+    }
+    if (!validateTimeFormat(optionTime)) {
+      throw new Error(`Invalid time format: ${optionTime}. Use HH:MM format.`);
+    }
+    return `${optionDay} ${optionTime}`;
+  }
+  if (!isInteractive()) {
+    throw new Error("One-time schedules require interactive mode", {
+      cause: new Error(
+        "Or provide --day (YYYY-MM-DD) and --time (HH:MM) flags"
+      )
+    });
+  }
+  const tomorrowDate = getTomorrowDateLocal();
+  const date = await promptText(
+    "Date (YYYY-MM-DD, default tomorrow)",
+    tomorrowDate,
+    validateDateFormat
+  );
+  if (!date) return null;
+  const currentTime = getCurrentTimeLocal();
+  const time = await promptText(
+    "Time (HH:MM)",
+    existingTime || currentTime,
+    validateTimeFormat
+  );
+  if (!time) return null;
+  return `${date} ${time}`;
+}
+async function gatherTimezone2(optionTimezone, existingTimezone) {
+  if (optionTimezone) return optionTimezone;
+  let userTimezone = null;
+  try {
+    const prefs = await getUserPreferences();
+    userTimezone = prefs.timezone;
+  } catch {
+    console.log(
+      chalk105.dim("Could not fetch timezone preference, using detected timezone")
+    );
+  }
+  const defaultTimezone = userTimezone || detectTimezone();
+  if (!isInteractive()) {
+    return defaultTimezone;
+  }
+  return await promptText("Timezone", existingTimezone || defaultTimezone);
+}
+async function gatherPromptText2(optionPrompt, existingPrompt) {
+  if (optionPrompt) return optionPrompt;
+  if (!isInteractive()) {
+    throw new Error("--prompt is required");
+  }
+  return await promptText(
+    "Prompt to run",
+    existingPrompt || "let's start working."
+  );
+}
+async function gatherNotificationPreferences2(optionNotifyEmail, optionNotifySlack, existingSchedule) {
+  if (optionNotifyEmail !== void 0 && optionNotifySlack !== void 0) {
+    return {
+      notifyEmail: optionNotifyEmail,
+      notifySlack: optionNotifySlack
+    };
+  }
+  if (!isInteractive()) {
+    return {
+      notifyEmail: optionNotifyEmail,
+      notifySlack: optionNotifySlack
+    };
+  }
+  const notifyEmail = optionNotifyEmail ?? await promptConfirm(
+    "Enable email notifications?",
+    existingSchedule?.notifyEmail ?? true
+  );
+  const notifySlack = optionNotifySlack ?? await promptConfirm(
+    "Enable Slack notifications?",
+    existingSchedule?.notifySlack ?? true
+  );
+  return { notifyEmail, notifySlack };
+}
+async function gatherInterval2(optionInterval, existingInterval) {
+  if (optionInterval) {
+    const val = parseInt(optionInterval, 10);
+    if (isNaN(val) || val < 0) {
+      throw new Error(
+        "Invalid interval. Must be a non-negative integer (seconds)"
+      );
+    }
+    return val;
+  }
+  if (!isInteractive()) {
+    throw new Error("--interval is required for loop schedules (seconds)");
+  }
+  const defaultVal = existingInterval !== void 0 ? String(existingInterval) : "300";
+  const result = await promptText(
+    "Interval in seconds (time between runs)",
+    defaultVal,
+    (v) => {
+      const n = parseInt(v, 10);
+      if (isNaN(n) || n < 0) return "Must be a non-negative integer";
+      return true;
+    }
+  );
+  if (!result) return null;
+  return parseInt(result, 10);
+}
+async function gatherTiming2(frequency, options, defaults) {
+  if (frequency === "loop") {
+    const intervalSeconds = await gatherInterval2(
+      options.interval,
+      defaults.intervalSeconds
+    );
+    if (intervalSeconds === null) return null;
+    return {
+      day: void 0,
+      time: void 0,
+      atTime: void 0,
+      intervalSeconds
+    };
+  }
+  if (frequency === "once") {
+    const result = await gatherOneTimeSchedule2(
+      options.day,
+      options.time,
+      defaults.time
+    );
+    if (!result) return null;
+    return {
+      day: void 0,
+      time: void 0,
+      atTime: result,
+      intervalSeconds: void 0
+    };
+  }
+  const day = await gatherDay2(frequency, options.day, defaults.day) ?? void 0;
+  if (day === null && (frequency === "weekly" || frequency === "monthly")) {
+    return null;
+  }
+  const time = await gatherRecurringTime2(options.time, defaults.time);
+  if (!time) return null;
+  return { day, time, atTime: void 0, intervalSeconds: void 0 };
+}
+async function findExistingSchedule2(agentName, scheduleName) {
+  const { schedules } = await listZeroSchedules();
+  return schedules.find(
+    (s) => s.agentName === agentName && s.name === scheduleName
+  );
+}
+async function buildAndDeploy2(params) {
+  let cronExpression;
+  let atTimeISO;
+  if (params.frequency === "loop") {
+  } else if (params.atTime) {
+    atTimeISO = toISODateTime(params.atTime);
+  } else if (params.time && params.frequency !== "once") {
+    cronExpression = generateCronExpression(
+      params.frequency,
+      params.time,
+      params.day
+    );
+  }
+  console.log(
+    `
+Deploying schedule for agent ${chalk105.cyan(params.agentName)}...`
+  );
+  const deployResult = await deployZeroSchedule({
+    name: params.scheduleName,
+    zeroAgentId: params.zeroAgentId,
+    cronExpression,
+    atTime: atTimeISO,
+    intervalSeconds: params.intervalSeconds,
+    timezone: params.timezone,
+    prompt: params.prompt,
+    artifactName: params.artifactName,
+    ...params.notifyEmail !== void 0 && {
+      notifyEmail: params.notifyEmail
+    },
+    ...params.notifySlack !== void 0 && {
+      notifySlack: params.notifySlack
+    }
+  });
+  return deployResult;
+}
+function displayDeployResult2(agentName, deployResult) {
+  if (deployResult.created) {
+    console.log(
+      chalk105.green(`\u2713 Created schedule for agent ${chalk105.cyan(agentName)}`)
+    );
+  } else {
+    console.log(
+      chalk105.green(`\u2713 Updated schedule for agent ${chalk105.cyan(agentName)}`)
+    );
+  }
+  console.log(chalk105.dim(`  Timezone: ${deployResult.schedule.timezone}`));
+  if (deployResult.schedule.triggerType === "loop" && deployResult.schedule.intervalSeconds != null) {
+    console.log(
+      chalk105.dim(
+        `  Mode: Loop (interval ${deployResult.schedule.intervalSeconds}s)`
+      )
+    );
+  } else if (deployResult.schedule.cronExpression) {
+    console.log(chalk105.dim(`  Cron: ${deployResult.schedule.cronExpression}`));
+    if (deployResult.schedule.nextRunAt) {
+      const nextRun = formatInTimezone2(
+        deployResult.schedule.nextRunAt,
+        deployResult.schedule.timezone
+      );
+      console.log(chalk105.dim(`  Next run: ${nextRun}`));
+    }
+  } else if (deployResult.schedule.atTime) {
+    const atTimeFormatted = formatInTimezone2(
+      deployResult.schedule.atTime,
+      deployResult.schedule.timezone
+    );
+    console.log(chalk105.dim(`  At: ${atTimeFormatted}`));
+  }
+}
+async function tryEnableSchedule2(scheduleName, zeroAgentId, agentName) {
+  try {
+    await enableZeroSchedule({ name: scheduleName, zeroAgentId });
+    console.log(
+      chalk105.green(`\u2713 Enabled schedule for agent ${chalk105.cyan(agentName)}`)
+    );
+  } catch (error) {
+    console.error(chalk105.yellow("\u26A0 Failed to enable schedule"));
+    if (error instanceof ApiRequestError) {
+      if (error.code === "SCHEDULE_PAST") {
+        console.error(chalk105.dim("  Scheduled time has already passed"));
+      } else {
+        console.error(chalk105.dim(`  ${error.message}`));
+      }
+    } else if (error instanceof Error) {
+      console.error(chalk105.dim(`  ${error.message}`));
+    }
+    console.log(
+      `  To enable manually: ${chalk105.cyan(`vm0 zero schedule enable ${agentName}`)}`
+    );
+  }
+}
+function showEnableHint2(agentName) {
+  console.log();
+  console.log(
+    `  To enable: ${chalk105.cyan(`vm0 zero schedule enable ${agentName}`)}`
+  );
+}
+async function handleScheduleEnabling2(params) {
+  const {
+    scheduleName,
+    zeroAgentId,
+    agentName,
+    enableFlag,
+    shouldPromptEnable
+  } = params;
+  if (enableFlag) {
+    await tryEnableSchedule2(scheduleName, zeroAgentId, agentName);
+    return;
+  }
+  if (shouldPromptEnable && isInteractive()) {
+    const enableNow = await promptConfirm("Enable this schedule?", true);
+    if (enableNow) {
+      await tryEnableSchedule2(scheduleName, zeroAgentId, agentName);
+    } else {
+      showEnableHint2(agentName);
+    }
+    return;
+  }
+  if (shouldPromptEnable) {
+    showEnableHint2(agentName);
+  }
+}
+var setupCommand4 = new Command121().name("setup").description("Create or edit a schedule for a zero agent").argument("<agent-name>", "Agent name to configure schedule for").option("-n, --name <schedule-name>", 'Schedule name (default: "default")').option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once|loop").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-i, --interval <seconds>", "Interval in seconds for loop mode").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").option("--notify-email", "Enable email notifications (default: true)").option("--no-notify-email", "Disable email notifications").option("--notify-slack", "Enable Slack notifications (default: true)").option("--no-notify-slack", "Disable Slack notifications").action(
+  withErrorHandler(async (agentName, options) => {
+    const agent = await getZeroAgent(agentName);
+    const zeroAgentId = agent.agentComposeId;
+    const scheduleName = options.name || "default";
+    const existingSchedule = await findExistingSchedule2(
+      agentName,
+      scheduleName
+    );
+    console.log(
+      chalk105.dim(
+        existingSchedule ? `Editing existing schedule for agent ${agentName}` : `Creating new schedule for agent ${agentName}`
+      )
+    );
+    const defaults = getExistingDefaults2(existingSchedule);
+    const frequency = await gatherFrequency2(
+      options.frequency,
+      defaults.frequency
+    );
+    if (!frequency) {
+      console.log(chalk105.dim("Cancelled"));
+      return;
+    }
+    const timing = await gatherTiming2(frequency, options, defaults);
+    if (!timing) {
+      console.log(chalk105.dim("Cancelled"));
+      return;
+    }
+    const { day, time, atTime, intervalSeconds } = timing;
+    const timezone = await gatherTimezone2(
+      options.timezone,
+      existingSchedule?.timezone
+    );
+    if (!timezone) {
+      console.log(chalk105.dim("Cancelled"));
+      return;
+    }
+    const promptText_ = await gatherPromptText2(
+      options.prompt,
+      existingSchedule?.prompt
+    );
+    if (!promptText_) {
+      console.log(chalk105.dim("Cancelled"));
+      return;
+    }
+    const { notifyEmail, notifySlack } = await gatherNotificationPreferences2(
+      options.notifyEmail,
+      options.notifySlack,
+      existingSchedule
+    );
+    const deployResult = await buildAndDeploy2({
+      scheduleName,
+      zeroAgentId,
+      agentName,
+      frequency,
+      time,
+      day,
+      atTime,
+      intervalSeconds,
+      timezone,
+      prompt: promptText_,
+      artifactName: options.artifactName,
+      notifyEmail,
+      notifySlack
+    });
+    displayDeployResult2(agentName, deployResult);
+    const shouldPromptEnable = deployResult.created || existingSchedule !== void 0 && !existingSchedule.enabled;
+    await handleScheduleEnabling2({
+      scheduleName,
+      zeroAgentId,
+      agentName,
+      enableFlag: options.enable ?? false,
+      shouldPromptEnable
+    });
+  })
+);
+
+// src/commands/zero/schedule/list.ts
+import { Command as Command122 } from "commander";
+import chalk106 from "chalk";
+var listCommand19 = new Command122().name("list").alias("ls").description("List all zero schedules").action(
+  withErrorHandler(async () => {
+    const result = await listZeroSchedules();
+    if (result.schedules.length === 0) {
+      console.log(chalk106.dim("No schedules found"));
+      console.log(
+        chalk106.dim("  Create one with: vm0 zero schedule setup <agent-name>")
+      );
+      return;
+    }
+    const agentWidth = Math.max(
+      5,
+      ...result.schedules.map((s) => s.agentName.length)
+    );
+    const scheduleWidth = Math.max(
+      8,
+      ...result.schedules.map((s) => s.name.length)
+    );
+    const triggerWidth = Math.max(
+      7,
+      ...result.schedules.map(
+        (s) => s.cronExpression ? s.cronExpression.length + s.timezone.length + 3 : s.atTime?.length || 0
+      )
+    );
+    const header = [
+      "AGENT".padEnd(agentWidth),
+      "SCHEDULE".padEnd(scheduleWidth),
+      "TRIGGER".padEnd(triggerWidth),
+      "STATUS".padEnd(8),
+      "NEXT RUN"
+    ].join("  ");
+    console.log(chalk106.dim(header));
+    for (const schedule of result.schedules) {
+      const trigger = schedule.cronExpression ? `${schedule.cronExpression} (${schedule.timezone})` : schedule.atTime || "-";
+      const status = schedule.enabled ? chalk106.green("enabled") : chalk106.yellow("disabled");
+      const nextRun = schedule.enabled ? formatRelativeTime2(schedule.nextRunAt) : "-";
+      const row = [
+        schedule.agentName.padEnd(agentWidth),
+        schedule.name.padEnd(scheduleWidth),
+        trigger.padEnd(triggerWidth),
+        status.padEnd(8 + (schedule.enabled ? 0 : 2)),
+        nextRun
+      ].join("  ");
+      console.log(row);
+    }
+  })
+);
+
+// src/commands/zero/schedule/status.ts
+import { Command as Command123 } from "commander";
+import chalk107 from "chalk";
+function formatDateTimeStyled2(dateStr) {
+  if (!dateStr) return chalk107.dim("-");
+  const formatted = formatDateTime(dateStr);
+  return formatted.replace(/\(([^)]+)\)$/, chalk107.dim("($1)"));
+}
+function formatTrigger2(schedule) {
+  if (schedule.triggerType === "loop" && schedule.intervalSeconds !== null) {
+    return `interval ${schedule.intervalSeconds}s ${chalk107.dim("(loop)")}`;
+  }
+  if (schedule.cronExpression) {
+    return schedule.cronExpression;
+  }
+  if (schedule.atTime) {
+    return `${schedule.atTime} ${chalk107.dim("(one-time)")}`;
+  }
+  return chalk107.dim("-");
+}
+function printRunConfiguration2(schedule) {
+  const statusText = schedule.enabled ? chalk107.green("enabled") : chalk107.yellow("disabled");
+  console.log(`${"Status:".padEnd(16)}${statusText}`);
+  console.log(
+    `${"Agent:".padEnd(16)}${schedule.agentName} ${chalk107.dim(`(${schedule.orgSlug})`)}`
+  );
+  const promptPreview = schedule.prompt.length > 60 ? schedule.prompt.slice(0, 57) + "..." : schedule.prompt;
+  console.log(`${"Prompt:".padEnd(16)}${chalk107.dim(promptPreview)}`);
+  if (schedule.vars && Object.keys(schedule.vars).length > 0) {
+    console.log(
+      `${"Variables:".padEnd(16)}${Object.keys(schedule.vars).join(", ")}`
+    );
+  }
+  if (schedule.secretNames && schedule.secretNames.length > 0) {
+    console.log(`${"Secrets:".padEnd(16)}${schedule.secretNames.join(", ")}`);
+  }
+  if (schedule.artifactName) {
+    const artifactInfo = schedule.artifactVersion ? `${schedule.artifactName}:${schedule.artifactVersion}` : schedule.artifactName;
+    console.log(`${"Artifact:".padEnd(16)}${artifactInfo}`);
+  }
+  if (schedule.volumeVersions && Object.keys(schedule.volumeVersions).length > 0) {
+    console.log(
+      `${"Volumes:".padEnd(16)}${Object.keys(schedule.volumeVersions).join(", ")}`
+    );
+  }
+}
+function printTimeSchedule2(schedule) {
+  console.log();
+  console.log(`${"Trigger:".padEnd(16)}${formatTrigger2(schedule)}`);
+  console.log(`${"Timezone:".padEnd(16)}${detectTimezone()}`);
+  if (schedule.enabled) {
+    console.log(
+      `${"Next Run:".padEnd(16)}${formatDateTimeStyled2(schedule.nextRunAt)}`
+    );
+  }
+  if (schedule.triggerType === "loop") {
+    const failureText = schedule.consecutiveFailures > 0 ? chalk107.yellow(`${schedule.consecutiveFailures}/3`) : chalk107.dim("0/3");
+    console.log(`${"Failures:".padEnd(16)}${failureText}`);
+  }
+}
+var statusCommand10 = new Command123().name("status").description("Show detailed status of a zero schedule").argument("<agent-name>", "Agent name").option(
+  "-n, --name <schedule-name>",
+  "Schedule name (required when agent has multiple schedules)"
+).action(
+  withErrorHandler(async (agentName, options) => {
+    const schedule = await resolveZeroScheduleByAgent(
+      agentName,
+      options.name
+    );
+    console.log();
+    console.log(`Schedule for agent: ${chalk107.cyan(agentName)}`);
+    console.log(chalk107.dim("\u2501".repeat(50)));
+    printRunConfiguration2(schedule);
+    printTimeSchedule2(schedule);
+    console.log();
+  })
+);
+
+// src/commands/zero/schedule/delete.ts
+import { Command as Command124 } from "commander";
+import chalk108 from "chalk";
+var deleteCommand7 = new Command124().name("delete").alias("rm").description("Delete a zero schedule").argument("<agent-name>", "Agent name").option(
+  "-n, --name <schedule-name>",
+  "Schedule name (required when agent has multiple schedules)"
+).option("-y, --yes", "Skip confirmation prompt").action(
+  withErrorHandler(
+    async (agentName, options) => {
+      const resolved = await resolveZeroScheduleByAgent(
+        agentName,
+        options.name
+      );
+      if (!options.yes) {
+        if (!isInteractive()) {
+          throw new Error("--yes flag is required in non-interactive mode");
+        }
+        const confirmed = await promptConfirm(
+          `Delete schedule for agent ${chalk108.cyan(agentName)}?`,
+          false
+        );
+        if (!confirmed) {
+          console.log(chalk108.dim("Cancelled"));
+          return;
+        }
+      }
+      await deleteZeroSchedule({
+        name: resolved.name,
+        zeroAgentId: resolved.zeroAgentId
+      });
+      console.log(
+        chalk108.green(`\u2713 Deleted schedule for agent ${chalk108.cyan(agentName)}`)
+      );
+    }
+  )
+);
+
+// src/commands/zero/schedule/enable.ts
+import { Command as Command125 } from "commander";
+import chalk109 from "chalk";
+var enableCommand2 = new Command125().name("enable").description("Enable a zero schedule").argument("<agent-name>", "Agent name").option(
+  "-n, --name <schedule-name>",
+  "Schedule name (required when agent has multiple schedules)"
+).action(
+  withErrorHandler(async (agentName, options) => {
+    const resolved = await resolveZeroScheduleByAgent(
+      agentName,
+      options.name
+    );
+    await enableZeroSchedule({
+      name: resolved.name,
+      zeroAgentId: resolved.zeroAgentId
+    });
+    console.log(
+      chalk109.green(`\u2713 Enabled schedule for agent ${chalk109.cyan(agentName)}`)
+    );
+  })
+);
+
+// src/commands/zero/schedule/disable.ts
+import { Command as Command126 } from "commander";
+import chalk110 from "chalk";
+var disableCommand2 = new Command126().name("disable").description("Disable a zero schedule").argument("<agent-name>", "Agent name").option(
+  "-n, --name <schedule-name>",
+  "Schedule name (required when agent has multiple schedules)"
+).action(
+  withErrorHandler(async (agentName, options) => {
+    const resolved = await resolveZeroScheduleByAgent(
+      agentName,
+      options.name
+    );
+    await disableZeroSchedule({
+      name: resolved.name,
+      zeroAgentId: resolved.zeroAgentId
+    });
+    console.log(
+      chalk110.green(`\u2713 Disabled schedule for agent ${chalk110.cyan(agentName)}`)
+    );
+  })
+);
+
+// src/commands/zero/schedule/index.ts
+var zeroScheduleCommand = new Command127().name("schedule").description("Manage zero agent schedules").addCommand(setupCommand4).addCommand(listCommand19).addCommand(statusCommand10).addCommand(deleteCommand7).addCommand(enableCommand2).addCommand(disableCommand2);
+
+// src/commands/zero/secret/index.ts
+import { Command as Command131 } from "commander";
+
+// src/commands/zero/secret/list.ts
+import { Command as Command128 } from "commander";
+import chalk111 from "chalk";
+var listCommand20 = new Command128().name("list").alias("ls").description("List all secrets").action(
+  withErrorHandler(async () => {
+    const result = await listZeroSecrets();
+    if (result.secrets.length === 0) {
+      console.log(chalk111.dim("No secrets found"));
+      console.log();
+      console.log("To add a secret:");
+      console.log(
+        chalk111.cyan("  vm0 zero secret set MY_API_KEY --body <value>")
+      );
+      return;
+    }
+    console.log(chalk111.bold("Secrets:"));
+    console.log();
+    for (const secret of result.secrets) {
+      let typeIndicator = "";
+      let derivedLine = null;
+      if (secret.type === "model-provider") {
+        typeIndicator = chalk111.dim(" [model-provider]");
+      } else if (secret.type === "connector") {
+        const derived = getConnectorDerivedNames(secret.name);
+        if (derived) {
+          typeIndicator = chalk111.dim(` [${derived.connectorLabel} connector]`);
+          derivedLine = chalk111.dim(
+            `Available as: ${derived.envVarNames.join(", ")}`
+          );
+        } else {
+          typeIndicator = chalk111.dim(" [connector]");
+        }
+      } else if (secret.type === "user") {
+        const derived = getConnectorDerivedNames(secret.name);
+        if (derived) {
+          typeIndicator = chalk111.dim(` [${derived.connectorLabel} connector]`);
+          derivedLine = chalk111.dim(
+            `Available as: ${derived.envVarNames.join(", ")}`
+          );
+        }
+      }
+      console.log(`  ${chalk111.cyan(secret.name)}${typeIndicator}`);
+      if (derivedLine) {
+        console.log(`    ${derivedLine}`);
+      }
+      if (secret.description) {
+        console.log(`    ${chalk111.dim(secret.description)}`);
+      }
+      console.log(
+        `    ${chalk111.dim(`Updated: ${new Date(secret.updatedAt).toLocaleString()}`)}`
+      );
+      console.log();
+    }
+    console.log(chalk111.dim(`Total: ${result.secrets.length} secret(s)`));
+  })
+);
+
+// src/commands/zero/secret/set.ts
+import { Command as Command129 } from "commander";
+import chalk112 from "chalk";
+var setCommand9 = new Command129().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
+  "-b, --body <value>",
+  "Secret value (required in non-interactive mode)"
+).option("-d, --description <description>", "Optional description").action(
+  withErrorHandler(
+    async (name, options) => {
+      let value;
+      if (options.body !== void 0) {
+        value = options.body;
+      } else if (isInteractive()) {
+        const prompted = await promptPassword("Enter secret value:");
+        if (prompted === void 0) {
+          process.exit(0);
+        }
+        value = prompted;
+      } else {
+        throw new Error("--body is required in non-interactive mode", {
+          cause: new Error(
+            `Usage: vm0 zero secret set ${name} --body "your-secret-value"`
+          )
+        });
+      }
+      let secret;
+      try {
+        secret = await setZeroSecret({
+          name,
+          value,
+          description: options.description
+        });
+      } catch (error) {
+        if (error instanceof Error && error.message.includes("must contain only uppercase")) {
+          throw new Error(error.message, {
+            cause: new Error(
+              "Examples of valid secret names: MY_API_KEY, GITHUB_TOKEN, AWS_ACCESS_KEY_ID"
+            )
+          });
+        }
+        throw error;
+      }
+      console.log(chalk112.green(`\u2713 Secret "${secret.name}" saved`));
+      console.log();
+      console.log("Use in vm0.yaml:");
+      console.log(chalk112.cyan(`  environment:`));
+      console.log(chalk112.cyan(`    ${name}: \${{ secrets.${name} }}`));
+    }
+  )
+);
+
+// src/commands/zero/secret/delete.ts
+import { Command as Command130 } from "commander";
+import chalk113 from "chalk";
+var deleteCommand8 = new Command130().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+  withErrorHandler(async (name, options) => {
+    if (!options.yes) {
+      if (!isInteractive()) {
+        throw new Error("--yes flag is required in non-interactive mode");
+      }
+      const confirmed = await promptConfirm(
+        `Are you sure you want to delete secret "${name}"?`,
+        false
+      );
+      if (!confirmed) {
+        console.log(chalk113.dim("Cancelled"));
+        return;
+      }
+    }
+    await deleteZeroSecret(name);
+    console.log(chalk113.green(`\u2713 Secret "${name}" deleted`));
+  })
+);
+
+// src/commands/zero/secret/index.ts
+var zeroSecretCommand = new Command131().name("secret").description("Manage secrets").addCommand(listCommand20).addCommand(setCommand9).addCommand(deleteCommand8);
+
+// src/commands/zero/variable/index.ts
+import { Command as Command135 } from "commander";
+
+// src/commands/zero/variable/list.ts
+import { Command as Command132 } from "commander";
+import chalk114 from "chalk";
+function truncateValue4(value, maxLength = 60) {
+  if (value.length <= maxLength) {
+    return value;
+  }
+  return value.slice(0, maxLength - 15) + "... [truncated]";
+}
+var listCommand21 = new Command132().name("list").alias("ls").description("List all variables").action(
+  withErrorHandler(async () => {
+    const result = await listZeroVariables();
+    if (result.variables.length === 0) {
+      console.log(chalk114.dim("No variables found"));
+      console.log();
+      console.log("To add a variable:");
+      console.log(chalk114.cyan("  vm0 zero variable set MY_VAR <value>"));
+      return;
+    }
+    console.log(chalk114.bold("Variables:"));
+    console.log();
+    for (const variable of result.variables) {
+      const displayValue = truncateValue4(variable.value);
+      console.log(`  ${chalk114.cyan(variable.name)} = ${displayValue}`);
+      if (variable.description) {
+        console.log(`    ${chalk114.dim(variable.description)}`);
+      }
+      console.log(
+        `    ${chalk114.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
+      );
+      console.log();
+    }
+    console.log(chalk114.dim(`Total: ${result.variables.length} variable(s)`));
+  })
+);
+
+// src/commands/zero/variable/set.ts
+import { Command as Command133 } from "commander";
+import chalk115 from "chalk";
+var setCommand10 = new Command133().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
+  withErrorHandler(
+    async (name, value, options) => {
+      let variable;
+      try {
+        variable = await setZeroVariable({
+          name,
+          value,
+          description: options.description
+        });
+      } catch (error) {
+        if (error instanceof Error && error.message.includes("must contain only uppercase")) {
+          throw new Error(error.message, {
+            cause: new Error(
+              "Examples of valid variable names: MY_VAR, API_URL, DEBUG_MODE"
+            )
+          });
+        }
+        throw error;
+      }
+      console.log(chalk115.green(`\u2713 Variable "${variable.name}" saved`));
+      console.log();
+      console.log("Use in vm0.yaml:");
+      console.log(chalk115.cyan(`  environment:`));
+      console.log(chalk115.cyan(`    ${name}: \${{ vars.${name} }}`));
+    }
+  )
+);
+
+// src/commands/zero/variable/delete.ts
+import { Command as Command134 } from "commander";
+import chalk116 from "chalk";
+var deleteCommand9 = new Command134().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(
+  withErrorHandler(async (name, options) => {
+    if (!options.yes) {
+      if (!isInteractive()) {
+        throw new Error("--yes flag is required in non-interactive mode");
+      }
+      const confirmed = await promptConfirm(
+        `Are you sure you want to delete variable "${name}"?`,
+        false
+      );
+      if (!confirmed) {
+        console.log(chalk116.dim("Cancelled"));
+        return;
+      }
+    }
+    await deleteZeroVariable(name);
+    console.log(chalk116.green(`\u2713 Variable "${name}" deleted`));
+  })
+);
+
+// src/commands/zero/variable/index.ts
+var zeroVariableCommand = new Command135().name("variable").description("Manage variables").addCommand(listCommand21).addCommand(setCommand10).addCommand(deleteCommand9);
+
 // src/commands/zero/index.ts
-var zeroCommand = new Command121("zero").description("Zero platform commands").addCommand(zeroOrgCommand).addCommand(agentCommand2);
+var zeroCommand = new Command136("zero").description("Zero platform commands").addCommand(zeroOrgCommand).addCommand(agentCommand2).addCommand(zeroScheduleCommand).addCommand(zeroSecretCommand).addCommand(zeroVariableCommand);
 
 // src/index.ts
-var program = new Command122();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.76.0");
+var program = new Command137();
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.77.0");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);