@vm0/cli 3.3.0 → 3.5.0

package/index.js

@@ -12147,8 +12147,8 @@ var helloContract = c.router({
 var FOO = "hello";
 
 // src/index.ts
-import { Command as Command11 } from "commander";
-import chalk11 from "chalk";
+import { Command as Command15 } from "commander";
+import chalk14 from "chalk";
 
 // src/lib/auth.ts
 import chalk from "chalk";
@@ -12352,6 +12352,39 @@ var ApiClient = class {
     }
     return await response.json();
   }
+  async getComposeById(id) {
+    const baseUrl = await this.getBaseUrl();
+    const headers = await this.getHeaders();
+    const response = await fetch(`${baseUrl}/api/agent/composes/${id}`, {
+      method: "GET",
+      headers
+    });
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || `Compose not found: ${id}`);
+    }
+    return await response.json();
+  }
+  /**
+   * Resolve a version specifier to a full version ID
+   * Supports: "latest", full hash (64 chars), or hash prefix (8+ chars)
+   */
+  async getComposeVersion(composeId, version2) {
+    const baseUrl = await this.getBaseUrl();
+    const headers = await this.getHeaders();
+    const response = await fetch(
+      `${baseUrl}/api/agent/composes/versions?composeId=${encodeURIComponent(composeId)}&version=${encodeURIComponent(version2)}`,
+      {
+        method: "GET",
+        headers
+      }
+    );
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || `Version not found: ${version2}`);
+    }
+    return await response.json();
+  }
   async createOrUpdateCompose(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
@@ -12369,6 +12402,7 @@ var ApiClient = class {
   /**
    * Create a run with unified request format
    * Supports new runs, checkpoint resume, and session continue
+   * Note: Environment variables are expanded server-side from templateVars
    */
   async createRun(body) {
     const baseUrl = await this.getBaseUrl();
@@ -12459,6 +12493,27 @@ var ApiClient = class {
       body: options?.body
     });
   }
+  /**
+   * Generic DELETE request
+   */
+  async delete(path9) {
+    const baseUrl = await this.getBaseUrl();
+    const token = await getToken();
+    if (!token) {
+      throw new Error("Not authenticated. Run: vm0 auth login");
+    }
+    const headers = {
+      Authorization: `Bearer ${token}`
+    };
+    const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+    if (bypassSecret) {
+      headers["x-vercel-protection-bypass"] = bypassSecret;
+    }
+    return fetch(`${baseUrl}${path9}`, {
+      method: "DELETE",
+      headers
+    });
+  }
 };
 var apiClient = new ApiClient();
 
@@ -12540,6 +12595,23 @@ function validateAgentCompose(config2) {
       error: "Missing or invalid agent.provider (must be a string)"
     };
   }
+  if (agent.environment !== void 0) {
+    if (agent.environment === null || typeof agent.environment !== "object" || Array.isArray(agent.environment)) {
+      return {
+        valid: false,
+        error: "agent.environment must be an object with string keys and values"
+      };
+    }
+    const env = agent.environment;
+    for (const [key, value] of Object.entries(env)) {
+      if (typeof value !== "string") {
+        return {
+          valid: false,
+          error: `agent.environment.${key} must be a string`
+        };
+      }
+    }
+  }
   const agentVolumes = agent.volumes;
   if (agentVolumes && Array.isArray(agentVolumes) && agentVolumes.length > 0) {
     const volumesSection = cfg.volumes;
@@ -12580,62 +12652,6 @@ function validateAgentCompose(config2) {
   return { valid: true };
 }
 
-// src/lib/env-expander.ts
-function expandEnvVars(value) {
-  return value.replace(/\$\{([^}]+)\}/g, (_, varName) => {
-    return process.env[varName] ?? "";
-  });
-}
-function extractEnvVarReferences(obj) {
-  const varNames = /* @__PURE__ */ new Set();
-  function scan(value) {
-    if (typeof value === "string") {
-      const matches = value.matchAll(/\$\{([^}]+)\}/g);
-      for (const match of matches) {
-        const varName = match[1];
-        if (varName) {
-          varNames.add(varName);
-        }
-      }
-    } else if (Array.isArray(value)) {
-      for (const item of value) {
-        scan(item);
-      }
-    } else if (value !== null && typeof value === "object") {
-      for (const val of Object.values(value)) {
-        scan(val);
-      }
-    }
-  }
-  scan(obj);
-  return Array.from(varNames);
-}
-function validateEnvVars(varNames) {
-  const missing = [];
-  for (const varName of varNames) {
-    if (process.env[varName] === void 0) {
-      missing.push(varName);
-    }
-  }
-  return missing;
-}
-function expandEnvVarsInObject(obj) {
-  if (typeof obj === "string") {
-    return expandEnvVars(obj);
-  }
-  if (Array.isArray(obj)) {
-    return obj.map((item) => expandEnvVarsInObject(item));
-  }
-  if (obj !== null && typeof obj === "object") {
-    const result = {};
-    for (const [key, value] of Object.entries(obj)) {
-      result[key] = expandEnvVarsInObject(value);
-    }
-    return result;
-  }
-  return obj;
-}
-
 // src/commands/build.ts
 var buildCommand = new Command().name("build").description("Create or update agent compose").argument("<config-file>", "Path to config YAML file").action(async (configFile) => {
   try {
@@ -12654,24 +12670,6 @@ var buildCommand = new Command().name("build").description("Create or update age
       }
       process.exit(1);
     }
-    const referencedVars = extractEnvVarReferences(config2);
-    const missingVars = validateEnvVars(referencedVars);
-    if (missingVars.length > 0) {
-      console.error(chalk2.red("\u2717 Missing required environment variables:"));
-      for (const varName of missingVars) {
-        console.error(chalk2.red(`  - ${varName}`));
-      }
-      console.error();
-      console.error(
-        chalk2.gray("Please set these variables before running 'vm0 build'.")
-      );
-      console.error(chalk2.gray("Example:"));
-      for (const varName of missingVars) {
-        console.error(chalk2.gray(`  export ${varName}=your-value`));
-      }
-      process.exit(1);
-    }
-    config2 = expandEnvVarsInObject(config2);
     const validation = validateAgentCompose(config2);
     if (!validation.valid) {
       console.error(chalk2.red(`\u2717 ${validation.error}`));
@@ -13100,6 +13098,19 @@ function collectVolumeVersions(value, previous) {
 function isUUID(str) {
   return /^[0-9a-f-]{36}$/i.test(str);
 }
+function parseIdentifier(identifier) {
+  if (isUUID(identifier)) {
+    return { name: identifier };
+  }
+  const colonIndex = identifier.lastIndexOf(":");
+  if (colonIndex > 0 && colonIndex < identifier.length - 1) {
+    return {
+      name: identifier.slice(0, colonIndex),
+      version: identifier.slice(colonIndex + 1)
+    };
+  }
+  return { name: identifier };
+}
 var DEFAULT_TIMEOUT_SECONDS = 120;
 async function pollEvents(runId, timeoutSeconds, options) {
   let nextSequence = -1;
@@ -13166,7 +13177,7 @@ ${action}...`));
 }
 var runCmd = new Command2().name("run").description("Execute an agent").argument(
   "<identifier>",
-  "Agent name or config ID (e.g., 'my-agent' or 'cfg-abc-123')"
+  "Agent name, config ID, or name:version (e.g., 'my-agent', 'my-agent:abc123', 'my-agent:latest')"
 ).argument("<prompt>", "Prompt for the agent").option(
   "--vars <KEY=value>",
   "Template variables for config placeholders (repeatable)",
@@ -13208,25 +13219,26 @@ var runCmd = new Command2().name("run").description("Execute an agent").argument
     }
     const verbose = options.verbose;
     try {
+      const { name, version: version2 } = parseIdentifier(identifier);
       let composeId;
-      if (isUUID(identifier)) {
-        composeId = identifier;
+      if (isUUID(name)) {
+        composeId = name;
         if (verbose) {
-          console.log(chalk4.gray(`  Using compose ID: ${composeId}`));
+          console.log(chalk4.gray(`  Using compose ID: ${identifier}`));
         }
       } else {
         if (verbose) {
-          console.log(chalk4.gray(`  Resolving agent name: ${identifier}`));
+          console.log(chalk4.gray(`  Resolving agent name: ${name}`));
         }
         try {
-          const compose = await apiClient.getComposeByName(identifier);
+          const compose = await apiClient.getComposeByName(name);
           composeId = compose.id;
           if (verbose) {
             console.log(chalk4.gray(`  Resolved to compose ID: ${composeId}`));
           }
         } catch (error43) {
           if (error43 instanceof Error) {
-            console.error(chalk4.red(`\u2717 Agent not found: ${identifier}`));
+            console.error(chalk4.red(`\u2717 Agent not found: ${name}`));
             console.error(
               chalk4.gray(
                 "  Make sure you've built the agent with: vm0 build"
@@ -13236,9 +13248,40 @@ var runCmd = new Command2().name("run").description("Execute an agent").argument
           process.exit(1);
         }
       }
+      let agentComposeVersionId;
+      if (version2 && version2 !== "latest") {
+        if (verbose) {
+          console.log(chalk4.gray(`  Resolving version: ${version2}`));
+        }
+        try {
+          const versionInfo = await apiClient.getComposeVersion(
+            composeId,
+            version2
+          );
+          agentComposeVersionId = versionInfo.versionId;
+          if (verbose) {
+            console.log(
+              chalk4.gray(
+                `  Resolved to version ID: ${agentComposeVersionId.slice(0, 8)}...`
+              )
+            );
+          }
+        } catch (error43) {
+          if (error43 instanceof Error) {
+            console.error(chalk4.red(`\u2717 Version not found: ${version2}`));
+            console.error(
+              chalk4.gray(
+                "  Make sure the version hash exists. Use 'vm0 build' to see available versions."
+              )
+            );
+          }
+          process.exit(1);
+        }
+      }
       if (verbose) {
         logVerbosePreFlight("Creating agent run", [
           { label: "Prompt", value: prompt },
+          { label: "Version", value: version2 || "latest (HEAD)" },
           {
             label: "Variables",
             value: Object.keys(options.vars).length > 0 ? JSON.stringify(options.vars) : void 0
@@ -13253,7 +13296,8 @@ var runCmd = new Command2().name("run").description("Execute an agent").argument
         ]);
       }
       const response = await apiClient.createRun({
-        agentComposeId: composeId,
+        // Use agentComposeVersionId if resolved, otherwise use agentComposeId (resolves to HEAD)
+        ...agentComposeVersionId ? { agentComposeVersionId } : { agentComposeId: composeId },
         prompt,
         templateVars: Object.keys(options.vars).length > 0 ? options.vars : void 0,
         artifactName: options.artifactName,
@@ -14138,15 +14182,126 @@ var pullCommand2 = new Command9().name("pull").description("Pull cloud artifact
 // src/commands/artifact/index.ts
 var artifactCommand = new Command10().name("artifact").description("Manage cloud artifacts (work products)").addCommand(initCommand2).addCommand(pushCommand2).addCommand(pullCommand2);
 
+// src/commands/secret/index.ts
+import { Command as Command14 } from "commander";
+
+// src/commands/secret/set.ts
+import { Command as Command11 } from "commander";
+import chalk11 from "chalk";
+var setCommand = new Command11().name("set").description("Create or update a secret").argument(
+  "<name>",
+  "Secret name (must start with letter, alphanumeric and underscores only)"
+).argument("<value>", "Secret value").action(async (name, value) => {
+  try {
+    const nameRegex = /^[a-zA-Z][a-zA-Z0-9_]*$/;
+    if (!nameRegex.test(name)) {
+      console.error(chalk11.red("\u2717 Invalid secret name"));
+      console.error(
+        chalk11.gray(
+          "  Must start with a letter and contain only letters, numbers, and underscores"
+        )
+      );
+      process.exit(1);
+    }
+    if (name.length > 255) {
+      console.error(chalk11.red("\u2717 Secret name too long (max 255 characters)"));
+      process.exit(1);
+    }
+    const response = await apiClient.post("/api/secrets", {
+      body: JSON.stringify({ name, value })
+    });
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || "Failed to set secret");
+    }
+    const result = await response.json();
+    if (result.action === "created") {
+      console.log(chalk11.green(`\u2713 Secret created: ${name}`));
+    } else {
+      console.log(chalk11.green(`\u2713 Secret updated: ${name}`));
+    }
+  } catch (error43) {
+    console.error(chalk11.red("\u2717 Failed to set secret"));
+    if (error43 instanceof Error) {
+      console.error(chalk11.gray(`  ${error43.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/secret/list.ts
+import { Command as Command12 } from "commander";
+import chalk12 from "chalk";
+var listCommand = new Command12().name("list").alias("ls").description("List all secrets (names only)").action(async () => {
+  try {
+    const response = await apiClient.get("/api/secrets");
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || "Failed to list secrets");
+    }
+    const result = await response.json();
+    if (result.secrets.length === 0) {
+      console.log(chalk12.gray("No secrets found"));
+      console.log(
+        chalk12.gray("  Create one with: vm0 secret set <name> <value>")
+      );
+      return;
+    }
+    console.log(chalk12.cyan("Secrets:"));
+    for (const secret of result.secrets) {
+      const updatedAt = new Date(secret.updatedAt).toLocaleDateString();
+      console.log(
+        `  ${chalk12.white(secret.name)} ${chalk12.gray(`(updated: ${updatedAt})`)}`
+      );
+    }
+    console.log(chalk12.gray(`
+Total: ${result.secrets.length} secret(s)`));
+  } catch (error43) {
+    console.error(chalk12.red("\u2717 Failed to list secrets"));
+    if (error43 instanceof Error) {
+      console.error(chalk12.gray(`  ${error43.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/secret/delete.ts
+import { Command as Command13 } from "commander";
+import chalk13 from "chalk";
+var deleteCommand = new Command13().name("delete").alias("rm").description("Delete a secret").argument("<name>", "Secret name to delete").action(async (name) => {
+  try {
+    const response = await apiClient.delete(
+      `/api/secrets?name=${encodeURIComponent(name)}`
+    );
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || `Secret not found: ${name}`);
+    }
+    const result = await response.json();
+    if (result.deleted) {
+      console.log(chalk13.green(`\u2713 Secret deleted: ${name}`));
+    }
+  } catch (error43) {
+    console.error(chalk13.red("\u2717 Failed to delete secret"));
+    if (error43 instanceof Error) {
+      console.error(chalk13.gray(`  ${error43.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/secret/index.ts
+var secretCommand = new Command14().name("secret").description("Manage secrets for agent compose configurations").addCommand(setCommand).addCommand(listCommand).addCommand(deleteCommand);
+
 // src/index.ts
-var program = new Command11();
-program.name("vm0").description("VM0 CLI - A modern build tool").version("3.3.0");
+var program = new Command15();
+program.name("vm0").description("VM0 CLI - A modern build tool").version("3.5.0");
 program.command("hello").description("Say hello from the App").action(() => {
-  console.log(chalk11.blue("Welcome to the VM0 CLI!"));
-  console.log(chalk11.green(`Core says: ${FOO}`));
+  console.log(chalk14.blue("Welcome to the VM0 CLI!"));
+  console.log(chalk14.green(`Core says: ${FOO}`));
 });
 program.command("info").description("Display environment information").action(async () => {
-  console.log(chalk11.cyan("System Information:"));
+  console.log(chalk14.cyan("System Information:"));
   console.log(`Node Version: ${process.version}`);
   console.log(`Platform: ${process.platform}`);
   console.log(`Architecture: ${process.arch}`);
@@ -14167,6 +14322,7 @@ program.addCommand(buildCommand);
 program.addCommand(runCommand);
 program.addCommand(volumeCommand);
 program.addCommand(artifactCommand);
+program.addCommand(secretCommand);
 if (process.argv[1]?.endsWith("index.js") || process.argv[1]?.endsWith("index.ts") || process.argv[1]?.endsWith("vm0")) {
   program.parse();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "3.3.0",
+  "version": "3.5.0",
   "description": "CLI application",
   "repository": {
     "type": "git",