@vm0/cli 4.27.0 → 4.29.0

package/index.js

@@ -6,8 +6,8 @@ var __export = (target, all) => {
 };
 
 // src/index.ts
-import { Command as Command24 } from "commander";
-import chalk25 from "chalk";
+import { Command as Command25 } from "commander";
+import chalk26 from "chalk";
 
 // src/lib/auth.ts
 import chalk from "chalk";
@@ -12404,14 +12404,16 @@ var createComposeResponseSchema = external_exports.object({
 });
 var composesMainContract = c2.router({
   /**
-   * GET /api/agent/composes?name={name}
+   * GET /api/agent/composes?name={name}&scope={scope}
    * Get agent compose by name with HEAD version content
+   * If scope is not provided, uses the authenticated user's default scope
    */
   getByName: {
     method: "GET",
     path: "/api/agent/composes",
     query: external_exports.object({
-      name: external_exports.string().min(1, "Missing name query parameter")
+      name: external_exports.string().min(1, "Missing name query parameter"),
+      scope: external_exports.string().optional()
     }),
     responses: {
       200: composeResponseSchema,
@@ -13521,11 +13523,15 @@ var ApiClient = class {
     }
     return apiUrl;
   }
-  async getComposeByName(name) {
+  async getComposeByName(name, scope) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
+    const params = new URLSearchParams({ name });
+    if (scope) {
+      params.append("scope", scope);
+    }
     const response = await fetch(
-      `${baseUrl}/api/agent/composes?name=${encodeURIComponent(name)}`,
+      `${baseUrl}/api/agent/composes?${params.toString()}`,
       {
         method: "GET",
         headers
@@ -14664,19 +14670,20 @@ var composeCommand = new Command().name("compose").description("Create or update
     const response = await apiClient.createOrUpdateCompose({
       content: config2
     });
+    const scopeResponse = await apiClient.getScope();
     const shortVersionId = response.versionId.slice(0, 8);
+    const displayName = `${scopeResponse.slug}/${response.name}`;
     if (response.action === "created") {
-      console.log(chalk2.green(`\u2713 Compose created: ${response.name}`));
+      console.log(chalk2.green(`\u2713 Compose created: ${displayName}`));
     } else {
-      console.log(chalk2.green(`\u2713 Compose version exists: ${response.name}`));
+      console.log(chalk2.green(`\u2713 Compose version exists: ${displayName}`));
     }
-    console.log(chalk2.dim(`  Compose ID: ${response.composeId}`));
-    console.log(chalk2.dim(`  Version:    ${shortVersionId}`));
+    console.log(chalk2.dim(`  Version: ${shortVersionId}`));
     console.log();
     console.log("  Run your agent:");
     console.log(
       chalk2.cyan(
-        `    vm0 run ${response.name} --artifact-name <artifact> "your prompt"`
+        `    vm0 run ${displayName}:${shortVersionId} --artifact-name <artifact> "your prompt"`
       )
     );
   } catch (error43) {
@@ -15390,14 +15397,22 @@ function parseIdentifier(identifier) {
   if (isUUID(identifier)) {
     return { name: identifier };
   }
-  const colonIndex = identifier.lastIndexOf(":");
-  if (colonIndex > 0 && colonIndex < identifier.length - 1) {
+  let scope;
+  let rest = identifier;
+  const slashIndex = identifier.indexOf("/");
+  if (slashIndex > 0) {
+    scope = identifier.slice(0, slashIndex);
+    rest = identifier.slice(slashIndex + 1);
+  }
+  const colonIndex = rest.indexOf(":");
+  if (colonIndex > 0 && colonIndex < rest.length - 1) {
     return {
-      name: identifier.slice(0, colonIndex),
-      version: identifier.slice(colonIndex + 1)
+      scope,
+      name: rest.slice(0, colonIndex),
+      version: rest.slice(colonIndex + 1)
     };
   }
-  return { name: identifier };
+  return { scope, name: rest };
 }
 async function pollEvents(runId, options) {
   let nextSequence = 0;
@@ -15494,7 +15509,7 @@ function showNextSteps(result) {
 }
 var runCmd = new Command2().name("run").description("Execute an agent").argument(
   "<identifier>",
-  "Agent name, config ID, or name:version (e.g., 'my-agent', 'my-agent:abc123', 'my-agent:latest')"
+  "Agent reference: [scope/]name[:version] (e.g., 'my-agent', 'lancy/my-agent:abc123', 'my-agent:latest')"
 ).argument("<prompt>", "Prompt for the agent").option(
   "--vars <KEY=value>",
   "Variables for ${{ vars.xxx }} (repeatable, falls back to env vars and .env)",
@@ -15521,7 +15536,7 @@ var runCmd = new Command2().name("run").description("Execute an agent").argument
     const startTimestamp = /* @__PURE__ */ new Date();
     const verbose = options.verbose;
     try {
-      const { name, version: version2 } = parseIdentifier(identifier);
+      const { scope, name, version: version2 } = parseIdentifier(identifier);
       let composeId;
       let composeContent;
       if (isUUID(name)) {
@@ -15540,10 +15555,11 @@ var runCmd = new Command2().name("run").description("Execute an agent").argument
         }
       } else {
         if (verbose) {
-          console.log(chalk5.dim(`  Resolving agent name: ${name}`));
+          const displayRef = scope ? `${scope}/${name}` : name;
+          console.log(chalk5.dim(`  Resolving agent: ${displayRef}`));
         }
         try {
-          const compose = await apiClient.getComposeByName(name);
+          const compose = await apiClient.getComposeByName(name, scope);
           composeId = compose.id;
           composeContent = compose.content;
           if (verbose) {
@@ -15551,7 +15567,8 @@ var runCmd = new Command2().name("run").description("Execute an agent").argument
           }
         } catch (error43) {
           if (error43 instanceof Error) {
-            console.error(chalk5.red(`\u2717 Agent not found: ${name}`));
+            const displayRef = scope ? `${scope}/${name}` : name;
+            console.error(chalk5.red(`\u2717 Agent not found: ${displayRef}`));
             console.error(
               chalk5.dim(
                 "  Make sure you've composed the agent with: vm0 compose"
@@ -16797,7 +16814,7 @@ async function autoPullArtifact(runOutput, artifactDir) {
 }
 var cookCmd = new Command13().name("cook").description("One-click agent preparation and execution from vm0.yaml");
 cookCmd.argument("[prompt]", "Prompt for the agent").action(async (prompt) => {
-  const shouldExit = await checkAndUpgrade("4.27.0", prompt);
+  const shouldExit = await checkAndUpgrade("4.29.0", prompt);
   if (shouldExit) {
     process.exit(0);
   }
@@ -17935,11 +17952,473 @@ var initCommand3 = new Command23().name("init").description("Initialize a new VM
   console.log(`  3. Run your agent: ${chalk24.cyan('vm0 cook "your prompt"')}`);
 });
 
+// src/commands/setup-github.ts
+import { Command as Command24 } from "commander";
+import chalk25 from "chalk";
+import * as readline3 from "readline";
+import { existsSync as existsSync10 } from "fs";
+import { mkdir as mkdir7, readFile as readFile8, writeFile as writeFile8 } from "fs/promises";
+import { execSync, spawnSync } from "child_process";
+import { parse as parseYaml4 } from "yaml";
+function isGhInstalled() {
+  try {
+    execSync("gh --version", { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isGhAuthenticated() {
+  try {
+    execSync("gh auth status", { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function checkPrerequisites() {
+  console.log("Checking prerequisites...");
+  if (!isGhInstalled()) {
+    console.log(chalk25.red("\u2717 GitHub CLI (gh) is not installed"));
+    console.log();
+    console.log("GitHub CLI is required for this command.");
+    console.log();
+    console.log(`  macOS:  ${chalk25.cyan("brew install gh")}`);
+    console.log(`  Other:  ${chalk25.cyan("https://cli.github.com/")}`);
+    console.log();
+    console.log("After installation, run:");
+    console.log(`  ${chalk25.cyan("gh auth login")}`);
+    console.log();
+    console.log("Then try again:");
+    console.log(`  ${chalk25.cyan("vm0 setup-github")}`);
+    process.exit(1);
+  }
+  console.log(chalk25.green("\u2713 GitHub CLI (gh) is installed"));
+  if (!isGhAuthenticated()) {
+    console.log(chalk25.red("\u2717 GitHub CLI is not authenticated"));
+    console.log();
+    console.log("Please authenticate GitHub CLI first:");
+    console.log(`  ${chalk25.cyan("gh auth login")}`);
+    console.log();
+    console.log("Then try again:");
+    console.log(`  ${chalk25.cyan("vm0 setup-github")}`);
+    process.exit(1);
+  }
+  console.log(chalk25.green("\u2713 GitHub CLI is authenticated"));
+  const token = await getToken();
+  if (!token) {
+    console.log(chalk25.red("\u2717 VM0 not authenticated"));
+    console.log();
+    console.log("Please authenticate with VM0 first:");
+    console.log(`  ${chalk25.cyan("vm0 auth login")}`);
+    console.log();
+    console.log("Then try again:");
+    console.log(`  ${chalk25.cyan("vm0 setup-github")}`);
+    process.exit(1);
+  }
+  console.log(chalk25.green("\u2713 VM0 authenticated"));
+  if (!existsSync10("vm0.yaml")) {
+    console.log(chalk25.red("\u2717 vm0.yaml not found"));
+    console.log();
+    console.log("This command requires a vm0.yaml configuration file.");
+    console.log();
+    console.log("To create one, run:");
+    console.log(`  ${chalk25.cyan("vm0 init")}`);
+    console.log();
+    console.log("Then try again:");
+    console.log(`  ${chalk25.cyan("vm0 setup-github")}`);
+    process.exit(1);
+  }
+  console.log(chalk25.green("\u2713 vm0.yaml found"));
+  return token;
+}
+function generatePublishYaml() {
+  return `name: Publish Agent
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'vm0.yaml'
+      - 'AGENTS.md'
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Publish Agent
+        uses: vm0-ai/compose-action@v1
+        id: compose
+        with:
+          vm0-token: \${{ secrets.VM0_TOKEN }}
+
+      - name: Show Results
+        run: |
+          echo "Agent: \${{ steps.compose.outputs.name }}"
+          echo "Compose ID: \${{ steps.compose.outputs.compose-id }}"
+          echo "Version: \${{ steps.compose.outputs.version-id }}"
+          echo "Action: \${{ steps.compose.outputs.action }}"
+`;
+}
+function generateRunYaml(agentName, secrets, vars) {
+  const otherSecrets = secrets.filter((s) => s !== "VM0_TOKEN");
+  const secretsLines = otherSecrets.map((s) => `            ${s}=\${{ secrets.${s} }}`).join("\n");
+  const varsLines = vars.map((v) => `            ${v}=\${{ vars.${v} }}`).join("\n");
+  let yaml = `name: Run Agent
+
+on:
+  # Uncomment to enable scheduled runs:
+  # schedule:
+  #   - cron: '0 1 * * *'  # Daily at 9:00 AM UTC+8
+  workflow_dispatch:
+    inputs:
+      prompt:
+        description: 'Prompt for the agent'
+        required: false
+        default: 'do the job'
+
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Run Agent
+        uses: vm0-ai/run-action@v1
+        with:
+          agent: ${agentName}
+          prompt: \${{ github.event.inputs.prompt || 'do the job' }}
+          silent: true
+          vm0-token: \${{ secrets.VM0_TOKEN }}`;
+  if (secretsLines) {
+    yaml += `
+          secrets: |
+${secretsLines}`;
+  }
+  if (varsLines) {
+    yaml += `
+          vars: |
+${varsLines}`;
+  }
+  yaml += "\n";
+  return yaml;
+}
+function extractSecretsAndVars(config2) {
+  const secrets = /* @__PURE__ */ new Set();
+  const vars = /* @__PURE__ */ new Set();
+  const refs = extractVariableReferences(config2);
+  const grouped = groupVariablesBySource(refs);
+  for (const ref of grouped.secrets) {
+    secrets.add(ref.name);
+  }
+  for (const ref of grouped.vars) {
+    vars.add(ref.name);
+  }
+  const cfg = config2;
+  const agents = cfg.agents;
+  if (agents) {
+    const agentConfig = Object.values(agents)[0];
+    if (agentConfig) {
+      const expSecrets = agentConfig.experimental_secrets;
+      const expVars = agentConfig.experimental_vars;
+      if (expSecrets) {
+        for (const s of expSecrets) {
+          secrets.add(s);
+        }
+      }
+      if (expVars) {
+        for (const v of expVars) {
+          vars.add(v);
+        }
+      }
+    }
+  }
+  secrets.add("VM0_TOKEN");
+  return {
+    secrets: Array.from(secrets).sort(),
+    vars: Array.from(vars).sort()
+  };
+}
+async function promptYesNo(question, defaultYes) {
+  const hint = defaultYes ? "(Y/n)" : "(y/N)";
+  const rl = readline3.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+  return new Promise((resolve2) => {
+    rl.question(chalk25.cyan(`? ${question} ${hint} `), (answer) => {
+      rl.close();
+      const normalized = answer.trim().toLowerCase();
+      if (normalized === "") {
+        resolve2(defaultYes);
+      } else {
+        resolve2(normalized === "y" || normalized === "yes");
+      }
+    });
+  });
+}
+function setGitHubSecret(name, value) {
+  const result = spawnSync("gh", ["secret", "set", name], {
+    input: value,
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  return result.status === 0;
+}
+function setGitHubVariable(name, value) {
+  const result = spawnSync("gh", ["variable", "set", name, "--body", value], {
+    stdio: ["pipe", "pipe", "pipe"]
+  });
+  return result.status === 0;
+}
+async function detectSecretValues(secrets, vars, vm0Token) {
+  const secretStatuses = secrets.map((name) => {
+    if (name === "VM0_TOKEN") {
+      return { name, found: true, source: "vm0 auth", value: vm0Token };
+    }
+    const envValue = process.env[name];
+    if (envValue) {
+      return { name, found: true, source: "environment", value: envValue };
+    }
+    return { name, found: false };
+  });
+  const varStatuses = vars.map((name) => {
+    const envValue = process.env[name];
+    if (envValue) {
+      return { name, found: true, source: "environment", value: envValue };
+    }
+    return { name, found: false };
+  });
+  return { secretStatuses, varStatuses };
+}
+function displaySecretsTable(secretStatuses, varStatuses) {
+  console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+  console.log("\u2502 Detected secrets and variables:                         \u2502");
+  console.log("\u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524");
+  if (secretStatuses.length > 0) {
+    console.log("\u2502 Secrets:                                                \u2502");
+    for (const s of secretStatuses) {
+      const status = s.found ? chalk25.green("\u2713") : chalk25.red("\u2717");
+      const source = s.found ? `(from ${s.source})` : "not found";
+      const paddedName = (s.name + " ").padEnd(23, ".");
+      console.log(`\u2502   ${status} ${paddedName} ${source.padEnd(19)}\u2502`);
+    }
+  }
+  if (varStatuses.length > 0) {
+    console.log("\u2502 Variables:                                              \u2502");
+    for (const v of varStatuses) {
+      const status = v.found ? chalk25.green("\u2713") : chalk25.red("\u2717");
+      const source = v.found ? `(from ${v.source})` : "not found";
+      const paddedName = (v.name + " ").padEnd(23, ".");
+      console.log(`\u2502   ${status} ${paddedName} ${source.padEnd(19)}\u2502`);
+    }
+  }
+  console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+}
+function showManualSetupInstructions(secrets, vars) {
+  console.log("Skipped automatic setup. Configure secrets manually:");
+  console.log();
+  console.log("  Step 1: Get your VM0 token");
+  console.log(`    ${chalk25.cyan("vm0 auth setup-token")}`);
+  console.log();
+  console.log("  Step 2: Set GitHub secrets");
+  for (const s of secrets) {
+    console.log(`    ${chalk25.cyan(`gh secret set ${s}`)}`);
+  }
+  if (vars.length > 0) {
+    console.log();
+    console.log("  Step 3: Set GitHub variables");
+    for (const v of vars) {
+      console.log(`    ${chalk25.cyan(`gh variable set ${v}`)}`);
+    }
+  }
+}
+function showSuccessMessage() {
+  console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+  console.log("\u2502 \u2713 GitHub Actions setup complete!                        \u2502");
+  console.log("\u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524");
+  console.log("\u2502 Workflows created:                                      \u2502");
+  console.log("\u2502   \u2022 .github/workflows/publish.yml                       \u2502");
+  console.log("\u2502   \u2022 .github/workflows/run.yml                           \u2502");
+  console.log("\u2502                                                         \u2502");
+  console.log("\u2502 Next steps:                                             \u2502");
+  console.log("\u2502   1. Commit and push the workflow files                 \u2502");
+  console.log("\u2502   2. Push to main branch to trigger publish             \u2502");
+  console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+}
+function showPartialSuccessMessage(missingSecrets, missingVars) {
+  console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+  console.log("\u2502 \u26A0 Setup partially complete                              \u2502");
+  console.log("\u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524");
+  console.log("\u2502 Missing secrets - set them manually:                    \u2502");
+  for (const s of missingSecrets) {
+    console.log(`\u2502   gh secret set ${s.padEnd(40)}\u2502`);
+  }
+  for (const v of missingVars) {
+    console.log(`\u2502   gh variable set ${v.padEnd(38)}\u2502`);
+  }
+  console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+}
+function showWorkflowsCreatedMessage() {
+  console.log("\u250C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2510");
+  console.log("\u2502 \u2713 Workflow files created!                               \u2502");
+  console.log("\u251C\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2524");
+  console.log("\u2502   \u2022 .github/workflows/publish.yml                       \u2502");
+  console.log("\u2502   \u2022 .github/workflows/run.yml                           \u2502");
+  console.log("\u2502                                                         \u2502");
+  console.log("\u2502 Next steps:                                             \u2502");
+  console.log("\u2502   1. Set GitHub secrets (see commands above)            \u2502");
+  console.log("\u2502   2. Commit and push the workflow files                 \u2502");
+  console.log("\u2502   3. Push to main branch to trigger publish             \u2502");
+  console.log("\u2514\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2518");
+}
+var setupGithubCommand = new Command24().name("setup-github").description("Initialize GitHub Actions workflows for agent deployment").option("-f, --force", "Overwrite existing workflow files").option("-y, --yes", "Auto-confirm all prompts").option("--skip-secrets", "Skip automatic secrets/variables setup").action(
+  async (options) => {
+    const vm0Token = await checkPrerequisites();
+    if (!vm0Token) {
+      process.exit(1);
+    }
+    console.log();
+    console.log("Analyzing vm0.yaml...");
+    const content = await readFile8("vm0.yaml", "utf8");
+    const config2 = parseYaml4(content);
+    const agents = config2.agents;
+    const agentName = Object.keys(agents)[0];
+    console.log(chalk25.green(`\u2713 Agent: ${agentName}`));
+    const { secrets, vars } = extractSecretsAndVars(config2);
+    console.log(
+      chalk25.green(
+        `\u2713 Found ${secrets.length} secrets, ${vars.length} variables`
+      )
+    );
+    console.log();
+    const publishPath = ".github/workflows/publish.yml";
+    const runPath = ".github/workflows/run.yml";
+    const existingFiles = [];
+    if (existsSync10(publishPath)) existingFiles.push(publishPath);
+    if (existsSync10(runPath)) existingFiles.push(runPath);
+    if (existingFiles.length > 0 && !options.force) {
+      console.log(chalk25.yellow("\u26A0 Existing workflow files detected:"));
+      for (const file2 of existingFiles) {
+        console.log(`  \u2022 ${file2}`);
+      }
+      console.log();
+      if (!options.yes) {
+        const overwrite = await promptYesNo(
+          "Overwrite existing files?",
+          false
+        );
+        if (!overwrite) {
+          console.log();
+          console.log("Aborted. To force overwrite, run:");
+          console.log(`  ${chalk25.cyan("vm0 setup-github --force")}`);
+          process.exit(0);
+        }
+      }
+      console.log();
+    }
+    console.log("Creating workflow files...");
+    await mkdir7(".github/workflows", { recursive: true });
+    await writeFile8(publishPath, generatePublishYaml());
+    const publishStatus = existingFiles.includes(publishPath) ? "Overwrote" : "Created";
+    console.log(chalk25.green(`\u2713 ${publishStatus} ${publishPath}`));
+    await writeFile8(runPath, generateRunYaml(agentName, secrets, vars));
+    const runStatus = existingFiles.includes(runPath) ? "Overwrote" : "Created";
+    console.log(chalk25.green(`\u2713 ${runStatus} ${runPath}`));
+    console.log();
+    if (options.skipSecrets) {
+      console.log(chalk25.green("\u2713 Done (secrets setup skipped)"));
+      return;
+    }
+    const { secretStatuses, varStatuses } = await detectSecretValues(
+      secrets,
+      vars,
+      vm0Token
+    );
+    displaySecretsTable(secretStatuses, varStatuses);
+    console.log();
+    const hasFoundValues = secretStatuses.some((s) => s.found) || varStatuses.some((v) => v.found);
+    if (!hasFoundValues) {
+      console.log("No secret/variable values found in environment.");
+      console.log();
+      showManualSetupInstructions(secrets, vars);
+      console.log();
+      showWorkflowsCreatedMessage();
+      return;
+    }
+    let shouldSetup = options.yes;
+    if (!shouldSetup) {
+      shouldSetup = await promptYesNo(
+        "Set up GitHub secrets/variables automatically?",
+        true
+      );
+    }
+    if (!shouldSetup) {
+      console.log();
+      showManualSetupInstructions(secrets, vars);
+      console.log();
+      showWorkflowsCreatedMessage();
+      return;
+    }
+    console.log();
+    console.log("Setting secrets...");
+    const failedSecrets = [];
+    for (const s of secretStatuses) {
+      if (s.found && s.value) {
+        const success2 = setGitHubSecret(s.name, s.value);
+        if (success2) {
+          console.log(`  ${chalk25.green("\u2713")} ${s.name}`);
+        } else {
+          console.log(`  ${chalk25.red("\u2717")} ${s.name} (failed)`);
+          failedSecrets.push(s.name);
+        }
+      } else {
+        console.log(
+          `  ${chalk25.yellow("\u26A0")} ${s.name} (skipped - not found)`
+        );
+      }
+    }
+    const failedVars = [];
+    if (varStatuses.length > 0) {
+      console.log();
+      console.log("Setting variables...");
+      for (const v of varStatuses) {
+        if (v.found && v.value) {
+          const success2 = setGitHubVariable(v.name, v.value);
+          if (success2) {
+            console.log(`  ${chalk25.green("\u2713")} ${v.name}`);
+          } else {
+            console.log(`  ${chalk25.red("\u2717")} ${v.name} (failed)`);
+            failedVars.push(v.name);
+          }
+        } else {
+          console.log(
+            `  ${chalk25.yellow("\u26A0")} ${v.name} (skipped - not found)`
+          );
+        }
+      }
+    }
+    console.log();
+    const missingSecrets = [
+      ...secretStatuses.filter((s) => !s.found).map((s) => s.name),
+      ...failedSecrets
+    ];
+    const missingVars = [
+      ...varStatuses.filter((v) => !v.found).map((v) => v.name),
+      ...failedVars
+    ];
+    if (missingSecrets.length === 0 && missingVars.length === 0) {
+      showSuccessMessage();
+    } else {
+      showPartialSuccessMessage(missingSecrets, missingVars);
+    }
+  }
+);
+
 // src/index.ts
-var program = new Command24();
-program.name("vm0").description("VM0 CLI - A modern build tool").version("4.27.0");
+var program = new Command25();
+program.name("vm0").description("VM0 CLI - A modern build tool").version("4.29.0");
 program.command("info").description("Display environment information").action(async () => {
-  console.log(chalk25.bold("System Information:"));
+  console.log(chalk26.bold("System Information:"));
   console.log(`Node Version: ${process.version}`);
   console.log(`Platform: ${process.platform}`);
   console.log(`Architecture: ${process.arch}`);
@@ -17968,6 +18447,7 @@ program.addCommand(imageCommand);
 program.addCommand(logsCommand);
 program.addCommand(scopeCommand);
 program.addCommand(initCommand3);
+program.addCommand(setupGithubCommand);
 if (process.argv[1]?.endsWith("index.js") || process.argv[1]?.endsWith("index.ts") || process.argv[1]?.endsWith("vm0")) {
   program.parse();
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "4.27.0",
+  "version": "4.29.0",
   "description": "CLI application",
   "repository": {
     "type": "git",