@vm0/cli 4.34.0 → 4.35.1

package/index.js

@@ -984,10 +984,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path14) {
-  if (!path14)
+function getElementAtPath(obj, path15) {
+  if (!path15)
     return obj;
-  return path14.reduce((acc, key) => acc?.[key], obj);
+  return path15.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -1346,11 +1346,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path14, issues) {
+function prefixIssues(path15, issues) {
   return issues.map((iss) => {
     var _a;
     (_a = iss).path ?? (_a.path = []);
-    iss.path.unshift(path14);
+    iss.path.unshift(path15);
     return iss;
   });
 }
@@ -1518,7 +1518,7 @@ function treeifyError(error43, _mapper) {
     return issue2.message;
   };
   const result = { errors: [] };
-  const processError = (error44, path14 = []) => {
+  const processError = (error44, path15 = []) => {
     var _a, _b;
     for (const issue2 of error44.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -1528,7 +1528,7 @@ function treeifyError(error43, _mapper) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path14, ...issue2.path];
+        const fullpath = [...path15, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -1560,8 +1560,8 @@ function treeifyError(error43, _mapper) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path14 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path14) {
+  const path15 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path15) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -2760,7 +2760,7 @@ var $ZodBase64 = /* @__PURE__ */ $constructor("$ZodBase64", (inst, def) => {
 function isValidBase64URL(data) {
   if (!base64url.test(data))
     return false;
-  const base643 = data.replace(/[-_]/g, (c11) => c11 === "-" ? "+" : "/");
+  const base643 = data.replace(/[-_]/g, (c12) => c12 === "-" ? "+" : "/");
   const padded = base643.padEnd(Math.ceil(base643.length / 4) * 4, "=");
   return isValidBase64(padded);
 }
@@ -11672,9 +11672,9 @@ var ZodDate = /* @__PURE__ */ $constructor("ZodDate", (inst, def) => {
   ZodType.init(inst, def);
   inst.min = (value, params) => inst.check(_gte(value, params));
   inst.max = (value, params) => inst.check(_lte(value, params));
-  const c11 = inst._zod.bag;
-  inst.minDate = c11.minimum ? new Date(c11.minimum) : null;
-  inst.maxDate = c11.maximum ? new Date(c11.maximum) : null;
+  const c12 = inst._zod.bag;
+  inst.minDate = c12.minimum ? new Date(c12.minimum) : null;
+  inst.maxDate = c12.maximum ? new Date(c12.maximum) : null;
 });
 function date3(params) {
   return _date(ZodDate, params);
@@ -12302,7 +12302,17 @@ var agentDefinitionSchema = external_exports.object({
    * Array of GitHub tree URLs for agent skills.
    * Each skill is auto-downloaded and mounted at /home/user/.claude/skills/{skillName}/
    */
-  skills: external_exports.array(external_exports.string()).optional()
+  skills: external_exports.array(external_exports.string()).optional(),
+  /**
+   * Route this agent to a self-hosted runner instead of E2B.
+   * When specified, runs will be queued for the specified runner group.
+   */
+  experimental_runner: external_exports.object({
+    group: external_exports.string().regex(
+      /^[a-z0-9-]+\/[a-z0-9-]+$/,
+      "Runner group must be in scope/name format (e.g., acme/production)"
+    )
+  }).optional()
 });
 var agentComposeContentSchema = external_exports.object({
   version: external_exports.string().min(1, "Version is required"),
@@ -13602,6 +13612,106 @@ var checkpointsByIdContract = c10.router({
   }
 });
 
+// ../../packages/core/src/contracts/runners.ts
+var c11 = initContract();
+var runnerGroupSchema = external_exports.string().regex(
+  /^[a-z0-9-]+\/[a-z0-9-]+$/,
+  "Runner group must be in scope/name format (e.g., acme/production)"
+);
+var jobSchema = external_exports.object({
+  runId: external_exports.string().uuid(),
+  prompt: external_exports.string(),
+  agentComposeVersionId: external_exports.string(),
+  vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  secretNames: external_exports.array(external_exports.string()).nullable(),
+  checkpointId: external_exports.string().uuid().nullable()
+});
+var runnersPollContract = c11.router({
+  poll: {
+    method: "POST",
+    path: "/api/runners/poll",
+    body: external_exports.object({
+      group: runnerGroupSchema
+    }),
+    responses: {
+      200: external_exports.object({
+        job: jobSchema.nullable()
+      }),
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Poll for pending jobs (long-polling with 30s timeout)"
+  }
+});
+var storageEntrySchema = external_exports.object({
+  mountPath: external_exports.string(),
+  archiveUrl: external_exports.string().nullable()
+});
+var artifactEntrySchema = external_exports.object({
+  mountPath: external_exports.string(),
+  archiveUrl: external_exports.string().nullable(),
+  vasStorageName: external_exports.string(),
+  vasVersionId: external_exports.string()
+});
+var storageManifestSchema = external_exports.object({
+  storages: external_exports.array(storageEntrySchema),
+  artifact: artifactEntrySchema.nullable()
+});
+var resumeSessionSchema = external_exports.object({
+  sessionId: external_exports.string(),
+  sessionHistory: external_exports.string()
+});
+var storedExecutionContextSchema = external_exports.object({
+  workingDir: external_exports.string(),
+  storageManifest: storageManifestSchema.nullable(),
+  environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  resumeSession: resumeSessionSchema.nullable(),
+  encryptedSecrets: external_exports.string().nullable(),
+  // AES-256-GCM encrypted secrets
+  cliAgentType: external_exports.string(),
+  experimentalNetworkSecurity: external_exports.boolean().optional()
+});
+var executionContextSchema = external_exports.object({
+  runId: external_exports.string().uuid(),
+  prompt: external_exports.string(),
+  agentComposeVersionId: external_exports.string(),
+  vars: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  secretNames: external_exports.array(external_exports.string()).nullable(),
+  checkpointId: external_exports.string().uuid().nullable(),
+  sandboxToken: external_exports.string(),
+  apiUrl: external_exports.string(),
+  // New fields for E2B parity:
+  workingDir: external_exports.string(),
+  storageManifest: storageManifestSchema.nullable(),
+  environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  resumeSession: resumeSessionSchema.nullable(),
+  secretValues: external_exports.array(external_exports.string()).nullable(),
+  cliAgentType: external_exports.string()
+});
+var runnersJobClaimContract = c11.router({
+  claim: {
+    method: "POST",
+    path: "/api/runners/jobs/:id/claim",
+    pathParams: external_exports.object({
+      id: external_exports.string().uuid()
+    }),
+    body: external_exports.object({}),
+    responses: {
+      200: executionContextSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      403: apiErrorSchema,
+      // Job does not belong to user
+      404: apiErrorSchema,
+      409: apiErrorSchema,
+      // Already claimed
+      500: apiErrorSchema
+    },
+    summary: "Claim a pending job for execution"
+  }
+});
+
 // ../../packages/core/src/scope-reference.ts
 function getLegacySystemTemplateWarning(legacyFormat) {
   if (!isLegacySystemTemplate(legacyFormat)) {
@@ -14050,7 +14160,7 @@ var ApiClient = class {
   /**
    * Generic GET request
    */
-  async get(path14) {
+  async get(path15) {
     const baseUrl = await this.getBaseUrl();
     const token = await getToken();
     if (!token) {
@@ -14063,7 +14173,7 @@ var ApiClient = class {
     if (bypassSecret) {
       headers["x-vercel-protection-bypass"] = bypassSecret;
     }
-    return fetch(`${baseUrl}${path14}`, {
+    return fetch(`${baseUrl}${path15}`, {
       method: "GET",
       headers
     });
@@ -14071,7 +14181,7 @@ var ApiClient = class {
   /**
    * Generic POST request
    */
-  async post(path14, options) {
+  async post(path15, options) {
     const baseUrl = await this.getBaseUrl();
     const token = await getToken();
     if (!token) {
@@ -14087,7 +14197,7 @@ var ApiClient = class {
     if (bypassSecret) {
       headers["x-vercel-protection-bypass"] = bypassSecret;
     }
-    return fetch(`${baseUrl}${path14}`, {
+    return fetch(`${baseUrl}${path15}`, {
       method: "POST",
       headers,
       body: options?.body
@@ -14096,7 +14206,7 @@ var ApiClient = class {
   /**
    * Generic DELETE request
    */
-  async delete(path14) {
+  async delete(path15) {
     const baseUrl = await this.getBaseUrl();
     const token = await getToken();
     if (!token) {
@@ -14109,7 +14219,7 @@ var ApiClient = class {
     if (bypassSecret) {
       headers["x-vercel-protection-bypass"] = bypassSecret;
     }
-    return fetch(`${baseUrl}${path14}`, {
+    return fetch(`${baseUrl}${path15}`, {
       method: "DELETE",
       headers
     });
@@ -15381,9 +15491,9 @@ var CodexEventParser = class {
       }
     }
     if (itemType === "file_change" && item.changes && item.changes.length > 0) {
-      const changes = item.changes.map((c11) => {
-        const action = c11.kind === "add" ? "Created" : c11.kind === "modify" ? "Modified" : "Deleted";
-        return `${action}: ${c11.path}`;
+      const changes = item.changes.map((c12) => {
+        const action = c12.kind === "add" ? "Created" : c12.kind === "modify" ? "Modified" : "Deleted";
+        return `${action}: ${c12.path}`;
       }).join("\n");
       return {
         type: "text",
@@ -15724,9 +15834,9 @@ var CodexEventRenderer = class {
       return;
     }
     if (itemType === "file_change" && item.changes && item.changes.length > 0) {
-      const summary = item.changes.map((c11) => {
-        const icon = c11.kind === "add" ? "+" : c11.kind === "delete" ? "-" : "~";
-        return `${icon}${c11.path}`;
+      const summary = item.changes.map((c12) => {
+        const icon = c12.kind === "add" ? "+" : c12.kind === "delete" ? "-" : "~";
+        return `${icon}${c12.path}`;
       }).join(", ");
       console.log(chalk4.green("[files]") + ` ${summary}`);
       return;
@@ -17624,7 +17734,7 @@ async function autoPullArtifact(runOutput, artifactDir) {
 }
 var cookCmd = new Command17().name("cook").description("One-click agent preparation and execution from vm0.yaml");
 cookCmd.argument("[prompt]", "Prompt for the agent").option("-y, --yes", "Skip confirmation prompts").action(async (prompt, options) => {
-  const shouldExit = await checkAndUpgrade("4.34.0", prompt);
+  const shouldExit = await checkAndUpgrade("4.35.1", prompt);
   if (shouldExit) {
     process.exit(0);
   }
@@ -18773,6 +18883,7 @@ import chalk30 from "chalk";
 import { existsSync as existsSync11 } from "fs";
 import { mkdir as mkdir7, readFile as readFile9, writeFile as writeFile8 } from "fs/promises";
 import { execSync, spawnSync } from "child_process";
+import path14 from "path";
 import { parse as parseYaml5 } from "yaml";
 function isGhInstalled() {
   try {
@@ -18790,8 +18901,36 @@ function isGhAuthenticated() {
     return false;
   }
 }
+function getGitRoot() {
+  try {
+    return execSync("git rev-parse --show-toplevel", {
+      encoding: "utf8"
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function getRelativeWorkingDir(gitRoot) {
+  const cwd = process.cwd();
+  if (cwd === gitRoot) {
+    return null;
+  }
+  const relativePath = path14.relative(gitRoot, cwd);
+  return relativePath.replace(/\\/g, "/");
+}
 async function checkPrerequisites() {
   console.log("Checking prerequisites...");
+  const gitRoot = getGitRoot();
+  if (!gitRoot) {
+    console.log(chalk30.red("\u2717 Not in a git repository"));
+    console.log();
+    console.log("This command must be run from within a git repository.");
+    console.log();
+    console.log("To initialize a git repository, run:");
+    console.log(`  ${chalk30.cyan("git init")}`);
+    process.exit(1);
+  }
+  console.log(chalk30.green("\u2713 Git repository detected"));
   if (!isGhInstalled()) {
     console.log(chalk30.red("\u2717 GitHub CLI (gh) is not installed"));
     console.log();
@@ -18844,17 +18983,20 @@ async function checkPrerequisites() {
     process.exit(1);
   }
   console.log(chalk30.green("\u2713 vm0.yaml found"));
-  return token;
+  return { token, gitRoot };
 }
-function generatePublishYaml() {
+function generatePublishYaml(workingDir) {
+  const pathPrefix = workingDir ? `${workingDir}/` : "";
+  const workingDirYaml = workingDir ? `          working-directory: ${workingDir}
+` : "";
   return `name: Publish Agent
 
 on:
   push:
     branches: [main]
     paths:
-      - 'vm0.yaml'
-      - 'AGENTS.md'
+      - '${pathPrefix}vm0.yaml'
+      - '${pathPrefix}AGENTS.md'
 
 jobs:
   publish:
@@ -18867,7 +19009,7 @@ jobs:
         id: compose
         with:
           vm0-token: \${{ secrets.VM0_TOKEN }}
-
+${workingDirYaml}
       - name: Show Results
         run: |
           echo "Agent: \${{ steps.compose.outputs.name }}"
@@ -19073,10 +19215,12 @@ function showWorkflowsCreatedMessage() {
 }
 var setupGithubCommand = new Command28().name("setup-github").description("Initialize GitHub Actions workflows for agent deployment").option("-f, --force", "Overwrite existing workflow files").option("-y, --yes", "Auto-confirm all prompts").option("--skip-secrets", "Skip automatic secrets/variables setup").action(
   async (options) => {
-    const vm0Token = await checkPrerequisites();
-    if (!vm0Token) {
+    const prereqs = await checkPrerequisites();
+    if (!prereqs) {
       process.exit(1);
     }
+    const { token: vm0Token, gitRoot } = prereqs;
+    const workingDir = getRelativeWorkingDir(gitRoot);
     console.log();
     console.log("Analyzing vm0.yaml...");
     const content = await readFile9("vm0.yaml", "utf8");
@@ -19091,11 +19235,13 @@ var setupGithubCommand = new Command28().name("setup-github").description("Initi
       )
     );
     console.log();
-    const publishPath = ".github/workflows/publish.yml";
-    const runPath = ".github/workflows/run.yml";
+    const publishPath = path14.join(gitRoot, ".github/workflows/publish.yml");
+    const runPath = path14.join(gitRoot, ".github/workflows/run.yml");
+    const displayPublishPath = ".github/workflows/publish.yml";
+    const displayRunPath = ".github/workflows/run.yml";
     const existingFiles = [];
-    if (existsSync11(publishPath)) existingFiles.push(publishPath);
-    if (existsSync11(runPath)) existingFiles.push(runPath);
+    if (existsSync11(publishPath)) existingFiles.push(displayPublishPath);
+    if (existsSync11(runPath)) existingFiles.push(displayRunPath);
     if (existingFiles.length > 0 && !options.force) {
       console.log(chalk30.yellow("\u26A0 Existing workflow files detected:"));
       for (const file2 of existingFiles) {
@@ -19117,13 +19263,13 @@ var setupGithubCommand = new Command28().name("setup-github").description("Initi
       console.log();
     }
     console.log("Creating workflow files...");
-    await mkdir7(".github/workflows", { recursive: true });
-    await writeFile8(publishPath, generatePublishYaml());
-    const publishStatus = existingFiles.includes(publishPath) ? "Overwrote" : "Created";
-    console.log(chalk30.green(`\u2713 ${publishStatus} ${publishPath}`));
+    await mkdir7(path14.join(gitRoot, ".github/workflows"), { recursive: true });
+    await writeFile8(publishPath, generatePublishYaml(workingDir));
+    const publishStatus = existingFiles.includes(displayPublishPath) ? "Overwrote" : "Created";
+    console.log(chalk30.green(`\u2713 ${publishStatus} ${displayPublishPath}`));
     await writeFile8(runPath, generateRunYaml(agentName, secrets, vars));
-    const runStatus = existingFiles.includes(runPath) ? "Overwrote" : "Created";
-    console.log(chalk30.green(`\u2713 ${runStatus} ${runPath}`));
+    const runStatus = existingFiles.includes(displayRunPath) ? "Overwrote" : "Created";
+    console.log(chalk30.green(`\u2713 ${runStatus} ${displayRunPath}`));
     console.log();
     if (options.skipSecrets) {
       console.log(chalk30.green("\u2713 Done (secrets setup skipped)"));
@@ -19216,7 +19362,7 @@ var setupGithubCommand = new Command28().name("setup-github").description("Initi
 
 // src/index.ts
 var program = new Command29();
-program.name("vm0").description("VM0 CLI - A modern build tool").version("4.34.0");
+program.name("vm0").description("VM0 CLI - A modern build tool").version("4.35.1");
 program.command("info").description("Display environment information").action(async () => {
   console.log(chalk31.bold("System Information:"));
   console.log(`Node Version: ${process.version}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "4.34.0",
+  "version": "4.35.1",
   "description": "CLI application",
   "repository": {
     "type": "git",