@vm0/cli 4.5.1 → 4.6.0

package/index.js

@@ -391,6 +391,28 @@ var ApiClient = class {
     }
     return await response.json();
   }
+  async getNetworkLogs(runId, options) {
+    const baseUrl = await this.getBaseUrl();
+    const headers = await this.getHeaders();
+    const params = new URLSearchParams();
+    if (options?.since !== void 0) {
+      params.set("since", String(options.since));
+    }
+    if (options?.limit !== void 0) {
+      params.set("limit", String(options.limit));
+    }
+    const queryString = params.toString();
+    const url2 = `${baseUrl}/api/agent/runs/${runId}/telemetry/network${queryString ? `?${queryString}` : ""}`;
+    const response = await fetch(url2, {
+      method: "GET",
+      headers
+    });
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || "Failed to fetch network logs");
+    }
+    return await response.json();
+  }
   async createImage(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
@@ -813,35 +835,34 @@ var EventRenderer = class {
     return `${(elapsedMs / 1e3).toFixed(1)}s`;
   }
   /**
-   * Format timestamp for display
+   * Format timestamp for display (without milliseconds, matching metrics format)
    */
   static formatTimestamp(timestamp) {
-    return timestamp.toISOString();
+    return timestamp.toISOString().replace(/\.\d{3}Z$/, "Z");
   }
   /**
    * Render a parsed event to console
    */
   static render(event, options) {
-    const timestampPrefix = options?.showTimestamp ? chalk3.gray(`[${this.formatTimestamp(event.timestamp)}] `) : "";
-    const elapsedPrefix = options?.verbose && options?.previousTimestamp ? chalk3.gray(
+    const timestampPrefix = options?.showTimestamp ? `[${this.formatTimestamp(event.timestamp)}] ` : "";
+    const elapsedSuffix = options?.verbose && options?.previousTimestamp ? " " + chalk3.gray(
       this.formatElapsed(options.previousTimestamp, event.timestamp)
     ) : "";
-    const prefix = timestampPrefix + elapsedPrefix;
     switch (event.type) {
       case "init":
-        this.renderInit(event, prefix);
+        this.renderInit(event, timestampPrefix, elapsedSuffix);
         break;
       case "text":
-        this.renderText(event, prefix);
+        this.renderText(event, timestampPrefix, elapsedSuffix);
         break;
       case "tool_use":
-        this.renderToolUse(event, prefix);
+        this.renderToolUse(event, timestampPrefix, elapsedSuffix);
         break;
       case "tool_result":
-        this.renderToolResult(event, prefix);
+        this.renderToolResult(event, timestampPrefix, elapsedSuffix);
         break;
       case "result":
-        this.renderResult(event, prefix);
+        this.renderResult(event, timestampPrefix, elapsedSuffix);
         break;
     }
   }
@@ -888,8 +909,10 @@ var EventRenderer = class {
     console.log(chalk3.red("\u2717 Run failed"));
     console.log(`  Error: ${chalk3.red(error43 || "Unknown error")}`);
   }
-  static renderInit(event, prefix) {
-    console.log(chalk3.cyan("[init]") + prefix + " Starting Claude Code agent");
+  static renderInit(event, prefix, suffix) {
+    console.log(
+      prefix + chalk3.cyan("[init]") + suffix + " Starting Claude Code agent"
+    );
     console.log(`  Session: ${chalk3.gray(String(event.data.sessionId || ""))}`);
     console.log(`  Model: ${chalk3.gray(String(event.data.model || ""))}`);
     console.log(
@@ -898,13 +921,13 @@ var EventRenderer = class {
       )}`
     );
   }
-  static renderText(event, prefix) {
+  static renderText(event, prefix, suffix) {
     const text = String(event.data.text || "");
-    console.log(chalk3.blue("[text]") + prefix + " " + text);
+    console.log(prefix + chalk3.blue("[text]") + suffix + " " + text);
   }
-  static renderToolUse(event, prefix) {
+  static renderToolUse(event, prefix, suffix) {
     const tool = String(event.data.tool || "");
-    console.log(chalk3.yellow("[tool_use]") + prefix + " " + tool);
+    console.log(prefix + chalk3.yellow("[tool_use]") + suffix + " " + tool);
     const input = event.data.input;
     if (input && typeof input === "object") {
       for (const [key, value] of Object.entries(input)) {
@@ -915,19 +938,19 @@ var EventRenderer = class {
       }
     }
   }
-  static renderToolResult(event, prefix) {
+  static renderToolResult(event, prefix, suffix) {
     const isError = Boolean(event.data.isError);
     const status = isError ? "Error" : "Completed";
     const color = isError ? chalk3.red : chalk3.green;
-    console.log(color("[tool_result]") + prefix + " " + status);
+    console.log(prefix + color("[tool_result]") + suffix + " " + status);
     const result = String(event.data.result || "");
     console.log(`  ${chalk3.gray(result)}`);
   }
-  static renderResult(event, prefix) {
+  static renderResult(event, prefix, suffix) {
     const success2 = Boolean(event.data.success);
     const status = success2 ? "\u2713 completed successfully" : "\u2717 failed";
     const color = success2 ? chalk3.green : chalk3.red;
-    console.log(color("[result]") + prefix + " " + status);
+    console.log(prefix + color("[result]") + suffix + " " + status);
     const durationMs = Number(event.data.durationMs || 0);
     const durationSec = (durationMs / 1e3).toFixed(1);
     console.log(`  Duration: ${chalk3.gray(durationSec + "s")}`);
@@ -14216,7 +14239,14 @@ var agentDefinitionSchema = external_exports.object({
   provider: external_exports.string().min(1, "Provider is required"),
   volumes: external_exports.array(external_exports.string()).optional(),
   working_dir: external_exports.string().min(1, "Working directory is required"),
-  environment: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  /**
+   * Enable network security mode for secrets.
+   * When true, secrets are encrypted into proxy tokens and all traffic
+   * is routed through mitmproxy -> VM0 Proxy for decryption.
+   * Default: false (plaintext secrets in env vars)
+   */
+  beta_network_security: external_exports.boolean().optional().default(false)
 });
 var agentComposeContentSchema = external_exports.object({
   version: external_exports.string().min(1, "Version is required"),
@@ -14476,6 +14506,19 @@ var agentEventsResponseSchema = external_exports.object({
   events: external_exports.array(runEventSchema),
   hasMore: external_exports.boolean()
 });
+var networkLogEntrySchema = external_exports.object({
+  timestamp: external_exports.string(),
+  method: external_exports.string(),
+  url: external_exports.string(),
+  status: external_exports.number(),
+  latency_ms: external_exports.number(),
+  request_size: external_exports.number(),
+  response_size: external_exports.number()
+});
+var networkLogsResponseSchema = external_exports.object({
+  networkLogs: external_exports.array(networkLogEntrySchema),
+  hasMore: external_exports.boolean()
+});
 var telemetryResponseSchema = external_exports.object({
   systemLog: external_exports.string(),
   metrics: external_exports.array(telemetryMetricSchema)
@@ -14568,6 +14611,29 @@ var runAgentEventsContract = c3.router({
     summary: "Get agent events with pagination"
   }
 });
+var runNetworkLogsContract = c3.router({
+  /**
+   * GET /api/agent/runs/:id/telemetry/network
+   * Get network logs with pagination (for vm0 logs --network)
+   */
+  getNetworkLogs: {
+    method: "GET",
+    path: "/api/agent/runs/:id/telemetry/network",
+    pathParams: external_exports.object({
+      id: external_exports.string().min(1, "Run ID is required")
+    }),
+    query: external_exports.object({
+      since: external_exports.coerce.number().optional(),
+      limit: external_exports.coerce.number().min(1).max(100).default(5)
+    }),
+    responses: {
+      200: networkLogsResponseSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Get network logs with pagination"
+  }
+});
 
 // ../../packages/core/src/contracts/sessions.ts
 var c4 = initContract();
@@ -14917,10 +14983,19 @@ var metricDataSchema = external_exports.object({
   disk_used: external_exports.number(),
   disk_total: external_exports.number()
 });
+var networkLogSchema = external_exports.object({
+  timestamp: external_exports.string(),
+  method: external_exports.string(),
+  url: external_exports.string(),
+  status: external_exports.number(),
+  latency_ms: external_exports.number(),
+  request_size: external_exports.number(),
+  response_size: external_exports.number()
+});
 var webhookTelemetryContract = c6.router({
   /**
    * POST /api/webhooks/agent/telemetry
-   * Receive telemetry data (system log and metrics) from sandbox
+   * Receive telemetry data (system log, metrics, and network logs) from sandbox
    */
   send: {
     method: "POST",
@@ -14928,7 +15003,8 @@ var webhookTelemetryContract = c6.router({
     body: external_exports.object({
       runId: external_exports.string().min(1, "runId is required"),
       systemLog: external_exports.string().optional(),
-      metrics: external_exports.array(metricDataSchema).optional()
+      metrics: external_exports.array(metricDataSchema).optional(),
+      networkLogs: external_exports.array(networkLogSchema).optional()
     }),
     responses: {
       200: external_exports.object({
@@ -15171,6 +15247,20 @@ var cronCleanupSandboxesContract = c10.router({
   }
 });
 
+// ../../packages/core/src/contracts/proxy.ts
+var proxyErrorSchema = external_exports.object({
+  error: external_exports.object({
+    message: external_exports.string(),
+    code: external_exports.enum([
+      "UNAUTHORIZED",
+      "BAD_REQUEST",
+      "BAD_GATEWAY",
+      "INTERNAL_ERROR"
+    ]),
+    targetUrl: external_exports.string().optional()
+  })
+});
+
 // src/lib/secrets-client.ts
 async function getClientConfig() {
   const baseUrl = await getApiUrl();
@@ -15836,6 +15926,27 @@ function formatMetric(metric) {
   const diskPercent = (metric.disk_used / metric.disk_total * 100).toFixed(1);
   return `[${metric.ts}] CPU: ${metric.cpu.toFixed(1)}% | Mem: ${formatBytes5(metric.mem_used)}/${formatBytes5(metric.mem_total)} (${memPercent}%) | Disk: ${formatBytes5(metric.disk_used)}/${formatBytes5(metric.disk_total)} (${diskPercent}%)`;
 }
+function formatNetworkLog(entry) {
+  let statusColor;
+  if (entry.status >= 200 && entry.status < 300) {
+    statusColor = chalk18.green;
+  } else if (entry.status >= 300 && entry.status < 400) {
+    statusColor = chalk18.yellow;
+  } else if (entry.status >= 400) {
+    statusColor = chalk18.red;
+  } else {
+    statusColor = chalk18.gray;
+  }
+  let latencyColor;
+  if (entry.latency_ms < 500) {
+    latencyColor = chalk18.green;
+  } else if (entry.latency_ms < 2e3) {
+    latencyColor = chalk18.yellow;
+  } else {
+    latencyColor = chalk18.red;
+  }
+  return `[${entry.timestamp}] ${chalk18.cyan(entry.method.padEnd(6))} ${statusColor(entry.status)} ${latencyColor(entry.latency_ms + "ms")} ${formatBytes5(entry.request_size)}/${formatBytes5(entry.response_size)} ${chalk18.gray(entry.url)}`;
+}
 function renderAgentEvent(event) {
   const parsed = ClaudeEventParser.parse(
     event.eventData
@@ -15846,22 +15957,26 @@ function renderAgentEvent(event) {
   }
 }
 function getLogType(options) {
-  const selected = [options.agent, options.system, options.metrics].filter(
-    Boolean
-  ).length;
+  const selected = [
+    options.agent,
+    options.system,
+    options.metrics,
+    options.network
+  ].filter(Boolean).length;
   if (selected > 1) {
     console.error(
       chalk18.red(
-        "Options --agent, --system, and --metrics are mutually exclusive"
+        "Options --agent, --system, --metrics, and --network are mutually exclusive"
       )
     );
     process.exit(1);
   }
   if (options.system) return "system";
   if (options.metrics) return "metrics";
+  if (options.network) return "network";
   return "agent";
 }
-var logsCommand = new Command20().name("logs").description("View logs for an agent run").argument("<runId>", "Run ID to fetch logs for").option("-a, --agent", "Show agent events (default)").option("-s, --system", "Show system log").option("-m, --metrics", "Show metrics").option(
+var logsCommand = new Command20().name("logs").description("View logs for an agent run").argument("<runId>", "Run ID to fetch logs for").option("-a, --agent", "Show agent events (default)").option("-s, --system", "Show system log").option("-m, --metrics", "Show metrics").option("-n, --network", "Show network logs (proxy traffic)").option(
   "--since <time>",
   "Show logs since timestamp (e.g., 5m, 2h, 1d, 2024-01-15T10:30:00Z, 1705312200)"
 ).option(
@@ -15890,6 +16005,9 @@ var logsCommand = new Command20().name("logs").description("View logs for an age
         case "metrics":
           await showMetrics(runId, { since, limit });
           break;
+        case "network":
+          await showNetworkLogs(runId, { since, limit });
+          break;
       }
     } catch (error43) {
       handleError(error43, runId);
@@ -15947,6 +16065,28 @@ async function showMetrics(runId, options) {
     );
   }
 }
+async function showNetworkLogs(runId, options) {
+  const response = await apiClient.getNetworkLogs(runId, options);
+  if (response.networkLogs.length === 0) {
+    console.log(
+      chalk18.yellow(
+        "No network logs found for this run. Network logs are only captured when beta_network_security is enabled."
+      )
+    );
+    return;
+  }
+  for (const entry of response.networkLogs) {
+    console.log(formatNetworkLog(entry));
+  }
+  if (response.hasMore) {
+    console.log();
+    console.log(
+      chalk18.gray(
+        `Showing ${response.networkLogs.length} network logs. Use --limit to see more.`
+      )
+    );
+  }
+}
 function handleError(error43, runId) {
   if (error43 instanceof Error) {
     if (error43.message.includes("Not authenticated")) {
@@ -15966,7 +16106,7 @@ function handleError(error43, runId) {
 
 // src/index.ts
 var program = new Command21();
-program.name("vm0").description("VM0 CLI - A modern build tool").version("4.5.1");
+program.name("vm0").description("VM0 CLI - A modern build tool").version("4.6.0");
 program.command("info").description("Display environment information").action(async () => {
   console.log(chalk19.cyan("System Information:"));
   console.log(`Node Version: ${process.version}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "4.5.1",
+  "version": "4.6.0",
   "description": "CLI application",
   "repository": {
     "type": "git",