@vm0/cli 4.5.2 → 4.6.0

package/index.js

@@ -391,6 +391,28 @@ var ApiClient = class {
     }
     return await response.json();
   }
+  async getNetworkLogs(runId, options) {
+    const baseUrl = await this.getBaseUrl();
+    const headers = await this.getHeaders();
+    const params = new URLSearchParams();
+    if (options?.since !== void 0) {
+      params.set("since", String(options.since));
+    }
+    if (options?.limit !== void 0) {
+      params.set("limit", String(options.limit));
+    }
+    const queryString = params.toString();
+    const url2 = `${baseUrl}/api/agent/runs/${runId}/telemetry/network${queryString ? `?${queryString}` : ""}`;
+    const response = await fetch(url2, {
+      method: "GET",
+      headers
+    });
+    if (!response.ok) {
+      const error43 = await response.json();
+      throw new Error(error43.error?.message || "Failed to fetch network logs");
+    }
+    return await response.json();
+  }
   async createImage(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
@@ -14217,7 +14239,14 @@ var agentDefinitionSchema = external_exports.object({
   provider: external_exports.string().min(1, "Provider is required"),
   volumes: external_exports.array(external_exports.string()).optional(),
   working_dir: external_exports.string().min(1, "Working directory is required"),
-  environment: external_exports.record(external_exports.string(), external_exports.string()).optional()
+  environment: external_exports.record(external_exports.string(), external_exports.string()).optional(),
+  /**
+   * Enable network security mode for secrets.
+   * When true, secrets are encrypted into proxy tokens and all traffic
+   * is routed through mitmproxy -> VM0 Proxy for decryption.
+   * Default: false (plaintext secrets in env vars)
+   */
+  beta_network_security: external_exports.boolean().optional().default(false)
 });
 var agentComposeContentSchema = external_exports.object({
   version: external_exports.string().min(1, "Version is required"),
@@ -14477,6 +14506,19 @@ var agentEventsResponseSchema = external_exports.object({
   events: external_exports.array(runEventSchema),
   hasMore: external_exports.boolean()
 });
+var networkLogEntrySchema = external_exports.object({
+  timestamp: external_exports.string(),
+  method: external_exports.string(),
+  url: external_exports.string(),
+  status: external_exports.number(),
+  latency_ms: external_exports.number(),
+  request_size: external_exports.number(),
+  response_size: external_exports.number()
+});
+var networkLogsResponseSchema = external_exports.object({
+  networkLogs: external_exports.array(networkLogEntrySchema),
+  hasMore: external_exports.boolean()
+});
 var telemetryResponseSchema = external_exports.object({
   systemLog: external_exports.string(),
   metrics: external_exports.array(telemetryMetricSchema)
@@ -14569,6 +14611,29 @@ var runAgentEventsContract = c3.router({
     summary: "Get agent events with pagination"
   }
 });
+var runNetworkLogsContract = c3.router({
+  /**
+   * GET /api/agent/runs/:id/telemetry/network
+   * Get network logs with pagination (for vm0 logs --network)
+   */
+  getNetworkLogs: {
+    method: "GET",
+    path: "/api/agent/runs/:id/telemetry/network",
+    pathParams: external_exports.object({
+      id: external_exports.string().min(1, "Run ID is required")
+    }),
+    query: external_exports.object({
+      since: external_exports.coerce.number().optional(),
+      limit: external_exports.coerce.number().min(1).max(100).default(5)
+    }),
+    responses: {
+      200: networkLogsResponseSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema
+    },
+    summary: "Get network logs with pagination"
+  }
+});
 
 // ../../packages/core/src/contracts/sessions.ts
 var c4 = initContract();
@@ -14918,10 +14983,19 @@ var metricDataSchema = external_exports.object({
   disk_used: external_exports.number(),
   disk_total: external_exports.number()
 });
+var networkLogSchema = external_exports.object({
+  timestamp: external_exports.string(),
+  method: external_exports.string(),
+  url: external_exports.string(),
+  status: external_exports.number(),
+  latency_ms: external_exports.number(),
+  request_size: external_exports.number(),
+  response_size: external_exports.number()
+});
 var webhookTelemetryContract = c6.router({
   /**
    * POST /api/webhooks/agent/telemetry
-   * Receive telemetry data (system log and metrics) from sandbox
+   * Receive telemetry data (system log, metrics, and network logs) from sandbox
    */
   send: {
     method: "POST",
@@ -14929,7 +15003,8 @@ var webhookTelemetryContract = c6.router({
     body: external_exports.object({
       runId: external_exports.string().min(1, "runId is required"),
       systemLog: external_exports.string().optional(),
-      metrics: external_exports.array(metricDataSchema).optional()
+      metrics: external_exports.array(metricDataSchema).optional(),
+      networkLogs: external_exports.array(networkLogSchema).optional()
     }),
     responses: {
       200: external_exports.object({
@@ -15172,6 +15247,20 @@ var cronCleanupSandboxesContract = c10.router({
   }
 });
 
+// ../../packages/core/src/contracts/proxy.ts
+var proxyErrorSchema = external_exports.object({
+  error: external_exports.object({
+    message: external_exports.string(),
+    code: external_exports.enum([
+      "UNAUTHORIZED",
+      "BAD_REQUEST",
+      "BAD_GATEWAY",
+      "INTERNAL_ERROR"
+    ]),
+    targetUrl: external_exports.string().optional()
+  })
+});
+
 // src/lib/secrets-client.ts
 async function getClientConfig() {
   const baseUrl = await getApiUrl();
@@ -15837,6 +15926,27 @@ function formatMetric(metric) {
   const diskPercent = (metric.disk_used / metric.disk_total * 100).toFixed(1);
   return `[${metric.ts}] CPU: ${metric.cpu.toFixed(1)}% | Mem: ${formatBytes5(metric.mem_used)}/${formatBytes5(metric.mem_total)} (${memPercent}%) | Disk: ${formatBytes5(metric.disk_used)}/${formatBytes5(metric.disk_total)} (${diskPercent}%)`;
 }
+function formatNetworkLog(entry) {
+  let statusColor;
+  if (entry.status >= 200 && entry.status < 300) {
+    statusColor = chalk18.green;
+  } else if (entry.status >= 300 && entry.status < 400) {
+    statusColor = chalk18.yellow;
+  } else if (entry.status >= 400) {
+    statusColor = chalk18.red;
+  } else {
+    statusColor = chalk18.gray;
+  }
+  let latencyColor;
+  if (entry.latency_ms < 500) {
+    latencyColor = chalk18.green;
+  } else if (entry.latency_ms < 2e3) {
+    latencyColor = chalk18.yellow;
+  } else {
+    latencyColor = chalk18.red;
+  }
+  return `[${entry.timestamp}] ${chalk18.cyan(entry.method.padEnd(6))} ${statusColor(entry.status)} ${latencyColor(entry.latency_ms + "ms")} ${formatBytes5(entry.request_size)}/${formatBytes5(entry.response_size)} ${chalk18.gray(entry.url)}`;
+}
 function renderAgentEvent(event) {
   const parsed = ClaudeEventParser.parse(
     event.eventData
@@ -15847,22 +15957,26 @@ function renderAgentEvent(event) {
   }
 }
 function getLogType(options) {
-  const selected = [options.agent, options.system, options.metrics].filter(
-    Boolean
-  ).length;
+  const selected = [
+    options.agent,
+    options.system,
+    options.metrics,
+    options.network
+  ].filter(Boolean).length;
   if (selected > 1) {
     console.error(
       chalk18.red(
-        "Options --agent, --system, and --metrics are mutually exclusive"
+        "Options --agent, --system, --metrics, and --network are mutually exclusive"
       )
     );
     process.exit(1);
   }
   if (options.system) return "system";
   if (options.metrics) return "metrics";
+  if (options.network) return "network";
   return "agent";
 }
-var logsCommand = new Command20().name("logs").description("View logs for an agent run").argument("<runId>", "Run ID to fetch logs for").option("-a, --agent", "Show agent events (default)").option("-s, --system", "Show system log").option("-m, --metrics", "Show metrics").option(
+var logsCommand = new Command20().name("logs").description("View logs for an agent run").argument("<runId>", "Run ID to fetch logs for").option("-a, --agent", "Show agent events (default)").option("-s, --system", "Show system log").option("-m, --metrics", "Show metrics").option("-n, --network", "Show network logs (proxy traffic)").option(
   "--since <time>",
   "Show logs since timestamp (e.g., 5m, 2h, 1d, 2024-01-15T10:30:00Z, 1705312200)"
 ).option(
@@ -15891,6 +16005,9 @@ var logsCommand = new Command20().name("logs").description("View logs for an age
         case "metrics":
           await showMetrics(runId, { since, limit });
           break;
+        case "network":
+          await showNetworkLogs(runId, { since, limit });
+          break;
       }
     } catch (error43) {
       handleError(error43, runId);
@@ -15948,6 +16065,28 @@ async function showMetrics(runId, options) {
     );
   }
 }
+async function showNetworkLogs(runId, options) {
+  const response = await apiClient.getNetworkLogs(runId, options);
+  if (response.networkLogs.length === 0) {
+    console.log(
+      chalk18.yellow(
+        "No network logs found for this run. Network logs are only captured when beta_network_security is enabled."
+      )
+    );
+    return;
+  }
+  for (const entry of response.networkLogs) {
+    console.log(formatNetworkLog(entry));
+  }
+  if (response.hasMore) {
+    console.log();
+    console.log(
+      chalk18.gray(
+        `Showing ${response.networkLogs.length} network logs. Use --limit to see more.`
+      )
+    );
+  }
+}
 function handleError(error43, runId) {
   if (error43 instanceof Error) {
     if (error43.message.includes("Not authenticated")) {
@@ -15967,7 +16106,7 @@ function handleError(error43, runId) {
 
 // src/index.ts
 var program = new Command21();
-program.name("vm0").description("VM0 CLI - A modern build tool").version("4.5.2");
+program.name("vm0").description("VM0 CLI - A modern build tool").version("4.6.0");
 program.command("info").description("Display environment information").action(async () => {
   console.log(chalk19.cyan("System Information:"));
   console.log(`Node Version: ${process.version}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "4.5.2",
+  "version": "4.6.0",
   "description": "CLI application",
   "repository": {
     "type": "git",