@vm0/cli 9.145.14 → 9.145.16

package/index.js

@@ -65,7 +65,7 @@ import {
   source_default,
   volumeConfigSchema,
   withErrorHandler
-} from "./chunk-V7GEUGSA.js";
+} from "./chunk-6CW5HVRP.js";
 import {
   __toESM,
   init_esm_shims
@@ -398,7 +398,7 @@ function getConfigPath() {
   return join(os.homedir(), ".vm0", "config.json");
 }
 var infoCommand = new Command().name("info").description("Display environment and debug information").action(async () => {
-  console.log(source_default.bold(`VM0 CLI v${"9.145.14"}`));
+  console.log(source_default.bold(`VM0 CLI v${"9.145.16"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -4291,7 +4291,7 @@ var composeCommand = new Command().name("compose").description("Create or update
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.145.14");
+        await startSilentUpgrade("9.145.16");
       }
       try {
         let result;
@@ -4383,7 +4383,7 @@ var mainRunCommand = new Command().name("run").description("Run an agent").argum
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.145.14");
+        await startSilentUpgrade("9.145.16");
       }
       const { name, version } = parseIdentifier(identifier);
       let composeId;
@@ -6170,13 +6170,13 @@ var upgradeCommand = new Command().name("upgrade").description("Upgrade vm0 CLI
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.145.14") {
-      console.log(source_default.green(`\u2713 Already up to date (${"9.145.14"})`));
+    if (latestVersion === "9.145.16") {
+      console.log(source_default.green(`\u2713 Already up to date (${"9.145.16"})`));
       return;
     }
     console.log(
       source_default.yellow(
-        `Current version: ${"9.145.14"} -> Latest version: ${latestVersion}`
+        `Current version: ${"9.145.16"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -6203,7 +6203,7 @@ var upgradeCommand = new Command().name("upgrade").description("Upgrade vm0 CLI
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        source_default.green(`\u2713 Upgraded from ${"9.145.14"} to ${latestVersion}`)
+        source_default.green(`\u2713 Upgraded from ${"9.145.16"} to ${latestVersion}`)
       );
       return;
     }
@@ -6270,7 +6270,7 @@ var whoamiCommand = new Command().name("whoami").description("Show current ident
 
 // src/index.ts
 var program = new Command();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.145.14");
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.145.16");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.145.14",
+  "version": "9.145.16",
   "description": "CLI application",
   "repository": {
     "type": "git",

package/zero.js

@@ -128,7 +128,7 @@ import {
   upsertZeroOrgModelProvider,
   withErrorHandler,
   zeroAgentCustomSkillNameSchema
-} from "./chunk-V7GEUGSA.js";
+} from "./chunk-6CW5HVRP.js";
 import {
   __toESM,
   init_esm_shims
@@ -4740,10 +4740,10 @@ Notes:
 
 // src/commands/zero/slack/download-file.ts
 init_esm_shims();
-import { join } from "path";
+import { basename as basename2, join } from "path";
 import { tmpdir } from "os";
 function defaultOutPath(fileId) {
-  return join(tmpdir(), `slack-${fileId}`);
+  return join(tmpdir(), `slack-${basename2(fileId)}`);
 }
 var downloadFileCommand = new Command().name("download-file").description("Download a Slack file by id using the bot token").argument("<file-id>", "Slack file id (e.g. F01234ABCD)").option(
   "-o, --out <path>",
@@ -4875,10 +4875,10 @@ Examples:
 
 // src/commands/zero/telegram/download-file.ts
 init_esm_shims();
-import { join as join2 } from "path";
+import { basename as basename3, join as join2 } from "path";
 import { tmpdir as tmpdir2 } from "os";
 function defaultOutPath2(fileId) {
-  return join2(tmpdir2(), `telegram-${fileId}`);
+  return join2(tmpdir2(), `telegram-${basename3(fileId)}`);
 }
 var downloadFileCommand2 = new Command().name("download-file").description("Download a Telegram file by id using the bot token").argument("<file-id>", "Telegram file id from a [Telegram file] block").option(
   "-o, --out <path>",
@@ -4987,7 +4987,7 @@ Examples:
 // src/commands/zero/telegram/upload-file.ts
 init_esm_shims();
 import { readFileSync as readFileSync8, statSync as statSync2 } from "fs";
-import { basename as basename2, extname } from "path";
+import { basename as basename4, extname } from "path";
 var MIME_BY_EXTENSION = {
   ".png": "image/png",
   ".jpg": "image/jpeg",
@@ -5051,7 +5051,7 @@ Notes:
       if (fileSize === 0) {
         throw new Error("File is empty");
       }
-      const filename = basename2(options.file);
+      const filename = basename4(options.file);
       const contentType = options.contentType ?? inferContentType(options.file);
       const messageThreadId = parseMessageThreadId(options.messageThreadId);
       const prepared = await initTelegramFileUpload({
@@ -6850,7 +6850,7 @@ var hostStopCommand = new Command().name("stop").description("Stop and unregiste
 // src/commands/zero/computer-use/client.ts
 init_esm_shims();
 import { writeFile, mkdir } from "fs/promises";
-import { join as join5 } from "path";
+import { basename as basename5, join as join5 } from "path";
 
 // src/lib/computer-use/client.ts
 init_esm_shims();
@@ -6894,6 +6894,9 @@ async function callHost(path, options) {
 }
 
 // src/commands/zero/computer-use/client.ts
+function safeFormat(format) {
+  return basename5(format);
+}
 function mouseClickCommand(name, action, description) {
   return new Command().name(name).description(description).argument("<x>", "X coordinate (points)").argument("<y>", "Y coordinate (points)").action(
     withErrorHandler(async (xStr, yStr) => {
@@ -6918,7 +6921,10 @@ var clientScreenshotCommand = new Command().name("screenshot").description("Capt
     const dir = "/tmp/computer-use";
     await mkdir(dir, { recursive: true });
     const timestamp = Date.now();
-    const filePath = join5(dir, `screenshot-${timestamp}.${data.format}`);
+    const filePath = join5(
+      dir,
+      `screenshot-${timestamp}.${safeFormat(data.format)}`
+    );
     const buffer = Buffer.from(data.image, "base64");
     await writeFile(filePath, buffer);
     process.stdout.write(`${filePath}
@@ -6946,7 +6952,10 @@ var clientZoomCommand = new Command().name("zoom").description("Capture a region
       const dir = "/tmp/computer-use";
       await mkdir(dir, { recursive: true });
       const timestamp = Date.now();
-      const filePath = join5(dir, `zoom-${timestamp}.${data.format}`);
+      const filePath = join5(
+        dir,
+        `zoom-${timestamp}.${safeFormat(data.format)}`
+      );
       const buffer = Buffer.from(data.image, "base64");
       await writeFile(filePath, buffer);
       process.stdout.write(`${filePath}
@@ -7312,10 +7321,10 @@ init_esm_shims();
 
 // src/commands/zero/web/download-file.ts
 init_esm_shims();
-import { join as join6 } from "path";
+import { basename as basename6, join as join6 } from "path";
 import { tmpdir as tmpdir4 } from "os";
 function defaultOutPath3(fileId) {
-  return join6(tmpdir4(), `web-${fileId}`);
+  return join6(tmpdir4(), `web-${basename6(fileId)}`);
 }
 var downloadFileCommand3 = new Command().name("download-file").description("Download a web-uploaded file by id").argument("<file-id>", "File id (UUID returned by the upload API)").option(
   "-o, --out <path>",
@@ -7457,7 +7466,7 @@ function registerZeroCommands(prog, commands) {
 var program = new Command();
 program.name("zero").description(
   "Zero CLI \u2014 interact with the zero platform from inside the sandbox"
-).version("9.145.14").addHelpText(
+).version("9.145.16").addHelpText(
   "after",
   `
 Examples: