@vm0/cli 9.152.0 → 9.153.0

package/index.js

@@ -68,7 +68,7 @@ import {
   source_default,
   volumeConfigSchema,
   withErrorHandler
-} from "./chunk-T32CMT7F.js";
+} from "./chunk-7B5CZ4YO.js";
 import {
   __toESM,
   init_esm_shims
@@ -387,7 +387,7 @@ function getConfigPath() {
   return join(os.homedir(), ".vm0", "config.json");
 }
 var infoCommand = new Command().name("info").description("Display environment and debug information").action(async () => {
-  console.log(source_default.bold(`VM0 CLI v${"9.152.0"}`));
+  console.log(source_default.bold(`VM0 CLI v${"9.153.0"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -4280,7 +4280,7 @@ var composeCommand = new Command().name("compose").description("Create or update
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.152.0");
+        await startSilentUpgrade("9.153.0");
       }
       try {
         let result;
@@ -4372,7 +4372,7 @@ var mainRunCommand = new Command().name("run").description("Run an agent").argum
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.152.0");
+        await startSilentUpgrade("9.153.0");
       }
       const { name, version } = parseIdentifier(identifier);
       let composeId;
@@ -6165,13 +6165,13 @@ var upgradeCommand = new Command().name("upgrade").description("Upgrade vm0 CLI
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.152.0") {
-      console.log(source_default.green(`\u2713 Already up to date (${"9.152.0"})`));
+    if (latestVersion === "9.153.0") {
+      console.log(source_default.green(`\u2713 Already up to date (${"9.153.0"})`));
       return;
     }
     console.log(
       source_default.yellow(
-        `Current version: ${"9.152.0"} -> Latest version: ${latestVersion}`
+        `Current version: ${"9.153.0"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -6198,7 +6198,7 @@ var upgradeCommand = new Command().name("upgrade").description("Upgrade vm0 CLI
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        source_default.green(`\u2713 Upgraded from ${"9.152.0"} to ${latestVersion}`)
+        source_default.green(`\u2713 Upgraded from ${"9.153.0"} to ${latestVersion}`)
       );
       return;
     }
@@ -6265,7 +6265,7 @@ var whoamiCommand = new Command().name("whoami").description("Show current ident
 
 // src/index.ts
 var program = new Command();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.152.0");
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.153.0");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.152.0",
+  "version": "9.153.0",
   "description": "CLI application",
   "repository": {
     "type": "git",

package/zero.js

@@ -23,6 +23,7 @@ import {
   createZeroRun,
   decodeCliTokenPayload,
   decodeZeroTokenPayload,
+  deleteLocalBrowserHost,
   deleteSkill,
   deleteZeroAgent,
   deleteZeroOrg,
@@ -80,6 +81,8 @@ import {
   isInteractive,
   isUUID,
   leaveZeroOrg,
+  listLocalBrowserAuditEvents,
+  listLocalBrowserHosts,
   listSkills,
   listTelegramBots,
   listZeroAgents,
@@ -135,7 +138,7 @@ import {
   withErrorHandler,
   zeroAgentCustomSkillNameSchema,
   zeroRemoteAgentCommand
-} from "./chunk-T32CMT7F.js";
+} from "./chunk-7B5CZ4YO.js";
 import {
   __toESM,
   init_esm_shims
@@ -2539,9 +2542,51 @@ init_esm_shims();
 var BUILT_IN_GENERATION_PROVIDERS = {
   image: [
     {
-      label: "Built-in",
+      label: "Built-in OpenAI",
       model: "gpt-image-2",
-      command: "zero built-in generate image -h",
+      command: "zero built-in generate image --model gpt-image-2 -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in OpenAI",
+      model: "gpt-image-1.5",
+      command: "zero built-in generate image --model gpt-image-1.5 -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in OpenAI",
+      model: "gpt-image-1",
+      command: "zero built-in generate image --model gpt-image-1 -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in OpenAI",
+      model: "gpt-image-1-mini",
+      command: "zero built-in generate image --model gpt-image-1-mini -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in fal.ai",
+      model: "fal-ai/flux-pro/v1.1",
+      command: "zero built-in generate image --model flux-pro-1.1 -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in fal.ai",
+      model: "fal-ai/flux-pro/v1.1-ultra",
+      command: "zero built-in generate image --model flux-pro-1.1-ultra -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in fal.ai",
+      model: "fal-ai/qwen-image",
+      command: "zero built-in generate image --model qwen-image -h",
+      reason: "available without connector setup"
+    },
+    {
+      label: "Built-in fal.ai",
+      model: "fal-ai/bytedance/seedream/v4/text-to-image",
+      command: "zero built-in generate image --model seedream4 -h",
       reason: "available without connector setup"
     }
   ],
@@ -2600,6 +2645,28 @@ var BUILT_IN_GENERATION_PROVIDERS = {
     }
   ]
 };
+var BUILT_IN_GENERATION_COMMANDS = {
+  image: {
+    label: "Built-in image generation",
+    command: "zero built-in generate image -h",
+    models: "OpenAI: gpt-image-2, gpt-image-1.5, gpt-image-1, gpt-image-1-mini; fal.ai: flux-pro-1.1, flux-pro-1.1-ultra, qwen-image, seedream4"
+  },
+  video: {
+    label: "Built-in video generation",
+    command: "zero built-in generate video -h",
+    models: "veo3.1-fast, veo3.1, kling-o3-standard, kling-v3-4k, seedance2.0, seedance2.0-fast"
+  },
+  presentation: {
+    label: "Built-in presentation generation",
+    command: "zero built-in generate presentation -h",
+    models: "gpt-5.5"
+  },
+  voice: {
+    label: "Built-in voice generation",
+    command: "zero built-in generate voice -h",
+    models: "gpt-4o-mini-tts"
+  }
+};
 var GENERATION_TYPE_ORDER = [
   "image",
   "video",
@@ -2631,6 +2698,9 @@ function getConnectorGenerationType(generationType) {
 function getBuiltInProviders(generationType) {
   return BUILT_IN_GENERATION_PROVIDERS[generationType] ?? [];
 }
+function getBuiltInCommand(generationType) {
+  return BUILT_IN_GENERATION_COMMANDS[generationType] ?? null;
+}
 function getAvailableGenerationTypes() {
   const available = /* @__PURE__ */ new Set();
   for (const config of Object.values(CONNECTOR_TYPES)) {
@@ -2761,6 +2831,15 @@ function renderActions(candidates) {
   }
 }
 function renderBuiltInProvider(generationType) {
+  const command = getBuiltInCommand(generationType);
+  if (command) {
+    console.log("");
+    console.log("Built-in command:");
+    console.log(`  vm0  ${command.label}`);
+    console.log(`  Models: ${command.models}`);
+    console.log(`  Use: ${command.command}`);
+    return;
+  }
   const providers = getBuiltInProviders(generationType);
   if (providers.length === 0) return;
   console.log("");
@@ -7224,20 +7303,35 @@ function parseCompression(value) {
   }
   return compression;
 }
+function parseSeed(value) {
+  const seed = Number(value);
+  if (!Number.isInteger(seed) || seed < 0 || !Number.isSafeInteger(seed)) {
+    throw new InvalidArgumentError("seed must be a non-negative safe integer");
+  }
+  return seed;
+}
 function createImageGenerateCommand(config) {
   return new Command().name(config.name).description("Generate a billed image file from a prompt").option("--prompt <text>", "Image prompt; can also be piped via stdin").option(
+    "--model <model>",
+    "Model: gpt-image-2, gpt-image-1.5, gpt-image-1, gpt-image-1-mini, flux-pro-1.1, flux-pro-1.1-ultra, qwen-image, or seedream4",
+    "gpt-image-2"
+  ).option(
     "--size <size>",
-    "Image size: auto or any valid WIDTHxHEIGHT for GPT Image 2",
+    "Image size: auto or WIDTHxHEIGHT; support varies by model",
     "1024x1024"
   ).option(
     "--quality <quality>",
     "Image quality: low, medium, high, or auto",
     "medium"
-  ).option("--background <background>", "Background: auto or opaque", "auto").option("--format <format>", "Output format: png, webp, or jpeg", "png").option("--compression <0-100>", "Output compression for jpeg/webp only").option(
+  ).option(
+    "--background <background>",
+    "Background: auto, opaque, or transparent when supported",
+    "auto"
+  ).option("--format <format>", "Output format: png, webp, or jpeg", "png").option("--compression <0-100>", "Output compression for jpeg/webp only").option(
     "--moderation <moderation>",
     "Moderation strictness: auto or low",
     "auto"
-  ).option("--json", "Print metadata as JSON").addHelpText(
+  ).option("--seed <integer>", "Deterministic seed for fal models", parseSeed).option("--safety-tolerance <level>", "fal safety tolerance: 1-6", "4").option("--enhance-prompt", "Enable fal prompt enhancement when supported").option("--json", "Print metadata as JSON").addHelpText(
     "after",
     `
 Examples:
@@ -7249,23 +7343,34 @@ Output:
 Notes:
   - Authenticates via ZERO_TOKEN (requires file:write capability)
   - Charges org credits after successful image generation
-  - Uses OpenAI gpt-image-2 and bills returned usage tokens
+  - Uses OpenAI for GPT Image models and fal.ai for non-OpenAI models
+
+Models:
+  - OpenAI: gpt-image-2 (default), gpt-image-1.5, gpt-image-1,
+    gpt-image-1-mini. OpenAI generations bill returned text/image/output
+    token usage.
+  - fal.ai: flux-pro-1.1, flux-pro-1.1-ultra, qwen-image, seedream4.
+    fal generations bill by output image or rounded-up output megapixel,
+    depending on the model.
 
-GPT Image 2 options:
+Options:
   - Prompt: required, up to 32,000 characters; stdin is supported.
-  - Size: use auto or WIDTHxHEIGHT. Popular sizes include 1024x1024,
+  - Size: gpt-image-2 accepts auto or WIDTHxHEIGHT. Popular sizes include
+    1024x1024,
     1536x1024, 1024x1536, 2048x2048, 2048x1152, 3840x2160,
     and 2160x3840. Custom sizes must have edges <= 3840px, both
     edges divisible by 16, long:short ratio <= 3:1, and total pixels
-    between 655,360 and 8,294,400. Outputs larger than 2560x1440
-    total pixels are experimental.
+    between 655,360 and 8,294,400. gpt-image-1.5, gpt-image-1, and
+    gpt-image-1-mini use auto, 1024x1024, 1536x1024, or 1024x1536.
   - Quality: low, medium, high, or auto. Low is fastest for drafts.
-  - Background: auto or opaque. GPT Image 2 does not support transparent
-    backgrounds.
-  - Format: png, jpeg, or webp. Use --compression 0-100 only with jpeg
-    or webp; jpeg is usually lower latency than png.
-  - Moderation: auto or low.
-  - This command generates one text-to-image result. GPT Image 2 also
+  - Background: auto, opaque, or transparent. gpt-image-2 and fal models do
+    not support transparent backgrounds.
+  - Format: png, jpeg, or webp for OpenAI; png or jpeg for fal. Use
+    --compression 0-100 only with OpenAI jpeg or webp outputs.
+  - Moderation: auto or low for OpenAI models.
+  - fal-only controls: --seed, --safety-tolerance for Flux, and
+    --enhance-prompt for flux-pro-1.1.
+  - This command generates one text-to-image result. GPT Image also
     supports image edits, reference images, masks, partial-image streaming,
     and multiple images per request, but those are not exposed by this
     built-in Zero command yet.`
@@ -7275,12 +7380,16 @@ GPT Image 2 options:
       const compression = parseCompression(options.compression);
       const result = await generateWebImage({
         prompt,
+        model: options.model,
         size: options.size,
         quality: options.quality,
         background: options.background,
         outputFormat: options.format,
         outputCompression: compression,
-        moderation: options.moderation
+        moderation: options.moderation,
+        seed: options.seed,
+        safetyTolerance: options.safetyTolerance,
+        enhancePrompt: options.enhancePrompt
       });
       if (options.json) {
         console.log(JSON.stringify(result));
@@ -7297,8 +7406,17 @@ GPT Image 2 options:
       if (result.moderation) {
         console.log(source_default.dim(`  Moderation: ${result.moderation}`));
       }
+      if (result.safetyTolerance) {
+        console.log(
+          source_default.dim(`  Safety tolerance: ${result.safetyTolerance}`)
+        );
+      }
+      if (result.seed !== void 0) {
+        console.log(source_default.dim(`  Seed: ${result.seed}`));
+      }
       console.log(source_default.dim(`  Credits charged: ${result.creditsCharged}`));
       console.log(source_default.dim(`  Model: ${result.model}`));
+      console.log(source_default.dim(`  Provider: ${result.provider}`));
     })
   );
 }
@@ -7309,7 +7427,8 @@ var imageCommand = createImageGenerateCommand({
   usageCommand: "zero built-in generate image",
   examples: `  Generate image:        zero built-in generate image --prompt "A watercolor fox"
   Pipe prompt:           cat prompt.txt | zero built-in generate image
-  Pick size/quality:     zero built-in generate image --prompt "A poster" --size 1024x1536 --quality high`
+  OpenAI model:          zero built-in generate image --model gpt-image-1.5 --prompt "A poster" --size 1024x1536 --quality high
+  fal model:             zero built-in generate image --model flux-pro-1.1 --prompt "A product hero shot" --seed 42`
 });
 
 // src/commands/zero/built-in/generate/presentation.ts
@@ -7422,7 +7541,7 @@ init_esm_shims();
 // src/commands/zero/shared/video-generate.ts
 init_esm_shims();
 import { readFileSync as readFileSync14 } from "fs";
-function parseSeed(value) {
+function parseSeed2(value) {
   const seed = Number(value);
   if (!Number.isInteger(seed) || seed < 0 || !Number.isSafeInteger(seed)) {
     throw new InvalidArgumentError("seed must be a non-negative safe integer");
@@ -7456,7 +7575,7 @@ function createVideoGenerateCommand(config) {
     "--duration <duration>",
     "Duration: 3s-15s; Veo supports 4s/6s/8s",
     "8s"
-  ).option("--resolution <resolution>", "Resolution: 720p, 1080p, or 4k").option("--no-audio", "Generate a silent video").option("--negative-prompt <text>", "Negative prompt").option("--seed <integer>", "Deterministic seed", parseSeed).option("--no-auto-fix", "Disable fal prompt auto-fix").option("--safety-tolerance <level>", "Safety tolerance: 1-6", "4").option("--json", "Print metadata as JSON").addHelpText(
+  ).option("--resolution <resolution>", "Resolution: 720p, 1080p, or 4k").option("--no-audio", "Generate a silent video").option("--negative-prompt <text>", "Negative prompt").option("--seed <integer>", "Deterministic seed", parseSeed2).option("--no-auto-fix", "Disable fal prompt auto-fix").option("--safety-tolerance <level>", "Safety tolerance: 1-6", "4").option("--json", "Print metadata as JSON").addHelpText(
     "after",
     `
 Examples:
@@ -7468,7 +7587,18 @@ Output:
 Notes:
   - Authenticates via ZERO_TOKEN (requires file:write capability)
   - Charges org credits after successful video generation
-  - Uses fal video models with configured usage pricing`
+  - Uses fal video models with configured usage pricing
+
+Models:
+  - Veo: veo3.1-fast (default), veo3.1. Supports 4s/6s/8s,
+    16:9 or 9:16, 720p/1080p/4k, negative prompts, seed,
+    auto-fix, safety tolerance, and optional audio.
+  - Kling: kling-o3-standard, kling-v3-4k. Supports 3s-15s and
+    16:9 or 9:16. kling-v3-4k uses 4k output; kling-o3-standard
+    uses 1080p output.
+  - Seedance: seedance2.0, seedance2.0-fast. Supports 4s-15s,
+    480p/720p, seed, and aspect ratios 21:9, 16:9, 4:3, 1:1,
+    3:4, or 9:16.`
   ).action(
     withErrorHandler(async (options) => {
       const prompt = readPrompt3(options, config.usageCommand);
@@ -7719,6 +7849,16 @@ function parsePositiveInteger2(value, label) {
   }
   return parsed;
 }
+function parseLimit4(value) {
+  if (value === void 0) {
+    return 50;
+  }
+  const parsed = parsePositiveInteger2(value, "limit");
+  if (parsed > 200) {
+    throw new Error("limit must be 200 or less");
+  }
+  return parsed;
+}
 function resultText(command) {
   if (!command.result) {
     return "";
@@ -7815,6 +7955,96 @@ function readCommand(name, kind) {
     )
   );
 }
+function formatCapabilities(capabilities) {
+  return capabilities.length > 0 ? capabilities.join(", ") : "none";
+}
+function formatHost(host) {
+  const status = host.status === "online" ? source_default.green("online") : source_default.dim("offline");
+  return [
+    `${status}  ${host.displayName}`,
+    `  id: ${host.id}`,
+    `  browser: ${host.browser}`,
+    `  extension: ${host.extensionVersion}`,
+    `  last seen: ${host.lastSeenAt}`,
+    `  capabilities: ${formatCapabilities(host.supportedCapabilities)}`
+  ].join("\n");
+}
+function formatAuditEvent(event) {
+  const parts = [
+    event.createdAt,
+    event.event,
+    event.kind,
+    `command=${event.commandId}`
+  ];
+  if (event.hostId) {
+    parts.push(`host=${event.hostId}`);
+  }
+  if (event.runId) {
+    parts.push(`run=${event.runId}`);
+  }
+  if (event.tabId) {
+    parts.push(`tab=${event.tabId}`);
+  }
+  if (event.targetUrl) {
+    parts.push(`url=${event.targetUrl}`);
+  }
+  if (event.approvalOutcome) {
+    parts.push(`approval=${event.approvalOutcome}`);
+  }
+  if (event.error) {
+    parts.push(`error=${JSON.stringify(event.error)}`);
+  }
+  return parts.join("  ");
+}
+var hostsCommand = new Command().name("hosts").description("List and revoke linked local-browser hosts").addCommand(
+  new Command().name("list").description("List linked local-browser hosts").option("--json", "Output hosts as JSON").action(
+    withErrorHandler(async (options) => {
+      const result = await listLocalBrowserHosts();
+      if (options.json) {
+        console.log(JSON.stringify(result));
+        return;
+      }
+      if (result.hosts.length === 0) {
+        console.log(source_default.dim("No linked local-browser hosts."));
+        return;
+      }
+      console.log(result.hosts.map(formatHost).join("\n\n"));
+    })
+  )
+).addCommand(
+  new Command().name("revoke").description("Revoke a linked local-browser host").argument("<host-id>", "Local-browser host id").option("--json", "Output the revoke result as JSON").action(
+    withErrorHandler(async (hostId, options) => {
+      const result = await deleteLocalBrowserHost(hostId);
+      if (options.json) {
+        console.log(JSON.stringify(result));
+        return;
+      }
+      console.log(source_default.green("Local-browser host revoked"));
+      console.log(source_default.dim(`  Host: ${hostId}`));
+    })
+  )
+);
+var auditCommand = new Command().name("audit").description("Inspect local-browser write command audit events").addCommand(
+  new Command().name("list").description("List local-browser write command audit events").option("--limit <count>", "Maximum events to show", "50").option("--command-id <id>", "Filter by command id").option("--host-id <id>", "Filter by host id").option("--run-id <id>", "Filter by run id").option("--json", "Output audit events as JSON").action(
+    withErrorHandler(async (options) => {
+      const result = await listLocalBrowserAuditEvents({
+        limit: parseLimit4(options.limit),
+        ...options.commandId ? { commandId: options.commandId } : {},
+        ...options.hostId ? { hostId: options.hostId } : {},
+        ...options.runId ? { runId: options.runId } : {}
+      });
+      if (options.json) {
+        console.log(JSON.stringify(result));
+        return;
+      }
+      if (result.auditEvents.length === 0) {
+        console.log(source_default.dim("No local-browser audit events found."));
+        return;
+      }
+      console.log(result.auditEvents.map(formatAuditEvent).join("\n"));
+    })
+  )
+);
 var tabsCommand = new Command().name("tabs").description("Read and control browser tabs").addCommand(readCommand("list", "tabs.list")).addCommand(readCommand("current", "tabs.current")).addCommand(
   addWriteOptions(
     new Command().name("activate").description("Run tabs.activate").requiredOption("--tab-id <id>", "Tab to activate").action(
@@ -7894,15 +8124,18 @@ var pageCommand = new Command().name("page").description("Read and control the a
     )
   )
 );
-var zeroLocalBrowserCommand = new Command().name("local-browser").description("Read authorized browser context").addHelpText(
+var zeroLocalBrowserCommand = new Command().name("local-browser").description("Read and manage authorized browser context").addHelpText(
   "after",
   `
 Examples:
+  List hosts?      zero local-browser hosts list
+  Revoke host?     zero local-browser hosts revoke <host-id>
   List tabs?       zero local-browser tabs list
   Current tab?     zero local-browser tabs current
   Click page?      zero local-browser page click --selector button
-  Open tab?        zero local-browser tabs open --url https://example.com`
-).addCommand(tabsCommand).addCommand(pageCommand);
+  Open tab?        zero local-browser tabs open --url https://example.com
+  Audit actions?   zero local-browser audit list`
+).addCommand(hostsCommand).addCommand(auditCommand).addCommand(tabsCommand).addCommand(pageCommand);
 
 // src/commands/zero/host/index.ts
 init_esm_shims();
@@ -8298,7 +8531,7 @@ function registerZeroCommands(prog, commands) {
 var program = new Command();
 program.name("zero").description(
   "Zero CLI \u2014 interact with the zero platform from inside the sandbox"
-).version("9.152.0").addHelpText("after", () => {
+).version("9.153.0").addHelpText("after", () => {
   return buildZeroHelpText();
 });
 if (process.argv[1]?.endsWith("zero.js") || process.argv[1]?.endsWith("zero.ts") || process.argv[1]?.endsWith("zero")) {