@vm0/cli 9.17.0 → 9.17.2

package/index.js

@@ -237,7 +237,7 @@ var infoCommand = new Command6().name("info").description("Display environment i
 import { Command as Command7, Option } from "commander";
 import chalk4 from "chalk";
 import { readFile as readFile4 } from "fs/promises";
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync4 } from "fs";
 import { dirname as dirname2 } from "path";
 import { parse as parseYaml2 } from "yaml";
 
@@ -2109,6 +2109,41 @@ var MODEL_PROVIDER_TYPES = {
     models: ["GLM-4.7", "GLM-4.5-Air"],
     defaultModel: "GLM-4.7"
   },
+  "azure-foundry": {
+    framework: "claude-code",
+    label: "Azure Foundry",
+    helpText: "Run Claude on Microsoft Azure Foundry.\nSetup guide: https://code.claude.com/docs/en/microsoft-foundry",
+    authMethods: {
+      "api-key": {
+        label: "API Key",
+        helpText: "Use an Azure Foundry API key for authentication",
+        credentials: {
+          ANTHROPIC_FOUNDRY_API_KEY: {
+            label: "ANTHROPIC_FOUNDRY_API_KEY",
+            required: true,
+            helpText: "API key from Azure Foundry portal (Endpoints and keys)"
+          },
+          ANTHROPIC_FOUNDRY_RESOURCE: {
+            label: "ANTHROPIC_FOUNDRY_RESOURCE",
+            required: true,
+            placeholder: "my-resource",
+            helpText: "Azure resource name (from portal URL)"
+          }
+        }
+      }
+    },
+    defaultAuthMethod: "api-key",
+    environmentMapping: {
+      CLAUDE_CODE_USE_FOUNDRY: "1",
+      ANTHROPIC_FOUNDRY_API_KEY: "$credentials.ANTHROPIC_FOUNDRY_API_KEY",
+      ANTHROPIC_FOUNDRY_RESOURCE: "$credentials.ANTHROPIC_FOUNDRY_RESOURCE",
+      ANTHROPIC_MODEL: "$model"
+    },
+    models: [],
+    defaultModel: "",
+    allowCustomModel: true,
+    customModelPlaceholder: "claude-sonnet-4-5"
+  },
   "aws-bedrock": {
     framework: "claude-code",
     label: "AWS Bedrock",
@@ -2183,6 +2218,7 @@ var modelProviderTypeSchema = z15.enum([
   "minimax-api-key",
   "deepseek-api-key",
   "zai-api-key",
+  "azure-foundry",
   "aws-bedrock"
 ]);
 var modelProviderFrameworkSchema = z15.enum(["claude-code", "codex"]);
@@ -3470,15 +3506,9 @@ function getLegacySystemTemplateWarning(legacyFormat) {
   if (legacyFormat === "vm0-claude-code") {
     return `Warning: "${legacyFormat}" format is deprecated. Use "vm0/claude-code" instead.`;
   }
-  if (legacyFormat === "vm0-claude-code-dev") {
-    return `Warning: "${legacyFormat}" format is deprecated. Use "vm0/claude-code:dev" instead.`;
-  }
   if (legacyFormat === "vm0-codex") {
     return `Warning: "${legacyFormat}" format is deprecated. Use "vm0/codex" instead.`;
   }
-  if (legacyFormat === "vm0-codex-dev") {
-    return `Warning: "${legacyFormat}" format is deprecated. Use "vm0/codex:dev" instead.`;
-  }
   if (legacyFormat.startsWith("vm0-github-cli")) {
     return `Warning: "${legacyFormat}" is deprecated. Use "apps: [github]" in vm0.yaml instead.`;
   }
@@ -3932,47 +3962,47 @@ async function listScheduleRuns(params) {
   handleError(result, `Failed to list runs for schedule "${params.name}"`);
 }
 
-// src/lib/api/domains/credentials.ts
+// src/lib/api/domains/secrets.ts
 import { initClient as initClient7 } from "@ts-rest/core";
-async function listCredentials() {
+async function listSecrets() {
   const config = await getClientConfig();
-  const client = initClient7(credentialsMainContract, config);
+  const client = initClient7(secretsMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
   }
-  handleError(result, "Failed to list credentials");
+  handleError(result, "Failed to list secrets");
 }
-async function getCredential(name) {
+async function getSecret(name) {
   const config = await getClientConfig();
-  const client = initClient7(credentialsByNameContract, config);
+  const client = initClient7(secretsByNameContract, config);
   const result = await client.get({
     params: { name }
   });
   if (result.status === 200) {
     return result.body;
   }
-  handleError(result, `Credential "${name}" not found`);
+  handleError(result, `Secret "${name}" not found`);
 }
-async function setCredential(body) {
+async function setSecret(body) {
   const config = await getClientConfig();
-  const client = initClient7(credentialsMainContract, config);
+  const client = initClient7(secretsMainContract, config);
   const result = await client.set({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
   }
-  handleError(result, "Failed to set credential");
+  handleError(result, "Failed to set secret");
 }
-async function deleteCredential(name) {
+async function deleteSecret(name) {
   const config = await getClientConfig();
-  const client = initClient7(credentialsByNameContract, config);
+  const client = initClient7(secretsByNameContract, config);
   const result = await client.delete({
     params: { name }
   });
   if (result.status === 204) {
     return;
   }
-  handleError(result, `Credential "${name}" not found`);
+  handleError(result, `Secret "${name}" not found`);
 }
 
 // src/lib/api/domains/model-providers.ts
@@ -4355,6 +4385,17 @@ import * as tar2 from "tar";
 import * as fs2 from "fs";
 import * as path2 from "path";
 import * as tar from "tar";
+function checkDirectoryStatus(dirPath) {
+  if (!fs2.existsSync(dirPath)) {
+    return { exists: false, empty: true };
+  }
+  const stat = fs2.statSync(dirPath);
+  if (!stat.isDirectory()) {
+    return { exists: true, empty: false };
+  }
+  const entries = fs2.readdirSync(dirPath);
+  return { exists: true, empty: entries.length === 0 };
+}
 function formatBytes(bytes) {
   if (bytes === 0) return "0 B";
   const k = 1024;
@@ -4967,7 +5008,7 @@ function getSecretsFromComposeContent(content) {
   return new Set(grouped.secrets.map((r) => r.name));
 }
 async function loadAndValidateConfig(configFile) {
-  if (!existsSync3(configFile)) {
+  if (!existsSync4(configFile)) {
     console.error(chalk4.red(`\u2717 Config file not found: ${configFile}`));
     process.exit(1);
   }
@@ -5183,7 +5224,7 @@ var composeCommand = new Command7().name("compose").description("Create or updat
         )
       );
       if (options.autoUpdate !== false) {
-        await silentUpgradeAfterCommand("9.17.0");
+        await silentUpgradeAfterCommand("9.17.2");
       }
     } catch (error) {
       if (error instanceof Error) {
@@ -7414,7 +7455,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
       }
       showNextSteps(result);
       if (options.autoUpdate !== false) {
-        await silentUpgradeAfterCommand("9.17.0");
+        await silentUpgradeAfterCommand("9.17.2");
       }
     } catch (error) {
       handleRunError(error, identifier);
@@ -7691,7 +7732,7 @@ import path6 from "path";
 
 // src/lib/storage/storage-utils.ts
 import { readFile as readFile5, writeFile as writeFile4, mkdir as mkdir4 } from "fs/promises";
-import { existsSync as existsSync5 } from "fs";
+import { existsSync as existsSync6 } from "fs";
 import { parse as parseYaml3, stringify as stringifyYaml } from "yaml";
 import path5 from "path";
 var CONFIG_DIR = ".vm0";
@@ -7707,9 +7748,9 @@ async function readStorageConfig(basePath = process.cwd()) {
   const configPath = path5.join(basePath, CONFIG_DIR, CONFIG_FILE);
   const legacyConfigPath = path5.join(basePath, CONFIG_DIR, "volume.yaml");
   let actualPath = null;
-  if (existsSync5(configPath)) {
+  if (existsSync6(configPath)) {
     actualPath = configPath;
-  } else if (existsSync5(legacyConfigPath)) {
+  } else if (existsSync6(legacyConfigPath)) {
     actualPath = legacyConfigPath;
   }
   if (!actualPath) {
@@ -7725,7 +7766,7 @@ async function readStorageConfig(basePath = process.cwd()) {
 async function writeStorageConfig(storageName, basePath = process.cwd(), type = "volume") {
   const configDir = path5.join(basePath, CONFIG_DIR);
   const configPath = path5.join(configDir, CONFIG_FILE);
-  if (!existsSync5(configDir)) {
+  if (!existsSync6(configDir)) {
     await mkdir4(configDir, { recursive: true });
   }
   const config = {
@@ -8064,8 +8105,9 @@ import * as os5 from "os";
 import * as tar4 from "tar";
 async function cloneStorage(name, type, destination, options = {}) {
   const typeLabel = type === "artifact" ? "artifact" : "volume";
-  if (fs7.existsSync(destination)) {
-    throw new Error(`Directory "${destination}" already exists`);
+  const dirStatus = checkDirectoryStatus(destination);
+  if (dirStatus.exists && !dirStatus.empty) {
+    throw new Error(`Directory "${destination}" is not empty`);
   }
   console.log(chalk20.dim(`Checking remote ${typeLabel}...`));
   const downloadInfo = await getStorageDownload({
@@ -8920,7 +8962,7 @@ var cookAction = new Command27().name("cook").description("Quick start: prepare,
 ).option("-y, --yes", "Skip confirmation prompts").option("-v, --verbose", "Show full tool inputs and outputs").addOption(new Option5("--debug-no-mock-claude").hideHelp()).addOption(new Option5("--no-auto-update").hideHelp()).action(
   async (prompt, options) => {
     if (options.autoUpdate !== false) {
-      const shouldExit = await checkAndUpgrade("9.17.0", prompt);
+      const shouldExit = await checkAndUpgrade("9.17.2", prompt);
       if (shouldExit) {
         process.exit(0);
       }
@@ -9500,7 +9542,7 @@ import { Command as Command38 } from "commander";
 // src/commands/agent/clone.ts
 import { Command as Command35 } from "commander";
 import chalk36 from "chalk";
-import { existsSync as existsSync10, mkdtempSync as mkdtempSync5 } from "fs";
+import { mkdtempSync as mkdtempSync5 } from "fs";
 import { mkdir as mkdir7, writeFile as writeFile6, readdir, copyFile, rm as rm3 } from "fs/promises";
 import { join as join7, dirname as dirname3 } from "path";
 import { tmpdir as tmpdir7 } from "os";
@@ -9558,8 +9600,9 @@ async function downloadInstructions(agentName, instructionsPath, destination) {
 var cloneCommand3 = new Command35().name("clone").description("Clone agent compose to local directory (latest version)").argument("<name>", "Agent compose name to clone").argument("[destination]", "Destination directory (default: agent name)").action(async (name, destination) => {
   try {
     const targetDir = destination || name;
-    if (existsSync10(targetDir)) {
-      console.error(chalk36.red(`\u2717 Directory "${targetDir}" already exists`));
+    const dirStatus = checkDirectoryStatus(targetDir);
+    if (dirStatus.exists && !dirStatus.empty) {
+      console.error(chalk36.red(`\u2717 Directory "${targetDir}" is not empty`));
       process.exit(1);
     }
     console.log(`Cloning agent compose: ${name}`);
@@ -9921,7 +9964,7 @@ var agentCommand = new Command38().name("agent").description("Manage agent compo
 import { Command as Command39 } from "commander";
 import chalk39 from "chalk";
 import path15 from "path";
-import { existsSync as existsSync11 } from "fs";
+import { existsSync as existsSync10 } from "fs";
 import { writeFile as writeFile7 } from "fs/promises";
 var VM0_YAML_FILE = "vm0.yaml";
 var AGENTS_MD_FILE = "AGENTS.md";
@@ -9953,8 +9996,8 @@ You are a HackerNews AI content curator.
 }
 function checkExistingFiles() {
   const existingFiles = [];
-  if (existsSync11(VM0_YAML_FILE)) existingFiles.push(VM0_YAML_FILE);
-  if (existsSync11(AGENTS_MD_FILE)) existingFiles.push(AGENTS_MD_FILE);
+  if (existsSync10(VM0_YAML_FILE)) existingFiles.push(VM0_YAML_FILE);
+  if (existsSync10(AGENTS_MD_FILE)) existingFiles.push(AGENTS_MD_FILE);
   return existingFiles;
 }
 var initCommand3 = new Command39().name("init").description("Initialize a new VM0 project in the current directory").option("-f, --force", "Overwrite existing files").option("-n, --name <name>", "Agent name (required in non-interactive mode)").action(async (options) => {
@@ -10176,7 +10219,6 @@ import chalk40 from "chalk";
 var defaultPromptDeps = {
   isInteractive,
   promptConfirm,
-  promptPassword,
   promptText
 };
 function parseKeyValuePairs(pairs) {
@@ -10191,25 +10233,23 @@ function parseKeyValuePairs(pairs) {
   }
   return result;
 }
-async function handleSecrets(optionSecrets, existingSecretNames, deps) {
-  if (optionSecrets.length > 0) {
-    return {
-      secrets: parseKeyValuePairs(optionSecrets),
-      preserveExistingSecrets: false
-    };
-  }
+async function handleExistingSecrets(existingSecretNames, deps) {
   if (existingSecretNames.length > 0 && deps.isInteractive()) {
     const keepSecrets = await deps.promptConfirm(
       `Keep existing secrets? (${existingSecretNames.join(", ")})`,
       true
     );
     if (keepSecrets) {
-      return { secrets: {}, preserveExistingSecrets: true };
+      return true;
     }
-    console.log(chalk40.dim("  Note: You'll need to provide new secret values"));
-    return { secrets: {}, preserveExistingSecrets: false };
+    console.log(
+      chalk40.dim(
+        "  Note: Secrets will be cleared. Use 'vm0 secret set' to add platform secrets."
+      )
+    );
+    return false;
   }
-  return { secrets: {}, preserveExistingSecrets: false };
+  return false;
 }
 async function handleVars(optionVars, existingVars, deps) {
   if (optionVars.length > 0) {
@@ -10227,29 +10267,24 @@ async function handleVars(optionVars, existingVars, deps) {
   return {};
 }
 function displayMissingRequirements(missingSecrets, missingVars) {
-  console.log(chalk40.yellow("\nAgent requires the following configuration:"));
   if (missingSecrets.length > 0) {
-    console.log(chalk40.dim("  Secrets:"));
+    console.log(chalk40.yellow("\nAgent requires the following secrets:"));
+    for (const name of missingSecrets) {
+      console.log(chalk40.dim(`  ${name}`));
+    }
+    console.log();
+    console.log("Set secrets using the platform:");
     for (const name of missingSecrets) {
-      console.log(chalk40.dim(`    ${name}`));
+      console.log(chalk40.cyan(`  vm0 secret set ${name} <value>`));
     }
+    console.log();
   }
   if (missingVars.length > 0) {
-    console.log(chalk40.dim("  Vars:"));
+    console.log(chalk40.yellow("\nAgent requires the following variables:"));
     for (const name of missingVars) {
-      console.log(chalk40.dim(`    ${name}`));
-    }
-  }
-  console.log("");
-}
-async function promptForMissingSecrets(missingSecrets, secrets, deps) {
-  for (const name of missingSecrets) {
-    const value = await deps.promptPassword(
-      `Enter value for secret ${chalk40.cyan(name)}`
-    );
-    if (value) {
-      secrets[name] = value;
+      console.log(chalk40.dim(`  ${name}`));
     }
+    console.log();
   }
 }
 async function promptForMissingVars(missingVars, vars, deps) {
@@ -10264,32 +10299,30 @@ async function promptForMissingVars(missingVars, vars, deps) {
   }
 }
 async function gatherConfiguration(params, deps = defaultPromptDeps) {
-  const { required, optionSecrets, optionVars, existingSchedule } = params;
+  const { required, optionVars, existingSchedule } = params;
   const existingSecretNames = existingSchedule?.secretNames ?? [];
   const existingVars = existingSchedule?.vars ?? null;
-  const { secrets, preserveExistingSecrets } = await handleSecrets(
-    optionSecrets,
+  const preserveExistingSecrets = await handleExistingSecrets(
     existingSecretNames,
     deps
   );
   const vars = await handleVars(optionVars, existingVars, deps);
   const effectiveExistingSecrets = preserveExistingSecrets ? existingSecretNames : [];
   const missingSecrets = required.secrets.filter(
-    (name) => !Object.keys(secrets).includes(name) && !effectiveExistingSecrets.includes(name)
+    (name) => !effectiveExistingSecrets.includes(name)
   );
   const missingVars = required.vars.filter(
     (name) => !Object.keys(vars).includes(name)
   );
   if (missingSecrets.length === 0 && missingVars.length === 0) {
-    return { secrets, vars, preserveExistingSecrets };
+    return { vars, preserveExistingSecrets };
   }
   if (!deps.isInteractive()) {
-    return { secrets, vars, preserveExistingSecrets };
+    return { vars, preserveExistingSecrets };
   }
   displayMissingRequirements(missingSecrets, missingVars);
-  await promptForMissingSecrets(missingSecrets, secrets, deps);
   await promptForMissingVars(missingVars, vars, deps);
-  return { secrets, vars, preserveExistingSecrets };
+  return { vars, preserveExistingSecrets };
 }
 
 // src/commands/schedule/setup.ts
@@ -10694,7 +10727,7 @@ async function handleScheduleEnabling(params) {
     showEnableHint(agentName);
   }
 }
-var setupCommand = new Command40().name("setup").description("Create or edit a schedule for an agent").argument("<agent-name>", "Agent name to configure schedule for").option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--var <name=value>", "Variable (can be repeated)", collect, []).option("--secret <name=value>", "Secret (can be repeated)", collect, []).option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").action(async (agentName, options) => {
+var setupCommand = new Command40().name("setup").description("Create or edit a schedule for an agent").argument("<agent-name>", "Agent name to configure schedule for").option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--var <name=value>", "Variable (can be repeated)", collect, []).option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").action(async (agentName, options) => {
   try {
     const { composeId, scheduleName, composeContent } = await resolveAgent(agentName);
     const requiredConfig = extractRequiredConfiguration(composeContent);
@@ -10737,7 +10770,8 @@ var setupCommand = new Command40().name("setup").description("Create or edit a s
     }
     const config = await gatherConfiguration({
       required: requiredConfig,
-      optionSecrets: options.secret || [],
+      optionSecrets: [],
+      // Secrets are no longer passed via CLI
       optionVars: options.var || [],
       existingSchedule
     });
@@ -10752,7 +10786,8 @@ var setupCommand = new Command40().name("setup").description("Create or edit a s
       timezone,
       prompt: promptText_,
       vars: Object.keys(config.vars).length > 0 ? config.vars : void 0,
-      secrets: config.preserveExistingSecrets ? void 0 : Object.keys(config.secrets).length > 0 ? config.secrets : void 0,
+      secrets: void 0,
+      // Secrets managed via platform, not schedule
       artifactName: options.artifactName
     });
     displayDeployResult(agentName, deployResult);
@@ -11252,38 +11287,36 @@ var usageCommand = new Command47().name("usage").description("View usage statist
   }
 });
 
-// src/commands/credential/index.ts
+// src/commands/secret/index.ts
 import { Command as Command51 } from "commander";
 
-// src/commands/credential/list.ts
+// src/commands/secret/list.ts
 import { Command as Command48 } from "commander";
 import chalk48 from "chalk";
-var listCommand6 = new Command48().name("list").alias("ls").description("List all credentials").action(async () => {
+var listCommand6 = new Command48().name("list").alias("ls").description("List all secrets").action(async () => {
   try {
-    const result = await listCredentials();
-    if (result.credentials.length === 0) {
-      console.log(chalk48.dim("No credentials found"));
+    const result = await listSecrets();
+    if (result.secrets.length === 0) {
+      console.log(chalk48.dim("No secrets found"));
       console.log();
-      console.log("To add a credential:");
-      console.log(chalk48.cyan("  vm0 credential set MY_API_KEY <value>"));
+      console.log("To add a secret:");
+      console.log(chalk48.cyan("  vm0 secret set MY_API_KEY <value>"));
       return;
     }
-    console.log(chalk48.bold("Credentials:"));
+    console.log(chalk48.bold("Secrets:"));
     console.log();
-    for (const credential of result.credentials) {
-      const typeIndicator = credential.type === "model-provider" ? chalk48.dim(" [model-provider]") : "";
-      console.log(`  ${chalk48.cyan(credential.name)}${typeIndicator}`);
-      if (credential.description) {
-        console.log(`    ${chalk48.dim(credential.description)}`);
+    for (const secret of result.secrets) {
+      const typeIndicator = secret.type === "model-provider" ? chalk48.dim(" [model-provider]") : "";
+      console.log(`  ${chalk48.cyan(secret.name)}${typeIndicator}`);
+      if (secret.description) {
+        console.log(`    ${chalk48.dim(secret.description)}`);
       }
       console.log(
-        `    ${chalk48.dim(`Updated: ${new Date(credential.updatedAt).toLocaleString()}`)}`
+        `    ${chalk48.dim(`Updated: ${new Date(secret.updatedAt).toLocaleString()}`)}`
       );
       console.log();
     }
-    console.log(
-      chalk48.dim(`Total: ${result.credentials.length} credential(s)`)
-    );
+    console.log(chalk48.dim(`Total: ${result.secrets.length} secret(s)`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
@@ -11298,22 +11331,22 @@ var listCommand6 = new Command48().name("list").alias("ls").description("List al
   }
 });
 
-// src/commands/credential/set.ts
+// src/commands/secret/set.ts
 import { Command as Command49 } from "commander";
 import chalk49 from "chalk";
-var setCommand2 = new Command49().name("set").description("Create or update a credential").argument("<name>", "Credential name (uppercase, e.g., MY_API_KEY)").argument("<value>", "Credential value").option("-d, --description <description>", "Optional description").action(
+var setCommand2 = new Command49().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").argument("<value>", "Secret value").option("-d, --description <description>", "Optional description").action(
   async (name, value, options) => {
     try {
-      const credential = await setCredential({
+      const secret = await setSecret({
         name,
         value,
         description: options.description
       });
-      console.log(chalk49.green(`\u2713 Credential "${credential.name}" saved`));
+      console.log(chalk49.green(`\u2713 Secret "${secret.name}" saved`));
       console.log();
       console.log("Use in vm0.yaml:");
       console.log(chalk49.cyan(`  environment:`));
-      console.log(chalk49.cyan(`    ${name}: \${{ credentials.${name} }}`));
+      console.log(chalk49.cyan(`    ${name}: \${{ secrets.${name} }}`));
     } catch (error) {
       if (error instanceof Error) {
         if (error.message.includes("Not authenticated")) {
@@ -11323,7 +11356,7 @@ var setCommand2 = new Command49().name("set").description("Create or update a cr
         } else if (error.message.includes("must contain only uppercase")) {
           console.error(chalk49.red(`\u2717 ${error.message}`));
           console.log();
-          console.log("Examples of valid credential names:");
+          console.log("Examples of valid secret names:");
           console.log(chalk49.dim("  MY_API_KEY"));
           console.log(chalk49.dim("  GITHUB_TOKEN"));
           console.log(chalk49.dim("  AWS_ACCESS_KEY_ID"));
@@ -11338,15 +11371,15 @@ var setCommand2 = new Command49().name("set").description("Create or update a cr
   }
 );
 
-// src/commands/credential/delete.ts
+// src/commands/secret/delete.ts
 import { Command as Command50 } from "commander";
 import chalk50 from "chalk";
-var deleteCommand2 = new Command50().name("delete").description("Delete a credential").argument("<name>", "Credential name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
+var deleteCommand2 = new Command50().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
   try {
     try {
-      await getCredential(name);
+      await getSecret(name);
     } catch {
-      console.error(chalk50.red(`\u2717 Credential "${name}" not found`));
+      console.error(chalk50.red(`\u2717 Secret "${name}" not found`));
       process.exit(1);
     }
     if (!options.yes) {
@@ -11357,7 +11390,7 @@ var deleteCommand2 = new Command50().name("delete").description("Delete a creden
         process.exit(1);
       }
       const confirmed = await promptConfirm(
-        `Are you sure you want to delete credential "${name}"?`,
+        `Are you sure you want to delete secret "${name}"?`,
         false
       );
       if (!confirmed) {
@@ -11365,8 +11398,8 @@ var deleteCommand2 = new Command50().name("delete").description("Delete a creden
         return;
       }
     }
-    await deleteCredential(name);
-    console.log(chalk50.green(`\u2713 Credential "${name}" deleted`));
+    await deleteSecret(name);
+    console.log(chalk50.green(`\u2713 Secret "${name}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
@@ -11381,8 +11414,8 @@ var deleteCommand2 = new Command50().name("delete").description("Delete a creden
   }
 });
 
-// src/commands/credential/index.ts
-var credentialCommand = new Command51().name("credential").description("Manage stored credentials for agent runs").addCommand(listCommand6).addCommand(setCommand2).addCommand(deleteCommand2);
+// src/commands/secret/index.ts
+var secretCommand = new Command51().name("secret").description("Manage stored secrets for agent runs").addCommand(listCommand6).addCommand(setCommand2).addCommand(deleteCommand2);
 
 // src/commands/model-provider/index.ts
 import { Command as Command56 } from "commander";
@@ -12083,7 +12116,7 @@ var modelProviderCommand = new Command56().name("model-provider").description("M
 import { Command as Command57 } from "commander";
 import chalk58 from "chalk";
 import { mkdir as mkdir8 } from "fs/promises";
-import { existsSync as existsSync12 } from "fs";
+import { existsSync as existsSync11 } from "fs";
 
 // src/lib/ui/welcome-box.ts
 import chalk55 from "chalk";
@@ -12583,7 +12616,7 @@ async function handleAgentCreation(ctx) {
           process.exit(0);
         }
         agentName = inputName;
-        if (existsSync12(agentName)) {
+        if (existsSync11(agentName)) {
           step.detail(
             chalk58.yellow(`${agentName}/ already exists, choose another name`)
           );
@@ -12600,7 +12633,7 @@ async function handleAgentCreation(ctx) {
         );
         process.exit(1);
       }
-      if (existsSync12(agentName)) {
+      if (existsSync11(agentName)) {
         console.error(chalk58.red(`${agentName}/ already exists`));
         console.log();
         console.log("Remove it first or choose a different name:");
@@ -12703,7 +12736,7 @@ var setupClaudeCommand = new Command58().name("setup-claude").description("Insta
 
 // src/index.ts
 var program = new Command59();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.17.0");
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.17.2");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);
@@ -12717,7 +12750,7 @@ program.addCommand(agentCommand);
 program.addCommand(initCommand3);
 program.addCommand(scheduleCommand);
 program.addCommand(usageCommand);
-program.addCommand(credentialCommand);
+program.addCommand(secretCommand);
 program.addCommand(modelProviderCommand);
 program.addCommand(onboardCommand);
 program.addCommand(setupClaudeCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.17.0",
+  "version": "9.17.2",
   "description": "CLI application",
   "repository": {
     "type": "git",