@vm0/cli 9.18.0 → 9.20.0

package/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { Command as Command63 } from "commander";
+import { Command as Command68 } from "commander";
 
 // src/commands/auth/index.ts
 import { Command as Command5 } from "commander";
@@ -236,9 +236,9 @@ var infoCommand = new Command6().name("info").description("Display environment i
 // src/commands/compose/index.ts
 import { Command as Command7, Option } from "commander";
 import chalk4 from "chalk";
-import { readFile as readFile4 } from "fs/promises";
+import { readFile as readFile4, rm as rm3 } from "fs/promises";
 import { existsSync as existsSync4 } from "fs";
-import { dirname as dirname2 } from "path";
+import { dirname as dirname2, join as join6 } from "path";
 import { parse as parseYaml2 } from "yaml";
 
 // ../../packages/core/src/variable-expander.ts
@@ -3772,6 +3772,26 @@ async function httpGet(path16) {
     headers
   });
 }
+async function httpPost(path16, body) {
+  const baseUrl = await getBaseUrl();
+  const headers = await getRawHeaders();
+  return fetch(`${baseUrl}${path16}`, {
+    method: "POST",
+    headers: {
+      ...headers,
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify(body)
+  });
+}
+async function httpDelete(path16) {
+  const baseUrl = await getBaseUrl();
+  const headers = await getRawHeaders();
+  return fetch(`${baseUrl}${path16}`, {
+    method: "DELETE",
+    headers
+  });
+}
 
 // src/lib/api/domains/composes.ts
 import { initClient } from "@ts-rest/core";
@@ -4427,11 +4447,6 @@ function validateAgentCompose(config) {
   return { valid: true };
 }
 
-// src/lib/storage/system-storage.ts
-import * as fs4 from "fs/promises";
-import * as path4 from "path";
-import * as os3 from "os";
-
 // src/lib/domain/github-skills.ts
 import * as fs from "fs/promises";
 import * as path from "path";
@@ -4474,6 +4489,49 @@ async function downloadGitHubSkill(parsed, destDir) {
     await fs.rm(tempDir, { recursive: true, force: true });
   }
 }
+async function downloadGitHubDirectory(url) {
+  const parsed = parseGitHubTreeUrl2(url);
+  const repoUrl = `https://github.com/${parsed.owner}/${parsed.repo}.git`;
+  const tempDir = await fs.mkdtemp(path.join(os.tmpdir(), "vm0-github-"));
+  try {
+    try {
+      await execAsync("git --version");
+    } catch {
+      throw new Error(
+        "git command not found. Please install git to use GitHub URLs."
+      );
+    }
+    await execAsync(`git init`, { cwd: tempDir });
+    await execAsync(`git remote add origin "${repoUrl}"`, { cwd: tempDir });
+    await execAsync(`git config core.sparseCheckout true`, { cwd: tempDir });
+    const sparseFile = path.join(tempDir, ".git", "info", "sparse-checkout");
+    await fs.writeFile(sparseFile, parsed.path + "\n");
+    try {
+      await execAsync(`git fetch --depth 1 origin "${parsed.branch}"`, {
+        cwd: tempDir
+      });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (message.includes("Authentication failed") || message.includes("could not read Username")) {
+        throw new Error(`Cannot access repository. Is it private? URL: ${url}`);
+      }
+      if (message.includes("couldn't find remote ref")) {
+        throw new Error(
+          `Branch "${parsed.branch}" not found in repository: ${url}`
+        );
+      }
+      throw error;
+    }
+    await execAsync(`git checkout "${parsed.branch}"`, { cwd: tempDir });
+    return {
+      dir: path.join(tempDir, parsed.path),
+      tempRoot: tempDir
+    };
+  } catch (error) {
+    await fs.rm(tempDir, { recursive: true, force: true });
+    throw error;
+  }
+}
 async function validateSkillDirectory(skillDir) {
   const skillMdPath = path.join(skillDir, "SKILL.md");
   try {
@@ -4516,6 +4574,11 @@ async function readSkillFrontmatter(skillDir) {
   return parseSkillFrontmatter(content);
 }
 
+// src/lib/storage/system-storage.ts
+import * as fs4 from "fs/promises";
+import * as path4 from "path";
+import * as os3 from "os";
+
 // src/lib/storage/direct-upload.ts
 import { createHash } from "crypto";
 import * as fs3 from "fs";
@@ -5144,6 +5207,9 @@ async function silentUpgradeAfterCommand(currentVersion) {
 
 // src/commands/compose/index.ts
 var DEFAULT_CONFIG_FILE = "vm0.yaml";
+function isGitHubTreeUrl(input) {
+  return input.startsWith("https://github.com/") && input.includes("/tree/");
+}
 function getSecretsFromComposeContent(content) {
   const refs = extractVariableReferences(content);
   const grouped = groupVariablesBySource(refs);
@@ -5177,6 +5243,14 @@ async function loadAndValidateConfig(configFile) {
   const basePath = dirname2(configFile);
   return { config, agentName, agent, basePath };
 }
+function hasVolumes(config) {
+  if (typeof config !== "object" || config === null) {
+    return false;
+  }
+  const cfg = config;
+  const volumes = cfg.volumes;
+  return typeof volumes === "object" && volumes !== null && Object.keys(volumes).length > 0;
+}
 function checkLegacyImageFormat(config) {
   const cfg = config;
   const agentsConfig = cfg.agents;
@@ -5326,47 +5400,140 @@ function mergeSkillVariables(agent, variables) {
     agent.environment = environment;
   }
 }
+async function finalizeCompose(config, agent, variables, options) {
+  const confirmed = await displayAndConfirmVariables(variables, options);
+  if (!confirmed) {
+    process.exit(0);
+  }
+  mergeSkillVariables(agent, variables);
+  console.log("Uploading compose...");
+  const response = await createOrUpdateCompose({ content: config });
+  const scopeResponse = await getScope();
+  const shortVersionId = response.versionId.slice(0, 8);
+  const displayName = `${scopeResponse.slug}/${response.name}`;
+  if (response.action === "created") {
+    console.log(chalk4.green(`\u2713 Compose created: ${displayName}`));
+  } else {
+    console.log(chalk4.green(`\u2713 Compose version exists: ${displayName}`));
+  }
+  console.log(chalk4.dim(`  Version: ${shortVersionId}`));
+  console.log();
+  console.log("  Run your agent:");
+  console.log(
+    chalk4.cyan(
+      `    vm0 run ${displayName}:${shortVersionId} --artifact-name <artifact> "your prompt"`
+    )
+  );
+  if (options.autoUpdate !== false) {
+    await silentUpgradeAfterCommand("9.20.0");
+  }
+}
+async function handleGitHubCompose(url, options) {
+  console.log(`Downloading from GitHub: ${url}`);
+  const { dir: downloadedDir, tempRoot } = await downloadGitHubDirectory(url);
+  const configFile = join6(downloadedDir, "vm0.yaml");
+  try {
+    if (!existsSync4(configFile)) {
+      console.error(chalk4.red(`\u2717 vm0.yaml not found in the GitHub directory`));
+      console.error(chalk4.dim(`  URL: ${url}`));
+      process.exit(1);
+    }
+    const { config, agentName, agent, basePath } = await loadAndValidateConfig(configFile);
+    const existingCompose = await getComposeByName(agentName);
+    if (existingCompose) {
+      console.log();
+      console.log(
+        chalk4.yellow(`\u26A0 An agent named "${agentName}" already exists.`)
+      );
+      if (!isInteractive()) {
+        if (!options.yes) {
+          console.error(
+            chalk4.red(
+              `\u2717 Cannot overwrite existing agent in non-interactive mode`
+            )
+          );
+          console.error(
+            chalk4.dim(
+              `  Use --yes flag to confirm overwriting the existing agent.`
+            )
+          );
+          process.exit(1);
+        }
+      } else {
+        const confirmed = await promptConfirm(
+          "Do you want to overwrite it?",
+          false
+        );
+        if (!confirmed) {
+          console.log(chalk4.yellow("Compose cancelled."));
+          process.exit(0);
+        }
+      }
+    }
+    if (hasVolumes(config)) {
+      console.error(
+        chalk4.red(`\u2717 Volumes are not supported for GitHub URL compose`)
+      );
+      console.error(
+        chalk4.dim(
+          `  Clone the repository locally and run: vm0 compose ./path/to/vm0.yaml`
+        )
+      );
+      process.exit(1);
+    }
+    checkLegacyImageFormat(config);
+    const skillResults = await uploadAssets(agentName, agent, basePath);
+    const environment = agent.environment || {};
+    const variables = await collectSkillVariables(
+      skillResults,
+      environment,
+      agentName
+    );
+    await finalizeCompose(config, agent, variables, options);
+  } finally {
+    await rm3(tempRoot, { recursive: true, force: true });
+  }
+}
 var composeCommand = new Command7().name("compose").description("Create or update agent compose (e.g., vm0.yaml)").argument(
   "[agent-yaml]",
-  `Path to agent YAML file (default: ${DEFAULT_CONFIG_FILE})`
-).option("-y, --yes", "Skip confirmation prompts for skill requirements").addOption(new Option("--no-auto-update").hideHelp()).action(
+  `Path to agent YAML file or GitHub tree URL (default: ${DEFAULT_CONFIG_FILE})`
+).option("-y, --yes", "Skip confirmation prompts for skill requirements").option(
+  "--experimental-shared-compose",
+  "Enable GitHub URL compose (experimental)"
+).addOption(new Option("--no-auto-update").hideHelp()).action(
   async (configFile, options) => {
     const resolvedConfigFile = configFile ?? DEFAULT_CONFIG_FILE;
     try {
-      const { config, agentName, agent, basePath } = await loadAndValidateConfig(resolvedConfigFile);
-      checkLegacyImageFormat(config);
-      const skillResults = await uploadAssets(agentName, agent, basePath);
-      const environment = agent.environment || {};
-      const variables = await collectSkillVariables(
-        skillResults,
-        environment,
-        agentName
-      );
-      const confirmed = await displayAndConfirmVariables(variables, options);
-      if (!confirmed) {
-        process.exit(0);
-      }
-      mergeSkillVariables(agent, variables);
-      console.log("Uploading compose...");
-      const response = await createOrUpdateCompose({ content: config });
-      const scopeResponse = await getScope();
-      const shortVersionId = response.versionId.slice(0, 8);
-      const displayName = `${scopeResponse.slug}/${response.name}`;
-      if (response.action === "created") {
-        console.log(chalk4.green(`\u2713 Compose created: ${displayName}`));
+      if (isGitHubTreeUrl(resolvedConfigFile)) {
+        if (!options.experimentalSharedCompose) {
+          console.error(
+            chalk4.red(
+              "\u2717 Composing shared agents requires --experimental-shared-compose flag"
+            )
+          );
+          console.error();
+          console.error(
+            chalk4.dim(
+              "  Composing agents from other users carries security risks."
+            )
+          );
+          console.error(
+            chalk4.dim("  Only compose agents from users you trust.")
+          );
+          process.exit(1);
+        }
+        await handleGitHubCompose(resolvedConfigFile, options);
       } else {
-        console.log(chalk4.green(`\u2713 Compose version exists: ${displayName}`));
-      }
-      console.log(chalk4.dim(`  Version: ${shortVersionId}`));
-      console.log();
-      console.log("  Run your agent:");
-      console.log(
-        chalk4.cyan(
-          `    vm0 run ${displayName}:${shortVersionId} --artifact-name <artifact> "your prompt"`
-        )
-      );
-      if (options.autoUpdate !== false) {
-        await silentUpgradeAfterCommand("9.18.0");
+        const { config, agentName, agent, basePath } = await loadAndValidateConfig(resolvedConfigFile);
+        checkLegacyImageFormat(config);
+        const skillResults = await uploadAssets(agentName, agent, basePath);
+        const environment = agent.environment || {};
+        const variables = await collectSkillVariables(
+          skillResults,
+          environment,
+          agentName
+        );
+        await finalizeCompose(config, agent, variables, options);
       }
     } catch (error) {
       if (error instanceof Error) {
@@ -7524,10 +7691,39 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
 ).option(
   "--model-provider <type>",
   "Override model provider (e.g., anthropic-api-key)"
-).option("--verbose", "Show full tool inputs and outputs").addOption(new Option2("--debug-no-mock-claude").hideHelp()).addOption(new Option2("--no-auto-update").hideHelp()).action(
+).option("--verbose", "Show full tool inputs and outputs").option(
+  "--experimental-shared-agent",
+  "Allow running agents shared by other users (required when running scope/agent format)"
+).addOption(new Option2("--debug-no-mock-claude").hideHelp()).addOption(new Option2("--no-auto-update").hideHelp()).action(
   async (identifier, prompt, options) => {
     try {
       const { scope, name, version } = parseIdentifier(identifier);
+      if (scope && !options.experimentalSharedAgent) {
+        const userScope = await getScope();
+        const isOwnScope = userScope.slug === scope;
+        if (!isOwnScope) {
+          console.error(
+            chalk9.red(
+              `\u2717 Running shared agents requires --experimental-shared-agent flag`
+            )
+          );
+          console.error();
+          console.error(
+            chalk9.dim(
+              "  Running agent from other users carries security risks."
+            )
+          );
+          console.error(chalk9.dim("  Only run agents from users you trust."));
+          console.error();
+          console.error("Example:");
+          console.error(
+            chalk9.cyan(
+              `  vm0 run ${identifier} --experimental-shared-agent "your prompt"`
+            )
+          );
+          process.exit(1);
+        }
+      }
       let composeId;
       let composeContent;
       if (isUUID(name)) {
@@ -7597,7 +7793,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
       }
       showNextSteps(result);
       if (options.autoUpdate !== false) {
-        await silentUpgradeAfterCommand("9.18.0");
+        await silentUpgradeAfterCommand("9.20.0");
       }
     } catch (error) {
       handleRunError(error, identifier);
@@ -8705,11 +8901,11 @@ import { config as dotenvConfig2 } from "dotenv";
 
 // src/lib/domain/cook-state.ts
 import { homedir as homedir2 } from "os";
-import { join as join6 } from "path";
+import { join as join7 } from "path";
 import { readFile as readFile6, writeFile as writeFile5, mkdir as mkdir5 } from "fs/promises";
 import { existsSync as existsSync7 } from "fs";
-var CONFIG_DIR2 = join6(homedir2(), ".vm0");
-var COOK_STATE_FILE = join6(CONFIG_DIR2, "cook.json");
+var CONFIG_DIR2 = join7(homedir2(), ".vm0");
+var COOK_STATE_FILE = join7(CONFIG_DIR2, "cook.json");
 var STALE_THRESHOLD_MS = 48 * 60 * 60 * 1e3;
 async function loadCookStateFile() {
   if (!existsSync7(COOK_STATE_FILE)) {
@@ -9104,7 +9300,7 @@ var cookAction = new Command27().name("cook").description("Quick start: prepare,
 ).option("-y, --yes", "Skip confirmation prompts").option("-v, --verbose", "Show full tool inputs and outputs").addOption(new Option5("--debug-no-mock-claude").hideHelp()).addOption(new Option5("--no-auto-update").hideHelp()).action(
   async (prompt, options) => {
     if (options.autoUpdate !== false) {
-      const shouldExit = await checkAndUpgrade("9.18.0", prompt);
+      const shouldExit = await checkAndUpgrade("9.20.0", prompt);
       if (shouldExit) {
         process.exit(0);
       }
@@ -9679,14 +9875,14 @@ var setCommand = new Command33().name("set").description("Set your scope slug").
 var scopeCommand = new Command34().name("scope").description("Manage your scope (namespace for agents)").addCommand(statusCommand4).addCommand(setCommand);
 
 // src/commands/agent/index.ts
-import { Command as Command38 } from "commander";
+import { Command as Command43 } from "commander";
 
 // src/commands/agent/clone.ts
 import { Command as Command35 } from "commander";
 import chalk36 from "chalk";
 import { mkdtempSync as mkdtempSync5 } from "fs";
-import { mkdir as mkdir7, writeFile as writeFile6, readdir, copyFile, rm as rm3 } from "fs/promises";
-import { join as join7, dirname as dirname3 } from "path";
+import { mkdir as mkdir7, writeFile as writeFile6, readdir, copyFile, rm as rm4 } from "fs/promises";
+import { join as join8, dirname as dirname3 } from "path";
 import { tmpdir as tmpdir7 } from "os";
 import * as tar6 from "tar";
 import { stringify as yamlStringify } from "yaml";
@@ -9722,21 +9918,21 @@ async function downloadInstructions(agentName, instructionsPath, destination) {
     throw new Error(`Failed to download instructions: ${response.status}`);
   }
   const buffer = Buffer.from(await response.arrayBuffer());
-  const tmpDir = mkdtempSync5(join7(tmpdir7(), "vm0-clone-"));
-  const tarPath = join7(tmpDir, "archive.tar.gz");
+  const tmpDir = mkdtempSync5(join8(tmpdir7(), "vm0-clone-"));
+  const tarPath = join8(tmpDir, "archive.tar.gz");
   await writeFile6(tarPath, buffer);
   await tar6.extract({ file: tarPath, cwd: tmpDir, gzip: true });
   const files = await readdir(tmpDir);
   const mdFile = files.find((f) => f === "CLAUDE.md" || f === "AGENTS.md");
   if (!mdFile) {
     console.log(chalk36.yellow("\u26A0 No instructions file found in volume"));
-    await rm3(tmpDir, { recursive: true, force: true });
+    await rm4(tmpDir, { recursive: true, force: true });
     return false;
   }
-  const destPath = join7(destination, instructionsPath);
+  const destPath = join8(destination, instructionsPath);
   await mkdir7(dirname3(destPath), { recursive: true });
-  await copyFile(join7(tmpDir, mdFile), destPath);
-  await rm3(tmpDir, { recursive: true, force: true });
+  await copyFile(join8(tmpDir, mdFile), destPath);
+  await rm4(tmpDir, { recursive: true, force: true });
   return true;
 }
 var cloneCommand3 = new Command35().name("clone").description("Clone agent compose to local directory (latest version)").argument("<name>", "Agent compose name to clone").argument("[destination]", "Destination directory (default: agent name)").action(async (name, destination) => {
@@ -9761,7 +9957,7 @@ var cloneCommand3 = new Command35().name("clone").description("Clone agent compo
     const cleanedContent = cleanComposeContent(content);
     const yamlContent = yamlStringify(cleanedContent);
     await mkdir7(targetDir, { recursive: true });
-    const yamlPath = join7(targetDir, "vm0.yaml");
+    const yamlPath = join8(targetDir, "vm0.yaml");
     await writeFile6(yamlPath, yamlContent, "utf8");
     console.log(chalk36.green("\u2713 Created vm0.yaml"));
     const agentKey = Object.keys(content.agents)[0];
@@ -10099,12 +10295,214 @@ var statusCommand5 = new Command37().name("status").description("Show status of
   }
 });
 
+// src/commands/agent/public.ts
+import { Command as Command38 } from "commander";
+import chalk39 from "chalk";
+var publicCommand = new Command38().name("experimental-public").description("Make an agent public (accessible to all authenticated users)").argument("<name>", "Agent name").action(async (name) => {
+  try {
+    const compose = await getComposeByName(name);
+    if (!compose) {
+      console.error(chalk39.red(`\u2717 Agent not found: ${name}`));
+      process.exit(1);
+    }
+    const scope = await getScope();
+    const response = await httpPost(
+      `/api/agent/composes/${compose.id}/permissions`,
+      { granteeType: "public" }
+    );
+    if (!response.ok) {
+      const error = await response.json();
+      if (response.status === 409) {
+        console.log(chalk39.yellow(`Agent "${name}" is already public`));
+        return;
+      }
+      throw new Error(error.error?.message || "Failed to make agent public");
+    }
+    const fullName = `${scope.slug}/${name}`;
+    console.log(chalk39.green(`\u2713 Agent "${name}" is now public`));
+    console.log();
+    console.log("Others can now run your agent with:");
+    console.log(
+      chalk39.cyan(
+        `  vm0 run ${fullName} --experimental-shared-agent "your prompt"`
+      )
+    );
+  } catch (error) {
+    console.error(chalk39.red("\u2717 Failed to make agent public"));
+    if (error instanceof Error) {
+      console.error(chalk39.dim(`  ${error.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/agent/private.ts
+import { Command as Command39 } from "commander";
+import chalk40 from "chalk";
+var privateCommand = new Command39().name("experimental-private").description("Make an agent private (remove public access)").argument("<name>", "Agent name").action(async (name) => {
+  try {
+    const compose = await getComposeByName(name);
+    if (!compose) {
+      console.error(chalk40.red(`\u2717 Agent not found: ${name}`));
+      process.exit(1);
+    }
+    const response = await httpDelete(
+      `/api/agent/composes/${compose.id}/permissions?type=public`
+    );
+    if (!response.ok) {
+      const error = await response.json();
+      if (response.status === 404) {
+        console.log(chalk40.yellow(`Agent "${name}" is already private`));
+        return;
+      }
+      throw new Error(error.error?.message || "Failed to make agent private");
+    }
+    console.log(chalk40.green(`\u2713 Agent "${name}" is now private`));
+  } catch (error) {
+    console.error(chalk40.red("\u2717 Failed to make agent private"));
+    if (error instanceof Error) {
+      console.error(chalk40.dim(`  ${error.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/agent/share.ts
+import { Command as Command40 } from "commander";
+import chalk41 from "chalk";
+var shareCommand = new Command40().name("experimental-share").description("Share an agent with a user by email").argument("<name>", "Agent name").requiredOption("--email <email>", "Email address to share with").action(async (name, options) => {
+  try {
+    const compose = await getComposeByName(name);
+    if (!compose) {
+      console.error(chalk41.red(`\u2717 Agent not found: ${name}`));
+      process.exit(1);
+    }
+    const scope = await getScope();
+    const response = await httpPost(
+      `/api/agent/composes/${compose.id}/permissions`,
+      { granteeType: "email", granteeEmail: options.email }
+    );
+    if (!response.ok) {
+      const error = await response.json();
+      if (response.status === 409) {
+        console.log(
+          chalk41.yellow(
+            `Agent "${name}" is already shared with ${options.email}`
+          )
+        );
+        return;
+      }
+      throw new Error(error.error?.message || "Failed to share agent");
+    }
+    const fullName = `${scope.slug}/${name}`;
+    console.log(
+      chalk41.green(`\u2713 Agent "${name}" shared with ${options.email}`)
+    );
+    console.log();
+    console.log("They can now run your agent with:");
+    console.log(
+      chalk41.cyan(
+        `  vm0 run ${fullName} --experimental-shared-agent "your prompt"`
+      )
+    );
+  } catch (error) {
+    console.error(chalk41.red("\u2717 Failed to share agent"));
+    if (error instanceof Error) {
+      console.error(chalk41.dim(`  ${error.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/agent/unshare.ts
+import { Command as Command41 } from "commander";
+import chalk42 from "chalk";
+var unshareCommand = new Command41().name("experimental-unshare").description("Remove sharing from a user").argument("<name>", "Agent name").requiredOption("--email <email>", "Email address to unshare").action(async (name, options) => {
+  try {
+    const compose = await getComposeByName(name);
+    if (!compose) {
+      console.error(chalk42.red(`\u2717 Agent not found: ${name}`));
+      process.exit(1);
+    }
+    const response = await httpDelete(
+      `/api/agent/composes/${compose.id}/permissions?type=email&email=${encodeURIComponent(options.email)}`
+    );
+    if (!response.ok) {
+      const error = await response.json();
+      if (response.status === 404) {
+        console.log(
+          chalk42.yellow(`Agent "${name}" is not shared with ${options.email}`)
+        );
+        return;
+      }
+      throw new Error(error.error?.message || "Failed to unshare agent");
+    }
+    console.log(
+      chalk42.green(`\u2713 Removed sharing of "${name}" from ${options.email}`)
+    );
+  } catch (error) {
+    console.error(chalk42.red("\u2717 Failed to unshare agent"));
+    if (error instanceof Error) {
+      console.error(chalk42.dim(`  ${error.message}`));
+    }
+    process.exit(1);
+  }
+});
+
+// src/commands/agent/permission.ts
+import { Command as Command42 } from "commander";
+import chalk43 from "chalk";
+var permissionCommand = new Command42().name("experimental-permission").description("List all permissions for an agent").argument("<name>", "Agent name").action(async (name) => {
+  try {
+    const compose = await getComposeByName(name);
+    if (!compose) {
+      console.error(chalk43.red(`\u2717 Agent not found: ${name}`));
+      process.exit(1);
+    }
+    const response = await httpGet(
+      `/api/agent/composes/${compose.id}/permissions`
+    );
+    if (!response.ok) {
+      const error = await response.json();
+      throw new Error(error.error?.message || "Failed to list permissions");
+    }
+    const data = await response.json();
+    if (data.permissions.length === 0) {
+      console.log(chalk43.dim("No permissions set (private agent)"));
+      return;
+    }
+    console.log(
+      chalk43.dim(
+        "TYPE     EMAIL                          PERMISSION  GRANTED"
+      )
+    );
+    console.log(
+      chalk43.dim(
+        "-------  -----------------------------  ----------  ----------"
+      )
+    );
+    for (const p of data.permissions) {
+      const type = p.granteeType.padEnd(7);
+      const email = (p.granteeEmail ?? "-").padEnd(29);
+      const permission = p.permission.padEnd(10);
+      const granted = formatRelativeTime(p.createdAt);
+      console.log(`${type}  ${email}  ${permission}  ${granted}`);
+    }
+  } catch (error) {
+    console.error(chalk43.red("\u2717 Failed to list permissions"));
+    if (error instanceof Error) {
+      console.error(chalk43.dim(`  ${error.message}`));
+    }
+    process.exit(1);
+  }
+});
+
 // src/commands/agent/index.ts
-var agentCommand = new Command38().name("agent").description("Manage agent composes").addCommand(cloneCommand3).addCommand(listCommand4).addCommand(statusCommand5);
+var agentCommand = new Command43().name("agent").description("Manage agent composes").addCommand(cloneCommand3).addCommand(listCommand4).addCommand(statusCommand5).addCommand(publicCommand).addCommand(privateCommand).addCommand(shareCommand).addCommand(unshareCommand).addCommand(permissionCommand);
 
 // src/commands/init/index.ts
-import { Command as Command39 } from "commander";
-import chalk39 from "chalk";
+import { Command as Command44 } from "commander";
+import chalk44 from "chalk";
 import path15 from "path";
 import { existsSync as existsSync10 } from "fs";
 import { writeFile as writeFile7 } from "fs/promises";
@@ -10142,14 +10540,14 @@ function checkExistingFiles() {
   if (existsSync10(AGENTS_MD_FILE)) existingFiles.push(AGENTS_MD_FILE);
   return existingFiles;
 }
-var initCommand3 = new Command39().name("init").description("Initialize a new VM0 project in the current directory").option("-f, --force", "Overwrite existing files").option("-n, --name <name>", "Agent name (required in non-interactive mode)").action(async (options) => {
+var initCommand3 = new Command44().name("init").description("Initialize a new VM0 project in the current directory").option("-f, --force", "Overwrite existing files").option("-n, --name <name>", "Agent name (required in non-interactive mode)").action(async (options) => {
   const existingFiles = checkExistingFiles();
   if (existingFiles.length > 0 && !options.force) {
     for (const file of existingFiles) {
-      console.log(chalk39.red(`\u2717 ${file} already exists`));
+      console.log(chalk44.red(`\u2717 ${file} already exists`));
     }
     console.log();
-    console.log(`To overwrite: ${chalk39.cyan("vm0 init --force")}`);
+    console.log(`To overwrite: ${chalk44.cyan("vm0 init --force")}`);
     process.exit(1);
   }
   let agentName;
@@ -10157,9 +10555,9 @@ var initCommand3 = new Command39().name("init").description("Initialize a new VM
     agentName = options.name.trim();
   } else if (!isInteractive()) {
     console.error(
-      chalk39.red("\u2717 --name flag is required in non-interactive mode")
+      chalk44.red("\u2717 --name flag is required in non-interactive mode")
     );
-    console.error(chalk39.dim("  Usage: vm0 init --name <agent-name>"));
+    console.error(chalk44.dim("  Usage: vm0 init --name <agent-name>"));
     process.exit(1);
   } else {
     const dirName = path15.basename(process.cwd());
@@ -10175,47 +10573,47 @@ var initCommand3 = new Command39().name("init").description("Initialize a new VM
       }
     );
     if (name === void 0) {
-      console.log(chalk39.dim("Cancelled"));
+      console.log(chalk44.dim("Cancelled"));
       return;
     }
     agentName = name;
   }
   if (!agentName || !validateAgentName(agentName)) {
-    console.log(chalk39.red("\u2717 Invalid agent name"));
+    console.log(chalk44.red("\u2717 Invalid agent name"));
     console.log(
-      chalk39.dim("  Must be 3-64 characters, alphanumeric and hyphens only")
+      chalk44.dim("  Must be 3-64 characters, alphanumeric and hyphens only")
     );
-    console.log(chalk39.dim("  Must start and end with letter or number"));
+    console.log(chalk44.dim("  Must start and end with letter or number"));
     process.exit(1);
   }
   await writeFile7(VM0_YAML_FILE, generateVm0Yaml(agentName));
   const vm0Status = existingFiles.includes(VM0_YAML_FILE) ? " (overwritten)" : "";
-  console.log(chalk39.green(`\u2713 Created ${VM0_YAML_FILE}${vm0Status}`));
+  console.log(chalk44.green(`\u2713 Created ${VM0_YAML_FILE}${vm0Status}`));
   await writeFile7(AGENTS_MD_FILE, generateAgentsMd());
   const agentsStatus = existingFiles.includes(AGENTS_MD_FILE) ? " (overwritten)" : "";
-  console.log(chalk39.green(`\u2713 Created ${AGENTS_MD_FILE}${agentsStatus}`));
+  console.log(chalk44.green(`\u2713 Created ${AGENTS_MD_FILE}${agentsStatus}`));
   console.log();
   console.log("Next steps:");
   console.log(
-    `  1. Set up model provider (one-time): ${chalk39.cyan("vm0 model-provider setup")}`
+    `  1. Set up model provider (one-time): ${chalk44.cyan("vm0 model-provider setup")}`
   );
   console.log(
-    `  2. Edit ${chalk39.cyan("AGENTS.md")} to customize your agent's workflow`
+    `  2. Edit ${chalk44.cyan("AGENTS.md")} to customize your agent's workflow`
   );
   console.log(
-    `     Or install Claude plugin: ${chalk39.cyan(`vm0 setup-claude && claude "/vm0-agent let's build an agent"`)}`
+    `     Or install Claude plugin: ${chalk44.cyan(`vm0 setup-claude && claude "/vm0-agent let's build an agent"`)}`
   );
   console.log(
-    `  3. Run your agent: ${chalk39.cyan(`vm0 cook "let's start working"`)}`
+    `  3. Run your agent: ${chalk44.cyan(`vm0 cook "let's start working"`)}`
   );
 });
 
 // src/commands/schedule/index.ts
-import { Command as Command46 } from "commander";
+import { Command as Command51 } from "commander";
 
 // src/commands/schedule/setup.ts
-import { Command as Command40 } from "commander";
-import chalk41 from "chalk";
+import { Command as Command45 } from "commander";
+import chalk46 from "chalk";
 
 // src/lib/domain/schedule-utils.ts
 import { parse as parseYaml5 } from "yaml";
@@ -10357,7 +10755,7 @@ async function resolveScheduleByAgent(agentName) {
 }
 
 // src/commands/schedule/gather-configuration.ts
-import chalk40 from "chalk";
+import chalk45 from "chalk";
 var defaultPromptDeps = {
   isInteractive,
   promptConfirm,
@@ -10385,7 +10783,7 @@ async function handleExistingSecrets(existingSecretNames, deps) {
       return true;
     }
     console.log(
-      chalk40.dim(
+      chalk45.dim(
         "  Note: Secrets will be cleared. Use 'vm0 secret set' to add platform secrets."
       )
     );
@@ -10410,21 +10808,21 @@ async function handleVars(optionVars, existingVars, deps) {
 }
 function displayMissingRequirements(missingSecrets, missingVars) {
   if (missingSecrets.length > 0) {
-    console.log(chalk40.yellow("\nAgent requires the following secrets:"));
+    console.log(chalk45.yellow("\nAgent requires the following secrets:"));
     for (const name of missingSecrets) {
-      console.log(chalk40.dim(`  ${name}`));
+      console.log(chalk45.dim(`  ${name}`));
     }
     console.log();
     console.log("Set secrets using the platform:");
     for (const name of missingSecrets) {
-      console.log(chalk40.cyan(`  vm0 secret set ${name} <value>`));
+      console.log(chalk45.cyan(`  vm0 secret set ${name} <value>`));
     }
     console.log();
   }
   if (missingVars.length > 0) {
-    console.log(chalk40.yellow("\nAgent requires the following variables:"));
+    console.log(chalk45.yellow("\nAgent requires the following variables:"));
     for (const name of missingVars) {
-      console.log(chalk40.dim(`  ${name}`));
+      console.log(chalk45.dim(`  ${name}`));
     }
     console.log();
   }
@@ -10432,7 +10830,7 @@ function displayMissingRequirements(missingSecrets, missingVars) {
 async function promptForMissingVars(missingVars, vars, deps) {
   for (const name of missingVars) {
     const value = await deps.promptText(
-      `Enter value for var ${chalk40.cyan(name)}`,
+      `Enter value for var ${chalk45.cyan(name)}`,
       ""
     );
     if (value) {
@@ -10520,7 +10918,7 @@ function expandEnvVars(value) {
     const envValue = process.env[varName];
     if (envValue === void 0) {
       console.warn(
-        chalk41.yellow(`  Warning: Environment variable ${varName} not set`)
+        chalk46.yellow(`  Warning: Environment variable ${varName} not set`)
       );
       return match;
     }
@@ -10587,7 +10985,7 @@ async function gatherFrequency(optionFrequency, existingFrequency) {
   }
   if (!isInteractive()) {
     console.error(
-      chalk41.red("\u2717 --frequency is required (daily|weekly|monthly|once)")
+      chalk46.red("\u2717 --frequency is required (daily|weekly|monthly|once)")
     );
     process.exit(1);
   }
@@ -10607,7 +11005,7 @@ async function gatherDay(frequency, optionDay, existingDay) {
     const day2 = parseDayOption(optionDay, frequency);
     if (day2 === void 0) {
       console.error(
-        chalk41.red(
+        chalk46.red(
           `\u2717 Invalid day: ${optionDay}. Use mon-sun for weekly or 1-31 for monthly.`
         )
       );
@@ -10616,7 +11014,7 @@ async function gatherDay(frequency, optionDay, existingDay) {
     return day2;
   }
   if (!isInteractive()) {
-    console.error(chalk41.red("\u2717 --day is required for weekly/monthly"));
+    console.error(chalk46.red("\u2717 --day is required for weekly/monthly"));
     process.exit(1);
   }
   if (frequency === "weekly") {
@@ -10635,7 +11033,7 @@ async function gatherDay(frequency, optionDay, existingDay) {
   if (!dayStr) return null;
   const day = parseInt(dayStr, 10);
   if (isNaN(day) || day < 1 || day > 31) {
-    console.error(chalk41.red("\u2717 Day must be between 1 and 31"));
+    console.error(chalk46.red("\u2717 Day must be between 1 and 31"));
     process.exit(1);
   }
   return day;
@@ -10644,13 +11042,13 @@ async function gatherRecurringTime(optionTime, existingTime) {
   if (optionTime) {
     const validation = validateTimeFormat(optionTime);
     if (validation !== true) {
-      console.error(chalk41.red(`\u2717 Invalid time: ${validation}`));
+      console.error(chalk46.red(`\u2717 Invalid time: ${validation}`));
       process.exit(1);
     }
     return optionTime;
   }
   if (!isInteractive()) {
-    console.error(chalk41.red("\u2717 --time is required (HH:MM format)"));
+    console.error(chalk46.red("\u2717 --time is required (HH:MM format)"));
     process.exit(1);
   }
   return await promptText(
@@ -10663,7 +11061,7 @@ async function gatherOneTimeSchedule(optionDay, optionTime, existingTime) {
   if (optionDay && optionTime) {
     if (!validateDateFormat(optionDay)) {
       console.error(
-        chalk41.red(
+        chalk46.red(
           `\u2717 Invalid date format: ${optionDay}. Use YYYY-MM-DD format.`
         )
       );
@@ -10671,16 +11069,16 @@ async function gatherOneTimeSchedule(optionDay, optionTime, existingTime) {
     }
     if (!validateTimeFormat(optionTime)) {
       console.error(
-        chalk41.red(`\u2717 Invalid time format: ${optionTime}. Use HH:MM format.`)
+        chalk46.red(`\u2717 Invalid time format: ${optionTime}. Use HH:MM format.`)
       );
       process.exit(1);
     }
     return `${optionDay} ${optionTime}`;
   }
   if (!isInteractive()) {
-    console.error(chalk41.red("\u2717 One-time schedules require interactive mode"));
+    console.error(chalk46.red("\u2717 One-time schedules require interactive mode"));
     console.error(
-      chalk41.dim("  Or provide --day (YYYY-MM-DD) and --time (HH:MM) flags")
+      chalk46.dim("  Or provide --day (YYYY-MM-DD) and --time (HH:MM) flags")
     );
     process.exit(1);
   }
@@ -10711,7 +11109,7 @@ async function gatherTimezone(optionTimezone, existingTimezone) {
 async function gatherPromptText(optionPrompt, existingPrompt) {
   if (optionPrompt) return optionPrompt;
   if (!isInteractive()) {
-    console.error(chalk41.red("\u2717 --prompt is required"));
+    console.error(chalk46.red("\u2717 --prompt is required"));
     process.exit(1);
   }
   return await promptText(
@@ -10722,8 +11120,8 @@ async function gatherPromptText(optionPrompt, existingPrompt) {
 async function resolveAgent(agentName) {
   const compose = await getComposeByName(agentName);
   if (!compose) {
-    console.error(chalk41.red(`\u2717 Agent not found: ${agentName}`));
-    console.error(chalk41.dim("  Make sure the agent is composed first"));
+    console.error(chalk46.red(`\u2717 Agent not found: ${agentName}`));
+    console.error(chalk46.dim("  Make sure the agent is composed first"));
     process.exit(1);
   }
   return {
@@ -10770,7 +11168,7 @@ async function buildAndDeploy(params) {
   const expandedSecrets = expandEnvVarsInObject(params.secrets);
   console.log(
     `
-Deploying schedule for agent ${chalk41.cyan(params.agentName)}...`
+Deploying schedule for agent ${chalk46.cyan(params.agentName)}...`
   );
   const deployResult = await deploySchedule({
     name: params.scheduleName,
@@ -10786,12 +11184,12 @@ Deploying schedule for agent ${chalk41.cyan(params.agentName)}...`
   return deployResult;
 }
 function handleSetupError(error) {
-  console.error(chalk41.red("\u2717 Failed to setup schedule"));
+  console.error(chalk46.red("\u2717 Failed to setup schedule"));
   if (error instanceof Error) {
     if (error.message.includes("Not authenticated")) {
-      console.error(chalk41.dim("  Run: vm0 auth login"));
+      console.error(chalk46.dim("  Run: vm0 auth login"));
     } else {
-      console.error(chalk41.dim(`  ${error.message}`));
+      console.error(chalk46.dim(`  ${error.message}`));
     }
   }
   process.exit(1);
@@ -10799,56 +11197,56 @@ function handleSetupError(error) {
 function displayDeployResult(agentName, deployResult) {
   if (deployResult.created) {
     console.log(
-      chalk41.green(`\u2713 Created schedule for agent ${chalk41.cyan(agentName)}`)
+      chalk46.green(`\u2713 Created schedule for agent ${chalk46.cyan(agentName)}`)
     );
   } else {
     console.log(
-      chalk41.green(`\u2713 Updated schedule for agent ${chalk41.cyan(agentName)}`)
+      chalk46.green(`\u2713 Updated schedule for agent ${chalk46.cyan(agentName)}`)
     );
   }
-  console.log(chalk41.dim(`  Timezone: ${deployResult.schedule.timezone}`));
+  console.log(chalk46.dim(`  Timezone: ${deployResult.schedule.timezone}`));
   if (deployResult.schedule.cronExpression) {
-    console.log(chalk41.dim(`  Cron: ${deployResult.schedule.cronExpression}`));
+    console.log(chalk46.dim(`  Cron: ${deployResult.schedule.cronExpression}`));
     if (deployResult.schedule.nextRunAt) {
       const nextRun = formatInTimezone(
         deployResult.schedule.nextRunAt,
         deployResult.schedule.timezone
       );
-      console.log(chalk41.dim(`  Next run: ${nextRun}`));
+      console.log(chalk46.dim(`  Next run: ${nextRun}`));
     }
   } else if (deployResult.schedule.atTime) {
     const atTimeFormatted = formatInTimezone(
       deployResult.schedule.atTime,
       deployResult.schedule.timezone
     );
-    console.log(chalk41.dim(`  At: ${atTimeFormatted}`));
+    console.log(chalk46.dim(`  At: ${atTimeFormatted}`));
   }
 }
 async function tryEnableSchedule(scheduleName, composeId, agentName) {
   try {
     await enableSchedule({ name: scheduleName, composeId });
     console.log(
-      chalk41.green(`\u2713 Enabled schedule for agent ${chalk41.cyan(agentName)}`)
+      chalk46.green(`\u2713 Enabled schedule for agent ${chalk46.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk41.yellow("\u26A0 Failed to enable schedule"));
+    console.error(chalk46.yellow("\u26A0 Failed to enable schedule"));
     if (error instanceof ApiRequestError) {
       if (error.code === "SCHEDULE_PAST") {
-        console.error(chalk41.dim("  Scheduled time has already passed"));
+        console.error(chalk46.dim("  Scheduled time has already passed"));
       } else {
-        console.error(chalk41.dim(`  ${error.message}`));
+        console.error(chalk46.dim(`  ${error.message}`));
       }
     } else if (error instanceof Error) {
-      console.error(chalk41.dim(`  ${error.message}`));
+      console.error(chalk46.dim(`  ${error.message}`));
     }
     console.log(
-      `  To enable manually: ${chalk41.cyan(`vm0 schedule enable ${agentName}`)}`
+      `  To enable manually: ${chalk46.cyan(`vm0 schedule enable ${agentName}`)}`
     );
   }
 }
 function showEnableHint(agentName) {
   console.log();
-  console.log(`  To enable: ${chalk41.cyan(`vm0 schedule enable ${agentName}`)}`);
+  console.log(`  To enable: ${chalk46.cyan(`vm0 schedule enable ${agentName}`)}`);
 }
 async function handleScheduleEnabling(params) {
   const { scheduleName, composeId, agentName, enableFlag, shouldPromptEnable } = params;
@@ -10869,13 +11267,13 @@ async function handleScheduleEnabling(params) {
     showEnableHint(agentName);
   }
 }
-var setupCommand = new Command40().name("setup").description("Create or edit a schedule for an agent").argument("<agent-name>", "Agent name to configure schedule for").option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--var <name=value>", "Variable (can be repeated)", collect, []).option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").action(async (agentName, options) => {
+var setupCommand = new Command45().name("setup").description("Create or edit a schedule for an agent").argument("<agent-name>", "Agent name to configure schedule for").option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--var <name=value>", "Variable (can be repeated)", collect, []).option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").action(async (agentName, options) => {
   try {
     const { composeId, scheduleName, composeContent } = await resolveAgent(agentName);
     const requiredConfig = extractRequiredConfiguration(composeContent);
     const existingSchedule = await findExistingSchedule(agentName);
     console.log(
-      chalk41.dim(
+      chalk46.dim(
         existingSchedule ? `Editing existing schedule for agent ${agentName}` : `Creating new schedule for agent ${agentName}`
       )
     );
@@ -10885,12 +11283,12 @@ var setupCommand = new Command40().name("setup").description("Create or edit a s
       defaults.frequency
     );
     if (!frequency) {
-      console.log(chalk41.dim("Cancelled"));
+      console.log(chalk46.dim("Cancelled"));
       return;
     }
     const timing = await gatherTiming(frequency, options, defaults);
     if (!timing) {
-      console.log(chalk41.dim("Cancelled"));
+      console.log(chalk46.dim("Cancelled"));
       return;
     }
     const { day, time, atTime } = timing;
@@ -10899,7 +11297,7 @@ var setupCommand = new Command40().name("setup").description("Create or edit a s
       existingSchedule?.timezone
     );
     if (!timezone) {
-      console.log(chalk41.dim("Cancelled"));
+      console.log(chalk46.dim("Cancelled"));
       return;
     }
     const promptText_ = await gatherPromptText(
@@ -10907,7 +11305,7 @@ var setupCommand = new Command40().name("setup").description("Create or edit a s
       existingSchedule?.prompt
     );
     if (!promptText_) {
-      console.log(chalk41.dim("Cancelled"));
+      console.log(chalk46.dim("Cancelled"));
       return;
     }
     const config = await gatherConfiguration({
@@ -10947,15 +11345,15 @@ var setupCommand = new Command40().name("setup").description("Create or edit a s
 });
 
 // src/commands/schedule/list.ts
-import { Command as Command41 } from "commander";
-import chalk42 from "chalk";
-var listCommand5 = new Command41().name("list").alias("ls").description("List all schedules").action(async () => {
+import { Command as Command46 } from "commander";
+import chalk47 from "chalk";
+var listCommand5 = new Command46().name("list").alias("ls").description("List all schedules").action(async () => {
   try {
     const result = await listSchedules();
     if (result.schedules.length === 0) {
-      console.log(chalk42.dim("No schedules found"));
+      console.log(chalk47.dim("No schedules found"));
       console.log(
-        chalk42.dim("  Create one with: vm0 schedule setup <agent-name>")
+        chalk47.dim("  Create one with: vm0 schedule setup <agent-name>")
       );
       return;
     }
@@ -10975,10 +11373,10 @@ var listCommand5 = new Command41().name("list").alias("ls").description("List al
       "STATUS".padEnd(8),
       "NEXT RUN"
     ].join("  ");
-    console.log(chalk42.dim(header));
+    console.log(chalk47.dim(header));
     for (const schedule of result.schedules) {
       const trigger = schedule.cronExpression ? `${schedule.cronExpression} (${schedule.timezone})` : schedule.atTime || "-";
-      const status = schedule.enabled ? chalk42.green("enabled") : chalk42.yellow("disabled");
+      const status = schedule.enabled ? chalk47.green("enabled") : chalk47.yellow("disabled");
       const nextRun = schedule.enabled ? formatRelativeTime2(schedule.nextRunAt) : "-";
       const row = [
         schedule.composeName.padEnd(agentWidth),
@@ -10990,12 +11388,12 @@ var listCommand5 = new Command41().name("list").alias("ls").description("List al
       console.log(row);
     }
   } catch (error) {
-    console.error(chalk42.red("\u2717 Failed to list schedules"));
+    console.error(chalk47.red("\u2717 Failed to list schedules"));
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk42.dim("  Run: vm0 auth login"));
+        console.error(chalk47.dim("  Run: vm0 auth login"));
       } else {
-        console.error(chalk42.dim(`  ${error.message}`));
+        console.error(chalk47.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11003,45 +11401,45 @@ var listCommand5 = new Command41().name("list").alias("ls").description("List al
 });
 
 // src/commands/schedule/status.ts
-import { Command as Command42 } from "commander";
-import chalk43 from "chalk";
+import { Command as Command47 } from "commander";
+import chalk48 from "chalk";
 function formatDateTimeStyled(dateStr) {
-  if (!dateStr) return chalk43.dim("-");
+  if (!dateStr) return chalk48.dim("-");
   const formatted = formatDateTime(dateStr);
-  return formatted.replace(/\(([^)]+)\)$/, chalk43.dim("($1)"));
+  return formatted.replace(/\(([^)]+)\)$/, chalk48.dim("($1)"));
 }
 function formatTrigger(schedule) {
   if (schedule.cronExpression) {
     return schedule.cronExpression;
   }
   if (schedule.atTime) {
-    return `${schedule.atTime} ${chalk43.dim("(one-time)")}`;
+    return `${schedule.atTime} ${chalk48.dim("(one-time)")}`;
   }
-  return chalk43.dim("-");
+  return chalk48.dim("-");
 }
 function formatRunStatus2(status) {
   switch (status) {
     case "completed":
-      return chalk43.green(status);
+      return chalk48.green(status);
     case "failed":
     case "timeout":
-      return chalk43.red(status);
+      return chalk48.red(status);
     case "running":
-      return chalk43.blue(status);
+      return chalk48.blue(status);
     case "pending":
-      return chalk43.yellow(status);
+      return chalk48.yellow(status);
     default:
       return status;
   }
 }
 function printRunConfiguration(schedule) {
-  const statusText = schedule.enabled ? chalk43.green("enabled") : chalk43.yellow("disabled");
+  const statusText = schedule.enabled ? chalk48.green("enabled") : chalk48.yellow("disabled");
   console.log(`${"Status:".padEnd(16)}${statusText}`);
   console.log(
-    `${"Agent:".padEnd(16)}${schedule.composeName} ${chalk43.dim(`(${schedule.scopeSlug})`)}`
+    `${"Agent:".padEnd(16)}${schedule.composeName} ${chalk48.dim(`(${schedule.scopeSlug})`)}`
   );
   const promptPreview = schedule.prompt.length > 60 ? schedule.prompt.slice(0, 57) + "..." : schedule.prompt;
-  console.log(`${"Prompt:".padEnd(16)}${chalk43.dim(promptPreview)}`);
+  console.log(`${"Prompt:".padEnd(16)}${chalk48.dim(promptPreview)}`);
   if (schedule.vars && Object.keys(schedule.vars).length > 0) {
     console.log(
       `${"Variables:".padEnd(16)}${Object.keys(schedule.vars).join(", ")}`
@@ -11078,7 +11476,7 @@ async function printRecentRuns(name, composeId, limit) {
       console.log();
       console.log("Recent Runs:");
       console.log(
-        chalk43.dim("RUN ID                                STATUS     CREATED")
+        chalk48.dim("RUN ID                                STATUS     CREATED")
       );
       for (const run of runs) {
         const id = run.id;
@@ -11089,24 +11487,24 @@ async function printRecentRuns(name, composeId, limit) {
     }
   } catch {
     console.log();
-    console.log(chalk43.dim("Recent Runs: (unable to fetch)"));
+    console.log(chalk48.dim("Recent Runs: (unable to fetch)"));
   }
 }
 function handleStatusError(error, agentName) {
-  console.error(chalk43.red("\u2717 Failed to get schedule status"));
+  console.error(chalk48.red("\u2717 Failed to get schedule status"));
   if (error instanceof Error) {
     if (error.message.includes("Not authenticated")) {
-      console.error(chalk43.dim("  Run: vm0 auth login"));
+      console.error(chalk48.dim("  Run: vm0 auth login"));
     } else if (error.message.includes("not found") || error.message.includes("Not found") || error.message.includes("No schedule found")) {
-      console.error(chalk43.dim(`  No schedule found for agent "${agentName}"`));
-      console.error(chalk43.dim("  Run: vm0 schedule list"));
+      console.error(chalk48.dim(`  No schedule found for agent "${agentName}"`));
+      console.error(chalk48.dim("  Run: vm0 schedule list"));
     } else {
-      console.error(chalk43.dim(`  ${error.message}`));
+      console.error(chalk48.dim(`  ${error.message}`));
     }
   }
   process.exit(1);
 }
-var statusCommand6 = new Command42().name("status").description("Show detailed status of a schedule").argument("<agent-name>", "Agent name").option(
+var statusCommand6 = new Command47().name("status").description("Show detailed status of a schedule").argument("<agent-name>", "Agent name").option(
   "-l, --limit <number>",
   "Number of recent runs to show (0 to hide)",
   "5"
@@ -11116,8 +11514,8 @@ var statusCommand6 = new Command42().name("status").description("Show detailed s
     const { name, composeId } = resolved;
     const schedule = await getScheduleByName({ name, composeId });
     console.log();
-    console.log(`Schedule for agent: ${chalk43.cyan(agentName)}`);
-    console.log(chalk43.dim("\u2501".repeat(50)));
+    console.log(`Schedule for agent: ${chalk48.cyan(agentName)}`);
+    console.log(chalk48.dim("\u2501".repeat(50)));
     printRunConfiguration(schedule);
     printTimeSchedule(schedule);
     const parsed = parseInt(options.limit, 10);
@@ -11133,24 +11531,24 @@ var statusCommand6 = new Command42().name("status").description("Show detailed s
 });
 
 // src/commands/schedule/delete.ts
-import { Command as Command43 } from "commander";
-import chalk44 from "chalk";
-var deleteCommand = new Command43().name("delete").alias("rm").description("Delete a schedule").argument("<agent-name>", "Agent name").option("-f, --force", "Skip confirmation prompt").action(async (agentName, options) => {
+import { Command as Command48 } from "commander";
+import chalk49 from "chalk";
+var deleteCommand = new Command48().name("delete").alias("rm").description("Delete a schedule").argument("<agent-name>", "Agent name").option("-f, --force", "Skip confirmation prompt").action(async (agentName, options) => {
   try {
     const resolved = await resolveScheduleByAgent(agentName);
     if (!options.force) {
       if (!isInteractive()) {
         console.error(
-          chalk44.red("\u2717 --force required in non-interactive mode")
+          chalk49.red("\u2717 --force required in non-interactive mode")
         );
         process.exit(1);
       }
       const confirmed = await promptConfirm(
-        `Delete schedule for agent ${chalk44.cyan(agentName)}?`,
+        `Delete schedule for agent ${chalk49.cyan(agentName)}?`,
         false
       );
       if (!confirmed) {
-        console.log(chalk44.dim("Cancelled"));
+        console.log(chalk49.dim("Cancelled"));
         return;
       }
     }
@@ -11159,20 +11557,20 @@ var deleteCommand = new Command43().name("delete").alias("rm").description("Dele
       composeId: resolved.composeId
     });
     console.log(
-      chalk44.green(`\u2713 Deleted schedule for agent ${chalk44.cyan(agentName)}`)
+      chalk49.green(`\u2713 Deleted schedule for agent ${chalk49.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk44.red("\u2717 Failed to delete schedule"));
+    console.error(chalk49.red("\u2717 Failed to delete schedule"));
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk44.dim("  Run: vm0 auth login"));
+        console.error(chalk49.dim("  Run: vm0 auth login"));
       } else if (error.message.toLowerCase().includes("not found") || error.message.includes("No schedule found")) {
         console.error(
-          chalk44.dim(`  No schedule found for agent "${agentName}"`)
+          chalk49.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk44.dim("  Run: vm0 schedule list"));
+        console.error(chalk49.dim("  Run: vm0 schedule list"));
       } else {
-        console.error(chalk44.dim(`  ${error.message}`));
+        console.error(chalk49.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11180,9 +11578,9 @@ var deleteCommand = new Command43().name("delete").alias("rm").description("Dele
 });
 
 // src/commands/schedule/enable.ts
-import { Command as Command44 } from "commander";
-import chalk45 from "chalk";
-var enableCommand = new Command44().name("enable").description("Enable a schedule").argument("<agent-name>", "Agent name").action(async (agentName) => {
+import { Command as Command49 } from "commander";
+import chalk50 from "chalk";
+var enableCommand = new Command49().name("enable").description("Enable a schedule").argument("<agent-name>", "Agent name").action(async (agentName) => {
   try {
     const resolved = await resolveScheduleByAgent(agentName);
     await enableSchedule({
@@ -11190,34 +11588,34 @@ var enableCommand = new Command44().name("enable").description("Enable a schedul
       composeId: resolved.composeId
     });
     console.log(
-      chalk45.green(`\u2713 Enabled schedule for agent ${chalk45.cyan(agentName)}`)
+      chalk50.green(`\u2713 Enabled schedule for agent ${chalk50.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk45.red("\u2717 Failed to enable schedule"));
+    console.error(chalk50.red("\u2717 Failed to enable schedule"));
     if (error instanceof ApiRequestError) {
       if (error.code === "SCHEDULE_PAST") {
-        console.error(chalk45.dim("  Scheduled time has already passed"));
-        console.error(chalk45.dim(`  Run: vm0 schedule setup ${agentName}`));
+        console.error(chalk50.dim("  Scheduled time has already passed"));
+        console.error(chalk50.dim(`  Run: vm0 schedule setup ${agentName}`));
       } else if (error.code === "NOT_FOUND") {
         console.error(
-          chalk45.dim(`  No schedule found for agent "${agentName}"`)
+          chalk50.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk45.dim("  Run: vm0 schedule list"));
+        console.error(chalk50.dim("  Run: vm0 schedule list"));
       } else if (error.code === "UNAUTHORIZED") {
-        console.error(chalk45.dim("  Run: vm0 auth login"));
+        console.error(chalk50.dim("  Run: vm0 auth login"));
       } else {
-        console.error(chalk45.dim(`  ${error.message}`));
+        console.error(chalk50.dim(`  ${error.message}`));
       }
     } else if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk45.dim("  Run: vm0 auth login"));
+        console.error(chalk50.dim("  Run: vm0 auth login"));
       } else if (error.message.includes("No schedule found")) {
         console.error(
-          chalk45.dim(`  No schedule found for agent "${agentName}"`)
+          chalk50.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk45.dim("  Run: vm0 schedule list"));
+        console.error(chalk50.dim("  Run: vm0 schedule list"));
       } else {
-        console.error(chalk45.dim(`  ${error.message}`));
+        console.error(chalk50.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11225,9 +11623,9 @@ var enableCommand = new Command44().name("enable").description("Enable a schedul
 });
 
 // src/commands/schedule/disable.ts
-import { Command as Command45 } from "commander";
-import chalk46 from "chalk";
-var disableCommand = new Command45().name("disable").description("Disable a schedule").argument("<agent-name>", "Agent name").action(async (agentName) => {
+import { Command as Command50 } from "commander";
+import chalk51 from "chalk";
+var disableCommand = new Command50().name("disable").description("Disable a schedule").argument("<agent-name>", "Agent name").action(async (agentName) => {
   try {
     const resolved = await resolveScheduleByAgent(agentName);
     await disableSchedule({
@@ -11235,20 +11633,20 @@ var disableCommand = new Command45().name("disable").description("Disable a sche
       composeId: resolved.composeId
     });
     console.log(
-      chalk46.green(`\u2713 Disabled schedule for agent ${chalk46.cyan(agentName)}`)
+      chalk51.green(`\u2713 Disabled schedule for agent ${chalk51.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk46.red("\u2717 Failed to disable schedule"));
+    console.error(chalk51.red("\u2717 Failed to disable schedule"));
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk46.dim("  Run: vm0 auth login"));
+        console.error(chalk51.dim("  Run: vm0 auth login"));
       } else if (error.message.toLowerCase().includes("not found") || error.message.includes("No schedule found")) {
         console.error(
-          chalk46.dim(`  No schedule found for agent "${agentName}"`)
+          chalk51.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk46.dim("  Run: vm0 schedule list"));
+        console.error(chalk51.dim("  Run: vm0 schedule list"));
       } else {
-        console.error(chalk46.dim(`  ${error.message}`));
+        console.error(chalk51.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11256,11 +11654,11 @@ var disableCommand = new Command45().name("disable").description("Disable a sche
 });
 
 // src/commands/schedule/index.ts
-var scheduleCommand = new Command46().name("schedule").description("Manage agent schedules").addCommand(setupCommand).addCommand(listCommand5).addCommand(statusCommand6).addCommand(deleteCommand).addCommand(enableCommand).addCommand(disableCommand);
+var scheduleCommand = new Command51().name("schedule").description("Manage agent schedules").addCommand(setupCommand).addCommand(listCommand5).addCommand(statusCommand6).addCommand(deleteCommand).addCommand(enableCommand).addCommand(disableCommand);
 
 // src/commands/usage/index.ts
-import { Command as Command47 } from "commander";
-import chalk47 from "chalk";
+import { Command as Command52 } from "commander";
+import chalk52 from "chalk";
 
 // src/lib/utils/duration-formatter.ts
 function formatDuration(ms) {
@@ -11333,7 +11731,7 @@ function fillMissingDates(daily, startDate, endDate) {
   result.sort((a, b) => b.date.localeCompare(a.date));
   return result;
 }
-var usageCommand = new Command47().name("usage").description("View usage statistics").option("--since <date>", "Start date (ISO format or relative: 7d, 30d)").option(
+var usageCommand = new Command52().name("usage").description("View usage statistics").option("--since <date>", "Start date (ISO format or relative: 7d, 30d)").option(
   "--until <date>",
   "End date (ISO format or relative, defaults to now)"
 ).action(async (options) => {
@@ -11347,7 +11745,7 @@ var usageCommand = new Command47().name("usage").description("View usage statist
         endDate = new Date(untilMs);
       } catch {
         console.error(
-          chalk47.red(
+          chalk52.red(
             "\u2717 Invalid --until format. Use ISO (2026-01-01) or relative (7d, 30d)"
           )
         );
@@ -11362,7 +11760,7 @@ var usageCommand = new Command47().name("usage").description("View usage statist
         startDate = new Date(sinceMs);
       } catch {
         console.error(
-          chalk47.red(
+          chalk52.red(
             "\u2717 Invalid --since format. Use ISO (2026-01-01) or relative (7d, 30d)"
           )
         );
@@ -11372,13 +11770,13 @@ var usageCommand = new Command47().name("usage").description("View usage statist
       startDate = new Date(endDate.getTime() - DEFAULT_RANGE_MS);
     }
     if (startDate >= endDate) {
-      console.error(chalk47.red("\u2717 --since must be before --until"));
+      console.error(chalk52.red("\u2717 --since must be before --until"));
       process.exit(1);
     }
     const rangeMs = endDate.getTime() - startDate.getTime();
     if (rangeMs > MAX_RANGE_MS) {
       console.error(
-        chalk47.red(
+        chalk52.red(
           "\u2717 Time range exceeds maximum of 30 days. Use --until to specify an end date"
         )
       );
@@ -11395,19 +11793,19 @@ var usageCommand = new Command47().name("usage").description("View usage statist
     );
     console.log();
     console.log(
-      chalk47.bold(
+      chalk52.bold(
         `Usage Summary (${formatDateRange(usage.period.start, usage.period.end)})`
       )
     );
     console.log();
-    console.log(chalk47.dim("DATE        RUNS    RUN TIME"));
+    console.log(chalk52.dim("DATE        RUNS    RUN TIME"));
     for (const day of filledDaily) {
       const dateDisplay = formatDateDisplay(day.date).padEnd(10);
       const runsDisplay = String(day.run_count).padStart(6);
       const timeDisplay = formatDuration(day.run_time_ms);
       console.log(`${dateDisplay}${runsDisplay}    ${timeDisplay}`);
     }
-    console.log(chalk47.dim("\u2500".repeat(29)));
+    console.log(chalk52.dim("\u2500".repeat(29)));
     const totalRunsDisplay = String(usage.summary.total_runs).padStart(6);
     const totalTimeDisplay = formatDuration(usage.summary.total_run_time_ms);
     console.log(
@@ -11417,66 +11815,66 @@ var usageCommand = new Command47().name("usage").description("View usage statist
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk47.red("\u2717 Not authenticated"));
-        console.error(chalk47.dim("  Run: vm0 auth login"));
+        console.error(chalk52.red("\u2717 Not authenticated"));
+        console.error(chalk52.dim("  Run: vm0 auth login"));
       } else {
-        console.error(chalk47.red(`\u2717 ${error.message}`));
+        console.error(chalk52.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk47.red("\u2717 An unexpected error occurred"));
+      console.error(chalk52.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/secret/index.ts
-import { Command as Command51 } from "commander";
+import { Command as Command56 } from "commander";
 
 // src/commands/secret/list.ts
-import { Command as Command48 } from "commander";
-import chalk48 from "chalk";
-var listCommand6 = new Command48().name("list").alias("ls").description("List all secrets").action(async () => {
+import { Command as Command53 } from "commander";
+import chalk53 from "chalk";
+var listCommand6 = new Command53().name("list").alias("ls").description("List all secrets").action(async () => {
   try {
     const result = await listSecrets();
     if (result.secrets.length === 0) {
-      console.log(chalk48.dim("No secrets found"));
+      console.log(chalk53.dim("No secrets found"));
       console.log();
       console.log("To add a secret:");
-      console.log(chalk48.cyan("  vm0 secret set MY_API_KEY <value>"));
+      console.log(chalk53.cyan("  vm0 secret set MY_API_KEY <value>"));
       return;
     }
-    console.log(chalk48.bold("Secrets:"));
+    console.log(chalk53.bold("Secrets:"));
     console.log();
     for (const secret of result.secrets) {
-      const typeIndicator = secret.type === "model-provider" ? chalk48.dim(" [model-provider]") : "";
-      console.log(`  ${chalk48.cyan(secret.name)}${typeIndicator}`);
+      const typeIndicator = secret.type === "model-provider" ? chalk53.dim(" [model-provider]") : "";
+      console.log(`  ${chalk53.cyan(secret.name)}${typeIndicator}`);
       if (secret.description) {
-        console.log(`    ${chalk48.dim(secret.description)}`);
+        console.log(`    ${chalk53.dim(secret.description)}`);
       }
       console.log(
-        `    ${chalk48.dim(`Updated: ${new Date(secret.updatedAt).toLocaleString()}`)}`
+        `    ${chalk53.dim(`Updated: ${new Date(secret.updatedAt).toLocaleString()}`)}`
       );
       console.log();
     }
-    console.log(chalk48.dim(`Total: ${result.secrets.length} secret(s)`));
+    console.log(chalk53.dim(`Total: ${result.secrets.length} secret(s)`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk48.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk53.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk48.red(`\u2717 ${error.message}`));
+        console.error(chalk53.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk48.red("\u2717 An unexpected error occurred"));
+      console.error(chalk53.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/secret/set.ts
-import { Command as Command49 } from "commander";
-import chalk49 from "chalk";
-var setCommand2 = new Command49().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").argument("<value>", "Secret value").option("-d, --description <description>", "Optional description").action(
+import { Command as Command54 } from "commander";
+import chalk54 from "chalk";
+var setCommand2 = new Command54().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").argument("<value>", "Secret value").option("-d, --description <description>", "Optional description").action(
   async (name, value, options) => {
     try {
       const secret = await setSecret({
@@ -11484,29 +11882,29 @@ var setCommand2 = new Command49().name("set").description("Create or update a se
         value,
         description: options.description
       });
-      console.log(chalk49.green(`\u2713 Secret "${secret.name}" saved`));
+      console.log(chalk54.green(`\u2713 Secret "${secret.name}" saved`));
       console.log();
       console.log("Use in vm0.yaml:");
-      console.log(chalk49.cyan(`  environment:`));
-      console.log(chalk49.cyan(`    ${name}: \${{ secrets.${name} }}`));
+      console.log(chalk54.cyan(`  environment:`));
+      console.log(chalk54.cyan(`    ${name}: \${{ secrets.${name} }}`));
     } catch (error) {
       if (error instanceof Error) {
         if (error.message.includes("Not authenticated")) {
           console.error(
-            chalk49.red("\u2717 Not authenticated. Run: vm0 auth login")
+            chalk54.red("\u2717 Not authenticated. Run: vm0 auth login")
           );
         } else if (error.message.includes("must contain only uppercase")) {
-          console.error(chalk49.red(`\u2717 ${error.message}`));
+          console.error(chalk54.red(`\u2717 ${error.message}`));
           console.log();
           console.log("Examples of valid secret names:");
-          console.log(chalk49.dim("  MY_API_KEY"));
-          console.log(chalk49.dim("  GITHUB_TOKEN"));
-          console.log(chalk49.dim("  AWS_ACCESS_KEY_ID"));
+          console.log(chalk54.dim("  MY_API_KEY"));
+          console.log(chalk54.dim("  GITHUB_TOKEN"));
+          console.log(chalk54.dim("  AWS_ACCESS_KEY_ID"));
         } else {
-          console.error(chalk49.red(`\u2717 ${error.message}`));
+          console.error(chalk54.red(`\u2717 ${error.message}`));
         }
       } else {
-        console.error(chalk49.red("\u2717 An unexpected error occurred"));
+        console.error(chalk54.red("\u2717 An unexpected error occurred"));
       }
       process.exit(1);
     }
@@ -11514,20 +11912,20 @@ var setCommand2 = new Command49().name("set").description("Create or update a se
 );
 
 // src/commands/secret/delete.ts
-import { Command as Command50 } from "commander";
-import chalk50 from "chalk";
-var deleteCommand2 = new Command50().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
+import { Command as Command55 } from "commander";
+import chalk55 from "chalk";
+var deleteCommand2 = new Command55().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
   try {
     try {
       await getSecret(name);
     } catch {
-      console.error(chalk50.red(`\u2717 Secret "${name}" not found`));
+      console.error(chalk55.red(`\u2717 Secret "${name}" not found`));
       process.exit(1);
     }
     if (!options.yes) {
       if (!isInteractive()) {
         console.error(
-          chalk50.red("\u2717 --yes flag is required in non-interactive mode")
+          chalk55.red("\u2717 --yes flag is required in non-interactive mode")
         );
         process.exit(1);
       }
@@ -11536,83 +11934,83 @@ var deleteCommand2 = new Command50().name("delete").description("Delete a secret
         false
       );
       if (!confirmed) {
-        console.log(chalk50.dim("Cancelled"));
+        console.log(chalk55.dim("Cancelled"));
         return;
       }
     }
     await deleteSecret(name);
-    console.log(chalk50.green(`\u2713 Secret "${name}" deleted`));
+    console.log(chalk55.green(`\u2713 Secret "${name}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk50.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk55.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk50.red(`\u2717 ${error.message}`));
+        console.error(chalk55.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk50.red("\u2717 An unexpected error occurred"));
+      console.error(chalk55.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/secret/index.ts
-var secretCommand = new Command51().name("secret").description("Manage stored secrets for agent runs").addCommand(listCommand6).addCommand(setCommand2).addCommand(deleteCommand2);
+var secretCommand = new Command56().name("secret").description("Manage stored secrets for agent runs").addCommand(listCommand6).addCommand(setCommand2).addCommand(deleteCommand2);
 
 // src/commands/variable/index.ts
-import { Command as Command55 } from "commander";
+import { Command as Command60 } from "commander";
 
 // src/commands/variable/list.ts
-import { Command as Command52 } from "commander";
-import chalk51 from "chalk";
+import { Command as Command57 } from "commander";
+import chalk56 from "chalk";
 function truncateValue(value, maxLength = 60) {
   if (value.length <= maxLength) {
     return value;
   }
   return value.slice(0, maxLength - 15) + "... [truncated]";
 }
-var listCommand7 = new Command52().name("list").alias("ls").description("List all variables").action(async () => {
+var listCommand7 = new Command57().name("list").alias("ls").description("List all variables").action(async () => {
   try {
     const result = await listVariables();
     if (result.variables.length === 0) {
-      console.log(chalk51.dim("No variables found"));
+      console.log(chalk56.dim("No variables found"));
       console.log();
       console.log("To add a variable:");
-      console.log(chalk51.cyan("  vm0 variable set MY_VAR <value>"));
+      console.log(chalk56.cyan("  vm0 variable set MY_VAR <value>"));
       return;
     }
-    console.log(chalk51.bold("Variables:"));
+    console.log(chalk56.bold("Variables:"));
     console.log();
     for (const variable of result.variables) {
       const displayValue = truncateValue(variable.value);
-      console.log(`  ${chalk51.cyan(variable.name)} = ${displayValue}`);
+      console.log(`  ${chalk56.cyan(variable.name)} = ${displayValue}`);
       if (variable.description) {
-        console.log(`    ${chalk51.dim(variable.description)}`);
+        console.log(`    ${chalk56.dim(variable.description)}`);
       }
       console.log(
-        `    ${chalk51.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
+        `    ${chalk56.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
       );
       console.log();
     }
-    console.log(chalk51.dim(`Total: ${result.variables.length} variable(s)`));
+    console.log(chalk56.dim(`Total: ${result.variables.length} variable(s)`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk51.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk56.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk51.red(`\u2717 ${error.message}`));
+        console.error(chalk56.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk51.red("\u2717 An unexpected error occurred"));
+      console.error(chalk56.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/variable/set.ts
-import { Command as Command53 } from "commander";
-import chalk52 from "chalk";
-var setCommand3 = new Command53().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
+import { Command as Command58 } from "commander";
+import chalk57 from "chalk";
+var setCommand3 = new Command58().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
   async (name, value, options) => {
     try {
       const variable = await setVariable({
@@ -11620,29 +12018,29 @@ var setCommand3 = new Command53().name("set").description("Create or update a va
         value,
         description: options.description
       });
-      console.log(chalk52.green(`\u2713 Variable "${variable.name}" saved`));
+      console.log(chalk57.green(`\u2713 Variable "${variable.name}" saved`));
       console.log();
       console.log("Use in vm0.yaml:");
-      console.log(chalk52.cyan(`  environment:`));
-      console.log(chalk52.cyan(`    ${name}: \${{ vars.${name} }}`));
+      console.log(chalk57.cyan(`  environment:`));
+      console.log(chalk57.cyan(`    ${name}: \${{ vars.${name} }}`));
     } catch (error) {
       if (error instanceof Error) {
         if (error.message.includes("Not authenticated")) {
           console.error(
-            chalk52.red("\u2717 Not authenticated. Run: vm0 auth login")
+            chalk57.red("\u2717 Not authenticated. Run: vm0 auth login")
           );
         } else if (error.message.includes("must contain only uppercase")) {
-          console.error(chalk52.red(`\u2717 ${error.message}`));
+          console.error(chalk57.red(`\u2717 ${error.message}`));
           console.log();
           console.log("Examples of valid variable names:");
-          console.log(chalk52.dim("  MY_VAR"));
-          console.log(chalk52.dim("  API_URL"));
-          console.log(chalk52.dim("  DEBUG_MODE"));
+          console.log(chalk57.dim("  MY_VAR"));
+          console.log(chalk57.dim("  API_URL"));
+          console.log(chalk57.dim("  DEBUG_MODE"));
         } else {
-          console.error(chalk52.red(`\u2717 ${error.message}`));
+          console.error(chalk57.red(`\u2717 ${error.message}`));
         }
       } else {
-        console.error(chalk52.red("\u2717 An unexpected error occurred"));
+        console.error(chalk57.red("\u2717 An unexpected error occurred"));
       }
       process.exit(1);
     }
@@ -11650,15 +12048,15 @@ var setCommand3 = new Command53().name("set").description("Create or update a va
 );
 
 // src/commands/variable/delete.ts
-import { Command as Command54 } from "commander";
-import chalk53 from "chalk";
-var deleteCommand3 = new Command54().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
+import { Command as Command59 } from "commander";
+import chalk58 from "chalk";
+var deleteCommand3 = new Command59().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
   try {
     try {
       await getVariable(name);
     } catch (error) {
       if (error instanceof Error && error.message.toLowerCase().includes("not found")) {
-        console.error(chalk53.red(`\u2717 Variable "${name}" not found`));
+        console.error(chalk58.red(`\u2717 Variable "${name}" not found`));
         process.exit(1);
       }
       throw error;
@@ -11666,7 +12064,7 @@ var deleteCommand3 = new Command54().name("delete").description("Delete a variab
     if (!options.yes) {
       if (!isInteractive()) {
         console.error(
-          chalk53.red("\u2717 --yes flag is required in non-interactive mode")
+          chalk58.red("\u2717 --yes flag is required in non-interactive mode")
         );
         process.exit(1);
       }
@@ -11675,43 +12073,43 @@ var deleteCommand3 = new Command54().name("delete").description("Delete a variab
         false
       );
       if (!confirmed) {
-        console.log(chalk53.dim("Cancelled"));
+        console.log(chalk58.dim("Cancelled"));
         return;
       }
     }
     await deleteVariable(name);
-    console.log(chalk53.green(`\u2713 Variable "${name}" deleted`));
+    console.log(chalk58.green(`\u2713 Variable "${name}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk53.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk58.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk53.red(`\u2717 ${error.message}`));
+        console.error(chalk58.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk53.red("\u2717 An unexpected error occurred"));
+      console.error(chalk58.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/variable/index.ts
-var variableCommand = new Command55().name("variable").description("Manage stored variables for agent runs").addCommand(listCommand7).addCommand(setCommand3).addCommand(deleteCommand3);
+var variableCommand = new Command60().name("variable").description("Manage stored variables for agent runs").addCommand(listCommand7).addCommand(setCommand3).addCommand(deleteCommand3);
 
 // src/commands/model-provider/index.ts
-import { Command as Command60 } from "commander";
+import { Command as Command65 } from "commander";
 
 // src/commands/model-provider/list.ts
-import { Command as Command56 } from "commander";
-import chalk54 from "chalk";
-var listCommand8 = new Command56().name("list").alias("ls").description("List all model providers").action(async () => {
+import { Command as Command61 } from "commander";
+import chalk59 from "chalk";
+var listCommand8 = new Command61().name("list").alias("ls").description("List all model providers").action(async () => {
   try {
     const result = await listModelProviders();
     if (result.modelProviders.length === 0) {
-      console.log(chalk54.dim("No model providers configured"));
+      console.log(chalk59.dim("No model providers configured"));
       console.log();
       console.log("To add a model provider:");
-      console.log(chalk54.cyan("  vm0 model-provider setup"));
+      console.log(chalk59.cyan("  vm0 model-provider setup"));
       return;
     }
     const byFramework = result.modelProviders.reduce(
@@ -11725,16 +12123,16 @@ var listCommand8 = new Command56().name("list").alias("ls").description("List al
       },
       {}
     );
-    console.log(chalk54.bold("Model Providers:"));
+    console.log(chalk59.bold("Model Providers:"));
     console.log();
     for (const [framework, providers] of Object.entries(byFramework)) {
-      console.log(`  ${chalk54.cyan(framework)}:`);
+      console.log(`  ${chalk59.cyan(framework)}:`);
       for (const provider of providers) {
-        const defaultTag = provider.isDefault ? chalk54.green(" (default)") : "";
-        const modelTag = provider.selectedModel ? chalk54.dim(` [${provider.selectedModel}]`) : "";
+        const defaultTag = provider.isDefault ? chalk59.green(" (default)") : "";
+        const modelTag = provider.selectedModel ? chalk59.dim(` [${provider.selectedModel}]`) : "";
         console.log(`    ${provider.type}${defaultTag}${modelTag}`);
         console.log(
-          chalk54.dim(
+          chalk59.dim(
             `      Updated: ${new Date(provider.updatedAt).toLocaleString()}`
           )
         );
@@ -11742,33 +12140,33 @@ var listCommand8 = new Command56().name("list").alias("ls").description("List al
       console.log();
     }
     console.log(
-      chalk54.dim(`Total: ${result.modelProviders.length} provider(s)`)
+      chalk59.dim(`Total: ${result.modelProviders.length} provider(s)`)
     );
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk54.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk59.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk54.red(`\u2717 ${error.message}`));
+        console.error(chalk59.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk54.red("\u2717 An unexpected error occurred"));
+      console.error(chalk59.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/model-provider/setup.ts
-import { Command as Command57 } from "commander";
-import chalk55 from "chalk";
+import { Command as Command62 } from "commander";
+import chalk60 from "chalk";
 import prompts2 from "prompts";
 function validateProviderType(typeStr) {
   if (!Object.keys(MODEL_PROVIDER_TYPES).includes(typeStr)) {
-    console.error(chalk55.red(`\u2717 Invalid type "${typeStr}"`));
+    console.error(chalk60.red(`\u2717 Invalid type "${typeStr}"`));
     console.log();
     console.log("Valid types:");
     for (const [t, config] of Object.entries(MODEL_PROVIDER_TYPES)) {
-      console.log(`  ${chalk55.cyan(t)} - ${config.label}`);
+      console.log(`  ${chalk60.cyan(t)} - ${config.label}`);
     }
     process.exit(1);
   }
@@ -11780,11 +12178,11 @@ function validateModel(type, modelStr) {
     return modelStr;
   }
   if (models && !models.includes(modelStr)) {
-    console.error(chalk55.red(`\u2717 Invalid model "${modelStr}"`));
+    console.error(chalk60.red(`\u2717 Invalid model "${modelStr}"`));
     console.log();
     console.log("Valid models:");
     for (const m of models) {
-      console.log(`  ${chalk55.cyan(m)}`);
+      console.log(`  ${chalk60.cyan(m)}`);
     }
     process.exit(1);
   }
@@ -11793,12 +12191,12 @@ function validateModel(type, modelStr) {
 function validateAuthMethod(type, authMethodStr) {
   const authMethods = getAuthMethodsForType(type);
   if (!authMethods || !(authMethodStr in authMethods)) {
-    console.error(chalk55.red(`\u2717 Invalid auth method "${authMethodStr}"`));
+    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethodStr}"`));
     console.log();
     console.log("Valid auth methods:");
     if (authMethods) {
       for (const [method, config] of Object.entries(authMethods)) {
-        console.log(`  ${chalk55.cyan(method)} - ${config.label}`);
+        console.log(`  ${chalk60.cyan(method)} - ${config.label}`);
       }
     }
     process.exit(1);
@@ -11808,7 +12206,7 @@ function validateAuthMethod(type, authMethodStr) {
 function parseCredentials(type, authMethod, credentialArgs) {
   const credentialsConfig = getCredentialsForAuthMethod(type, authMethod);
   if (!credentialsConfig) {
-    console.error(chalk55.red(`\u2717 Invalid auth method "${authMethod}"`));
+    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethod}"`));
     process.exit(1);
   }
   const credentialNames = Object.keys(credentialsConfig);
@@ -11816,7 +12214,7 @@ function parseCredentials(type, authMethod, credentialArgs) {
   if (credentialArgs.length === 1 && firstArg && !firstArg.includes("=")) {
     if (credentialNames.length !== 1) {
       console.error(
-        chalk55.red(
+        chalk60.red(
           "\u2717 Must use KEY=VALUE format for multi-credential auth methods"
         )
       );
@@ -11824,13 +12222,13 @@ function parseCredentials(type, authMethod, credentialArgs) {
       console.log("Required credentials:");
       for (const [name, fieldConfig] of Object.entries(credentialsConfig)) {
         const requiredNote = fieldConfig.required ? " (required)" : "";
-        console.log(`  ${chalk55.cyan(name)}${requiredNote}`);
+        console.log(`  ${chalk60.cyan(name)}${requiredNote}`);
       }
       process.exit(1);
     }
     const firstCredentialName = credentialNames[0];
     if (!firstCredentialName) {
-      console.error(chalk55.red("\u2717 No credentials defined for this auth method"));
+      console.error(chalk60.red("\u2717 No credentials defined for this auth method"));
       process.exit(1);
     }
     return { [firstCredentialName]: firstArg };
@@ -11839,7 +12237,7 @@ function parseCredentials(type, authMethod, credentialArgs) {
   for (const arg of credentialArgs) {
     const eqIndex = arg.indexOf("=");
     if (eqIndex === -1) {
-      console.error(chalk55.red(`\u2717 Invalid credential format "${arg}"`));
+      console.error(chalk60.red(`\u2717 Invalid credential format "${arg}"`));
       console.log();
       console.log("Use KEY=VALUE format (e.g., AWS_REGION=us-east-1)");
       process.exit(1);
@@ -11853,17 +12251,17 @@ function parseCredentials(type, authMethod, credentialArgs) {
 function validateCredentials(type, authMethod, credentials) {
   const credentialsConfig = getCredentialsForAuthMethod(type, authMethod);
   if (!credentialsConfig) {
-    console.error(chalk55.red(`\u2717 Invalid auth method "${authMethod}"`));
+    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethod}"`));
     process.exit(1);
   }
   for (const [name, fieldConfig] of Object.entries(credentialsConfig)) {
     if (fieldConfig.required && !credentials[name]) {
-      console.error(chalk55.red(`\u2717 Missing required credential: ${name}`));
+      console.error(chalk60.red(`\u2717 Missing required credential: ${name}`));
       console.log();
       console.log("Required credentials:");
       for (const [n, fc] of Object.entries(credentialsConfig)) {
         if (fc.required) {
-          console.log(`  ${chalk55.cyan(n)} - ${fc.label}`);
+          console.log(`  ${chalk60.cyan(n)} - ${fc.label}`);
         }
       }
       process.exit(1);
@@ -11871,12 +12269,12 @@ function validateCredentials(type, authMethod, credentials) {
   }
   for (const name of Object.keys(credentials)) {
     if (!(name in credentialsConfig)) {
-      console.error(chalk55.red(`\u2717 Unknown credential: ${name}`));
+      console.error(chalk60.red(`\u2717 Unknown credential: ${name}`));
       console.log();
       console.log("Valid credentials:");
       for (const [n, fc] of Object.entries(credentialsConfig)) {
         const requiredNote = fc.required ? " (required)" : " (optional)";
-        console.log(`  ${chalk55.cyan(n)}${requiredNote}`);
+        console.log(`  ${chalk60.cyan(n)}${requiredNote}`);
       }
       process.exit(1);
     }
@@ -11899,7 +12297,7 @@ function handleNonInteractiveMode(options) {
       const defaultAuthMethod = getDefaultAuthMethod(type);
       const authMethods = getAuthMethodsForType(type);
       if (!defaultAuthMethod || !authMethods) {
-        console.error(chalk55.red(`\u2717 Provider "${type}" requires --auth-method`));
+        console.error(chalk60.red(`\u2717 Provider "${type}" requires --auth-method`));
         process.exit(1);
       }
       const authMethodNames = Object.keys(authMethods);
@@ -11907,7 +12305,7 @@ function handleNonInteractiveMode(options) {
         authMethod = authMethodNames[0];
       } else {
         console.error(
-          chalk55.red(
+          chalk60.red(
             `\u2717 --auth-method is required for "${type}" (multiple auth methods available)`
           )
         );
@@ -11916,13 +12314,13 @@ function handleNonInteractiveMode(options) {
         for (const [method, config] of Object.entries(authMethods)) {
           const defaultNote = method === defaultAuthMethod ? " (default)" : "";
           console.log(
-            `  ${chalk55.cyan(method)} - ${config.label}${defaultNote}`
+            `  ${chalk60.cyan(method)} - ${config.label}${defaultNote}`
           );
         }
         console.log();
         console.log("Example:");
         console.log(
-          chalk55.cyan(
+          chalk60.cyan(
             `  vm0 model-provider setup --type ${type} --auth-method ${authMethodNames[0]} --credential KEY=VALUE`
           )
         );
@@ -11942,7 +12340,7 @@ function handleNonInteractiveMode(options) {
   const credentialArgs = options.credential;
   const firstArg = credentialArgs[0];
   if (!firstArg) {
-    console.error(chalk55.red("\u2717 Credential is required"));
+    console.error(chalk60.red("\u2717 Credential is required"));
     process.exit(1);
   }
   let credential;
@@ -11991,7 +12389,7 @@ async function promptForModelSelection(type) {
   if (selected === "__custom__") {
     const placeholder = getCustomModelPlaceholder(type);
     if (placeholder) {
-      console.log(chalk55.dim(`Example: ${placeholder}`));
+      console.log(chalk60.dim(`Example: ${placeholder}`));
     }
     const customResponse = await prompts2(
       {
@@ -12036,13 +12434,13 @@ function isSecretCredential(name) {
 async function promptForCredentials(type, authMethod) {
   const credentialsConfig = getCredentialsForAuthMethod(type, authMethod);
   if (!credentialsConfig) {
-    console.error(chalk55.red(`\u2717 Invalid auth method "${authMethod}"`));
+    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethod}"`));
     process.exit(1);
   }
   const credentials = {};
   for (const [name, fieldConfig] of Object.entries(credentialsConfig)) {
     if (fieldConfig.helpText) {
-      console.log(chalk55.dim(fieldConfig.helpText));
+      console.log(chalk60.dim(fieldConfig.helpText));
     }
     const isSecret = isSecretCredential(name);
     const placeholder = "placeholder" in fieldConfig ? fieldConfig.placeholder : "";
@@ -12077,11 +12475,11 @@ async function promptForCredentials(type, authMethod) {
 }
 async function handleInteractiveMode() {
   if (!isInteractive()) {
-    console.error(chalk55.red("\u2717 Interactive mode requires a TTY"));
+    console.error(chalk60.red("\u2717 Interactive mode requires a TTY"));
     console.log();
     console.log("Use non-interactive mode:");
     console.log(
-      chalk55.cyan(
+      chalk60.cyan(
         '  vm0 model-provider setup --type <type> --credential "<value>"'
       )
     );
@@ -12098,7 +12496,7 @@ async function handleInteractiveMode() {
         title = `${title} \u2713`;
       }
       if (isExperimental) {
-        title = `${title} ${chalk55.dim("(experimental)")}`;
+        title = `${title} ${chalk60.dim("(experimental)")}`;
       }
       return {
         title,
@@ -12131,14 +12529,14 @@ async function handleInteractiveMode() {
       const provider = await convertModelProviderCredential(type);
       const defaultNote = provider.isDefault ? ` (default for ${provider.framework})` : "";
       console.log(
-        chalk55.green(
+        chalk60.green(
           `\u2713 Converted "${checkResult.credentialName}" to model provider${defaultNote}`
         )
       );
       await promptSetAsDefault(type, provider.framework, provider.isDefault);
       return null;
     }
-    console.log(chalk55.dim("Aborted"));
+    console.log(chalk60.dim("Aborted"));
     process.exit(0);
   }
   if (checkResult.exists && checkResult.currentType === "model-provider") {
@@ -12169,7 +12567,7 @@ async function handleInteractiveMode() {
   }
   const config = MODEL_PROVIDER_TYPES[type];
   console.log();
-  console.log(chalk55.dim(config.helpText));
+  console.log(chalk60.dim(config.helpText));
   console.log();
   if (hasAuthMethods(type)) {
     const authMethod = await promptForAuthMethod(type);
@@ -12200,17 +12598,17 @@ async function handleInteractiveMode() {
 function handleSetupError2(error) {
   if (error instanceof Error) {
     if (error.message.includes("already exists")) {
-      console.error(chalk55.red(`\u2717 ${error.message}`));
+      console.error(chalk60.red(`\u2717 ${error.message}`));
       console.log();
       console.log("To convert the existing credential, run:");
-      console.log(chalk55.cyan("  vm0 model-provider setup --convert"));
+      console.log(chalk60.cyan("  vm0 model-provider setup --convert"));
     } else if (error.message.includes("Not authenticated")) {
-      console.error(chalk55.red("\u2717 Not authenticated. Run: vm0 auth login"));
+      console.error(chalk60.red("\u2717 Not authenticated. Run: vm0 auth login"));
     } else {
-      console.error(chalk55.red(`\u2717 ${error.message}`));
+      console.error(chalk60.red(`\u2717 ${error.message}`));
     }
   } else {
-    console.error(chalk55.red("\u2717 An unexpected error occurred"));
+    console.error(chalk60.red("\u2717 An unexpected error occurred"));
   }
   process.exit(1);
 }
@@ -12227,13 +12625,13 @@ async function promptSetAsDefault(type, framework, isDefault) {
   );
   if (response.setDefault) {
     await setModelProviderDefault(type);
-    console.log(chalk55.green(`\u2713 Default for ${framework} set to "${type}"`));
+    console.log(chalk60.green(`\u2713 Default for ${framework} set to "${type}"`));
   }
 }
 function collectCredentials(value, previous) {
   return previous.concat([value]);
 }
-var setupCommand2 = new Command57().name("setup").description("Configure a model provider").option("-t, --type <type>", "Provider type (for non-interactive mode)").option(
+var setupCommand2 = new Command62().name("setup").description("Configure a model provider").option("-t, --type <type>", "Provider type (for non-interactive mode)").option(
   "-c, --credential <value>",
   "Credential value (can be used multiple times, supports VALUE or KEY=VALUE format)",
   collectCredentials,
@@ -12256,7 +12654,7 @@ var setupCommand2 = new Command57().name("setup").description("Configure a model
         });
       } else if (options.type || credentialArgs.length > 0) {
         console.error(
-          chalk55.red("\u2717 Both --type and --credential are required")
+          chalk60.red("\u2717 Both --type and --credential are required")
         );
         process.exit(1);
       } else {
@@ -12275,11 +12673,11 @@ var setupCommand2 = new Command57().name("setup").description("Configure a model
         const modelNote2 = provider2.selectedModel ? ` with model: ${provider2.selectedModel}` : "";
         if (!hasModelSelection(input.type)) {
           console.log(
-            chalk55.green(`\u2713 Model provider "${input.type}" unchanged`)
+            chalk60.green(`\u2713 Model provider "${input.type}" unchanged`)
           );
         } else {
           console.log(
-            chalk55.green(
+            chalk60.green(
               `\u2713 Model provider "${input.type}" updated${defaultNote2}${modelNote2}`
             )
           );
@@ -12305,7 +12703,7 @@ var setupCommand2 = new Command57().name("setup").description("Configure a model
       const defaultNote = provider.isDefault ? ` (default for ${provider.framework})` : "";
       const modelNote = provider.selectedModel ? ` with model: ${provider.selectedModel}` : "";
       console.log(
-        chalk55.green(
+        chalk60.green(
           `\u2713 Model provider "${input.type}" ${action}${defaultNote}${modelNote}`
         )
       );
@@ -12323,96 +12721,96 @@ var setupCommand2 = new Command57().name("setup").description("Configure a model
 );
 
 // src/commands/model-provider/delete.ts
-import { Command as Command58 } from "commander";
-import chalk56 from "chalk";
-var deleteCommand4 = new Command58().name("delete").description("Delete a model provider").argument("<type>", "Model provider type to delete").action(async (type) => {
+import { Command as Command63 } from "commander";
+import chalk61 from "chalk";
+var deleteCommand4 = new Command63().name("delete").description("Delete a model provider").argument("<type>", "Model provider type to delete").action(async (type) => {
   try {
     if (!Object.keys(MODEL_PROVIDER_TYPES).includes(type)) {
-      console.error(chalk56.red(`\u2717 Invalid type "${type}"`));
+      console.error(chalk61.red(`\u2717 Invalid type "${type}"`));
       console.log();
       console.log("Valid types:");
       for (const [t, config] of Object.entries(MODEL_PROVIDER_TYPES)) {
-        console.log(`  ${chalk56.cyan(t)} - ${config.label}`);
+        console.log(`  ${chalk61.cyan(t)} - ${config.label}`);
       }
       process.exit(1);
     }
     await deleteModelProvider(type);
-    console.log(chalk56.green(`\u2713 Model provider "${type}" deleted`));
+    console.log(chalk61.green(`\u2713 Model provider "${type}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("not found")) {
-        console.error(chalk56.red(`\u2717 Model provider "${type}" not found`));
+        console.error(chalk61.red(`\u2717 Model provider "${type}" not found`));
       } else if (error.message.includes("Not authenticated")) {
-        console.error(chalk56.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk61.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk56.red(`\u2717 ${error.message}`));
+        console.error(chalk61.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk56.red("\u2717 An unexpected error occurred"));
+      console.error(chalk61.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/model-provider/set-default.ts
-import { Command as Command59 } from "commander";
-import chalk57 from "chalk";
-var setDefaultCommand = new Command59().name("set-default").description("Set a model provider as default for its framework").argument("<type>", "Model provider type to set as default").action(async (type) => {
+import { Command as Command64 } from "commander";
+import chalk62 from "chalk";
+var setDefaultCommand = new Command64().name("set-default").description("Set a model provider as default for its framework").argument("<type>", "Model provider type to set as default").action(async (type) => {
   try {
     if (!Object.keys(MODEL_PROVIDER_TYPES).includes(type)) {
-      console.error(chalk57.red(`\u2717 Invalid type "${type}"`));
+      console.error(chalk62.red(`\u2717 Invalid type "${type}"`));
       console.log();
       console.log("Valid types:");
       for (const [t, config] of Object.entries(MODEL_PROVIDER_TYPES)) {
-        console.log(`  ${chalk57.cyan(t)} - ${config.label}`);
+        console.log(`  ${chalk62.cyan(t)} - ${config.label}`);
       }
       process.exit(1);
     }
     const provider = await setModelProviderDefault(type);
     console.log(
-      chalk57.green(
+      chalk62.green(
         `\u2713 Default for ${provider.framework} set to "${provider.type}"`
       )
     );
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("not found")) {
-        console.error(chalk57.red(`\u2717 Model provider "${type}" not found`));
+        console.error(chalk62.red(`\u2717 Model provider "${type}" not found`));
       } else if (error.message.includes("Not authenticated")) {
-        console.error(chalk57.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk62.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk57.red(`\u2717 ${error.message}`));
+        console.error(chalk62.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk57.red("\u2717 An unexpected error occurred"));
+      console.error(chalk62.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
 });
 
 // src/commands/model-provider/index.ts
-var modelProviderCommand = new Command60().name("model-provider").description("Manage model providers for agent runs").addCommand(listCommand8).addCommand(setupCommand2).addCommand(deleteCommand4).addCommand(setDefaultCommand);
+var modelProviderCommand = new Command65().name("model-provider").description("Manage model providers for agent runs").addCommand(listCommand8).addCommand(setupCommand2).addCommand(deleteCommand4).addCommand(setDefaultCommand);
 
 // src/commands/onboard/index.ts
-import { Command as Command61 } from "commander";
-import chalk61 from "chalk";
+import { Command as Command66 } from "commander";
+import chalk66 from "chalk";
 import { mkdir as mkdir8 } from "fs/promises";
 import { existsSync as existsSync11 } from "fs";
 
 // src/lib/ui/welcome-box.ts
-import chalk58 from "chalk";
+import chalk63 from "chalk";
 var gradientColors = [
-  chalk58.hex("#FFAB5E"),
+  chalk63.hex("#FFAB5E"),
   // Line 1 - lightest
-  chalk58.hex("#FF9642"),
+  chalk63.hex("#FF9642"),
   // Line 2
-  chalk58.hex("#FF8228"),
+  chalk63.hex("#FF8228"),
   // Line 3
-  chalk58.hex("#FF6D0A"),
+  chalk63.hex("#FF6D0A"),
   // Line 4
-  chalk58.hex("#E85D00"),
+  chalk63.hex("#E85D00"),
   // Line 5
-  chalk58.hex("#CC4E00")
+  chalk63.hex("#CC4E00")
   // Line 6 - darkest
 ];
 var vm0LogoLines = [
@@ -12434,15 +12832,15 @@ function renderVm0Banner() {
 function renderOnboardWelcome() {
   renderVm0Banner();
   console.log(`  Build agentic workflows using natural language.`);
-  console.log(`  ${chalk58.dim("Currently in beta, enjoy it free.")}`);
+  console.log(`  ${chalk63.dim("Currently in beta, enjoy it free.")}`);
   console.log(
-    `  ${chalk58.dim("Star us on GitHub: https://github.com/vm0-ai/vm0")}`
+    `  ${chalk63.dim("Star us on GitHub: https://github.com/vm0-ai/vm0")}`
   );
   console.log();
 }
 
 // src/lib/ui/step-runner.ts
-import chalk59 from "chalk";
+import chalk64 from "chalk";
 function createStepRunner(options = true) {
   const opts = typeof options === "boolean" ? { interactive: options } : options;
   const interactive = opts.interactive ?? true;
@@ -12457,25 +12855,25 @@ function createStepRunner(options = true) {
     }
     for (const [i, step] of completedSteps.entries()) {
       if (step.failed) {
-        console.log(chalk59.red(`\u2717 ${step.label}`));
+        console.log(chalk64.red(`\u2717 ${step.label}`));
       } else {
-        console.log(chalk59.green(`\u25CF ${step.label}`));
+        console.log(chalk64.green(`\u25CF ${step.label}`));
       }
       const isLastStep = i === completedSteps.length - 1;
       if (!isLastStep || !isFinal) {
-        console.log(chalk59.dim("\u2502"));
+        console.log(chalk64.dim("\u2502"));
       }
     }
   }
   async function executeStep(label, fn, isFinal) {
     let stepFailed = false;
-    console.log(chalk59.yellow(`\u25CB ${label}`));
+    console.log(chalk64.yellow(`\u25CB ${label}`));
     const ctx = {
       connector() {
-        console.log(chalk59.dim("\u2502"));
+        console.log(chalk64.dim("\u2502"));
       },
       detail(message) {
-        console.log(`${chalk59.dim("\u2502")} ${message}`);
+        console.log(`${chalk64.dim("\u2502")} ${message}`);
       },
       async prompt(promptFn) {
         return await promptFn();
@@ -12492,12 +12890,12 @@ function createStepRunner(options = true) {
         redrawCompletedSteps(isFinal);
       } else {
         if (stepFailed) {
-          console.log(chalk59.red(`\u2717 ${label}`));
+          console.log(chalk64.red(`\u2717 ${label}`));
         } else {
-          console.log(chalk59.green(`\u25CF ${label}`));
+          console.log(chalk64.green(`\u25CF ${label}`));
         }
         if (!isFinal) {
-          console.log(chalk59.dim("\u2502"));
+          console.log(chalk64.dim("\u2502"));
         }
       }
     }
@@ -12655,7 +13053,7 @@ async function setupModelProvider(type, credential, options) {
 
 // src/lib/domain/onboard/claude-setup.ts
 import { spawn as spawn3 } from "child_process";
-import chalk60 from "chalk";
+import chalk65 from "chalk";
 var MARKETPLACE_NAME = "vm0-skills";
 var MARKETPLACE_REPO = "vm0-ai/vm0-skills";
 var PLUGIN_ID = "vm0@vm0-skills";
@@ -12692,12 +13090,12 @@ async function runClaudeCommand(args, cwd) {
 }
 function handlePluginError(error, context) {
   const displayContext = context ?? "Claude plugin";
-  console.error(chalk60.red(`Failed to install ${displayContext}`));
+  console.error(chalk65.red(`Failed to install ${displayContext}`));
   if (error instanceof Error) {
-    console.error(chalk60.red(error.message));
+    console.error(chalk65.red(error.message));
   }
   console.error(
-    chalk60.dim("Please ensure Claude CLI is installed and accessible.")
+    chalk65.dim("Please ensure Claude CLI is installed and accessible.")
   );
   process.exit(1);
 }
@@ -12740,7 +13138,7 @@ async function updateMarketplace() {
   ]);
   if (!result.success) {
     console.warn(
-      chalk60.yellow(
+      chalk65.yellow(
         `Warning: Could not update marketplace: ${result.error ?? "unknown error"}`
       )
     );
@@ -12778,7 +13176,7 @@ async function handleAuthentication(ctx) {
       return;
     }
     if (!ctx.interactive) {
-      console.error(chalk61.red("Error: Not authenticated"));
+      console.error(chalk66.red("Error: Not authenticated"));
       console.error("Run 'vm0 auth login' first or set VM0_TOKEN");
       process.exit(1);
     }
@@ -12786,16 +13184,16 @@ async function handleAuthentication(ctx) {
       onInitiating: () => {
       },
       onDeviceCodeReady: (url, code, expiresIn) => {
-        step.detail(`Copy code: ${chalk61.cyan.bold(code)}`);
-        step.detail(`Open: ${chalk61.cyan(url)}`);
-        step.detail(chalk61.dim(`Expires in ${expiresIn} minutes`));
+        step.detail(`Copy code: ${chalk66.cyan.bold(code)}`);
+        step.detail(`Open: ${chalk66.cyan(url)}`);
+        step.detail(chalk66.dim(`Expires in ${expiresIn} minutes`));
       },
       onPolling: () => {
       },
       onSuccess: () => {
       },
       onError: (error) => {
-        console.error(chalk61.red(`
+        console.error(chalk66.red(`
 ${error.message}`));
         process.exit(1);
       }
@@ -12809,7 +13207,7 @@ async function handleModelProvider(ctx) {
       return;
     }
     if (!ctx.interactive) {
-      console.error(chalk61.red("Error: No model provider configured"));
+      console.error(chalk66.red("Error: No model provider configured"));
       console.error("Run 'vm0 model-provider setup' first");
       process.exit(1);
     }
@@ -12830,7 +13228,7 @@ async function handleModelProvider(ctx) {
     const selectedChoice = choices.find((c23) => c23.type === providerType);
     if (selectedChoice?.helpText) {
       for (const line of selectedChoice.helpText.split("\n")) {
-        step.detail(chalk61.dim(line));
+        step.detail(chalk66.dim(line));
       }
     }
     const credential = await step.prompt(
@@ -12839,7 +13237,7 @@ async function handleModelProvider(ctx) {
       )
     );
     if (!credential) {
-      console.log(chalk61.dim("Cancelled"));
+      console.log(chalk66.dim("Cancelled"));
       process.exit(0);
     }
     let selectedModel;
@@ -12858,7 +13256,7 @@ async function handleModelProvider(ctx) {
         () => promptSelect("Select model:", modelChoices)
       );
       if (modelSelection === void 0) {
-        console.log(chalk61.dim("Cancelled"));
+        console.log(chalk66.dim("Cancelled"));
         process.exit(0);
       }
       selectedModel = modelSelection === "" ? void 0 : modelSelection;
@@ -12868,7 +13266,7 @@ async function handleModelProvider(ctx) {
     });
     const modelNote = result.provider.selectedModel ? ` with model: ${result.provider.selectedModel}` : "";
     step.detail(
-      chalk61.green(
+      chalk66.green(
         `${providerType} ${result.created ? "created" : "updated"}${result.isDefault ? ` (default for ${result.framework})` : ""}${modelNote}`
       )
     );
@@ -12899,7 +13297,7 @@ async function handleAgentCreation(ctx) {
         agentName = inputName;
         if (existsSync11(agentName)) {
           step.detail(
-            chalk61.yellow(`${agentName}/ already exists, choose another name`)
+            chalk66.yellow(`${agentName}/ already exists, choose another name`)
           );
         } else {
           folderExists = false;
@@ -12908,22 +13306,22 @@ async function handleAgentCreation(ctx) {
     } else {
       if (!validateAgentName(agentName)) {
         console.error(
-          chalk61.red(
+          chalk66.red(
             "Invalid agent name: must be 3-64 chars, alphanumeric + hyphens"
           )
         );
         process.exit(1);
       }
       if (existsSync11(agentName)) {
-        console.error(chalk61.red(`${agentName}/ already exists`));
+        console.error(chalk66.red(`${agentName}/ already exists`));
         console.log();
         console.log("Remove it first or choose a different name:");
-        console.log(chalk61.cyan(`  rm -rf ${agentName}`));
+        console.log(chalk66.cyan(`  rm -rf ${agentName}`));
         process.exit(1);
       }
     }
     await mkdir8(agentName, { recursive: true });
-    step.detail(chalk61.green(`Created ${agentName}/`));
+    step.detail(chalk66.green(`Created ${agentName}/`));
   });
   return agentName;
 }
@@ -12939,7 +13337,7 @@ async function handlePluginInstallation(ctx, agentName) {
       shouldInstall = confirmed ?? true;
     }
     if (!shouldInstall) {
-      step.detail(chalk61.dim("Skipped"));
+      step.detail(chalk66.dim("Skipped"));
       return;
     }
     const scope = "project";
@@ -12947,7 +13345,7 @@ async function handlePluginInstallation(ctx, agentName) {
       const agentDir = `${process.cwd()}/${agentName}`;
       const result = await installVm0Plugin(scope, agentDir);
       step.detail(
-        chalk61.green(`Installed ${result.pluginId} (scope: ${result.scope})`)
+        chalk66.green(`Installed ${result.pluginId} (scope: ${result.scope})`)
       );
       pluginInstalled = true;
     } catch (error) {
@@ -12958,18 +13356,18 @@ async function handlePluginInstallation(ctx, agentName) {
 }
 function printNextSteps(agentName, pluginInstalled) {
   console.log();
-  console.log(chalk61.bold("Next step:"));
+  console.log(chalk66.bold("Next step:"));
   console.log();
   if (pluginInstalled) {
     console.log(
-      `  ${chalk61.cyan(`cd ${agentName} && claude "/${PRIMARY_SKILL_NAME} let's build an agent"`)}`
+      `  ${chalk66.cyan(`cd ${agentName} && claude "/${PRIMARY_SKILL_NAME} let's build an agent"`)}`
     );
   } else {
-    console.log(`  ${chalk61.cyan(`cd ${agentName} && vm0 init`)}`);
+    console.log(`  ${chalk66.cyan(`cd ${agentName} && vm0 init`)}`);
   }
   console.log();
 }
-var onboardCommand = new Command61().name("onboard").description("Guided setup for new VM0 users").option("-y, --yes", "Skip confirmation prompts").option("--name <name>", `Agent name (default: ${DEFAULT_AGENT_NAME})`).action(async (options) => {
+var onboardCommand = new Command66().name("onboard").description("Guided setup for new VM0 users").option("-y, --yes", "Skip confirmation prompts").option("--name <name>", `Agent name (default: ${DEFAULT_AGENT_NAME})`).action(async (options) => {
   const interactive = isInteractive();
   if (interactive) {
     process.stdout.write("\x1B[2J\x1B[H");
@@ -12992,15 +13390,15 @@ var onboardCommand = new Command61().name("onboard").description("Guided setup f
 });
 
 // src/commands/setup-claude/index.ts
-import { Command as Command62 } from "commander";
-import chalk62 from "chalk";
-var setupClaudeCommand = new Command62().name("setup-claude").description("Install VM0 Claude Plugin").option("--agent-dir <dir>", "Agent directory to run install in").option("--scope <scope>", "Installation scope (user or project)", "project").action(async (options) => {
-  console.log(chalk62.dim("Installing VM0 Claude Plugin..."));
+import { Command as Command67 } from "commander";
+import chalk67 from "chalk";
+var setupClaudeCommand = new Command67().name("setup-claude").description("Install VM0 Claude Plugin").option("--agent-dir <dir>", "Agent directory to run install in").option("--scope <scope>", "Installation scope (user or project)", "project").action(async (options) => {
+  console.log(chalk67.dim("Installing VM0 Claude Plugin..."));
   const scope = options.scope === "user" ? "user" : "project";
   try {
     const result = await installVm0Plugin(scope, options.agentDir);
     console.log(
-      chalk62.green(`\u2713 Installed ${result.pluginId} (scope: ${result.scope})`)
+      chalk67.green(`\u2713 Installed ${result.pluginId} (scope: ${result.scope})`)
     );
   } catch (error) {
     handlePluginError(error);
@@ -13009,15 +13407,15 @@ var setupClaudeCommand = new Command62().name("setup-claude").description("Insta
   console.log("Next step:");
   const cdPrefix = options.agentDir ? `cd ${options.agentDir} && ` : "";
   console.log(
-    chalk62.cyan(
+    chalk67.cyan(
       `  ${cdPrefix}claude "/${PRIMARY_SKILL_NAME} let's build a workflow"`
     )
   );
 });
 
 // src/index.ts
-var program = new Command63();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.18.0");
+var program = new Command68();
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.20.0");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);