@vm0/cli 9.211.5 → 9.212.0

package/index.js

@@ -78,7 +78,7 @@ import {
   uo,
   volumeConfigSchema,
   withErrorHandler
-} from "./chunk-XLHYMFRS.js";
+} from "./chunk-R6DK5A3B.js";
 import "./chunk-NR42YJMI.js";
 import {
   __toESM,
@@ -412,7 +412,7 @@ function getConfigPath() {
   return join(os.homedir(), ".vm0", "config.json");
 }
 var infoCommand = new Command().name("info").description("Display environment and debug information").action(async () => {
-  console.log(source_default.bold(`VM0 CLI v${"9.211.5"}`));
+  console.log(source_default.bold(`VM0 CLI v${"9.212.0"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -1114,7 +1114,7 @@ var composeCommand = new Command().name("compose").description("Create or update
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.211.5");
+        await startSilentUpgrade("9.212.0");
       }
       try {
         const { config, agentName, agent, basePath } = await loadAndValidateConfig(resolvedConfigFile);
@@ -1211,7 +1211,7 @@ var mainRunCommand = new Command().name("run").description("Run an agent").argum
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.211.5");
+        await startSilentUpgrade("9.212.0");
       }
       const { name, version } = parseIdentifier(identifier);
       let composeId;
@@ -3070,13 +3070,13 @@ var upgradeCommand = new Command().name("upgrade").description("Upgrade vm0 CLI
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.211.5") {
-      console.log(source_default.green(`\u2713 Already up to date (${"9.211.5"})`));
+    if (latestVersion === "9.212.0") {
+      console.log(source_default.green(`\u2713 Already up to date (${"9.212.0"})`));
       return;
     }
     console.log(
       source_default.yellow(
-        `Current version: ${"9.211.5"} -> Latest version: ${latestVersion}`
+        `Current version: ${"9.212.0"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -3103,7 +3103,7 @@ var upgradeCommand = new Command().name("upgrade").description("Upgrade vm0 CLI
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        source_default.green(`\u2713 Upgraded from ${"9.211.5"} to ${latestVersion}`)
+        source_default.green(`\u2713 Upgraded from ${"9.212.0"} to ${latestVersion}`)
       );
       return;
     }
@@ -3170,7 +3170,7 @@ var whoamiCommand = new Command().name("whoami").description("Show current ident
 
 // src/index.ts
 var program = new Command();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.211.5");
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.212.0");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.211.5",
+  "version": "9.212.0",
   "description": "CLI application",
   "repository": {
     "type": "git",

package/zero.js

@@ -190,7 +190,7 @@ import {
   uploadWebFile,
   upsertZeroOrgModelProvider,
   withErrorHandler
-} from "./chunk-XLHYMFRS.js";
+} from "./chunk-R6DK5A3B.js";
 import "./chunk-NR42YJMI.js";
 import {
   __toESM,
@@ -9336,7 +9336,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.ALTIUM365_WORKSPACE_URL }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -9535,7 +9538,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.BENTO_CLOUD_API_ENDPOINT }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -10427,7 +10433,13 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "https://${{ vars.GONG_API_BASE }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "providerOwned",
+          "suffixes": [
+            "gong.io"
+          ]
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -10776,7 +10788,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "https://${{ vars.INSFORGE_DOMAIN }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -10845,7 +10860,16 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "https://${{ vars.IRONCLAD_HOST }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "providerOwned",
+          "exactHosts": [
+            "ironcladapp.com",
+            "na1.ironcladapp.com",
+            "eu1.ironcladapp.com",
+            "demo.ironcladapp.com"
+          ]
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -10876,7 +10900,13 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "https://${{ vars.JIRA_DOMAIN }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "providerOwned",
+          "suffixes": [
+            "atlassian.net"
+          ]
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -11190,7 +11220,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.METABASE_BASE_URL }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -11317,7 +11350,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.N8N_BASE_URL }}/api/v1",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -11734,7 +11770,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.QDRANT_BASE_URL }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -11810,7 +11849,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.REAP_API_BASE_URL }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -12243,7 +12285,10 @@ var FIREWALL_SERVER_EXECUTION_METADATA = {
     "baseUrlTemplates": [
       {
         "base": "${{ vars.STRAPI_BASE_URL }}",
-        "credentialed": true
+        "credentialed": true,
+        "hostPolicy": {
+          "kind": "publicDestination"
+        }
       }
     ],
     "secretPlaceholderNames": [
@@ -12773,24 +12818,29 @@ function hasRoutingPermissionRules(config) {
     return api.routes.length > 0;
   });
 }
-function routingBaseIsCredentialed(type, base) {
+function routingBaseExecutionTemplate(type, base) {
   const executionMetadata = getFirewallExecutionMetadata(type);
   const template = executionMetadata?.baseUrlTemplates.find((entry) => {
     return entry.base === base;
   });
-  return template?.credentialed ?? true;
+  return {
+    credentialed: template?.credentialed ?? true,
+    ...template?.hostPolicy !== void 0 ? { hostPolicy: template.hostPolicy } : {}
+  };
 }
 function routingConfigFromMetadata(metadata, baseUrlVars, resolveBaseUrlVars) {
   return {
     type: metadata.type,
     label: metadata.label,
     apis: metadata.apis.map((api) => {
+      const template = routingBaseExecutionTemplate(metadata.type, api.base);
       return {
         base: resolveBaseUrlVars ? resolveFirewallBaseUrlTemplate({
           serviceName: metadata.type,
           base: api.base,
           vars: baseUrlVars,
-          credentialed: routingBaseIsCredentialed(metadata.type, api.base)
+          credentialed: template.credentialed,
+          ...template.hostPolicy !== void 0 ? { hostPolicy: template.hostPolicy } : {}
         }) : api.base,
         routes: api.routes
       };
@@ -13516,16 +13566,26 @@ function resolveTriggerContext() {
 async function outputPermissionChangeMessage(connectorRef, label, permission, action, duration, agentId, triggerContext) {
   const platformOrigin = await getPlatformOrigin();
   if (triggerContext && agentId) {
-    const triggerUrl = `${platformOrigin}/agents/${agentId}/workflows/${triggerContext.workflowId}/triggers/${triggerContext.triggerId}/permissions?${new URLSearchParams(
-      { ref: connectorRef }
-    ).toString()}`;
+    const workflowUrlParams = new URLSearchParams({
+      tab: "authorization",
+      ref: connectorRef,
+      permission,
+      action: action === "enable" ? "allow" : "deny"
+    });
+    if (action === "enable") {
+      workflowUrlParams.set(
+        "expiresIn",
+        duration ?? DEFAULT_PERMISSION_GRANT_DURATION
+      );
+    }
+    const workflowUrl = `${platformOrigin}/agents/${agentId}/workflows/${triggerContext.workflowId}?${workflowUrlParams.toString()}`;
     printSensitivePermissionGuidance(connectorRef, permission, action);
     printPermissionActionMessage({
       action,
       permission,
       label,
-      url: triggerUrl,
-      duration: void 0
+      url: workflowUrl,
+      duration: action === "enable" ? duration ?? DEFAULT_PERMISSION_GRANT_DURATION : void 0
     });
     return;
   }
@@ -22330,7 +22390,7 @@ function registerZeroCommands(prog, commands) {
 var program = new Command();
 program.name("zero").description(
   "Zero CLI \u2014 interact with the zero platform from inside the sandbox"
-).version("9.211.5").addHelpText("after", () => {
+).version("9.212.0").addHelpText("after", () => {
   return buildZeroHelpText();
 });
 if (process.argv[1]?.endsWith("zero.js") || process.argv[1]?.endsWith("zero.ts") || process.argv[1]?.endsWith("zero")) {