@vm0/cli 9.23.0 → 9.24.1

package/index.js

@@ -61,7 +61,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.23.0",
+    version: "9.24.1",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -72,7 +72,7 @@ if (DSN) {
 }
 
 // src/index.ts
-import { Command as Command70 } from "commander";
+import { Command as Command72 } from "commander";
 
 // src/commands/auth/index.ts
 import { Command as Command5 } from "commander";
@@ -2594,12 +2594,9 @@ var c14 = initContract();
 var sessionResponseSchema = z17.object({
   id: z17.string(),
   agentComposeId: z17.string(),
-  agentComposeVersionId: z17.string().nullable(),
   conversationId: z17.string().nullable(),
   artifactName: z17.string().nullable(),
-  vars: z17.record(z17.string(), z17.string()).nullable(),
   secretNames: z17.array(z17.string()).nullable(),
-  volumeVersions: z17.record(z17.string(), z17.string()).nullable(),
   createdAt: z17.string(),
   updatedAt: z17.string()
 });
@@ -2700,8 +2697,7 @@ var deployScheduleRequestSchema = z18.object({
   atTime: z18.string().optional(),
   timezone: z18.string().default("UTC"),
   prompt: z18.string().min(1, "Prompt required"),
-  vars: z18.record(z18.string(), z18.string()).optional(),
-  secrets: z18.record(z18.string(), z18.string()).optional(),
+  // vars and secrets removed - now managed via platform tables
   artifactName: z18.string().optional(),
   artifactVersion: z18.string().optional(),
   volumeVersions: z18.record(z18.string(), z18.string()).optional(),
@@ -3235,29 +3231,158 @@ var webhookComposeCompleteContract = c19.router({
   }
 });
 
-// ../../packages/core/src/contracts/public/agents.ts
+// ../../packages/core/src/contracts/connectors.ts
 import { z as z24 } from "zod";
 var c20 = initContract();
-var publicAgentSchema = z24.object({
-  id: z24.string(),
-  name: z24.string(),
-  currentVersionId: z24.string().nullable(),
+var connectorTypeSchema = z24.enum(["github"]);
+var connectorResponseSchema = z24.object({
+  id: z24.string().uuid(),
+  type: connectorTypeSchema,
+  authMethod: z24.string(),
+  externalId: z24.string().nullable(),
+  externalUsername: z24.string().nullable(),
+  externalEmail: z24.string().nullable(),
+  oauthScopes: z24.array(z24.string()).nullable(),
+  createdAt: z24.string(),
+  updatedAt: z24.string()
+});
+var connectorListResponseSchema = z24.object({
+  connectors: z24.array(connectorResponseSchema)
+});
+var connectorsMainContract = c20.router({
+  list: {
+    method: "GET",
+    path: "/api/connectors",
+    headers: authHeadersSchema,
+    responses: {
+      200: connectorListResponseSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "List all connectors for the authenticated user"
+  }
+});
+var connectorsByTypeContract = c20.router({
+  get: {
+    method: "GET",
+    path: "/api/connectors/:type",
+    headers: authHeadersSchema,
+    pathParams: z24.object({
+      type: connectorTypeSchema
+    }),
+    responses: {
+      200: connectorResponseSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Get connector status by type"
+  },
+  delete: {
+    method: "DELETE",
+    path: "/api/connectors/:type",
+    headers: authHeadersSchema,
+    pathParams: z24.object({
+      type: connectorTypeSchema
+    }),
+    responses: {
+      204: c20.noBody(),
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Disconnect a connector"
+  }
+});
+var connectorSessionStatusSchema = z24.enum([
+  "pending",
+  "complete",
+  "expired",
+  "error"
+]);
+var connectorSessionResponseSchema = z24.object({
+  id: z24.string().uuid(),
+  code: z24.string(),
+  type: connectorTypeSchema,
+  status: connectorSessionStatusSchema,
+  verificationUrl: z24.string(),
+  expiresIn: z24.number(),
+  interval: z24.number(),
+  errorMessage: z24.string().nullable().optional()
+});
+var connectorSessionStatusResponseSchema = z24.object({
+  status: connectorSessionStatusSchema,
+  errorMessage: z24.string().nullable().optional()
+});
+var connectorSessionsContract = c20.router({
+  /**
+   * POST /api/connectors/:type/sessions
+   * Create a new connector session for CLI device flow
+   */
+  create: {
+    method: "POST",
+    path: "/api/connectors/:type/sessions",
+    headers: authHeadersSchema,
+    pathParams: z24.object({
+      type: connectorTypeSchema
+    }),
+    body: z24.object({}).optional(),
+    responses: {
+      200: connectorSessionResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Create connector session for CLI device flow"
+  }
+});
+var connectorSessionByIdContract = c20.router({
+  /**
+   * GET /api/connectors/:type/sessions/:sessionId
+   * Get connector session status (for CLI polling)
+   */
+  get: {
+    method: "GET",
+    path: "/api/connectors/:type/sessions/:sessionId",
+    headers: authHeadersSchema,
+    pathParams: z24.object({
+      type: connectorTypeSchema,
+      sessionId: z24.string().uuid()
+    }),
+    responses: {
+      200: connectorSessionStatusResponseSchema,
+      400: apiErrorSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Get connector session status"
+  }
+});
+
+// ../../packages/core/src/contracts/public/agents.ts
+import { z as z25 } from "zod";
+var c21 = initContract();
+var publicAgentSchema = z25.object({
+  id: z25.string(),
+  name: z25.string(),
+  currentVersionId: z25.string().nullable(),
   createdAt: timestampSchema,
   updatedAt: timestampSchema
 });
-var agentVersionSchema = z24.object({
-  id: z24.string(),
-  agentId: z24.string(),
-  versionNumber: z24.number(),
+var agentVersionSchema = z25.object({
+  id: z25.string(),
+  agentId: z25.string(),
+  versionNumber: z25.number(),
   createdAt: timestampSchema
 });
 var publicAgentDetailSchema = publicAgentSchema;
 var paginatedAgentsSchema = createPaginatedResponseSchema(publicAgentSchema);
 var paginatedAgentVersionsSchema = createPaginatedResponseSchema(agentVersionSchema);
 var agentListQuerySchema = listQuerySchema.extend({
-  name: z24.string().optional()
+  name: z25.string().optional()
 });
-var publicAgentsListContract = c20.router({
+var publicAgentsListContract = c21.router({
   list: {
     method: "GET",
     path: "/v1/agents",
@@ -3272,13 +3397,13 @@ var publicAgentsListContract = c20.router({
     description: "List all agents in the current scope with pagination. Use the `name` query parameter to filter by agent name."
   }
 });
-var publicAgentByIdContract = c20.router({
+var publicAgentByIdContract = c21.router({
   get: {
     method: "GET",
     path: "/v1/agents/:id",
     headers: authHeadersSchema,
-    pathParams: z24.object({
-      id: z24.string().min(1, "Agent ID is required")
+    pathParams: z25.object({
+      id: z25.string().min(1, "Agent ID is required")
     }),
     responses: {
       200: publicAgentDetailSchema,
@@ -3290,13 +3415,13 @@ var publicAgentByIdContract = c20.router({
     description: "Get agent details by ID"
   }
 });
-var publicAgentVersionsContract = c20.router({
+var publicAgentVersionsContract = c21.router({
   list: {
     method: "GET",
     path: "/v1/agents/:id/versions",
     headers: authHeadersSchema,
-    pathParams: z24.object({
-      id: z24.string().min(1, "Agent ID is required")
+    pathParams: z25.object({
+      id: z25.string().min(1, "Agent ID is required")
     }),
     query: listQuerySchema,
     responses: {
@@ -3311,9 +3436,9 @@ var publicAgentVersionsContract = c20.router({
 });
 
 // ../../packages/core/src/contracts/public/runs.ts
-import { z as z25 } from "zod";
-var c21 = initContract();
-var publicRunStatusSchema = z25.enum([
+import { z as z26 } from "zod";
+var c22 = initContract();
+var publicRunStatusSchema = z26.enum([
   "pending",
   "running",
   "completed",
@@ -3321,54 +3446,54 @@ var publicRunStatusSchema = z25.enum([
   "timeout",
   "cancelled"
 ]);
-var publicRunSchema = z25.object({
-  id: z25.string(),
-  agentId: z25.string(),
-  agentName: z25.string(),
+var publicRunSchema = z26.object({
+  id: z26.string(),
+  agentId: z26.string(),
+  agentName: z26.string(),
   status: publicRunStatusSchema,
-  prompt: z25.string(),
+  prompt: z26.string(),
   createdAt: timestampSchema,
   startedAt: timestampSchema.nullable(),
   completedAt: timestampSchema.nullable()
 });
 var publicRunDetailSchema = publicRunSchema.extend({
-  error: z25.string().nullable(),
-  executionTimeMs: z25.number().nullable(),
-  checkpointId: z25.string().nullable(),
-  sessionId: z25.string().nullable(),
-  artifactName: z25.string().nullable(),
-  artifactVersion: z25.string().nullable(),
-  volumes: z25.record(z25.string(), z25.string()).optional()
+  error: z26.string().nullable(),
+  executionTimeMs: z26.number().nullable(),
+  checkpointId: z26.string().nullable(),
+  sessionId: z26.string().nullable(),
+  artifactName: z26.string().nullable(),
+  artifactVersion: z26.string().nullable(),
+  volumes: z26.record(z26.string(), z26.string()).optional()
 });
 var paginatedRunsSchema = createPaginatedResponseSchema(publicRunSchema);
-var createRunRequestSchema = z25.object({
+var createRunRequestSchema = z26.object({
   // Agent identification (one of: agent, agentId, sessionId, checkpointId)
-  agent: z25.string().optional(),
+  agent: z26.string().optional(),
   // Agent name
-  agentId: z25.string().optional(),
+  agentId: z26.string().optional(),
   // Agent ID
-  agentVersion: z25.string().optional(),
+  agentVersion: z26.string().optional(),
   // Version specifier (e.g., "latest", "v1", specific ID)
   // Continue session
-  sessionId: z25.string().optional(),
+  sessionId: z26.string().optional(),
   // Resume from checkpoint
-  checkpointId: z25.string().optional(),
+  checkpointId: z26.string().optional(),
   // Required
-  prompt: z25.string().min(1, "Prompt is required"),
+  prompt: z26.string().min(1, "Prompt is required"),
   // Optional configuration
-  variables: z25.record(z25.string(), z25.string()).optional(),
-  secrets: z25.record(z25.string(), z25.string()).optional(),
-  artifactName: z25.string().optional(),
+  variables: z26.record(z26.string(), z26.string()).optional(),
+  secrets: z26.record(z26.string(), z26.string()).optional(),
+  artifactName: z26.string().optional(),
   // Artifact name to mount
-  artifactVersion: z25.string().optional(),
+  artifactVersion: z26.string().optional(),
   // Artifact version (defaults to latest)
-  volumes: z25.record(z25.string(), z25.string()).optional()
+  volumes: z26.record(z26.string(), z26.string()).optional()
   // volume_name -> version
 });
 var runListQuerySchema = listQuerySchema.extend({
   status: publicRunStatusSchema.optional()
 });
-var publicRunsListContract = c21.router({
+var publicRunsListContract = c22.router({
   list: {
     method: "GET",
     path: "/v1/runs",
@@ -3400,13 +3525,13 @@ var publicRunsListContract = c21.router({
     description: "Create and execute a new agent run. Returns 202 Accepted as runs execute asynchronously."
   }
 });
-var publicRunByIdContract = c21.router({
+var publicRunByIdContract = c22.router({
   get: {
     method: "GET",
     path: "/v1/runs/:id",
     headers: authHeadersSchema,
-    pathParams: z25.object({
-      id: z25.string().min(1, "Run ID is required")
+    pathParams: z26.object({
+      id: z26.string().min(1, "Run ID is required")
     }),
     responses: {
       200: publicRunDetailSchema,
@@ -3418,15 +3543,15 @@ var publicRunByIdContract = c21.router({
     description: "Get run details by ID"
   }
 });
-var publicRunCancelContract = c21.router({
+var publicRunCancelContract = c22.router({
   cancel: {
     method: "POST",
     path: "/v1/runs/:id/cancel",
     headers: authHeadersSchema,
-    pathParams: z25.object({
-      id: z25.string().min(1, "Run ID is required")
+    pathParams: z26.object({
+      id: z26.string().min(1, "Run ID is required")
     }),
-    body: z25.undefined(),
+    body: z26.undefined(),
     responses: {
       200: publicRunDetailSchema,
       400: publicApiErrorSchema,
@@ -3439,27 +3564,27 @@ var publicRunCancelContract = c21.router({
     description: "Cancel a pending or running execution"
   }
 });
-var logEntrySchema = z25.object({
+var logEntrySchema = z26.object({
   timestamp: timestampSchema,
-  type: z25.enum(["agent", "system", "network"]),
-  level: z25.enum(["debug", "info", "warn", "error"]),
-  message: z25.string(),
-  metadata: z25.record(z25.string(), z25.unknown()).optional()
+  type: z26.enum(["agent", "system", "network"]),
+  level: z26.enum(["debug", "info", "warn", "error"]),
+  message: z26.string(),
+  metadata: z26.record(z26.string(), z26.unknown()).optional()
 });
 var paginatedLogsSchema = createPaginatedResponseSchema(logEntrySchema);
 var logsQuerySchema = listQuerySchema.extend({
-  type: z25.enum(["agent", "system", "network", "all"]).default("all"),
+  type: z26.enum(["agent", "system", "network", "all"]).default("all"),
   since: timestampSchema.optional(),
   until: timestampSchema.optional(),
-  order: z25.enum(["asc", "desc"]).default("asc")
+  order: z26.enum(["asc", "desc"]).default("asc")
 });
-var publicRunLogsContract = c21.router({
+var publicRunLogsContract = c22.router({
   getLogs: {
     method: "GET",
     path: "/v1/runs/:id/logs",
     headers: authHeadersSchema,
-    pathParams: z25.object({
-      id: z25.string().min(1, "Run ID is required")
+    pathParams: z26.object({
+      id: z26.string().min(1, "Run ID is required")
     }),
     query: logsQuerySchema,
     responses: {
@@ -3472,30 +3597,30 @@ var publicRunLogsContract = c21.router({
     description: "Get unified logs for a run. Combines agent, system, and network logs."
   }
 });
-var metricPointSchema = z25.object({
+var metricPointSchema = z26.object({
   timestamp: timestampSchema,
-  cpuPercent: z25.number(),
-  memoryUsedMb: z25.number(),
-  memoryTotalMb: z25.number(),
-  diskUsedMb: z25.number(),
-  diskTotalMb: z25.number()
-});
-var metricsSummarySchema = z25.object({
-  avgCpuPercent: z25.number(),
-  maxMemoryUsedMb: z25.number(),
-  totalDurationMs: z25.number().nullable()
-});
-var metricsResponseSchema2 = z25.object({
-  data: z25.array(metricPointSchema),
+  cpuPercent: z26.number(),
+  memoryUsedMb: z26.number(),
+  memoryTotalMb: z26.number(),
+  diskUsedMb: z26.number(),
+  diskTotalMb: z26.number()
+});
+var metricsSummarySchema = z26.object({
+  avgCpuPercent: z26.number(),
+  maxMemoryUsedMb: z26.number(),
+  totalDurationMs: z26.number().nullable()
+});
+var metricsResponseSchema2 = z26.object({
+  data: z26.array(metricPointSchema),
   summary: metricsSummarySchema
 });
-var publicRunMetricsContract = c21.router({
+var publicRunMetricsContract = c22.router({
   getMetrics: {
     method: "GET",
     path: "/v1/runs/:id/metrics",
     headers: authHeadersSchema,
-    pathParams: z25.object({
-      id: z25.string().min(1, "Run ID is required")
+    pathParams: z26.object({
+      id: z26.string().min(1, "Run ID is required")
     }),
     responses: {
       200: metricsResponseSchema2,
@@ -3507,7 +3632,7 @@ var publicRunMetricsContract = c21.router({
     description: "Get CPU, memory, and disk metrics for a run"
   }
 });
-var sseEventTypeSchema = z25.enum([
+var sseEventTypeSchema = z26.enum([
   "status",
   // Run status change
   "output",
@@ -3519,26 +3644,26 @@ var sseEventTypeSchema = z25.enum([
   "heartbeat"
   // Keep-alive
 ]);
-var sseEventSchema = z25.object({
+var sseEventSchema = z26.object({
   event: sseEventTypeSchema,
-  data: z25.unknown(),
-  id: z25.string().optional()
+  data: z26.unknown(),
+  id: z26.string().optional()
   // For Last-Event-ID reconnection
 });
-var publicRunEventsContract = c21.router({
+var publicRunEventsContract = c22.router({
   streamEvents: {
     method: "GET",
     path: "/v1/runs/:id/events",
     headers: authHeadersSchema,
-    pathParams: z25.object({
-      id: z25.string().min(1, "Run ID is required")
+    pathParams: z26.object({
+      id: z26.string().min(1, "Run ID is required")
     }),
-    query: z25.object({
-      lastEventId: z25.string().optional()
+    query: z26.object({
+      lastEventId: z26.string().optional()
       // For reconnection
     }),
     responses: {
-      200: z25.any(),
+      200: z26.any(),
       // SSE stream - actual content is text/event-stream
       401: publicApiErrorSchema,
       404: publicApiErrorSchema,
@@ -3550,28 +3675,28 @@ var publicRunEventsContract = c21.router({
 });
 
 // ../../packages/core/src/contracts/public/artifacts.ts
-import { z as z26 } from "zod";
-var c22 = initContract();
-var publicArtifactSchema = z26.object({
-  id: z26.string(),
-  name: z26.string(),
-  currentVersionId: z26.string().nullable(),
-  size: z26.number(),
+import { z as z27 } from "zod";
+var c23 = initContract();
+var publicArtifactSchema = z27.object({
+  id: z27.string(),
+  name: z27.string(),
+  currentVersionId: z27.string().nullable(),
+  size: z27.number(),
   // Total size in bytes
-  fileCount: z26.number(),
+  fileCount: z27.number(),
   createdAt: timestampSchema,
   updatedAt: timestampSchema
 });
-var artifactVersionSchema = z26.object({
-  id: z26.string(),
+var artifactVersionSchema = z27.object({
+  id: z27.string(),
   // SHA-256 content hash
-  artifactId: z26.string(),
-  size: z26.number(),
+  artifactId: z27.string(),
+  size: z27.number(),
   // Size in bytes
-  fileCount: z26.number(),
-  message: z26.string().nullable(),
+  fileCount: z27.number(),
+  message: z27.string().nullable(),
   // Optional commit message
-  createdBy: z26.string(),
+  createdBy: z27.string(),
   createdAt: timestampSchema
 });
 var publicArtifactDetailSchema = publicArtifactSchema.extend({
@@ -3581,7 +3706,7 @@ var paginatedArtifactsSchema = createPaginatedResponseSchema(publicArtifactSchem
 var paginatedArtifactVersionsSchema = createPaginatedResponseSchema(
   artifactVersionSchema
 );
-var publicArtifactsListContract = c22.router({
+var publicArtifactsListContract = c23.router({
   list: {
     method: "GET",
     path: "/v1/artifacts",
@@ -3596,13 +3721,13 @@ var publicArtifactsListContract = c22.router({
     description: "List all artifacts in the current scope with pagination"
   }
 });
-var publicArtifactByIdContract = c22.router({
+var publicArtifactByIdContract = c23.router({
   get: {
     method: "GET",
     path: "/v1/artifacts/:id",
     headers: authHeadersSchema,
-    pathParams: z26.object({
-      id: z26.string().min(1, "Artifact ID is required")
+    pathParams: z27.object({
+      id: z27.string().min(1, "Artifact ID is required")
     }),
     responses: {
       200: publicArtifactDetailSchema,
@@ -3614,13 +3739,13 @@ var publicArtifactByIdContract = c22.router({
     description: "Get artifact details by ID"
   }
 });
-var publicArtifactVersionsContract = c22.router({
+var publicArtifactVersionsContract = c23.router({
   list: {
     method: "GET",
     path: "/v1/artifacts/:id/versions",
     headers: authHeadersSchema,
-    pathParams: z26.object({
-      id: z26.string().min(1, "Artifact ID is required")
+    pathParams: z27.object({
+      id: z27.string().min(1, "Artifact ID is required")
     }),
     query: listQuerySchema,
     responses: {
@@ -3633,20 +3758,20 @@ var publicArtifactVersionsContract = c22.router({
     description: "List all versions of an artifact with pagination"
   }
 });
-var publicArtifactDownloadContract = c22.router({
+var publicArtifactDownloadContract = c23.router({
   download: {
     method: "GET",
     path: "/v1/artifacts/:id/download",
     headers: authHeadersSchema,
-    pathParams: z26.object({
-      id: z26.string().min(1, "Artifact ID is required")
+    pathParams: z27.object({
+      id: z27.string().min(1, "Artifact ID is required")
     }),
-    query: z26.object({
-      versionId: z26.string().optional()
+    query: z27.object({
+      versionId: z27.string().optional()
       // Defaults to current version
     }),
     responses: {
-      302: z26.undefined(),
+      302: z27.undefined(),
       // Redirect to presigned URL
       401: publicApiErrorSchema,
       404: publicApiErrorSchema,
@@ -3658,28 +3783,28 @@ var publicArtifactDownloadContract = c22.router({
 });
 
 // ../../packages/core/src/contracts/public/volumes.ts
-import { z as z27 } from "zod";
-var c23 = initContract();
-var publicVolumeSchema = z27.object({
-  id: z27.string(),
-  name: z27.string(),
-  currentVersionId: z27.string().nullable(),
-  size: z27.number(),
+import { z as z28 } from "zod";
+var c24 = initContract();
+var publicVolumeSchema = z28.object({
+  id: z28.string(),
+  name: z28.string(),
+  currentVersionId: z28.string().nullable(),
+  size: z28.number(),
   // Total size in bytes
-  fileCount: z27.number(),
+  fileCount: z28.number(),
   createdAt: timestampSchema,
   updatedAt: timestampSchema
 });
-var volumeVersionSchema = z27.object({
-  id: z27.string(),
+var volumeVersionSchema = z28.object({
+  id: z28.string(),
   // SHA-256 content hash
-  volumeId: z27.string(),
-  size: z27.number(),
+  volumeId: z28.string(),
+  size: z28.number(),
   // Size in bytes
-  fileCount: z27.number(),
-  message: z27.string().nullable(),
+  fileCount: z28.number(),
+  message: z28.string().nullable(),
   // Optional commit message
-  createdBy: z27.string(),
+  createdBy: z28.string(),
   createdAt: timestampSchema
 });
 var publicVolumeDetailSchema = publicVolumeSchema.extend({
@@ -3687,7 +3812,7 @@ var publicVolumeDetailSchema = publicVolumeSchema.extend({
 });
 var paginatedVolumesSchema = createPaginatedResponseSchema(publicVolumeSchema);
 var paginatedVolumeVersionsSchema = createPaginatedResponseSchema(volumeVersionSchema);
-var publicVolumesListContract = c23.router({
+var publicVolumesListContract = c24.router({
   list: {
     method: "GET",
     path: "/v1/volumes",
@@ -3702,13 +3827,13 @@ var publicVolumesListContract = c23.router({
     description: "List all volumes in the current scope with pagination"
   }
 });
-var publicVolumeByIdContract = c23.router({
+var publicVolumeByIdContract = c24.router({
   get: {
     method: "GET",
     path: "/v1/volumes/:id",
     headers: authHeadersSchema,
-    pathParams: z27.object({
-      id: z27.string().min(1, "Volume ID is required")
+    pathParams: z28.object({
+      id: z28.string().min(1, "Volume ID is required")
     }),
     responses: {
       200: publicVolumeDetailSchema,
@@ -3720,13 +3845,13 @@ var publicVolumeByIdContract = c23.router({
     description: "Get volume details by ID"
   }
 });
-var publicVolumeVersionsContract = c23.router({
+var publicVolumeVersionsContract = c24.router({
   list: {
     method: "GET",
     path: "/v1/volumes/:id/versions",
     headers: authHeadersSchema,
-    pathParams: z27.object({
-      id: z27.string().min(1, "Volume ID is required")
+    pathParams: z28.object({
+      id: z28.string().min(1, "Volume ID is required")
     }),
     query: listQuerySchema,
     responses: {
@@ -3739,20 +3864,20 @@ var publicVolumeVersionsContract = c23.router({
     description: "List all versions of a volume with pagination"
   }
 });
-var publicVolumeDownloadContract = c23.router({
+var publicVolumeDownloadContract = c24.router({
   download: {
     method: "GET",
     path: "/v1/volumes/:id/download",
     headers: authHeadersSchema,
-    pathParams: z27.object({
-      id: z27.string().min(1, "Volume ID is required")
+    pathParams: z28.object({
+      id: z28.string().min(1, "Volume ID is required")
     }),
-    query: z27.object({
-      versionId: z27.string().optional()
+    query: z28.object({
+      versionId: z28.string().optional()
       // Defaults to current version
     }),
     responses: {
-      302: z27.undefined(),
+      302: z28.undefined(),
       // Redirect to presigned URL
       401: publicApiErrorSchema,
       404: publicApiErrorSchema,
@@ -4470,8 +4595,8 @@ async function getUsage(options) {
 }
 
 // src/lib/domain/yaml-validator.ts
-import { z as z28 } from "zod";
-var cliAgentNameSchema = z28.string().min(3, "Agent name must be at least 3 characters").max(64, "Agent name must be 64 characters or less").regex(
+import { z as z29 } from "zod";
+var cliAgentNameSchema = z29.string().min(3, "Agent name must be at least 3 characters").max(64, "Agent name must be 64 characters or less").regex(
   /^[a-zA-Z0-9]([a-zA-Z0-9-]{0,62}[a-zA-Z0-9])?$/,
   "Agent name must start and end with letter or number, and contain only letters, numbers, and hyphens"
 );
@@ -4486,7 +4611,7 @@ var cliAgentDefinitionSchema = agentDefinitionSchema.superRefine(
         const skillUrl = agent.skills[i];
         if (skillUrl && !validateGitHubTreeUrl(skillUrl)) {
           ctx.addIssue({
-            code: z28.ZodIssueCode.custom,
+            code: z29.ZodIssueCode.custom,
             message: `Invalid skill URL: ${skillUrl}. Expected format: https://github.com/{owner}/{repo}/tree/{branch}/{path}`,
             path: ["skills", i]
           });
@@ -4495,15 +4620,15 @@ var cliAgentDefinitionSchema = agentDefinitionSchema.superRefine(
     }
   }
 );
-var cliComposeSchema = z28.object({
-  version: z28.string().min(1, "Missing config.version"),
-  agents: z28.record(cliAgentNameSchema, cliAgentDefinitionSchema),
-  volumes: z28.record(z28.string(), volumeConfigSchema).optional()
+var cliComposeSchema = z29.object({
+  version: z29.string().min(1, "Missing config.version"),
+  agents: z29.record(cliAgentNameSchema, cliAgentDefinitionSchema),
+  volumes: z29.record(z29.string(), volumeConfigSchema).optional()
 }).superRefine((config, ctx) => {
   const agentKeys = Object.keys(config.agents);
   if (agentKeys.length === 0) {
     ctx.addIssue({
-      code: z28.ZodIssueCode.custom,
+      code: z29.ZodIssueCode.custom,
       message: "agents must have at least one agent defined",
       path: ["agents"]
     });
@@ -4511,7 +4636,7 @@ var cliComposeSchema = z28.object({
   }
   if (agentKeys.length > 1) {
     ctx.addIssue({
-      code: z28.ZodIssueCode.custom,
+      code: z29.ZodIssueCode.custom,
       message: "Multiple agents not supported yet. Only one agent allowed.",
       path: ["agents"]
     });
@@ -4523,7 +4648,7 @@ var cliComposeSchema = z28.object({
   if (agentVolumes && agentVolumes.length > 0) {
     if (!config.volumes) {
       ctx.addIssue({
-        code: z28.ZodIssueCode.custom,
+        code: z29.ZodIssueCode.custom,
         message: "Agent references volumes but no volumes section defined. Each volume must have explicit name and version.",
         path: ["volumes"]
       });
@@ -4533,7 +4658,7 @@ var cliComposeSchema = z28.object({
       const parts = volDeclaration.split(":");
       if (parts.length !== 2) {
         ctx.addIssue({
-          code: z28.ZodIssueCode.custom,
+          code: z29.ZodIssueCode.custom,
           message: `Invalid volume declaration: ${volDeclaration}. Expected format: volume-key:/mount/path`,
           path: ["agents", agentName, "volumes"]
         });
@@ -4542,7 +4667,7 @@ var cliComposeSchema = z28.object({
       const volumeKey = parts[0].trim();
       if (!config.volumes[volumeKey]) {
         ctx.addIssue({
-          code: z28.ZodIssueCode.custom,
+          code: z29.ZodIssueCode.custom,
           message: `Volume "${volumeKey}" is not defined in volumes section. Each volume must have explicit name and version.`,
           path: ["volumes", volumeKey]
         });
@@ -5711,7 +5836,7 @@ async function finalizeCompose(config, agent, variables, options) {
     );
   }
   if (options.autoUpdate !== false) {
-    await silentUpgradeAfterCommand("9.23.0");
+    await silentUpgradeAfterCommand("9.24.1");
   }
   return result;
 }
@@ -6648,9 +6773,9 @@ var CodexEventParser = class {
       }
     }
     if (itemType === "file_change" && item.changes && item.changes.length > 0) {
-      const changes = item.changes.map((c24) => {
-        const action = c24.kind === "add" ? "Created" : c24.kind === "modify" ? "Modified" : "Deleted";
-        return `${action}: ${c24.path}`;
+      const changes = item.changes.map((c25) => {
+        const action = c25.kind === "add" ? "Created" : c25.kind === "modify" ? "Modified" : "Deleted";
+        return `${action}: ${c25.path}`;
       }).join("\n");
       return {
         type: "text",
@@ -6804,9 +6929,9 @@ var CodexEventRenderer = class {
       return;
     }
     if (itemType === "file_change" && item.changes && item.changes.length > 0) {
-      const summary = item.changes.map((c24) => {
-        const icon = c24.kind === "add" ? "+" : c24.kind === "delete" ? "-" : "~";
-        return `${icon}${c24.path}`;
+      const summary = item.changes.map((c25) => {
+        const icon = c25.kind === "add" ? "+" : c25.kind === "delete" ? "-" : "~";
+        return `${icon}${c25.path}`;
       }).join(", ");
       console.log(chalk7.green("[files]") + ` ${summary}`);
       return;
@@ -7252,6 +7377,7 @@ var ApiClient = class {
   }
   /**
    * Deploy schedule (create or update)
+   * Note: vars and secrets are now managed via platform tables (vm0 secret set, vm0 var set)
    */
   async deploySchedule(body) {
     const baseUrl = await this.getBaseUrl();
@@ -8153,7 +8279,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
       }
       showNextSteps(result);
       if (options.autoUpdate !== false) {
-        await silentUpgradeAfterCommand("9.23.0");
+        await silentUpgradeAfterCommand("9.24.1");
       }
     } catch (error) {
       handleRunError(error, identifier);
@@ -8261,11 +8387,6 @@ var continueCommand = new Command10().name("continue").description(
   "Secrets for ${{ secrets.xxx }} (repeatable, falls back to --env-file or env vars)",
   collectKeyValue,
   {}
-).option(
-  "--volume-version <name=version>",
-  "Volume version override (repeatable)",
-  collectVolumeVersions,
-  {}
 ).option(
   "--experimental-realtime",
   "Use realtime event streaming instead of polling (experimental)"
@@ -8294,7 +8415,6 @@ var continueCommand = new Command10().name("continue").description(
         prompt,
         vars: Object.keys(vars).length > 0 ? vars : void 0,
         secrets: loadedSecrets,
-        volumeVersions: Object.keys(allOpts.volumeVersion).length > 0 ? allOpts.volumeVersion : void 0,
         modelProvider: options.modelProvider || allOpts.modelProvider,
         debugNoMockClaude: options.debugNoMockClaude || allOpts.debugNoMockClaude || void 0
       });
@@ -9660,7 +9780,7 @@ var cookAction = new Command27().name("cook").description("Quick start: prepare,
 ).option("-y, --yes", "Skip confirmation prompts").option("-v, --verbose", "Show full tool inputs and outputs").addOption(new Option5("--debug-no-mock-claude").hideHelp()).addOption(new Option5("--no-auto-update").hideHelp()).action(
   async (prompt, options) => {
     if (options.autoUpdate !== false) {
-      const shouldExit = await checkAndUpgrade("9.23.0", prompt);
+      const shouldExit = await checkAndUpgrade("9.24.1", prompt);
       if (shouldExit) {
         process.exit(0);
       }
@@ -10375,7 +10495,7 @@ var listCommand4 = new Command36().name("list").alias("ls").description("List al
       );
       return;
     }
-    const nameWidth = Math.max(4, ...data.composes.map((c24) => c24.name.length));
+    const nameWidth = Math.max(4, ...data.composes.map((c25) => c25.name.length));
     const header = ["NAME".padEnd(nameWidth), "VERSION", "UPDATED"].join(
       "  "
     );
@@ -10973,7 +11093,7 @@ import { Command as Command51 } from "commander";
 
 // src/commands/schedule/setup.ts
 import { Command as Command45 } from "commander";
-import chalk46 from "chalk";
+import chalk45 from "chalk";
 
 // src/lib/domain/schedule-utils.ts
 import { parse as parseYaml5 } from "yaml";
@@ -11085,22 +11205,6 @@ function toISODateTime(dateTimeStr) {
   const date = new Date(isoStr);
   return date.toISOString();
 }
-function extractRequiredConfiguration(composeContent) {
-  const result = {
-    secrets: [],
-    vars: [],
-    credentials: []
-  };
-  if (!composeContent) {
-    return result;
-  }
-  const refs = extractVariableReferences(composeContent);
-  const grouped = groupVariablesBySource(refs);
-  result.secrets = grouped.secrets.map((r) => r.name);
-  result.vars = grouped.vars.map((r) => r.name);
-  result.credentials = grouped.credentials.map((r) => r.name);
-  return result;
-}
 async function resolveScheduleByAgent(agentName) {
   const { schedules } = await listSchedules();
   const schedule = schedules.find((s) => s.composeName === agentName);
@@ -11114,117 +11218,6 @@ async function resolveScheduleByAgent(agentName) {
   };
 }
 
-// src/commands/schedule/gather-configuration.ts
-import chalk45 from "chalk";
-var defaultPromptDeps = {
-  isInteractive,
-  promptConfirm,
-  promptText
-};
-function parseKeyValuePairs(pairs) {
-  const result = {};
-  for (const pair of pairs) {
-    const eqIndex = pair.indexOf("=");
-    if (eqIndex > 0) {
-      const key = pair.slice(0, eqIndex);
-      const value = pair.slice(eqIndex + 1);
-      result[key] = value;
-    }
-  }
-  return result;
-}
-async function handleExistingSecrets(existingSecretNames, deps) {
-  if (existingSecretNames.length > 0 && deps.isInteractive()) {
-    const keepSecrets = await deps.promptConfirm(
-      `Keep existing secrets? (${existingSecretNames.join(", ")})`,
-      true
-    );
-    if (keepSecrets) {
-      return true;
-    }
-    console.log(
-      chalk45.dim(
-        "  Note: Secrets will be cleared. Use 'vm0 secret set' to add platform secrets."
-      )
-    );
-    return false;
-  }
-  return false;
-}
-async function handleVars(optionVars, existingVars, deps) {
-  if (optionVars.length > 0) {
-    return parseKeyValuePairs(optionVars);
-  }
-  if (existingVars && deps.isInteractive()) {
-    const keepVars = await deps.promptConfirm(
-      `Keep existing variables? (${Object.keys(existingVars).join(", ")})`,
-      true
-    );
-    if (keepVars) {
-      return { ...existingVars };
-    }
-  }
-  return {};
-}
-function displayMissingRequirements(missingSecrets, missingVars) {
-  if (missingSecrets.length > 0) {
-    console.log(chalk45.yellow("\nAgent requires the following secrets:"));
-    for (const name of missingSecrets) {
-      console.log(chalk45.dim(`  ${name}`));
-    }
-    console.log();
-    console.log("Set secrets using the platform:");
-    for (const name of missingSecrets) {
-      console.log(chalk45.cyan(`  vm0 secret set ${name} <value>`));
-    }
-    console.log();
-  }
-  if (missingVars.length > 0) {
-    console.log(chalk45.yellow("\nAgent requires the following variables:"));
-    for (const name of missingVars) {
-      console.log(chalk45.dim(`  ${name}`));
-    }
-    console.log();
-  }
-}
-async function promptForMissingVars(missingVars, vars, deps) {
-  for (const name of missingVars) {
-    const value = await deps.promptText(
-      `Enter value for var ${chalk45.cyan(name)}`,
-      ""
-    );
-    if (value) {
-      vars[name] = value;
-    }
-  }
-}
-async function gatherConfiguration(params, deps = defaultPromptDeps) {
-  const { required, optionVars, existingSchedule } = params;
-  const existingSecretNames = existingSchedule?.secretNames ?? [];
-  const existingVars = existingSchedule?.vars ?? null;
-  const preserveExistingSecrets = await handleExistingSecrets(
-    existingSecretNames,
-    deps
-  );
-  const vars = await handleVars(optionVars, existingVars, deps);
-  const effectiveExistingSecrets = preserveExistingSecrets ? existingSecretNames : [];
-  const missingSecrets = required.secrets.filter(
-    (name) => !effectiveExistingSecrets.includes(name)
-  );
-  const missingVars = required.vars.filter(
-    (name) => !Object.keys(vars).includes(name)
-  );
-  if (missingSecrets.length === 0 && missingVars.length === 0) {
-    return { vars, preserveExistingSecrets };
-  }
-  if (!deps.isInteractive()) {
-    return { vars, preserveExistingSecrets };
-  }
-  displayMissingRequirements(missingSecrets, missingVars);
-  await promptForMissingVars(missingVars, vars, deps);
-  return { vars, preserveExistingSecrets };
-}
-
 // src/commands/schedule/setup.ts
 var FREQUENCY_CHOICES = [
   { title: "Daily", value: "daily", description: "Run every day" },
@@ -11273,26 +11266,6 @@ function parseDayOption(day, frequency) {
   }
   return void 0;
 }
-function expandEnvVars(value) {
-  return value.replace(/\$\{([^}]+)\}/g, (match, varName) => {
-    const envValue = process.env[varName];
-    if (envValue === void 0) {
-      console.warn(
-        chalk46.yellow(`  Warning: Environment variable ${varName} not set`)
-      );
-      return match;
-    }
-    return envValue;
-  });
-}
-function expandEnvVarsInObject(obj) {
-  if (!obj) return void 0;
-  const result = {};
-  for (const [key, value] of Object.entries(obj)) {
-    result[key] = expandEnvVars(value);
-  }
-  return result;
-}
 function formatInTimezone(isoDate, timezone) {
   const date = new Date(isoDate);
   const parts = new Intl.DateTimeFormat("en-CA", {
@@ -11321,9 +11294,6 @@ function parseFrequencyFromCron(cron) {
   }
   return null;
 }
-function collect(value, previous) {
-  return previous.concat([value]);
-}
 function getExistingDefaults(existingSchedule) {
   const defaults = {};
   if (existingSchedule?.cronExpression) {
@@ -11345,11 +11315,11 @@ async function gatherFrequency(optionFrequency, existingFrequency) {
   }
   if (!isInteractive()) {
     console.error(
-      chalk46.red("\u2717 --frequency is required (daily|weekly|monthly|once)")
+      chalk45.red("\u2717 --frequency is required (daily|weekly|monthly|once)")
     );
     process.exit(1);
   }
-  const defaultIndex = existingFrequency ? FREQUENCY_CHOICES.findIndex((c24) => c24.value === existingFrequency) : 0;
+  const defaultIndex = existingFrequency ? FREQUENCY_CHOICES.findIndex((c25) => c25.value === existingFrequency) : 0;
   frequency = await promptSelect(
     "Schedule frequency",
     FREQUENCY_CHOICES,
@@ -11365,7 +11335,7 @@ async function gatherDay(frequency, optionDay, existingDay) {
     const day2 = parseDayOption(optionDay, frequency);
     if (day2 === void 0) {
       console.error(
-        chalk46.red(
+        chalk45.red(
           `\u2717 Invalid day: ${optionDay}. Use mon-sun for weekly or 1-31 for monthly.`
         )
       );
@@ -11374,11 +11344,11 @@ async function gatherDay(frequency, optionDay, existingDay) {
     return day2;
   }
   if (!isInteractive()) {
-    console.error(chalk46.red("\u2717 --day is required for weekly/monthly"));
+    console.error(chalk45.red("\u2717 --day is required for weekly/monthly"));
     process.exit(1);
   }
   if (frequency === "weekly") {
-    const defaultDayIndex = existingDay !== void 0 ? DAY_OF_WEEK_CHOICES.findIndex((c24) => c24.value === existingDay) : 0;
+    const defaultDayIndex = existingDay !== void 0 ? DAY_OF_WEEK_CHOICES.findIndex((c25) => c25.value === existingDay) : 0;
     const day2 = await promptSelect(
       "Day of week",
       DAY_OF_WEEK_CHOICES,
@@ -11393,7 +11363,7 @@ async function gatherDay(frequency, optionDay, existingDay) {
   if (!dayStr) return null;
   const day = parseInt(dayStr, 10);
   if (isNaN(day) || day < 1 || day > 31) {
-    console.error(chalk46.red("\u2717 Day must be between 1 and 31"));
+    console.error(chalk45.red("\u2717 Day must be between 1 and 31"));
     process.exit(1);
   }
   return day;
@@ -11402,13 +11372,13 @@ async function gatherRecurringTime(optionTime, existingTime) {
   if (optionTime) {
     const validation = validateTimeFormat(optionTime);
     if (validation !== true) {
-      console.error(chalk46.red(`\u2717 Invalid time: ${validation}`));
+      console.error(chalk45.red(`\u2717 Invalid time: ${validation}`));
       process.exit(1);
     }
     return optionTime;
   }
   if (!isInteractive()) {
-    console.error(chalk46.red("\u2717 --time is required (HH:MM format)"));
+    console.error(chalk45.red("\u2717 --time is required (HH:MM format)"));
     process.exit(1);
   }
   return await promptText(
@@ -11421,7 +11391,7 @@ async function gatherOneTimeSchedule(optionDay, optionTime, existingTime) {
   if (optionDay && optionTime) {
     if (!validateDateFormat(optionDay)) {
       console.error(
-        chalk46.red(
+        chalk45.red(
           `\u2717 Invalid date format: ${optionDay}. Use YYYY-MM-DD format.`
         )
       );
@@ -11429,16 +11399,16 @@ async function gatherOneTimeSchedule(optionDay, optionTime, existingTime) {
     }
     if (!validateTimeFormat(optionTime)) {
       console.error(
-        chalk46.red(`\u2717 Invalid time format: ${optionTime}. Use HH:MM format.`)
+        chalk45.red(`\u2717 Invalid time format: ${optionTime}. Use HH:MM format.`)
       );
       process.exit(1);
     }
     return `${optionDay} ${optionTime}`;
   }
   if (!isInteractive()) {
-    console.error(chalk46.red("\u2717 One-time schedules require interactive mode"));
+    console.error(chalk45.red("\u2717 One-time schedules require interactive mode"));
     console.error(
-      chalk46.dim("  Or provide --day (YYYY-MM-DD) and --time (HH:MM) flags")
+      chalk45.dim("  Or provide --day (YYYY-MM-DD) and --time (HH:MM) flags")
     );
     process.exit(1);
   }
@@ -11469,7 +11439,7 @@ async function gatherTimezone(optionTimezone, existingTimezone) {
 async function gatherPromptText(optionPrompt, existingPrompt) {
   if (optionPrompt) return optionPrompt;
   if (!isInteractive()) {
-    console.error(chalk46.red("\u2717 --prompt is required"));
+    console.error(chalk45.red("\u2717 --prompt is required"));
     process.exit(1);
   }
   return await promptText(
@@ -11480,8 +11450,8 @@ async function gatherPromptText(optionPrompt, existingPrompt) {
 async function resolveAgent(agentName) {
   const compose = await getComposeByName(agentName);
   if (!compose) {
-    console.error(chalk46.red(`\u2717 Agent not found: ${agentName}`));
-    console.error(chalk46.dim("  Make sure the agent is composed first"));
+    console.error(chalk45.red(`\u2717 Agent not found: ${agentName}`));
+    console.error(chalk45.dim("  Make sure the agent is composed first"));
     process.exit(1);
   }
   return {
@@ -11524,11 +11494,9 @@ async function buildAndDeploy(params) {
       params.day
     );
   }
-  const expandedVars = expandEnvVarsInObject(params.vars);
-  const expandedSecrets = expandEnvVarsInObject(params.secrets);
   console.log(
     `
-Deploying schedule for agent ${chalk46.cyan(params.agentName)}...`
+Deploying schedule for agent ${chalk45.cyan(params.agentName)}...`
   );
   const deployResult = await deploySchedule({
     name: params.scheduleName,
@@ -11537,19 +11505,17 @@ Deploying schedule for agent ${chalk46.cyan(params.agentName)}...`
     atTime: atTimeISO,
     timezone: params.timezone,
     prompt: params.prompt,
-    vars: expandedVars,
-    secrets: expandedSecrets,
     artifactName: params.artifactName
   });
   return deployResult;
 }
 function handleSetupError(error) {
-  console.error(chalk46.red("\u2717 Failed to setup schedule"));
+  console.error(chalk45.red("\u2717 Failed to setup schedule"));
   if (error instanceof Error) {
     if (error.message.includes("Not authenticated")) {
-      console.error(chalk46.dim("  Run: vm0 auth login"));
+      console.error(chalk45.dim("  Run: vm0 auth login"));
     } else {
-      console.error(chalk46.dim(`  ${error.message}`));
+      console.error(chalk45.dim(`  ${error.message}`));
     }
   }
   process.exit(1);
@@ -11557,56 +11523,56 @@ function handleSetupError(error) {
 function displayDeployResult(agentName, deployResult) {
   if (deployResult.created) {
     console.log(
-      chalk46.green(`\u2713 Created schedule for agent ${chalk46.cyan(agentName)}`)
+      chalk45.green(`\u2713 Created schedule for agent ${chalk45.cyan(agentName)}`)
     );
   } else {
     console.log(
-      chalk46.green(`\u2713 Updated schedule for agent ${chalk46.cyan(agentName)}`)
+      chalk45.green(`\u2713 Updated schedule for agent ${chalk45.cyan(agentName)}`)
     );
   }
-  console.log(chalk46.dim(`  Timezone: ${deployResult.schedule.timezone}`));
+  console.log(chalk45.dim(`  Timezone: ${deployResult.schedule.timezone}`));
   if (deployResult.schedule.cronExpression) {
-    console.log(chalk46.dim(`  Cron: ${deployResult.schedule.cronExpression}`));
+    console.log(chalk45.dim(`  Cron: ${deployResult.schedule.cronExpression}`));
     if (deployResult.schedule.nextRunAt) {
       const nextRun = formatInTimezone(
         deployResult.schedule.nextRunAt,
         deployResult.schedule.timezone
       );
-      console.log(chalk46.dim(`  Next run: ${nextRun}`));
+      console.log(chalk45.dim(`  Next run: ${nextRun}`));
     }
   } else if (deployResult.schedule.atTime) {
     const atTimeFormatted = formatInTimezone(
       deployResult.schedule.atTime,
       deployResult.schedule.timezone
     );
-    console.log(chalk46.dim(`  At: ${atTimeFormatted}`));
+    console.log(chalk45.dim(`  At: ${atTimeFormatted}`));
   }
 }
 async function tryEnableSchedule(scheduleName, composeId, agentName) {
   try {
     await enableSchedule({ name: scheduleName, composeId });
     console.log(
-      chalk46.green(`\u2713 Enabled schedule for agent ${chalk46.cyan(agentName)}`)
+      chalk45.green(`\u2713 Enabled schedule for agent ${chalk45.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk46.yellow("\u26A0 Failed to enable schedule"));
+    console.error(chalk45.yellow("\u26A0 Failed to enable schedule"));
     if (error instanceof ApiRequestError) {
       if (error.code === "SCHEDULE_PAST") {
-        console.error(chalk46.dim("  Scheduled time has already passed"));
+        console.error(chalk45.dim("  Scheduled time has already passed"));
       } else {
-        console.error(chalk46.dim(`  ${error.message}`));
+        console.error(chalk45.dim(`  ${error.message}`));
       }
     } else if (error instanceof Error) {
-      console.error(chalk46.dim(`  ${error.message}`));
+      console.error(chalk45.dim(`  ${error.message}`));
     }
     console.log(
-      `  To enable manually: ${chalk46.cyan(`vm0 schedule enable ${agentName}`)}`
+      `  To enable manually: ${chalk45.cyan(`vm0 schedule enable ${agentName}`)}`
     );
   }
 }
 function showEnableHint(agentName) {
   console.log();
-  console.log(`  To enable: ${chalk46.cyan(`vm0 schedule enable ${agentName}`)}`);
+  console.log(`  To enable: ${chalk45.cyan(`vm0 schedule enable ${agentName}`)}`);
 }
 async function handleScheduleEnabling(params) {
   const { scheduleName, composeId, agentName, enableFlag, shouldPromptEnable } = params;
@@ -11627,13 +11593,12 @@ async function handleScheduleEnabling(params) {
     showEnableHint(agentName);
   }
 }
-var setupCommand = new Command45().name("setup").description("Create or edit a schedule for an agent").argument("<agent-name>", "Agent name to configure schedule for").option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--var <name=value>", "Variable (can be repeated)", collect, []).option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").action(async (agentName, options) => {
+var setupCommand = new Command45().name("setup").description("Create or edit a schedule for an agent").argument("<agent-name>", "Agent name to configure schedule for").option("-f, --frequency <type>", "Frequency: daily|weekly|monthly|once").option("-t, --time <HH:MM>", "Time to run (24-hour format)").option("-d, --day <day>", "Day of week (mon-sun) or day of month (1-31)").option("-z, --timezone <tz>", "IANA timezone").option("-p, --prompt <text>", "Prompt to run").option("--artifact-name <name>", "Artifact name", "artifact").option("-e, --enable", "Enable schedule immediately after creation").action(async (agentName, options) => {
   try {
-    const { composeId, scheduleName, composeContent } = await resolveAgent(agentName);
-    const requiredConfig = extractRequiredConfiguration(composeContent);
+    const { composeId, scheduleName } = await resolveAgent(agentName);
     const existingSchedule = await findExistingSchedule(agentName);
     console.log(
-      chalk46.dim(
+      chalk45.dim(
         existingSchedule ? `Editing existing schedule for agent ${agentName}` : `Creating new schedule for agent ${agentName}`
       )
     );
@@ -11643,12 +11608,12 @@ var setupCommand = new Command45().name("setup").description("Create or edit a s
       defaults.frequency
     );
     if (!frequency) {
-      console.log(chalk46.dim("Cancelled"));
+      console.log(chalk45.dim("Cancelled"));
       return;
     }
     const timing = await gatherTiming(frequency, options, defaults);
     if (!timing) {
-      console.log(chalk46.dim("Cancelled"));
+      console.log(chalk45.dim("Cancelled"));
       return;
     }
     const { day, time, atTime } = timing;
@@ -11657,7 +11622,7 @@ var setupCommand = new Command45().name("setup").description("Create or edit a s
       existingSchedule?.timezone
     );
     if (!timezone) {
-      console.log(chalk46.dim("Cancelled"));
+      console.log(chalk45.dim("Cancelled"));
       return;
     }
     const promptText_ = await gatherPromptText(
@@ -11665,16 +11630,9 @@ var setupCommand = new Command45().name("setup").description("Create or edit a s
       existingSchedule?.prompt
     );
     if (!promptText_) {
-      console.log(chalk46.dim("Cancelled"));
+      console.log(chalk45.dim("Cancelled"));
       return;
     }
-    const config = await gatherConfiguration({
-      required: requiredConfig,
-      optionSecrets: [],
-      // Secrets are no longer passed via CLI
-      optionVars: options.var || [],
-      existingSchedule
-    });
     const deployResult = await buildAndDeploy({
       scheduleName,
       composeId,
@@ -11685,9 +11643,6 @@ var setupCommand = new Command45().name("setup").description("Create or edit a s
       atTime,
       timezone,
       prompt: promptText_,
-      vars: Object.keys(config.vars).length > 0 ? config.vars : void 0,
-      secrets: void 0,
-      // Secrets managed via platform, not schedule
       artifactName: options.artifactName
     });
     displayDeployResult(agentName, deployResult);
@@ -11706,14 +11661,14 @@ var setupCommand = new Command45().name("setup").description("Create or edit a s
 
 // src/commands/schedule/list.ts
 import { Command as Command46 } from "commander";
-import chalk47 from "chalk";
+import chalk46 from "chalk";
 var listCommand5 = new Command46().name("list").alias("ls").description("List all schedules").action(async () => {
   try {
     const result = await listSchedules();
     if (result.schedules.length === 0) {
-      console.log(chalk47.dim("No schedules found"));
+      console.log(chalk46.dim("No schedules found"));
       console.log(
-        chalk47.dim("  Create one with: vm0 schedule setup <agent-name>")
+        chalk46.dim("  Create one with: vm0 schedule setup <agent-name>")
       );
       return;
     }
@@ -11733,10 +11688,10 @@ var listCommand5 = new Command46().name("list").alias("ls").description("List al
       "STATUS".padEnd(8),
       "NEXT RUN"
     ].join("  ");
-    console.log(chalk47.dim(header));
+    console.log(chalk46.dim(header));
     for (const schedule of result.schedules) {
       const trigger = schedule.cronExpression ? `${schedule.cronExpression} (${schedule.timezone})` : schedule.atTime || "-";
-      const status = schedule.enabled ? chalk47.green("enabled") : chalk47.yellow("disabled");
+      const status = schedule.enabled ? chalk46.green("enabled") : chalk46.yellow("disabled");
       const nextRun = schedule.enabled ? formatRelativeTime2(schedule.nextRunAt) : "-";
       const row = [
         schedule.composeName.padEnd(agentWidth),
@@ -11748,12 +11703,12 @@ var listCommand5 = new Command46().name("list").alias("ls").description("List al
       console.log(row);
     }
   } catch (error) {
-    console.error(chalk47.red("\u2717 Failed to list schedules"));
+    console.error(chalk46.red("\u2717 Failed to list schedules"));
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk47.dim("  Run: vm0 auth login"));
+        console.error(chalk46.dim("  Run: vm0 auth login"));
       } else {
-        console.error(chalk47.dim(`  ${error.message}`));
+        console.error(chalk46.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11762,44 +11717,44 @@ var listCommand5 = new Command46().name("list").alias("ls").description("List al
 
 // src/commands/schedule/status.ts
 import { Command as Command47 } from "commander";
-import chalk48 from "chalk";
+import chalk47 from "chalk";
 function formatDateTimeStyled(dateStr) {
-  if (!dateStr) return chalk48.dim("-");
+  if (!dateStr) return chalk47.dim("-");
   const formatted = formatDateTime(dateStr);
-  return formatted.replace(/\(([^)]+)\)$/, chalk48.dim("($1)"));
+  return formatted.replace(/\(([^)]+)\)$/, chalk47.dim("($1)"));
 }
 function formatTrigger(schedule) {
   if (schedule.cronExpression) {
     return schedule.cronExpression;
   }
   if (schedule.atTime) {
-    return `${schedule.atTime} ${chalk48.dim("(one-time)")}`;
+    return `${schedule.atTime} ${chalk47.dim("(one-time)")}`;
   }
-  return chalk48.dim("-");
+  return chalk47.dim("-");
 }
 function formatRunStatus2(status) {
   switch (status) {
     case "completed":
-      return chalk48.green(status);
+      return chalk47.green(status);
     case "failed":
     case "timeout":
-      return chalk48.red(status);
+      return chalk47.red(status);
     case "running":
-      return chalk48.blue(status);
+      return chalk47.blue(status);
     case "pending":
-      return chalk48.yellow(status);
+      return chalk47.yellow(status);
     default:
       return status;
   }
 }
 function printRunConfiguration(schedule) {
-  const statusText = schedule.enabled ? chalk48.green("enabled") : chalk48.yellow("disabled");
+  const statusText = schedule.enabled ? chalk47.green("enabled") : chalk47.yellow("disabled");
   console.log(`${"Status:".padEnd(16)}${statusText}`);
   console.log(
-    `${"Agent:".padEnd(16)}${schedule.composeName} ${chalk48.dim(`(${schedule.scopeSlug})`)}`
+    `${"Agent:".padEnd(16)}${schedule.composeName} ${chalk47.dim(`(${schedule.scopeSlug})`)}`
   );
   const promptPreview = schedule.prompt.length > 60 ? schedule.prompt.slice(0, 57) + "..." : schedule.prompt;
-  console.log(`${"Prompt:".padEnd(16)}${chalk48.dim(promptPreview)}`);
+  console.log(`${"Prompt:".padEnd(16)}${chalk47.dim(promptPreview)}`);
   if (schedule.vars && Object.keys(schedule.vars).length > 0) {
     console.log(
       `${"Variables:".padEnd(16)}${Object.keys(schedule.vars).join(", ")}`
@@ -11836,7 +11791,7 @@ async function printRecentRuns(name, composeId, limit) {
       console.log();
       console.log("Recent Runs:");
       console.log(
-        chalk48.dim("RUN ID                                STATUS     CREATED")
+        chalk47.dim("RUN ID                                STATUS     CREATED")
       );
       for (const run of runs) {
         const id = run.id;
@@ -11847,19 +11802,19 @@ async function printRecentRuns(name, composeId, limit) {
     }
   } catch {
     console.log();
-    console.log(chalk48.dim("Recent Runs: (unable to fetch)"));
+    console.log(chalk47.dim("Recent Runs: (unable to fetch)"));
   }
 }
 function handleStatusError(error, agentName) {
-  console.error(chalk48.red("\u2717 Failed to get schedule status"));
+  console.error(chalk47.red("\u2717 Failed to get schedule status"));
   if (error instanceof Error) {
     if (error.message.includes("Not authenticated")) {
-      console.error(chalk48.dim("  Run: vm0 auth login"));
+      console.error(chalk47.dim("  Run: vm0 auth login"));
     } else if (error.message.includes("not found") || error.message.includes("Not found") || error.message.includes("No schedule found")) {
-      console.error(chalk48.dim(`  No schedule found for agent "${agentName}"`));
-      console.error(chalk48.dim("  Run: vm0 schedule list"));
+      console.error(chalk47.dim(`  No schedule found for agent "${agentName}"`));
+      console.error(chalk47.dim("  Run: vm0 schedule list"));
     } else {
-      console.error(chalk48.dim(`  ${error.message}`));
+      console.error(chalk47.dim(`  ${error.message}`));
     }
   }
   process.exit(1);
@@ -11874,8 +11829,8 @@ var statusCommand6 = new Command47().name("status").description("Show detailed s
     const { name, composeId } = resolved;
     const schedule = await getScheduleByName({ name, composeId });
     console.log();
-    console.log(`Schedule for agent: ${chalk48.cyan(agentName)}`);
-    console.log(chalk48.dim("\u2501".repeat(50)));
+    console.log(`Schedule for agent: ${chalk47.cyan(agentName)}`);
+    console.log(chalk47.dim("\u2501".repeat(50)));
     printRunConfiguration(schedule);
     printTimeSchedule(schedule);
     const parsed = parseInt(options.limit, 10);
@@ -11892,23 +11847,23 @@ var statusCommand6 = new Command47().name("status").description("Show detailed s
 
 // src/commands/schedule/delete.ts
 import { Command as Command48 } from "commander";
-import chalk49 from "chalk";
+import chalk48 from "chalk";
 var deleteCommand = new Command48().name("delete").alias("rm").description("Delete a schedule").argument("<agent-name>", "Agent name").option("-f, --force", "Skip confirmation prompt").action(async (agentName, options) => {
   try {
     const resolved = await resolveScheduleByAgent(agentName);
     if (!options.force) {
       if (!isInteractive()) {
         console.error(
-          chalk49.red("\u2717 --force required in non-interactive mode")
+          chalk48.red("\u2717 --force required in non-interactive mode")
         );
         process.exit(1);
       }
       const confirmed = await promptConfirm(
-        `Delete schedule for agent ${chalk49.cyan(agentName)}?`,
+        `Delete schedule for agent ${chalk48.cyan(agentName)}?`,
         false
       );
       if (!confirmed) {
-        console.log(chalk49.dim("Cancelled"));
+        console.log(chalk48.dim("Cancelled"));
         return;
       }
     }
@@ -11917,20 +11872,20 @@ var deleteCommand = new Command48().name("delete").alias("rm").description("Dele
       composeId: resolved.composeId
     });
     console.log(
-      chalk49.green(`\u2713 Deleted schedule for agent ${chalk49.cyan(agentName)}`)
+      chalk48.green(`\u2713 Deleted schedule for agent ${chalk48.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk49.red("\u2717 Failed to delete schedule"));
+    console.error(chalk48.red("\u2717 Failed to delete schedule"));
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk49.dim("  Run: vm0 auth login"));
+        console.error(chalk48.dim("  Run: vm0 auth login"));
       } else if (error.message.toLowerCase().includes("not found") || error.message.includes("No schedule found")) {
         console.error(
-          chalk49.dim(`  No schedule found for agent "${agentName}"`)
+          chalk48.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk49.dim("  Run: vm0 schedule list"));
+        console.error(chalk48.dim("  Run: vm0 schedule list"));
       } else {
-        console.error(chalk49.dim(`  ${error.message}`));
+        console.error(chalk48.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11939,7 +11894,7 @@ var deleteCommand = new Command48().name("delete").alias("rm").description("Dele
 
 // src/commands/schedule/enable.ts
 import { Command as Command49 } from "commander";
-import chalk50 from "chalk";
+import chalk49 from "chalk";
 var enableCommand = new Command49().name("enable").description("Enable a schedule").argument("<agent-name>", "Agent name").action(async (agentName) => {
   try {
     const resolved = await resolveScheduleByAgent(agentName);
@@ -11948,34 +11903,34 @@ var enableCommand = new Command49().name("enable").description("Enable a schedul
       composeId: resolved.composeId
     });
     console.log(
-      chalk50.green(`\u2713 Enabled schedule for agent ${chalk50.cyan(agentName)}`)
+      chalk49.green(`\u2713 Enabled schedule for agent ${chalk49.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk50.red("\u2717 Failed to enable schedule"));
+    console.error(chalk49.red("\u2717 Failed to enable schedule"));
     if (error instanceof ApiRequestError) {
       if (error.code === "SCHEDULE_PAST") {
-        console.error(chalk50.dim("  Scheduled time has already passed"));
-        console.error(chalk50.dim(`  Run: vm0 schedule setup ${agentName}`));
+        console.error(chalk49.dim("  Scheduled time has already passed"));
+        console.error(chalk49.dim(`  Run: vm0 schedule setup ${agentName}`));
       } else if (error.code === "NOT_FOUND") {
         console.error(
-          chalk50.dim(`  No schedule found for agent "${agentName}"`)
+          chalk49.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk50.dim("  Run: vm0 schedule list"));
+        console.error(chalk49.dim("  Run: vm0 schedule list"));
       } else if (error.code === "UNAUTHORIZED") {
-        console.error(chalk50.dim("  Run: vm0 auth login"));
+        console.error(chalk49.dim("  Run: vm0 auth login"));
       } else {
-        console.error(chalk50.dim(`  ${error.message}`));
+        console.error(chalk49.dim(`  ${error.message}`));
       }
     } else if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk50.dim("  Run: vm0 auth login"));
+        console.error(chalk49.dim("  Run: vm0 auth login"));
       } else if (error.message.includes("No schedule found")) {
         console.error(
-          chalk50.dim(`  No schedule found for agent "${agentName}"`)
+          chalk49.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk50.dim("  Run: vm0 schedule list"));
+        console.error(chalk49.dim("  Run: vm0 schedule list"));
       } else {
-        console.error(chalk50.dim(`  ${error.message}`));
+        console.error(chalk49.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -11984,7 +11939,7 @@ var enableCommand = new Command49().name("enable").description("Enable a schedul
 
 // src/commands/schedule/disable.ts
 import { Command as Command50 } from "commander";
-import chalk51 from "chalk";
+import chalk50 from "chalk";
 var disableCommand = new Command50().name("disable").description("Disable a schedule").argument("<agent-name>", "Agent name").action(async (agentName) => {
   try {
     const resolved = await resolveScheduleByAgent(agentName);
@@ -11993,20 +11948,20 @@ var disableCommand = new Command50().name("disable").description("Disable a sche
       composeId: resolved.composeId
     });
     console.log(
-      chalk51.green(`\u2713 Disabled schedule for agent ${chalk51.cyan(agentName)}`)
+      chalk50.green(`\u2713 Disabled schedule for agent ${chalk50.cyan(agentName)}`)
     );
   } catch (error) {
-    console.error(chalk51.red("\u2717 Failed to disable schedule"));
+    console.error(chalk50.red("\u2717 Failed to disable schedule"));
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk51.dim("  Run: vm0 auth login"));
+        console.error(chalk50.dim("  Run: vm0 auth login"));
       } else if (error.message.toLowerCase().includes("not found") || error.message.includes("No schedule found")) {
         console.error(
-          chalk51.dim(`  No schedule found for agent "${agentName}"`)
+          chalk50.dim(`  No schedule found for agent "${agentName}"`)
         );
-        console.error(chalk51.dim("  Run: vm0 schedule list"));
+        console.error(chalk50.dim("  Run: vm0 schedule list"));
       } else {
-        console.error(chalk51.dim(`  ${error.message}`));
+        console.error(chalk50.dim(`  ${error.message}`));
       }
     }
     process.exit(1);
@@ -12018,7 +11973,7 @@ var scheduleCommand = new Command51().name("schedule").description("Manage agent
 
 // src/commands/usage/index.ts
 import { Command as Command52 } from "commander";
-import chalk52 from "chalk";
+import chalk51 from "chalk";
 
 // src/lib/utils/duration-formatter.ts
 function formatDuration(ms) {
@@ -12105,7 +12060,7 @@ var usageCommand = new Command52().name("usage").description("View usage statist
         endDate = new Date(untilMs);
       } catch {
         console.error(
-          chalk52.red(
+          chalk51.red(
             "\u2717 Invalid --until format. Use ISO (2026-01-01) or relative (7d, 30d)"
           )
         );
@@ -12120,7 +12075,7 @@ var usageCommand = new Command52().name("usage").description("View usage statist
         startDate = new Date(sinceMs);
       } catch {
         console.error(
-          chalk52.red(
+          chalk51.red(
             "\u2717 Invalid --since format. Use ISO (2026-01-01) or relative (7d, 30d)"
           )
         );
@@ -12130,13 +12085,13 @@ var usageCommand = new Command52().name("usage").description("View usage statist
       startDate = new Date(endDate.getTime() - DEFAULT_RANGE_MS);
     }
     if (startDate >= endDate) {
-      console.error(chalk52.red("\u2717 --since must be before --until"));
+      console.error(chalk51.red("\u2717 --since must be before --until"));
       process.exit(1);
     }
     const rangeMs = endDate.getTime() - startDate.getTime();
     if (rangeMs > MAX_RANGE_MS) {
       console.error(
-        chalk52.red(
+        chalk51.red(
           "\u2717 Time range exceeds maximum of 30 days. Use --until to specify an end date"
         )
       );
@@ -12153,19 +12108,19 @@ var usageCommand = new Command52().name("usage").description("View usage statist
     );
     console.log();
     console.log(
-      chalk52.bold(
+      chalk51.bold(
         `Usage Summary (${formatDateRange(usage.period.start, usage.period.end)})`
       )
     );
     console.log();
-    console.log(chalk52.dim("DATE        RUNS    RUN TIME"));
+    console.log(chalk51.dim("DATE        RUNS    RUN TIME"));
     for (const day of filledDaily) {
       const dateDisplay = formatDateDisplay(day.date).padEnd(10);
       const runsDisplay = String(day.run_count).padStart(6);
       const timeDisplay = formatDuration(day.run_time_ms);
       console.log(`${dateDisplay}${runsDisplay}    ${timeDisplay}`);
     }
-    console.log(chalk52.dim("\u2500".repeat(29)));
+    console.log(chalk51.dim("\u2500".repeat(29)));
     const totalRunsDisplay = String(usage.summary.total_runs).padStart(6);
     const totalTimeDisplay = formatDuration(usage.summary.total_run_time_ms);
     console.log(
@@ -12175,13 +12130,13 @@ var usageCommand = new Command52().name("usage").description("View usage statist
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk52.red("\u2717 Not authenticated"));
-        console.error(chalk52.dim("  Run: vm0 auth login"));
+        console.error(chalk51.red("\u2717 Not authenticated"));
+        console.error(chalk51.dim("  Run: vm0 auth login"));
       } else {
-        console.error(chalk52.red(`\u2717 ${error.message}`));
+        console.error(chalk51.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk52.red("\u2717 An unexpected error occurred"));
+      console.error(chalk51.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -12192,40 +12147,40 @@ import { Command as Command56 } from "commander";
 
 // src/commands/secret/list.ts
 import { Command as Command53 } from "commander";
-import chalk53 from "chalk";
+import chalk52 from "chalk";
 var listCommand6 = new Command53().name("list").alias("ls").description("List all secrets").action(async () => {
   try {
     const result = await listSecrets();
     if (result.secrets.length === 0) {
-      console.log(chalk53.dim("No secrets found"));
+      console.log(chalk52.dim("No secrets found"));
       console.log();
       console.log("To add a secret:");
-      console.log(chalk53.cyan("  vm0 secret set MY_API_KEY --body <value>"));
+      console.log(chalk52.cyan("  vm0 secret set MY_API_KEY --body <value>"));
       return;
     }
-    console.log(chalk53.bold("Secrets:"));
+    console.log(chalk52.bold("Secrets:"));
     console.log();
     for (const secret of result.secrets) {
-      const typeIndicator = secret.type === "model-provider" ? chalk53.dim(" [model-provider]") : "";
-      console.log(`  ${chalk53.cyan(secret.name)}${typeIndicator}`);
+      const typeIndicator = secret.type === "model-provider" ? chalk52.dim(" [model-provider]") : "";
+      console.log(`  ${chalk52.cyan(secret.name)}${typeIndicator}`);
       if (secret.description) {
-        console.log(`    ${chalk53.dim(secret.description)}`);
+        console.log(`    ${chalk52.dim(secret.description)}`);
       }
       console.log(
-        `    ${chalk53.dim(`Updated: ${new Date(secret.updatedAt).toLocaleString()}`)}`
+        `    ${chalk52.dim(`Updated: ${new Date(secret.updatedAt).toLocaleString()}`)}`
       );
       console.log();
     }
-    console.log(chalk53.dim(`Total: ${result.secrets.length} secret(s)`));
+    console.log(chalk52.dim(`Total: ${result.secrets.length} secret(s)`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk53.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk52.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk53.red(`\u2717 ${error.message}`));
+        console.error(chalk52.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk53.red("\u2717 An unexpected error occurred"));
+      console.error(chalk52.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -12233,7 +12188,7 @@ var listCommand6 = new Command53().name("list").alias("ls").description("List al
 
 // src/commands/secret/set.ts
 import { Command as Command54 } from "commander";
-import chalk54 from "chalk";
+import chalk53 from "chalk";
 var setCommand2 = new Command54().name("set").description("Create or update a secret").argument("<name>", "Secret name (uppercase, e.g., MY_API_KEY)").option(
   "-b, --body <value>",
   "Secret value (required in non-interactive mode)"
@@ -12251,12 +12206,12 @@ var setCommand2 = new Command54().name("set").description("Create or update a se
         value = prompted;
       } else {
         console.error(
-          chalk54.red("\u2717 --body is required in non-interactive mode")
+          chalk53.red("\u2717 --body is required in non-interactive mode")
         );
         console.log();
         console.log("Usage:");
         console.log(
-          chalk54.cyan(`  vm0 secret set ${name} --body "your-secret-value"`)
+          chalk53.cyan(`  vm0 secret set ${name} --body "your-secret-value"`)
         );
         process.exit(1);
       }
@@ -12265,29 +12220,29 @@ var setCommand2 = new Command54().name("set").description("Create or update a se
         value,
         description: options.description
       });
-      console.log(chalk54.green(`\u2713 Secret "${secret.name}" saved`));
+      console.log(chalk53.green(`\u2713 Secret "${secret.name}" saved`));
       console.log();
       console.log("Use in vm0.yaml:");
-      console.log(chalk54.cyan(`  environment:`));
-      console.log(chalk54.cyan(`    ${name}: \${{ secrets.${name} }}`));
+      console.log(chalk53.cyan(`  environment:`));
+      console.log(chalk53.cyan(`    ${name}: \${{ secrets.${name} }}`));
     } catch (error) {
       if (error instanceof Error) {
         if (error.message.includes("Not authenticated")) {
           console.error(
-            chalk54.red("\u2717 Not authenticated. Run: vm0 auth login")
+            chalk53.red("\u2717 Not authenticated. Run: vm0 auth login")
           );
         } else if (error.message.includes("must contain only uppercase")) {
-          console.error(chalk54.red(`\u2717 ${error.message}`));
+          console.error(chalk53.red(`\u2717 ${error.message}`));
           console.log();
           console.log("Examples of valid secret names:");
-          console.log(chalk54.dim("  MY_API_KEY"));
-          console.log(chalk54.dim("  GITHUB_TOKEN"));
-          console.log(chalk54.dim("  AWS_ACCESS_KEY_ID"));
+          console.log(chalk53.dim("  MY_API_KEY"));
+          console.log(chalk53.dim("  GITHUB_TOKEN"));
+          console.log(chalk53.dim("  AWS_ACCESS_KEY_ID"));
         } else {
-          console.error(chalk54.red(`\u2717 ${error.message}`));
+          console.error(chalk53.red(`\u2717 ${error.message}`));
         }
       } else {
-        console.error(chalk54.red("\u2717 An unexpected error occurred"));
+        console.error(chalk53.red("\u2717 An unexpected error occurred"));
       }
       process.exit(1);
     }
@@ -12296,19 +12251,19 @@ var setCommand2 = new Command54().name("set").description("Create or update a se
 
 // src/commands/secret/delete.ts
 import { Command as Command55 } from "commander";
-import chalk55 from "chalk";
+import chalk54 from "chalk";
 var deleteCommand2 = new Command55().name("delete").description("Delete a secret").argument("<name>", "Secret name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
   try {
     try {
       await getSecret(name);
     } catch {
-      console.error(chalk55.red(`\u2717 Secret "${name}" not found`));
+      console.error(chalk54.red(`\u2717 Secret "${name}" not found`));
       process.exit(1);
     }
     if (!options.yes) {
       if (!isInteractive()) {
         console.error(
-          chalk55.red("\u2717 --yes flag is required in non-interactive mode")
+          chalk54.red("\u2717 --yes flag is required in non-interactive mode")
         );
         process.exit(1);
       }
@@ -12317,21 +12272,21 @@ var deleteCommand2 = new Command55().name("delete").description("Delete a secret
         false
       );
       if (!confirmed) {
-        console.log(chalk55.dim("Cancelled"));
+        console.log(chalk54.dim("Cancelled"));
         return;
       }
     }
     await deleteSecret(name);
-    console.log(chalk55.green(`\u2713 Secret "${name}" deleted`));
+    console.log(chalk54.green(`\u2713 Secret "${name}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk55.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk54.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk55.red(`\u2717 ${error.message}`));
+        console.error(chalk54.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk55.red("\u2717 An unexpected error occurred"));
+      console.error(chalk54.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -12345,7 +12300,7 @@ import { Command as Command60 } from "commander";
 
 // src/commands/variable/list.ts
 import { Command as Command57 } from "commander";
-import chalk56 from "chalk";
+import chalk55 from "chalk";
 function truncateValue(value, maxLength = 60) {
   if (value.length <= maxLength) {
     return value;
@@ -12356,35 +12311,35 @@ var listCommand7 = new Command57().name("list").alias("ls").description("List al
   try {
     const result = await listVariables();
     if (result.variables.length === 0) {
-      console.log(chalk56.dim("No variables found"));
+      console.log(chalk55.dim("No variables found"));
       console.log();
       console.log("To add a variable:");
-      console.log(chalk56.cyan("  vm0 variable set MY_VAR <value>"));
+      console.log(chalk55.cyan("  vm0 variable set MY_VAR <value>"));
       return;
     }
-    console.log(chalk56.bold("Variables:"));
+    console.log(chalk55.bold("Variables:"));
     console.log();
     for (const variable of result.variables) {
       const displayValue = truncateValue(variable.value);
-      console.log(`  ${chalk56.cyan(variable.name)} = ${displayValue}`);
+      console.log(`  ${chalk55.cyan(variable.name)} = ${displayValue}`);
       if (variable.description) {
-        console.log(`    ${chalk56.dim(variable.description)}`);
+        console.log(`    ${chalk55.dim(variable.description)}`);
       }
       console.log(
-        `    ${chalk56.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
+        `    ${chalk55.dim(`Updated: ${new Date(variable.updatedAt).toLocaleString()}`)}`
       );
       console.log();
     }
-    console.log(chalk56.dim(`Total: ${result.variables.length} variable(s)`));
+    console.log(chalk55.dim(`Total: ${result.variables.length} variable(s)`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk56.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk55.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk56.red(`\u2717 ${error.message}`));
+        console.error(chalk55.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk56.red("\u2717 An unexpected error occurred"));
+      console.error(chalk55.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -12392,7 +12347,7 @@ var listCommand7 = new Command57().name("list").alias("ls").description("List al
 
 // src/commands/variable/set.ts
 import { Command as Command58 } from "commander";
-import chalk57 from "chalk";
+import chalk56 from "chalk";
 var setCommand3 = new Command58().name("set").description("Create or update a variable").argument("<name>", "Variable name (uppercase, e.g., MY_VAR)").argument("<value>", "Variable value").option("-d, --description <description>", "Optional description").action(
   async (name, value, options) => {
     try {
@@ -12401,29 +12356,29 @@ var setCommand3 = new Command58().name("set").description("Create or update a va
         value,
         description: options.description
       });
-      console.log(chalk57.green(`\u2713 Variable "${variable.name}" saved`));
+      console.log(chalk56.green(`\u2713 Variable "${variable.name}" saved`));
       console.log();
       console.log("Use in vm0.yaml:");
-      console.log(chalk57.cyan(`  environment:`));
-      console.log(chalk57.cyan(`    ${name}: \${{ vars.${name} }}`));
+      console.log(chalk56.cyan(`  environment:`));
+      console.log(chalk56.cyan(`    ${name}: \${{ vars.${name} }}`));
     } catch (error) {
       if (error instanceof Error) {
         if (error.message.includes("Not authenticated")) {
           console.error(
-            chalk57.red("\u2717 Not authenticated. Run: vm0 auth login")
+            chalk56.red("\u2717 Not authenticated. Run: vm0 auth login")
           );
         } else if (error.message.includes("must contain only uppercase")) {
-          console.error(chalk57.red(`\u2717 ${error.message}`));
+          console.error(chalk56.red(`\u2717 ${error.message}`));
           console.log();
           console.log("Examples of valid variable names:");
-          console.log(chalk57.dim("  MY_VAR"));
-          console.log(chalk57.dim("  API_URL"));
-          console.log(chalk57.dim("  DEBUG_MODE"));
+          console.log(chalk56.dim("  MY_VAR"));
+          console.log(chalk56.dim("  API_URL"));
+          console.log(chalk56.dim("  DEBUG_MODE"));
         } else {
-          console.error(chalk57.red(`\u2717 ${error.message}`));
+          console.error(chalk56.red(`\u2717 ${error.message}`));
         }
       } else {
-        console.error(chalk57.red("\u2717 An unexpected error occurred"));
+        console.error(chalk56.red("\u2717 An unexpected error occurred"));
       }
       process.exit(1);
     }
@@ -12432,14 +12387,14 @@ var setCommand3 = new Command58().name("set").description("Create or update a va
 
 // src/commands/variable/delete.ts
 import { Command as Command59 } from "commander";
-import chalk58 from "chalk";
+import chalk57 from "chalk";
 var deleteCommand3 = new Command59().name("delete").description("Delete a variable").argument("<name>", "Variable name to delete").option("-y, --yes", "Skip confirmation prompt").action(async (name, options) => {
   try {
     try {
       await getVariable(name);
     } catch (error) {
       if (error instanceof Error && error.message.toLowerCase().includes("not found")) {
-        console.error(chalk58.red(`\u2717 Variable "${name}" not found`));
+        console.error(chalk57.red(`\u2717 Variable "${name}" not found`));
         process.exit(1);
       }
       throw error;
@@ -12447,7 +12402,7 @@ var deleteCommand3 = new Command59().name("delete").description("Delete a variab
     if (!options.yes) {
       if (!isInteractive()) {
         console.error(
-          chalk58.red("\u2717 --yes flag is required in non-interactive mode")
+          chalk57.red("\u2717 --yes flag is required in non-interactive mode")
         );
         process.exit(1);
       }
@@ -12456,21 +12411,21 @@ var deleteCommand3 = new Command59().name("delete").description("Delete a variab
         false
       );
       if (!confirmed) {
-        console.log(chalk58.dim("Cancelled"));
+        console.log(chalk57.dim("Cancelled"));
         return;
       }
     }
     await deleteVariable(name);
-    console.log(chalk58.green(`\u2713 Variable "${name}" deleted`));
+    console.log(chalk57.green(`\u2713 Variable "${name}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk58.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk57.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk58.red(`\u2717 ${error.message}`));
+        console.error(chalk57.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk58.red("\u2717 An unexpected error occurred"));
+      console.error(chalk57.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -12484,15 +12439,15 @@ import { Command as Command65 } from "commander";
 
 // src/commands/model-provider/list.ts
 import { Command as Command61 } from "commander";
-import chalk59 from "chalk";
+import chalk58 from "chalk";
 var listCommand8 = new Command61().name("list").alias("ls").description("List all model providers").action(async () => {
   try {
     const result = await listModelProviders();
     if (result.modelProviders.length === 0) {
-      console.log(chalk59.dim("No model providers configured"));
+      console.log(chalk58.dim("No model providers configured"));
       console.log();
       console.log("To add a model provider:");
-      console.log(chalk59.cyan("  vm0 model-provider setup"));
+      console.log(chalk58.cyan("  vm0 model-provider setup"));
       return;
     }
     const byFramework = result.modelProviders.reduce(
@@ -12506,16 +12461,16 @@ var listCommand8 = new Command61().name("list").alias("ls").description("List al
       },
       {}
     );
-    console.log(chalk59.bold("Model Providers:"));
+    console.log(chalk58.bold("Model Providers:"));
     console.log();
     for (const [framework, providers] of Object.entries(byFramework)) {
-      console.log(`  ${chalk59.cyan(framework)}:`);
+      console.log(`  ${chalk58.cyan(framework)}:`);
       for (const provider of providers) {
-        const defaultTag = provider.isDefault ? chalk59.green(" (default)") : "";
-        const modelTag = provider.selectedModel ? chalk59.dim(` [${provider.selectedModel}]`) : "";
+        const defaultTag = provider.isDefault ? chalk58.green(" (default)") : "";
+        const modelTag = provider.selectedModel ? chalk58.dim(` [${provider.selectedModel}]`) : "";
         console.log(`    ${provider.type}${defaultTag}${modelTag}`);
         console.log(
-          chalk59.dim(
+          chalk58.dim(
             `      Updated: ${new Date(provider.updatedAt).toLocaleString()}`
           )
         );
@@ -12523,17 +12478,17 @@ var listCommand8 = new Command61().name("list").alias("ls").description("List al
       console.log();
     }
     console.log(
-      chalk59.dim(`Total: ${result.modelProviders.length} provider(s)`)
+      chalk58.dim(`Total: ${result.modelProviders.length} provider(s)`)
     );
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("Not authenticated")) {
-        console.error(chalk59.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk58.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk59.red(`\u2717 ${error.message}`));
+        console.error(chalk58.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk59.red("\u2717 An unexpected error occurred"));
+      console.error(chalk58.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -12541,15 +12496,15 @@ var listCommand8 = new Command61().name("list").alias("ls").description("List al
 
 // src/commands/model-provider/setup.ts
 import { Command as Command62 } from "commander";
-import chalk60 from "chalk";
+import chalk59 from "chalk";
 import prompts2 from "prompts";
 function validateProviderType(typeStr) {
   if (!Object.keys(MODEL_PROVIDER_TYPES).includes(typeStr)) {
-    console.error(chalk60.red(`\u2717 Invalid type "${typeStr}"`));
+    console.error(chalk59.red(`\u2717 Invalid type "${typeStr}"`));
     console.log();
     console.log("Valid types:");
     for (const [t, config] of Object.entries(MODEL_PROVIDER_TYPES)) {
-      console.log(`  ${chalk60.cyan(t)} - ${config.label}`);
+      console.log(`  ${chalk59.cyan(t)} - ${config.label}`);
     }
     process.exit(1);
   }
@@ -12561,11 +12516,11 @@ function validateModel(type, modelStr) {
     return modelStr;
   }
   if (models && !models.includes(modelStr)) {
-    console.error(chalk60.red(`\u2717 Invalid model "${modelStr}"`));
+    console.error(chalk59.red(`\u2717 Invalid model "${modelStr}"`));
     console.log();
     console.log("Valid models:");
     for (const m of models) {
-      console.log(`  ${chalk60.cyan(m)}`);
+      console.log(`  ${chalk59.cyan(m)}`);
     }
     process.exit(1);
   }
@@ -12574,12 +12529,12 @@ function validateModel(type, modelStr) {
 function validateAuthMethod(type, authMethodStr) {
   const authMethods = getAuthMethodsForType(type);
   if (!authMethods || !(authMethodStr in authMethods)) {
-    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethodStr}"`));
+    console.error(chalk59.red(`\u2717 Invalid auth method "${authMethodStr}"`));
     console.log();
     console.log("Valid auth methods:");
     if (authMethods) {
       for (const [method, config] of Object.entries(authMethods)) {
-        console.log(`  ${chalk60.cyan(method)} - ${config.label}`);
+        console.log(`  ${chalk59.cyan(method)} - ${config.label}`);
       }
     }
     process.exit(1);
@@ -12589,7 +12544,7 @@ function validateAuthMethod(type, authMethodStr) {
 function parseSecrets(type, authMethod, secretArgs) {
   const secretsConfig = getSecretsForAuthMethod(type, authMethod);
   if (!secretsConfig) {
-    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethod}"`));
+    console.error(chalk59.red(`\u2717 Invalid auth method "${authMethod}"`));
     process.exit(1);
   }
   const secretNames = Object.keys(secretsConfig);
@@ -12597,19 +12552,19 @@ function parseSecrets(type, authMethod, secretArgs) {
   if (secretArgs.length === 1 && firstArg && !firstArg.includes("=")) {
     if (secretNames.length !== 1) {
       console.error(
-        chalk60.red("\u2717 Must use KEY=VALUE format for multi-secret auth methods")
+        chalk59.red("\u2717 Must use KEY=VALUE format for multi-secret auth methods")
       );
       console.log();
       console.log("Required secrets:");
       for (const [name, fieldConfig] of Object.entries(secretsConfig)) {
         const requiredNote = fieldConfig.required ? " (required)" : "";
-        console.log(`  ${chalk60.cyan(name)}${requiredNote}`);
+        console.log(`  ${chalk59.cyan(name)}${requiredNote}`);
       }
       process.exit(1);
     }
     const firstSecretName = secretNames[0];
     if (!firstSecretName) {
-      console.error(chalk60.red("\u2717 No secrets defined for this auth method"));
+      console.error(chalk59.red("\u2717 No secrets defined for this auth method"));
       process.exit(1);
     }
     return { [firstSecretName]: firstArg };
@@ -12618,7 +12573,7 @@ function parseSecrets(type, authMethod, secretArgs) {
   for (const arg of secretArgs) {
     const eqIndex = arg.indexOf("=");
     if (eqIndex === -1) {
-      console.error(chalk60.red(`\u2717 Invalid secret format "${arg}"`));
+      console.error(chalk59.red(`\u2717 Invalid secret format "${arg}"`));
       console.log();
       console.log("Use KEY=VALUE format (e.g., AWS_REGION=us-east-1)");
       process.exit(1);
@@ -12632,17 +12587,17 @@ function parseSecrets(type, authMethod, secretArgs) {
 function validateSecrets(type, authMethod, secrets) {
   const secretsConfig = getSecretsForAuthMethod(type, authMethod);
   if (!secretsConfig) {
-    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethod}"`));
+    console.error(chalk59.red(`\u2717 Invalid auth method "${authMethod}"`));
     process.exit(1);
   }
   for (const [name, fieldConfig] of Object.entries(secretsConfig)) {
     if (fieldConfig.required && !secrets[name]) {
-      console.error(chalk60.red(`\u2717 Missing required secret: ${name}`));
+      console.error(chalk59.red(`\u2717 Missing required secret: ${name}`));
       console.log();
       console.log("Required secrets:");
       for (const [n, fc] of Object.entries(secretsConfig)) {
         if (fc.required) {
-          console.log(`  ${chalk60.cyan(n)} - ${fc.label}`);
+          console.log(`  ${chalk59.cyan(n)} - ${fc.label}`);
         }
       }
       process.exit(1);
@@ -12650,12 +12605,12 @@ function validateSecrets(type, authMethod, secrets) {
   }
   for (const name of Object.keys(secrets)) {
     if (!(name in secretsConfig)) {
-      console.error(chalk60.red(`\u2717 Unknown secret: ${name}`));
+      console.error(chalk59.red(`\u2717 Unknown secret: ${name}`));
       console.log();
       console.log("Valid secrets:");
       for (const [n, fc] of Object.entries(secretsConfig)) {
         const requiredNote = fc.required ? " (required)" : " (optional)";
-        console.log(`  ${chalk60.cyan(n)}${requiredNote}`);
+        console.log(`  ${chalk59.cyan(n)}${requiredNote}`);
       }
       process.exit(1);
     }
@@ -12678,7 +12633,7 @@ function handleNonInteractiveMode(options) {
       const defaultAuthMethod = getDefaultAuthMethod(type);
       const authMethods = getAuthMethodsForType(type);
       if (!defaultAuthMethod || !authMethods) {
-        console.error(chalk60.red(`\u2717 Provider "${type}" requires --auth-method`));
+        console.error(chalk59.red(`\u2717 Provider "${type}" requires --auth-method`));
         process.exit(1);
       }
       const authMethodNames = Object.keys(authMethods);
@@ -12686,7 +12641,7 @@ function handleNonInteractiveMode(options) {
         authMethod = authMethodNames[0];
       } else {
         console.error(
-          chalk60.red(
+          chalk59.red(
             `\u2717 --auth-method is required for "${type}" (multiple auth methods available)`
           )
         );
@@ -12695,13 +12650,13 @@ function handleNonInteractiveMode(options) {
         for (const [method, config] of Object.entries(authMethods)) {
           const defaultNote = method === defaultAuthMethod ? " (default)" : "";
           console.log(
-            `  ${chalk60.cyan(method)} - ${config.label}${defaultNote}`
+            `  ${chalk59.cyan(method)} - ${config.label}${defaultNote}`
           );
         }
         console.log();
         console.log("Example:");
         console.log(
-          chalk60.cyan(
+          chalk59.cyan(
             `  vm0 model-provider setup --type ${type} --auth-method ${authMethodNames[0]} --secret KEY=VALUE`
           )
         );
@@ -12721,7 +12676,7 @@ function handleNonInteractiveMode(options) {
   const secretArgs = options.secret;
   const firstArg = secretArgs[0];
   if (!firstArg) {
-    console.error(chalk60.red("\u2717 Secret is required"));
+    console.error(chalk59.red("\u2717 Secret is required"));
     process.exit(1);
   }
   let secret;
@@ -12770,7 +12725,7 @@ async function promptForModelSelection(type) {
   if (selected === "__custom__") {
     const placeholder = getCustomModelPlaceholder(type);
     if (placeholder) {
-      console.log(chalk60.dim(`Example: ${placeholder}`));
+      console.log(chalk59.dim(`Example: ${placeholder}`));
     }
     const customResponse = await prompts2(
       {
@@ -12815,13 +12770,13 @@ function isSensitiveSecret(name) {
 async function promptForSecrets(type, authMethod) {
   const secretsConfig = getSecretsForAuthMethod(type, authMethod);
   if (!secretsConfig) {
-    console.error(chalk60.red(`\u2717 Invalid auth method "${authMethod}"`));
+    console.error(chalk59.red(`\u2717 Invalid auth method "${authMethod}"`));
     process.exit(1);
   }
   const secrets = {};
   for (const [name, fieldConfig] of Object.entries(secretsConfig)) {
     if (fieldConfig.helpText) {
-      console.log(chalk60.dim(fieldConfig.helpText));
+      console.log(chalk59.dim(fieldConfig.helpText));
     }
     const isSensitive = isSensitiveSecret(name);
     const placeholder = "placeholder" in fieldConfig ? fieldConfig.placeholder : "";
@@ -12856,11 +12811,11 @@ async function promptForSecrets(type, authMethod) {
 }
 async function handleInteractiveMode() {
   if (!isInteractive()) {
-    console.error(chalk60.red("\u2717 Interactive mode requires a TTY"));
+    console.error(chalk59.red("\u2717 Interactive mode requires a TTY"));
     console.log();
     console.log("Use non-interactive mode:");
     console.log(
-      chalk60.cyan('  vm0 model-provider setup --type <type> --secret "<value>"')
+      chalk59.cyan('  vm0 model-provider setup --type <type> --secret "<value>"')
     );
     process.exit(1);
   }
@@ -12875,7 +12830,7 @@ async function handleInteractiveMode() {
         title = `${title} \u2713`;
       }
       if (isExperimental) {
-        title = `${title} ${chalk60.dim("(experimental)")}`;
+        title = `${title} ${chalk59.dim("(experimental)")}`;
       }
       return {
         title,
@@ -12922,7 +12877,7 @@ async function handleInteractiveMode() {
   }
   const config = MODEL_PROVIDER_TYPES[type];
   console.log();
-  console.log(chalk60.dim(config.helpText));
+  console.log(chalk59.dim(config.helpText));
   console.log();
   if (hasAuthMethods(type)) {
     const authMethod = await promptForAuthMethod(type);
@@ -12953,12 +12908,12 @@ async function handleInteractiveMode() {
 function handleSetupError2(error) {
   if (error instanceof Error) {
     if (error.message.includes("Not authenticated")) {
-      console.error(chalk60.red("\u2717 Not authenticated. Run: vm0 auth login"));
+      console.error(chalk59.red("\u2717 Not authenticated. Run: vm0 auth login"));
     } else {
-      console.error(chalk60.red(`\u2717 ${error.message}`));
+      console.error(chalk59.red(`\u2717 ${error.message}`));
     }
   } else {
-    console.error(chalk60.red("\u2717 An unexpected error occurred"));
+    console.error(chalk59.red("\u2717 An unexpected error occurred"));
   }
   process.exit(1);
 }
@@ -12975,7 +12930,7 @@ async function promptSetAsDefault(type, framework, isDefault) {
   );
   if (response.setDefault) {
     await setModelProviderDefault(type);
-    console.log(chalk60.green(`\u2713 Default for ${framework} set to "${type}"`));
+    console.log(chalk59.green(`\u2713 Default for ${framework} set to "${type}"`));
   }
 }
 function collectSecrets(value, previous) {
@@ -13002,7 +12957,7 @@ var setupCommand2 = new Command62().name("setup").description("Configure a model
           model: options.model
         });
       } else if (options.type || secretArgs.length > 0) {
-        console.error(chalk60.red("\u2717 Both --type and --secret are required"));
+        console.error(chalk59.red("\u2717 Both --type and --secret are required"));
         process.exit(1);
       } else {
         const result = await handleInteractiveMode();
@@ -13020,11 +12975,11 @@ var setupCommand2 = new Command62().name("setup").description("Configure a model
         const modelNote2 = provider2.selectedModel ? ` with model: ${provider2.selectedModel}` : "";
         if (!hasModelSelection(input.type)) {
           console.log(
-            chalk60.green(`\u2713 Model provider "${input.type}" unchanged`)
+            chalk59.green(`\u2713 Model provider "${input.type}" unchanged`)
           );
         } else {
           console.log(
-            chalk60.green(
+            chalk59.green(
               `\u2713 Model provider "${input.type}" updated${defaultNote2}${modelNote2}`
             )
           );
@@ -13049,7 +13004,7 @@ var setupCommand2 = new Command62().name("setup").description("Configure a model
       const defaultNote = provider.isDefault ? ` (default for ${provider.framework})` : "";
       const modelNote = provider.selectedModel ? ` with model: ${provider.selectedModel}` : "";
       console.log(
-        chalk60.green(
+        chalk59.green(
           `\u2713 Model provider "${input.type}" ${action}${defaultNote}${modelNote}`
         )
       );
@@ -13068,31 +13023,31 @@ var setupCommand2 = new Command62().name("setup").description("Configure a model
 
 // src/commands/model-provider/delete.ts
 import { Command as Command63 } from "commander";
-import chalk61 from "chalk";
+import chalk60 from "chalk";
 var deleteCommand4 = new Command63().name("delete").description("Delete a model provider").argument("<type>", "Model provider type to delete").action(async (type) => {
   try {
     if (!Object.keys(MODEL_PROVIDER_TYPES).includes(type)) {
-      console.error(chalk61.red(`\u2717 Invalid type "${type}"`));
+      console.error(chalk60.red(`\u2717 Invalid type "${type}"`));
       console.log();
       console.log("Valid types:");
       for (const [t, config] of Object.entries(MODEL_PROVIDER_TYPES)) {
-        console.log(`  ${chalk61.cyan(t)} - ${config.label}`);
+        console.log(`  ${chalk60.cyan(t)} - ${config.label}`);
       }
       process.exit(1);
     }
     await deleteModelProvider(type);
-    console.log(chalk61.green(`\u2713 Model provider "${type}" deleted`));
+    console.log(chalk60.green(`\u2713 Model provider "${type}" deleted`));
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("not found")) {
-        console.error(chalk61.red(`\u2717 Model provider "${type}" not found`));
+        console.error(chalk60.red(`\u2717 Model provider "${type}" not found`));
       } else if (error.message.includes("Not authenticated")) {
-        console.error(chalk61.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk60.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk61.red(`\u2717 ${error.message}`));
+        console.error(chalk60.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk61.red("\u2717 An unexpected error occurred"));
+      console.error(chalk60.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -13100,35 +13055,35 @@ var deleteCommand4 = new Command63().name("delete").description("Delete a model
 
 // src/commands/model-provider/set-default.ts
 import { Command as Command64 } from "commander";
-import chalk62 from "chalk";
+import chalk61 from "chalk";
 var setDefaultCommand = new Command64().name("set-default").description("Set a model provider as default for its framework").argument("<type>", "Model provider type to set as default").action(async (type) => {
   try {
     if (!Object.keys(MODEL_PROVIDER_TYPES).includes(type)) {
-      console.error(chalk62.red(`\u2717 Invalid type "${type}"`));
+      console.error(chalk61.red(`\u2717 Invalid type "${type}"`));
       console.log();
       console.log("Valid types:");
       for (const [t, config] of Object.entries(MODEL_PROVIDER_TYPES)) {
-        console.log(`  ${chalk62.cyan(t)} - ${config.label}`);
+        console.log(`  ${chalk61.cyan(t)} - ${config.label}`);
       }
       process.exit(1);
     }
     const provider = await setModelProviderDefault(type);
     console.log(
-      chalk62.green(
+      chalk61.green(
         `\u2713 Default for ${provider.framework} set to "${provider.type}"`
       )
     );
   } catch (error) {
     if (error instanceof Error) {
       if (error.message.includes("not found")) {
-        console.error(chalk62.red(`\u2717 Model provider "${type}" not found`));
+        console.error(chalk61.red(`\u2717 Model provider "${type}" not found`));
       } else if (error.message.includes("Not authenticated")) {
-        console.error(chalk62.red("\u2717 Not authenticated. Run: vm0 auth login"));
+        console.error(chalk61.red("\u2717 Not authenticated. Run: vm0 auth login"));
       } else {
-        console.error(chalk62.red(`\u2717 ${error.message}`));
+        console.error(chalk61.red(`\u2717 ${error.message}`));
       }
     } else {
-      console.error(chalk62.red("\u2717 An unexpected error occurred"));
+      console.error(chalk61.red("\u2717 An unexpected error occurred"));
     }
     process.exit(1);
   }
@@ -13137,8 +13092,127 @@ var setDefaultCommand = new Command64().name("set-default").description("Set a m
 // src/commands/model-provider/index.ts
 var modelProviderCommand = new Command65().name("model-provider").description("Manage model providers for agent runs").addCommand(listCommand8).addCommand(setupCommand2).addCommand(deleteCommand4).addCommand(setDefaultCommand);
 
-// src/commands/onboard/index.ts
+// src/commands/connector/index.ts
+import { Command as Command67 } from "commander";
+
+// src/commands/connector/connect.ts
 import { Command as Command66 } from "commander";
+import chalk62 from "chalk";
+import { initClient as initClient11 } from "@ts-rest/core";
+function delay2(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function getHeaders2() {
+  const token = await getToken();
+  if (!token) {
+    throw new Error("Not authenticated. Run: vm0 auth login");
+  }
+  const headers = {
+    Authorization: `Bearer ${token}`
+  };
+  const bypassSecret = process.env.VERCEL_AUTOMATION_BYPASS_SECRET;
+  if (bypassSecret) {
+    headers["x-vercel-protection-bypass"] = bypassSecret;
+  }
+  return headers;
+}
+var connectCommand = new Command66().name("connect").description("Connect a third-party service (e.g., GitHub)").argument("<type>", "Connector type (e.g., github)").action(async (type) => {
+  const parseResult = connectorTypeSchema.safeParse(type);
+  if (!parseResult.success) {
+    console.error(chalk62.red(`Unknown connector type: ${type}`));
+    console.error("Available connectors: github");
+    process.exit(1);
+  }
+  const connectorType = parseResult.data;
+  const apiUrl = await getApiUrl();
+  const headers = await getHeaders2();
+  console.log(`Connecting ${chalk62.cyan(type)}...`);
+  const sessionsClient = initClient11(connectorSessionsContract, {
+    baseUrl: apiUrl,
+    baseHeaders: headers,
+    jsonQuery: true
+  });
+  const createResult = await sessionsClient.create({
+    params: { type: connectorType },
+    body: {}
+  });
+  if (createResult.status !== 200) {
+    const errorBody = createResult.body;
+    console.error(
+      chalk62.red(`Failed to create session: ${errorBody.error?.message}`)
+    );
+    process.exit(1);
+  }
+  const session = createResult.body;
+  const verificationUrl = `${apiUrl}${session.verificationUrl}`;
+  console.log(chalk62.green("\nSession created"));
+  console.log(chalk62.cyan(`
+To connect, visit: ${verificationUrl}`));
+  console.log(`Session code: ${chalk62.bold(session.code)}`);
+  console.log(
+    `
+The session expires in ${Math.floor(session.expiresIn / 60)} minutes.`
+  );
+  console.log("\nWaiting for authorization...");
+  const sessionClient = initClient11(connectorSessionByIdContract, {
+    baseUrl: apiUrl,
+    baseHeaders: headers,
+    jsonQuery: true
+  });
+  const startTime = Date.now();
+  const maxWaitTime = session.expiresIn * 1e3;
+  const pollInterval = (session.interval || 5) * 1e3;
+  let isFirstPoll = true;
+  while (Date.now() - startTime < maxWaitTime) {
+    if (!isFirstPoll) {
+      await delay2(pollInterval);
+    }
+    isFirstPoll = false;
+    const statusResult = await sessionClient.get({
+      params: { type: connectorType, sessionId: session.id }
+    });
+    if (statusResult.status !== 200) {
+      const errorBody = statusResult.body;
+      console.error(
+        chalk62.red(`
+Failed to check status: ${errorBody.error?.message}`)
+      );
+      process.exit(1);
+    }
+    const status = statusResult.body;
+    switch (status.status) {
+      case "complete":
+        console.log(chalk62.green(`
+
+${type} connected successfully!`));
+        return;
+      case "expired":
+        console.log(chalk62.red("\nSession expired. Please try again."));
+        process.exit(1);
+        break;
+      case "error":
+        console.log(
+          chalk62.red(
+            `
+Connection failed: ${status.errorMessage || "Unknown error"}`
+          )
+        );
+        process.exit(1);
+        break;
+      case "pending":
+        process.stdout.write(chalk62.dim("."));
+        break;
+    }
+  }
+  console.log(chalk62.red("\nSession timed out. Please try again."));
+  process.exit(1);
+});
+
+// src/commands/connector/index.ts
+var connectorCommand = new Command67().name("connector").description("Manage third-party service connections").addCommand(connectCommand);
+
+// src/commands/onboard/index.ts
+import { Command as Command68 } from "commander";
 import chalk66 from "chalk";
 import { mkdir as mkdir8 } from "fs/promises";
 import { existsSync as existsSync11 } from "fs";
@@ -13286,7 +13360,7 @@ async function exchangeToken2(apiUrl, deviceCode) {
   });
   return response.json();
 }
-function delay2(ms) {
+function delay3(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
 async function isAuthenticated() {
@@ -13317,7 +13391,7 @@ async function pollForToken(apiUrl, deviceAuth, callbacks) {
   let isFirstPoll = true;
   while (Date.now() - startTime < maxWaitTime) {
     if (!isFirstPoll) {
-      await delay2(pollInterval);
+      await delay3(pollInterval);
     }
     isFirstPoll = false;
     const tokenResult = await exchangeToken2(apiUrl, deviceAuth.device_code);
@@ -13561,16 +13635,16 @@ async function handleModelProvider(ctx) {
     const providerType = await step.prompt(
       () => promptSelect(
         "Select provider type:",
-        choices.map((c24) => ({
-          title: c24.label,
-          value: c24.type
+        choices.map((c25) => ({
+          title: c25.label,
+          value: c25.type
         }))
       )
     );
     if (!providerType) {
       process.exit(0);
     }
-    const selectedChoice = choices.find((c24) => c24.type === providerType);
+    const selectedChoice = choices.find((c25) => c25.type === providerType);
     if (selectedChoice?.helpText) {
       for (const line of selectedChoice.helpText.split("\n")) {
         step.detail(chalk66.dim(line));
@@ -13710,7 +13784,7 @@ function printNextSteps(agentName, pluginInstalled) {
   }
   console.log();
 }
-var onboardCommand = new Command66().name("onboard").description("Guided setup for new VM0 users").option("-y, --yes", "Skip confirmation prompts").option("--name <name>", `Agent name (default: ${DEFAULT_AGENT_NAME})`).action(async (options) => {
+var onboardCommand = new Command68().name("onboard").description("Guided setup for new VM0 users").option("-y, --yes", "Skip confirmation prompts").option("--name <name>", `Agent name (default: ${DEFAULT_AGENT_NAME})`).action(async (options) => {
   const interactive = isInteractive();
   if (interactive) {
     process.stdout.write("\x1B[2J\x1B[H");
@@ -13733,9 +13807,9 @@ var onboardCommand = new Command66().name("onboard").description("Guided setup f
 });
 
 // src/commands/setup-claude/index.ts
-import { Command as Command67 } from "commander";
+import { Command as Command69 } from "commander";
 import chalk67 from "chalk";
-var setupClaudeCommand = new Command67().name("setup-claude").description("Install VM0 Claude Plugin").option("--agent-dir <dir>", "Agent directory to run install in").option("--scope <scope>", "Installation scope (user or project)", "project").action(async (options) => {
+var setupClaudeCommand = new Command69().name("setup-claude").description("Install VM0 Claude Plugin").option("--agent-dir <dir>", "Agent directory to run install in").option("--scope <scope>", "Installation scope (user or project)", "project").action(async (options) => {
   console.log(chalk67.dim("Installing VM0 Claude Plugin..."));
   const scope = options.scope === "user" ? "user" : "project";
   try {
@@ -13757,12 +13831,12 @@ var setupClaudeCommand = new Command67().name("setup-claude").description("Insta
 });
 
 // src/commands/dev-tool/index.ts
-import { Command as Command69 } from "commander";
+import { Command as Command71 } from "commander";
 
 // src/commands/dev-tool/compose.ts
-import { Command as Command68 } from "commander";
+import { Command as Command70 } from "commander";
 import chalk68 from "chalk";
-import { initClient as initClient11 } from "@ts-rest/core";
+import { initClient as initClient12 } from "@ts-rest/core";
 function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
 }
@@ -13771,7 +13845,7 @@ function timestamp() {
 }
 async function createComposeJob(githubUrl, overwrite) {
   const config = await getClientConfig();
-  const client = initClient11(composeJobsMainContract, config);
+  const client = initClient12(composeJobsMainContract, config);
   const result = await client.create({
     body: { githubUrl, overwrite }
   });
@@ -13788,7 +13862,7 @@ async function createComposeJob(githubUrl, overwrite) {
 }
 async function getComposeJobStatus(jobId) {
   const config = await getClientConfig();
-  const client = initClient11(composeJobsByIdContract, config);
+  const client = initClient12(composeJobsByIdContract, config);
   const result = await client.getById({
     params: { jobId }
   });
@@ -13823,7 +13897,7 @@ async function pollUntilComplete(jobId, intervalMs, timeoutMs, jsonMode) {
   }
   throw new Error(`Timeout after ${timeoutMs / 1e3} seconds`);
 }
-var composeCommand2 = new Command68().name("compose").description("Test server-side GitHub compose API").argument("<github-url>", "GitHub URL to compose from").option("--overwrite", "Overwrite existing compose", false).option(
+var composeCommand2 = new Command70().name("compose").description("Test server-side GitHub compose API").argument("<github-url>", "GitHub URL to compose from").option("--overwrite", "Overwrite existing compose", false).option(
   "--interval <seconds>",
   "Polling interval in seconds",
   (v) => parseInt(v, 10),
@@ -13913,11 +13987,11 @@ function displayResult(job) {
 }
 
 // src/commands/dev-tool/index.ts
-var devToolCommand = new Command69().name("dev-tool").description("Developer tools for testing and debugging").addCommand(composeCommand2);
+var devToolCommand = new Command71().name("dev-tool").description("Developer tools for testing and debugging").addCommand(composeCommand2);
 
 // src/index.ts
-var program = new Command70();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.23.0");
+var program = new Command72();
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.24.1");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);
@@ -13934,6 +14008,7 @@ program.addCommand(usageCommand);
 program.addCommand(secretCommand);
 program.addCommand(variableCommand);
 program.addCommand(modelProviderCommand);
+program.addCommand(connectorCommand);
 program.addCommand(onboardCommand);
 program.addCommand(setupClaudeCommand);
 program.addCommand(devToolCommand, { hidden: true });