@vm0/cli 9.62.3 → 9.62.5

package/index.js

@@ -45,7 +45,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.62.3",
+    release: "9.62.5",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -64,7 +64,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.62.3",
+    version: "9.62.5",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -673,7 +673,7 @@ function getConfigPath() {
   return join2(homedir2(), ".vm0", "config.json");
 }
 var infoCommand = new Command6().name("info").description("Display environment and debug information").action(async () => {
-  console.log(chalk4.bold(`VM0 CLI v${"9.62.3"}`));
+  console.log(chalk4.bold(`VM0 CLI v${"9.62.5"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -801,7 +801,7 @@ var firewallSchema = z3.object({
   ref: z3.string(),
   apis: z3.array(firewallApiSchema)
 });
-var experimentalFirewallSchema = z3.array(firewallSchema);
+var experimentalFirewallsSchema = z3.array(firewallSchema);
 var firewallConfigSchema = z3.object({
   name: z3.string().min(1, "Firewall name is required"),
   description: z3.string().optional(),
@@ -817,10 +817,10 @@ var composeVersionQuerySchema = z4.string().min(1, "Missing version query parame
 );
 var AGENT_NAME_REGEX = /^[a-zA-Z0-9][a-zA-Z0-9-]{1,62}[a-zA-Z0-9]$/;
 var VALID_CAPABILITIES = [
-  "storage:read",
-  "storage:write",
   "agent:read",
   "agent:write",
+  "artifact:read",
+  "artifact:write",
   "agent-run:read",
   "agent-run:write",
   "schedule:read",
@@ -869,7 +869,7 @@ var agentDefinitionSchema = z4.object({
    * CLI input: map format { slack: { permissions: [...] | "all" } }
    * — expanded by CLI to full ExpandedFirewallConfig[] before API call.
    */
-  experimental_firewall: z4.record(
+  experimental_firewalls: z4.record(
     z4.string(),
     z4.object({
       permissions: z4.union([z4.literal("all"), z4.array(z4.string()).min(1)])
@@ -928,7 +928,7 @@ var agentComposeApiContentSchema = z4.object({
   agents: z4.record(
     z4.string(),
     agentDefinitionSchema.extend({
-      experimental_firewall: z4.array(expandedFirewallConfigSchema).optional()
+      experimental_firewalls: z4.array(expandedFirewallConfigSchema).optional()
     })
   ),
   volumes: z4.record(z4.string(), volumeConfigSchema).optional()
@@ -1169,11 +1169,11 @@ var orgDefaultAgentContract = c2.router({
       org: z5.string().optional()
     }),
     body: z5.object({
-      agentComposeId: z5.string().uuid().nullable()
+      agentComposeId: z5.uuid().nullable()
     }),
     responses: {
       200: z5.object({
-        agentComposeId: z5.string().uuid().nullable()
+        agentComposeId: z5.uuid().nullable()
       }),
       400: apiErrorSchema,
       401: apiErrorSchema,
@@ -1723,7 +1723,7 @@ var storageChangesSchema = z7.object({
 });
 var presignedUploadSchema = z7.object({
   key: z7.string(),
-  presignedUrl: z7.string().url()
+  presignedUrl: z7.url()
 });
 var storagesPrepareContract = c4.router({
   prepare: {
@@ -1808,7 +1808,7 @@ var storagesDownloadContract = c4.router({
       // Normal response with presigned URL
       200: z7.union([
         z7.object({
-          url: z7.string().url(),
+          url: z7.url(),
           versionId: z7.string(),
           fileCount: z7.number(),
           size: z7.number()
@@ -2313,7 +2313,7 @@ var secretNameSchema = z12.string().min(1, "Secret name is required").max(255, "
 );
 var secretTypeSchema = z12.enum(["user", "model-provider", "connector"]);
 var secretResponseSchema = z12.object({
-  id: z12.string().uuid(),
+  id: z12.uuid(),
   name: z12.string(),
   description: z12.string().nullable(),
   type: secretTypeSchema,
@@ -2412,7 +2412,7 @@ var variableNameSchema = z13.string().min(1, "Variable name is required").max(25
   "Variable name must contain only uppercase letters, numbers, and underscores, and must start with a letter (e.g., MY_VAR)"
 );
 var variableResponseSchema = z13.object({
-  id: z13.string().uuid(),
+  id: z13.uuid(),
   name: z13.string(),
   value: z13.string(),
   description: z13.string().nullable(),
@@ -2538,6 +2538,8 @@ var MODEL_PROVIDER_TYPES = {
       CLAUDE_CODE_SUBAGENT_MODEL: "$model"
     },
     models: [
+      "anthropic/claude-sonnet-4.6",
+      "anthropic/claude-opus-4.6",
       "anthropic/claude-sonnet-4.5",
       "anthropic/claude-opus-4.5",
       "anthropic/claude-haiku-4.5"
@@ -2625,6 +2627,21 @@ var MODEL_PROVIDER_TYPES = {
     models: ["glm-5", "glm-4.7", "glm-4.5-air"],
     defaultModel: "glm-4.7"
   },
+  "vercel-ai-gateway": {
+    framework: "claude-code",
+    secretName: "VERCEL_AI_GATEWAY_API_KEY",
+    label: "Vercel AI Gateway",
+    secretLabel: "API key",
+    helpText: "Get your API key from the Vercel AI Gateway dashboard",
+    featureFlag: "vercelAiGateway" /* VercelAiGateway */,
+    environmentMapping: {
+      ANTHROPIC_AUTH_TOKEN: "$secret",
+      ANTHROPIC_BASE_URL: "https://ai-gateway.vercel.sh",
+      ANTHROPIC_API_KEY: "",
+      ANTHROPIC_MODEL: "moonshotai/kimi-k2.5",
+      ANTHROPIC_CUSTOM_HEADERS: "x-ai-gateway-providers-only: moonshot"
+    }
+  },
   "azure-foundry": {
     framework: "claude-code",
     label: "Azure Foundry",
@@ -2734,6 +2751,7 @@ var modelProviderTypeSchema = z14.enum([
   "minimax-api-key",
   "deepseek-api-key",
   "zai-api-key",
+  "vercel-ai-gateway",
   "azure-foundry",
   "aws-bedrock"
 ]);
@@ -2779,7 +2797,7 @@ function getCustomModelPlaceholder(type2) {
   return "customModelPlaceholder" in config ? config.customModelPlaceholder : void 0;
 }
 var modelProviderResponseSchema = z14.object({
-  id: z14.string().uuid(),
+  id: z14.uuid(),
   type: modelProviderTypeSchema,
   framework: modelProviderFrameworkSchema,
   secretName: z14.string().nullable(),
@@ -3081,11 +3099,11 @@ var runnerGroupSchema = z16.string().regex(
   "Runner group must be in org/name format (e.g., acme/production)"
 );
 var jobSchema = z16.object({
-  runId: z16.string().uuid(),
+  runId: z16.uuid(),
   prompt: z16.string(),
   agentComposeVersionId: z16.string().nullable(),
   vars: z16.record(z16.string(), z16.string()).nullable(),
-  checkpointId: z16.string().uuid().nullable()
+  checkpointId: z16.uuid().nullable()
 });
 var runnersPollContract = c13.router({
   poll: {
@@ -3147,16 +3165,16 @@ var storedExecutionContextSchema = z16.object({
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z16.string().optional(),
   // Experimental firewall for proxy-side token replacement
-  experimentalFirewall: experimentalFirewallSchema.optional(),
+  experimentalFirewalls: experimentalFirewallsSchema.optional(),
   // Experimental capabilities for agent permission enforcement
   experimentalCapabilities: z16.array(z16.enum(VALID_CAPABILITIES)).optional()
 });
 var executionContextSchema = z16.object({
-  runId: z16.string().uuid(),
+  runId: z16.uuid(),
   prompt: z16.string(),
   agentComposeVersionId: z16.string().nullable(),
   vars: z16.record(z16.string(), z16.string()).nullable(),
-  checkpointId: z16.string().uuid().nullable(),
+  checkpointId: z16.uuid().nullable(),
   sandboxToken: z16.string(),
   // New fields for E2B parity:
   workingDir: z16.string(),
@@ -3181,7 +3199,7 @@ var executionContextSchema = z16.object({
   // Memory storage name (for first-run when manifest.memory is null)
   memoryName: z16.string().optional(),
   // Experimental firewall for proxy-side token replacement
-  experimentalFirewall: experimentalFirewallSchema.optional(),
+  experimentalFirewalls: experimentalFirewallsSchema.optional(),
   // Experimental capabilities for agent permission enforcement
   experimentalCapabilities: z16.array(z16.enum(VALID_CAPABILITIES)).optional()
 });
@@ -3191,7 +3209,7 @@ var runnersJobClaimContract = c13.router({
     path: "/api/runners/jobs/:id/claim",
     headers: authHeadersSchema,
     pathParams: z16.object({
-      id: z16.string().uuid()
+      id: z16.uuid()
     }),
     body: z16.object({}),
     responses: {
@@ -3275,8 +3293,8 @@ var deployScheduleRequestSchema = z17.object({
   }
 );
 var scheduleResponseSchema = z17.object({
-  id: z17.string().uuid(),
-  composeId: z17.string().uuid(),
+  id: z17.uuid(),
+  composeId: z17.uuid(),
   composeName: z17.string(),
   orgSlug: z17.string(),
   userId: z17.string(),
@@ -3304,7 +3322,7 @@ var scheduleResponseSchema = z17.object({
   updatedAt: z17.string()
 });
 var runSummarySchema = z17.object({
-  id: z17.string().uuid(),
+  id: z17.uuid(),
   status: z17.enum([
     "queued",
     "pending",
@@ -3544,7 +3562,7 @@ var platformLogStatusSchema = z19.enum([
   "cancelled"
 ]);
 var platformLogEntrySchema = z19.object({
-  id: z19.string().uuid(),
+  id: z19.uuid(),
   sessionId: z19.string().nullable(),
   agentName: z19.string(),
   orgSlug: z19.string().nullable(),
@@ -3563,7 +3581,7 @@ var artifactSchema = z19.object({
   version: z19.string().nullable()
 });
 var platformLogDetailSchema = z19.object({
-  id: z19.string().uuid(),
+  id: z19.uuid(),
   sessionId: z19.string().nullable(),
   agentName: z19.string(),
   framework: z19.string().nullable(),
@@ -3610,7 +3628,7 @@ var platformLogsByIdContract = c16.router({
   }
 });
 var artifactDownloadResponseSchema = z19.object({
-  url: z19.string().url(),
+  url: z19.url(),
   expiresAt: z19.string()
 });
 var platformArtifactDownloadContract = c16.router({
@@ -3648,7 +3666,7 @@ var composeJobResultSchema = z20.object({
 var composeJobSourceSchema = z20.enum(["github", "platform", "slack"]);
 var createComposeJobRequestSchema = z20.union([
   z20.object({
-    githubUrl: z20.string().url().startsWith("https://github.com/"),
+    githubUrl: z20.url().check(z20.startsWith("https://github.com/")),
     overwrite: z20.boolean().optional().default(false)
   }),
   z20.object({
@@ -3697,7 +3715,7 @@ var composeJobsByIdContract = c17.router({
     path: "/api/compose/jobs/:jobId",
     headers: authHeadersSchema,
     pathParams: z20.object({
-      jobId: z20.string().uuid()
+      jobId: z20.uuid()
     }),
     responses: {
       200: composeJobResponseSchema,
@@ -3717,7 +3735,7 @@ var webhookComposeCompleteContract = c17.router({
     path: "/api/webhooks/compose/complete",
     headers: authHeadersSchema,
     body: z20.object({
-      jobId: z20.string().uuid(),
+      jobId: z20.uuid(),
       success: z20.boolean(),
       // Result from CLI compose command
       result: composeJobResultSchema.optional(),
@@ -6350,7 +6368,7 @@ function getConnectorDerivedNames(secretName) {
   return null;
 }
 var connectorResponseSchema = z21.object({
-  id: z21.string().uuid().nullable(),
+  id: z21.uuid().nullable(),
   type: connectorTypeSchema,
   authMethod: z21.string(),
   externalId: z21.string().nullable(),
@@ -6417,7 +6435,7 @@ var connectorSessionStatusSchema = z21.enum([
   "error"
 ]);
 var connectorSessionResponseSchema = z21.object({
-  id: z21.string().uuid(),
+  id: z21.uuid(),
   code: z21.string(),
   type: connectorTypeSchema,
   status: connectorSessionStatusSchema,
@@ -6463,7 +6481,7 @@ var connectorSessionByIdContract = c18.router({
     headers: authHeadersSchema,
     pathParams: z21.object({
       type: connectorTypeSchema,
-      sessionId: z21.string().uuid()
+      sessionId: z21.uuid()
     }),
     responses: {
       200: connectorSessionStatusResponseSchema,
@@ -6476,7 +6494,7 @@ var connectorSessionByIdContract = c18.router({
   }
 });
 var computerConnectorCreateResponseSchema = z21.object({
-  id: z21.string().uuid(),
+  id: z21.uuid(),
   ngrokToken: z21.string(),
   bridgeToken: z21.string(),
   endpointPrefix: z21.string(),
@@ -6817,7 +6835,7 @@ async function expandFirewallConfigs(config, fetchFn) {
   const compose = config;
   if (!compose?.agents) return;
   for (const agent of Object.values(compose.agents)) {
-    const configs = agent.experimental_firewall;
+    const configs = agent.experimental_firewalls;
     if (!configs) continue;
     if (Array.isArray(configs)) continue;
     const expanded = [];
@@ -6859,7 +6877,7 @@ async function expandFirewallConfigs(config, fetchFn) {
         entry.placeholders = serviceConfig.placeholders;
       expanded.push(entry);
     }
-    agent.experimental_firewall = expanded;
+    agent.experimental_firewalls = expanded;
   }
 }
 
@@ -7098,7 +7116,7 @@ var skillsResolveContract = c23.router({
     path: "/api/skills/resolve",
     headers: authHeadersSchema,
     body: z26.object({
-      skills: z26.array(z26.string().url()).min(1).max(100)
+      skills: z26.array(z26.url()).min(1).max(100)
     }),
     responses: {
       200: z26.object({
@@ -7363,6 +7381,11 @@ var FEATURE_SWITCHES = {
     enabled: false,
     enabledUserHashes: STAFF_USER_HASHES
   },
+  ["vercelAiGateway" /* VercelAiGateway */]: {
+    maintainer: "ethan@vm0.ai",
+    enabled: false,
+    enabledUserHashes: STAFF_USER_HASHES
+  },
   ["zero" /* Zero */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false,
@@ -9510,7 +9533,7 @@ var composeCommand = new Command7().name("compose").description("Create or updat
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.62.3");
+        await startSilentUpgrade("9.62.5");
       }
       try {
         let result;
@@ -10332,7 +10355,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.62.3");
+        await startSilentUpgrade("9.62.5");
       }
       const { org, name, version } = parseIdentifier(identifier);
       let composeId;
@@ -12052,7 +12075,7 @@ var cookAction = new Command35().name("cook").description("Quick start: prepare,
   withErrorHandler(
     async (prompt, options) => {
       if (options.autoUpdate !== false) {
-        const shouldExit = await checkAndUpgrade("9.62.3", prompt);
+        const shouldExit = await checkAndUpgrade("9.62.5", prompt);
         if (shouldExit) {
           process.exit(0);
         }
@@ -17186,13 +17209,13 @@ var upgradeCommand = new Command86().name("upgrade").description("Upgrade vm0 CL
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.62.3") {
-      console.log(chalk79.green(`\u2713 Already up to date (${"9.62.3"})`));
+    if (latestVersion === "9.62.5") {
+      console.log(chalk79.green(`\u2713 Already up to date (${"9.62.5"})`));
       return;
     }
     console.log(
       chalk79.yellow(
-        `Current version: ${"9.62.3"} -> Latest version: ${latestVersion}`
+        `Current version: ${"9.62.5"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -17219,7 +17242,7 @@ var upgradeCommand = new Command86().name("upgrade").description("Upgrade vm0 CL
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        chalk79.green(`\u2713 Upgraded from ${"9.62.3"} to ${latestVersion}`)
+        chalk79.green(`\u2713 Upgraded from ${"9.62.5"} to ${latestVersion}`)
       );
       return;
     }
@@ -17233,7 +17256,7 @@ var upgradeCommand = new Command86().name("upgrade").description("Upgrade vm0 CL
 
 // src/index.ts
 var program = new Command87();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.62.3");
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.62.5");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/cli",
-  "version": "9.62.3",
+  "version": "9.62.5",
   "description": "CLI application",
   "repository": {
     "type": "git",