@vm0/cli 9.64.2 → 9.65.1

package/index.js

@@ -45,7 +45,7 @@ if (DSN) {
   Sentry.init({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.64.2",
+    release: "9.65.1",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -64,7 +64,7 @@ if (DSN) {
     }
   });
   Sentry.setContext("cli", {
-    version: "9.64.2",
+    version: "9.65.1",
     command: process.argv.slice(2).join(" ")
   });
   Sentry.setContext("runtime", {
@@ -83,7 +83,7 @@ process.stdout.on("error", handleEpipe);
 process.stderr.on("error", handleEpipe);
 
 // src/index.ts
-import { Command as Command100 } from "commander";
+import { Command as Command95 } from "commander";
 
 // src/lib/network/proxy.ts
 import { EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
@@ -675,7 +675,7 @@ function getConfigPath() {
   return join2(homedir2(), ".vm0", "config.json");
 }
 var infoCommand = new Command6().name("info").description("Display environment and debug information").action(async () => {
-  console.log(chalk4.bold(`VM0 CLI v${"9.64.2"}`));
+  console.log(chalk4.bold(`VM0 CLI v${"9.65.1"}`));
   console.log();
   const config = await loadConfig();
   const hasEnvToken = !!process.env.VM0_TOKEN;
@@ -1291,7 +1291,8 @@ var orgDefaultAgentContract = c3.router({
       400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
-      404: apiErrorSchema
+      404: apiErrorSchema,
+      409: apiErrorSchema
     },
     summary: "Set or unset the default agent for an org"
   }
@@ -1720,9 +1721,22 @@ var logsSearchContract = c4.router({
 var queueEntrySchema = z7.object({
   position: z7.number(),
   agentName: z7.string().nullable(),
+  agentDisplayName: z7.string().nullable(),
   userEmail: z7.string().nullable(),
   createdAt: z7.string(),
-  runId: z7.string().nullable()
+  isOwner: z7.boolean(),
+  runId: z7.string().nullable(),
+  prompt: z7.string().nullable(),
+  triggerSource: z7.enum(["schedule", "chat", "api"]).nullable(),
+  sessionLink: z7.string().nullable()
+});
+var runningTaskSchema = z7.object({
+  runId: z7.string().nullable(),
+  agentName: z7.string(),
+  agentDisplayName: z7.string().nullable(),
+  userEmail: z7.string(),
+  startedAt: z7.string().nullable(),
+  isOwner: z7.boolean()
 });
 var concurrencyInfoSchema = z7.object({
   tier: orgTierSchema,
@@ -1732,7 +1746,9 @@ var concurrencyInfoSchema = z7.object({
 });
 var queueResponseSchema = z7.object({
   concurrency: concurrencyInfoSchema,
-  queue: z7.array(queueEntrySchema)
+  queue: z7.array(queueEntrySchema),
+  runningTasks: z7.array(runningTaskSchema),
+  estimatedTimePerRun: z7.number().nullable()
 });
 var runsQueueContract = c4.router({
   /**
@@ -3493,7 +3509,7 @@ var deployScheduleRequestSchema = z19.object({
   intervalSeconds: z19.number().int().min(0).optional(),
   timezone: z19.string().default("UTC"),
   prompt: z19.string().min(1, "Prompt required"),
-  // vars and secrets removed - now managed via platform tables
+  // vars and secrets removed - now managed via server-side tables
   artifactName: z19.string().optional(),
   artifactVersion: z19.string().optional(),
   volumeVersions: z19.record(z19.string(), z19.string()).optional(),
@@ -3761,23 +3777,19 @@ var runnerRealtimeTokenContract = c17.router({
   }
 });
 
-// ../../packages/core/src/contracts/platform.ts
+// ../../packages/core/src/contracts/logs.ts
 import { z as z21 } from "zod";
 var paginationSchema = z21.object({
   hasMore: z21.boolean(),
-  nextCursor: z21.string().nullable()
+  nextCursor: z21.string().nullable(),
+  totalPages: z21.number()
 });
 var listQuerySchema = z21.object({
   cursor: z21.string().optional(),
   limit: z21.coerce.number().min(1).max(100).default(20)
 });
 var c18 = initContract();
-var platformPaginationSchema = z21.object({
-  hasMore: z21.boolean(),
-  nextCursor: z21.string().nullable(),
-  totalPages: z21.number()
-});
-var platformLogStatusSchema = z21.enum([
+var logStatusSchema = z21.enum([
   "queued",
   "pending",
   "running",
@@ -3786,33 +3798,33 @@ var platformLogStatusSchema = z21.enum([
   "timeout",
   "cancelled"
 ]);
-var platformLogEntrySchema = z21.object({
+var logEntrySchema = z21.object({
   id: z21.uuid(),
   sessionId: z21.string().nullable(),
   agentName: z21.string(),
   displayName: z21.string().nullable(),
   orgSlug: z21.string().nullable(),
   framework: z21.string().nullable(),
-  status: platformLogStatusSchema,
+  status: logStatusSchema,
   createdAt: z21.string(),
   startedAt: z21.string().nullable(),
   completedAt: z21.string().nullable()
 });
-var platformLogsListResponseSchema = z21.object({
-  data: z21.array(platformLogEntrySchema),
-  pagination: platformPaginationSchema
+var logsListResponseSchema = z21.object({
+  data: z21.array(logEntrySchema),
+  pagination: paginationSchema
 });
 var artifactSchema = z21.object({
   name: z21.string().nullable(),
   version: z21.string().nullable()
 });
-var platformLogDetailSchema = z21.object({
+var logDetailSchema = z21.object({
   id: z21.uuid(),
   sessionId: z21.string().nullable(),
   agentName: z21.string(),
   displayName: z21.string().nullable(),
   framework: z21.string().nullable(),
-  status: platformLogStatusSchema,
+  status: logStatusSchema,
   prompt: z21.string(),
   error: z21.string().nullable(),
   createdAt: z21.string(),
@@ -3820,7 +3832,7 @@ var platformLogDetailSchema = z21.object({
   completedAt: z21.string().nullable(),
   artifact: artifactSchema
 });
-var platformLogsListContract = c18.router({
+var logsListContract = c18.router({
   list: {
     method: "GET",
     path: "/api/app/logs",
@@ -3829,16 +3841,16 @@ var platformLogsListContract = c18.router({
       agent: z21.string().optional(),
       name: z21.string().optional(),
       org: z21.string().optional(),
-      status: platformLogStatusSchema.optional()
+      status: logStatusSchema.optional()
     }),
     responses: {
-      200: platformLogsListResponseSchema,
+      200: logsListResponseSchema,
       401: apiErrorSchema
     },
     summary: "List agent run logs with pagination"
   }
 });
-var platformLogsByIdContract = c18.router({
+var logsByIdContract = c18.router({
   getById: {
     method: "GET",
     path: "/api/app/logs/:id",
@@ -3847,7 +3859,7 @@ var platformLogsByIdContract = c18.router({
       id: z21.string().uuid("Invalid log ID")
     }),
     responses: {
-      200: platformLogDetailSchema,
+      200: logDetailSchema,
       401: apiErrorSchema,
       404: apiErrorSchema
     },
@@ -3858,7 +3870,7 @@ var artifactDownloadResponseSchema = z21.object({
   url: z21.url(),
   expiresAt: z21.string()
 });
-var platformArtifactDownloadContract = c18.router({
+var artifactDownloadContract = c18.router({
   getDownloadUrl: {
     method: "GET",
     path: "/api/app/artifacts/download",
@@ -6600,6 +6612,31 @@ function getConnectorDerivedNames(secretName) {
   }
   return null;
 }
+function getConnectorOAuthConfig(type2) {
+  const config = CONNECTOR_TYPES[type2];
+  return "oauth" in config ? config.oauth : void 0;
+}
+function hasRequiredScopes(connectorType, storedScopes) {
+  const oauthConfig = getConnectorOAuthConfig(connectorType);
+  if (!oauthConfig) return true;
+  if (oauthConfig.scopes.length === 0) return true;
+  if (!storedScopes) return false;
+  const storedSet = new Set(storedScopes);
+  return oauthConfig.scopes.every((s) => storedSet.has(s));
+}
+function getScopeDiff(connectorType, storedScopes) {
+  const oauthConfig = getConnectorOAuthConfig(connectorType);
+  const currentScopes = oauthConfig?.scopes ?? [];
+  const stored = storedScopes ?? [];
+  const storedSet = new Set(stored);
+  const currentSet = new Set(currentScopes);
+  return {
+    addedScopes: currentScopes.filter((s) => !storedSet.has(s)),
+    removedScopes: stored.filter((s) => !currentSet.has(s)),
+    currentScopes,
+    storedScopes: stored
+  };
+}
 var connectorResponseSchema = z23.object({
   id: z23.uuid().nullable(),
   type: connectorTypeSchema,
@@ -6662,6 +6699,27 @@ var connectorsByTypeContract = c20.router({
     summary: "Disconnect a connector"
   }
 });
+var scopeDiffResponseSchema = z23.object({
+  addedScopes: z23.array(z23.string()),
+  removedScopes: z23.array(z23.string()),
+  currentScopes: z23.array(z23.string()),
+  storedScopes: z23.array(z23.string())
+});
+var connectorScopeDiffContract = c20.router({
+  getScopeDiff: {
+    method: "GET",
+    path: "/api/connectors/:type/scope-diff",
+    headers: authHeadersSchema,
+    pathParams: z23.object({ type: connectorTypeSchema }),
+    responses: {
+      200: scopeDiffResponseSchema,
+      401: apiErrorSchema,
+      404: apiErrorSchema,
+      500: apiErrorSchema
+    },
+    summary: "Get scope diff for a connector"
+  }
+});
 var connectorSessionStatusSchema = z23.enum([
   "pending",
   "complete",
@@ -7546,19 +7604,19 @@ var FEATURE_SWITCHES = {
     maintainer: "ethan@vm0.ai",
     enabled: true
   },
-  ["platformAgents" /* PlatformAgents */]: {
+  ["agents" /* Agents */]: {
     maintainer: "ethan@vm0.ai",
     enabled: true
   },
-  ["platformSecrets" /* PlatformSecrets */]: {
+  ["secrets" /* Secrets */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false
   },
-  ["platformArtifacts" /* PlatformArtifacts */]: {
+  ["artifacts" /* Artifacts */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false
   },
-  ["platformApiKeys" /* PlatformApiKeys */]: {
+  ["apiKeys" /* ApiKeys */]: {
     maintainer: "ethan@vm0.ai",
     enabled: false
   },
@@ -8364,77 +8422,11 @@ async function deleteVariable(name) {
   handleError(result, `Variable "${name}" not found`);
 }
 
-// src/lib/api/domains/model-providers.ts
-import { initClient as initClient9 } from "@ts-rest/core";
-async function listModelProviders() {
-  const config = await getClientConfig();
-  const client = initClient9(modelProvidersMainContract, config);
-  const result = await client.list({ headers: {} });
-  if (result.status === 200) {
-    return result.body;
-  }
-  handleError(result, "Failed to list model providers");
-}
-async function upsertModelProvider(body) {
-  const config = await getClientConfig();
-  const client = initClient9(modelProvidersMainContract, config);
-  const result = await client.upsert({ body });
-  if (result.status === 200 || result.status === 201) {
-    return result.body;
-  }
-  handleError(result, "Failed to set model provider");
-}
-async function checkModelProviderSecret(type2) {
-  const config = await getClientConfig();
-  const client = initClient9(modelProvidersCheckContract, config);
-  const result = await client.check({
-    params: { type: type2 }
-  });
-  if (result.status === 200) {
-    return result.body;
-  }
-  handleError(result, "Failed to check secret");
-}
-async function deleteModelProvider(type2) {
-  const config = await getClientConfig();
-  const client = initClient9(modelProvidersByTypeContract, config);
-  const result = await client.delete({
-    params: { type: type2 }
-  });
-  if (result.status === 204) {
-    return;
-  }
-  handleError(result, `Model provider "${type2}" not found`);
-}
-async function setModelProviderDefault(type2) {
-  const config = await getClientConfig();
-  const client = initClient9(modelProvidersSetDefaultContract, config);
-  const result = await client.setDefault({
-    params: { type: type2 }
-  });
-  if (result.status === 200) {
-    return result.body;
-  }
-  handleError(result, "Failed to set default model provider");
-}
-async function updateModelProviderModel(type2, selectedModel) {
-  const config = await getClientConfig();
-  const client = initClient9(modelProvidersUpdateModelContract, config);
-  const result = await client.updateModel({
-    params: { type: type2 },
-    body: { selectedModel }
-  });
-  if (result.status === 200) {
-    return result.body;
-  }
-  handleError(result, "Failed to update model provider");
-}
-
 // src/lib/api/domains/org-model-providers.ts
-import { initClient as initClient10 } from "@ts-rest/core";
+import { initClient as initClient9 } from "@ts-rest/core";
 async function listOrgModelProviders() {
   const config = await getClientConfig();
-  const client = initClient10(orgModelProvidersMainContract, config);
+  const client = initClient9(orgModelProvidersMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -8443,7 +8435,7 @@ async function listOrgModelProviders() {
 }
 async function upsertOrgModelProvider(body) {
   const config = await getClientConfig();
-  const client = initClient10(orgModelProvidersMainContract, config);
+  const client = initClient9(orgModelProvidersMainContract, config);
   const result = await client.upsert({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -8452,7 +8444,7 @@ async function upsertOrgModelProvider(body) {
 }
 async function deleteOrgModelProvider(type2) {
   const config = await getClientConfig();
-  const client = initClient10(orgModelProvidersByTypeContract, config);
+  const client = initClient9(orgModelProvidersByTypeContract, config);
   const result = await client.delete({
     params: { type: type2 }
   });
@@ -8463,7 +8455,7 @@ async function deleteOrgModelProvider(type2) {
 }
 async function setOrgModelProviderDefault(type2) {
   const config = await getClientConfig();
-  const client = initClient10(orgModelProvidersSetDefaultContract, config);
+  const client = initClient9(orgModelProvidersSetDefaultContract, config);
   const result = await client.setDefault({
     params: { type: type2 }
   });
@@ -8474,7 +8466,7 @@ async function setOrgModelProviderDefault(type2) {
 }
 async function updateOrgModelProviderModel(type2, selectedModel) {
   const config = await getClientConfig();
-  const client = initClient10(orgModelProvidersUpdateModelContract, config);
+  const client = initClient9(orgModelProvidersUpdateModelContract, config);
   const result = await client.updateModel({
     params: { type: type2 },
     body: { selectedModel }
@@ -8486,10 +8478,10 @@ async function updateOrgModelProviderModel(type2, selectedModel) {
 }
 
 // src/lib/api/domains/connectors.ts
-import { initClient as initClient11 } from "@ts-rest/core";
+import { initClient as initClient10 } from "@ts-rest/core";
 async function listConnectors() {
   const config = await getClientConfig();
-  const client = initClient11(connectorsMainContract, config);
+  const client = initClient10(connectorsMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -8498,7 +8490,7 @@ async function listConnectors() {
 }
 async function deleteConnector(type2) {
   const config = await getClientConfig();
-  const client = initClient11(connectorsByTypeContract, config);
+  const client = initClient10(connectorsByTypeContract, config);
   const result = await client.delete({
     params: { type: type2 }
   });
@@ -8509,7 +8501,7 @@ async function deleteConnector(type2) {
 }
 async function getConnector(type2) {
   const config = await getClientConfig();
-  const client = initClient11(connectorsByTypeContract, config);
+  const client = initClient10(connectorsByTypeContract, config);
   const result = await client.get({
     params: { type: type2 }
   });
@@ -8552,10 +8544,10 @@ async function getUsage(options) {
 }
 
 // src/lib/api/domains/user-preferences.ts
-import { initClient as initClient12 } from "@ts-rest/core";
+import { initClient as initClient11 } from "@ts-rest/core";
 async function getUserPreferences() {
   const config = await getClientConfig();
-  const client = initClient12(userPreferencesContract, config);
+  const client = initClient11(userPreferencesContract, config);
   const result = await client.get({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -8564,7 +8556,7 @@ async function getUserPreferences() {
 }
 async function updateUserPreferences(body) {
   const config = await getClientConfig();
-  const client = initClient12(userPreferencesContract, config);
+  const client = initClient11(userPreferencesContract, config);
   const result = await client.update({ body });
   if (result.status === 200) {
     return result.body;
@@ -8573,10 +8565,10 @@ async function updateUserPreferences(body) {
 }
 
 // src/lib/api/domains/org-secrets.ts
-import { initClient as initClient13 } from "@ts-rest/core";
+import { initClient as initClient12 } from "@ts-rest/core";
 async function listOrgSecrets() {
   const config = await getClientConfig();
-  const client = initClient13(orgSecretsMainContract, config);
+  const client = initClient12(orgSecretsMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -8585,7 +8577,7 @@ async function listOrgSecrets() {
 }
 async function setOrgSecret(body) {
   const config = await getClientConfig();
-  const client = initClient13(orgSecretsMainContract, config);
+  const client = initClient12(orgSecretsMainContract, config);
   const result = await client.set({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -8594,7 +8586,7 @@ async function setOrgSecret(body) {
 }
 async function deleteOrgSecret(name) {
   const config = await getClientConfig();
-  const client = initClient13(orgSecretsByNameContract, config);
+  const client = initClient12(orgSecretsByNameContract, config);
   const result = await client.delete({
     params: { name }
   });
@@ -8605,10 +8597,10 @@ async function deleteOrgSecret(name) {
 }
 
 // src/lib/api/domains/org-variables.ts
-import { initClient as initClient14 } from "@ts-rest/core";
+import { initClient as initClient13 } from "@ts-rest/core";
 async function listOrgVariables() {
   const config = await getClientConfig();
-  const client = initClient14(orgVariablesMainContract, config);
+  const client = initClient13(orgVariablesMainContract, config);
   const result = await client.list({ headers: {} });
   if (result.status === 200) {
     return result.body;
@@ -8617,7 +8609,7 @@ async function listOrgVariables() {
 }
 async function setOrgVariable(body) {
   const config = await getClientConfig();
-  const client = initClient14(orgVariablesMainContract, config);
+  const client = initClient13(orgVariablesMainContract, config);
   const result = await client.set({ body });
   if (result.status === 200 || result.status === 201) {
     return result.body;
@@ -8626,7 +8618,7 @@ async function setOrgVariable(body) {
 }
 async function deleteOrgVariable(name) {
   const config = await getClientConfig();
-  const client = initClient14(orgVariablesByNameContract, config);
+  const client = initClient13(orgVariablesByNameContract, config);
   const result = await client.delete({
     params: { name }
   });
@@ -9780,9 +9772,9 @@ function mergeSkillVariables(agent, variables) {
     agent.environment = environment;
   }
 }
-function getPlatformUrl(apiUrl) {
+function getAppUrl(apiUrl) {
   const url = new URL(apiUrl);
-  url.hostname = url.hostname.replace("www", "platform");
+  url.hostname = url.hostname.replace("www", "app");
   return url.origin;
 }
 async function checkAndPromptMissingItems(config, options) {
@@ -9815,7 +9807,7 @@ async function checkAndPromptMissingItems(config, options) {
     return { missingSecrets: [], missingVars: [] };
   }
   const apiUrl = await getApiUrl();
-  const platformUrl = getPlatformUrl(apiUrl);
+  const appUrl = getAppUrl(apiUrl);
   const params = new URLSearchParams();
   if (missingSecrets.length > 0) {
     params.set("secrets", missingSecrets.join(","));
@@ -9823,7 +9815,7 @@ async function checkAndPromptMissingItems(config, options) {
   if (missingVars.length > 0) {
     params.set("vars", missingVars.join(","));
   }
-  const setupUrl = `${platformUrl}/environment-variables-setup?${params.toString()}`;
+  const setupUrl = `${appUrl}/environment-variables-setup?${params.toString()}`;
   if (!options.json) {
     console.log();
     console.log(
@@ -9982,7 +9974,7 @@ var composeCommand = new Command7().name("compose").description("Create or updat
         options.autoUpdate = false;
       }
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.64.2");
+        await startSilentUpgrade("9.65.1");
       }
       try {
         let result;
@@ -10804,7 +10796,7 @@ var mainRunCommand = new Command8().name("run").description("Run an agent").argu
   withErrorHandler(
     async (identifier, prompt, options) => {
       if (options.autoUpdate !== false) {
-        await startSilentUpgrade("9.64.2");
+        await startSilentUpgrade("9.65.1");
       }
       const { org, name, version } = parseIdentifier(identifier);
       let composeId;
@@ -12524,7 +12516,7 @@ var cookAction = new Command35().name("cook").description("Quick start: prepare,
   withErrorHandler(
     async (prompt, options) => {
       if (options.autoUpdate !== false) {
-        const shouldExit = await checkAndUpgrade("9.64.2", prompt);
+        const shouldExit = await checkAndUpgrade("9.65.1", prompt);
         if (shouldExit) {
           process.exit(0);
         }
@@ -12710,7 +12702,7 @@ import { Command as Command40 } from "commander";
 import chalk36 from "chalk";
 
 // src/lib/api/api-client.ts
-import { initClient as initClient15 } from "@ts-rest/core";
+import { initClient as initClient14 } from "@ts-rest/core";
 var ApiClient = class {
   async getHeaders() {
     const token = await getActiveToken();
@@ -12736,7 +12728,7 @@ var ApiClient = class {
   async getComposeByName(name, org) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(composesMainContract, {
+    const client = initClient14(composesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12757,7 +12749,7 @@ var ApiClient = class {
   async getComposeById(id) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(composesByIdContract, {
+    const client = initClient14(composesByIdContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12779,7 +12771,7 @@ var ApiClient = class {
   async getComposeVersion(composeId, version) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(composesVersionsContract, {
+    const client = initClient14(composesVersionsContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12800,7 +12792,7 @@ var ApiClient = class {
   async createOrUpdateCompose(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(composesMainContract, {
+    const client = initClient14(composesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12823,7 +12815,7 @@ var ApiClient = class {
   async createRun(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(runsMainContract, {
+    const client = initClient14(runsMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12838,7 +12830,7 @@ var ApiClient = class {
   }
   async getEvents(runId, options) {
     const config = await getClientConfig();
-    const client = initClient15(runEventsContract, config);
+    const client = initClient14(runEventsContract, config);
     const result = await client.getEvents({
       params: { id: runId },
       query: {
@@ -12855,7 +12847,7 @@ var ApiClient = class {
   }
   async getSystemLog(runId, options) {
     const config = await getClientConfig();
-    const client = initClient15(runSystemLogContract, config);
+    const client = initClient14(runSystemLogContract, config);
     const result = await client.getSystemLog({
       params: { id: runId },
       query: {
@@ -12873,7 +12865,7 @@ var ApiClient = class {
   }
   async getMetrics(runId, options) {
     const config = await getClientConfig();
-    const client = initClient15(runMetricsContract, config);
+    const client = initClient14(runMetricsContract, config);
     const result = await client.getMetrics({
       params: { id: runId },
       query: {
@@ -12891,7 +12883,7 @@ var ApiClient = class {
   }
   async getAgentEvents(runId, options) {
     const config = await getClientConfig();
-    const client = initClient15(runAgentEventsContract, config);
+    const client = initClient14(runAgentEventsContract, config);
     const result = await client.getAgentEvents({
       params: { id: runId },
       query: {
@@ -12909,7 +12901,7 @@ var ApiClient = class {
   }
   async getNetworkLogs(runId, options) {
     const config = await getClientConfig();
-    const client = initClient15(runNetworkLogsContract, config);
+    const client = initClient14(runNetworkLogsContract, config);
     const result = await client.getNetworkLogs({
       params: { id: runId },
       query: {
@@ -12931,7 +12923,7 @@ var ApiClient = class {
   async getOrg() {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(orgContract, {
+    const client = initClient14(orgContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12950,7 +12942,7 @@ var ApiClient = class {
   async updateOrg(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(orgContract, {
+    const client = initClient14(orgContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12970,7 +12962,7 @@ var ApiClient = class {
   async getSession(sessionId) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(sessionsByIdContract, {
+    const client = initClient14(sessionsByIdContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -12991,7 +12983,7 @@ var ApiClient = class {
    */
   async getCheckpoint(checkpointId) {
     const config = await getClientConfig();
-    const client = initClient15(checkpointsByIdContract, config);
+    const client = initClient14(checkpointsByIdContract, config);
     const result = await client.getById({
       params: { id: checkpointId }
     });
@@ -13008,7 +13000,7 @@ var ApiClient = class {
   async prepareStorage(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(storagesPrepareContract, {
+    const client = initClient14(storagesPrepareContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13027,7 +13019,7 @@ var ApiClient = class {
   async commitStorage(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(storagesCommitContract, {
+    const client = initClient14(storagesCommitContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13046,7 +13038,7 @@ var ApiClient = class {
   async getStorageDownload(query) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(storagesDownloadContract, {
+    const client = initClient14(storagesDownloadContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13071,7 +13063,7 @@ var ApiClient = class {
   async listStorages(query) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(storagesListContract, {
+    const client = initClient14(storagesListContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13086,12 +13078,12 @@ var ApiClient = class {
   }
   /**
    * Deploy schedule (create or update)
-   * Note: vars and secrets are now managed via platform tables (vm0 secret set, vm0 var set)
+   * Note: vars and secrets are now managed via server-side tables (vm0 secret set, vm0 var set)
    */
   async deploySchedule(body) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(schedulesMainContract, {
+    const client = initClient14(schedulesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13110,7 +13102,7 @@ var ApiClient = class {
   async listSchedules() {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(schedulesMainContract, {
+    const client = initClient14(schedulesMainContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13129,7 +13121,7 @@ var ApiClient = class {
   async getScheduleByName(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(schedulesByNameContract, {
+    const client = initClient14(schedulesByNameContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13151,7 +13143,7 @@ var ApiClient = class {
   async deleteSchedule(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(schedulesByNameContract, {
+    const client = initClient14(schedulesByNameContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13173,7 +13165,7 @@ var ApiClient = class {
   async enableSchedule(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(schedulesEnableContract, {
+    const client = initClient14(schedulesEnableContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13195,7 +13187,7 @@ var ApiClient = class {
   async disableSchedule(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(schedulesEnableContract, {
+    const client = initClient14(schedulesEnableContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13217,7 +13209,7 @@ var ApiClient = class {
   async listScheduleRuns(params) {
     const baseUrl = await this.getBaseUrl();
     const headers = await this.getHeaders();
-    const client = initClient15(scheduleRunsContract, {
+    const client = initClient14(scheduleRunsContract, {
       baseUrl,
       baseHeaders: headers,
       jsonQuery: false
@@ -13325,7 +13317,7 @@ var ApiClient = class {
   }
   async searchLogs(options) {
     const config = await getClientConfig();
-    const client = initClient15(logsSearchContract, config);
+    const client = initClient14(logsSearchContract, config);
     const result = await client.searchLogs({
       query: {
         keyword: options.keyword,
@@ -14182,7 +14174,7 @@ import { Command as Command58 } from "commander";
 import chalk53 from "chalk";
 import prompts3 from "prompts";
 
-// src/commands/model-provider/shared.ts
+// src/lib/domain/model-provider/shared.ts
 import chalk52 from "chalk";
 import prompts2 from "prompts";
 function validateProviderType(typeStr) {
@@ -14274,7 +14266,7 @@ function validateSecrets(type2, authMethod, secrets) {
 }
 function handleNonInteractiveMode(options) {
   const type2 = validateProviderType(options.type);
-  const cmdPrefix = options.commandPrefix ?? "vm0 model-provider setup";
+  const cmdPrefix = options.commandPrefix ?? "vm0 org model-provider setup";
   let selectedModel;
   if (options.model) {
     selectedModel = validateModel(type2, options.model);
@@ -15195,7 +15187,7 @@ var initCommand4 = new Command68().name("init").description("Initialize a new VM
     console.log();
     console.log("Next steps:");
     console.log(
-      `  1. Set up model provider (one-time): ${chalk60.cyan("vm0 model-provider setup")}`
+      `  1. Set up model provider (one-time): ${chalk60.cyan("vm0 org model-provider setup")}`
     );
     console.log(
       `  2. Edit ${chalk60.cyan("AGENTS.md")} to customize your agent's workflow`
@@ -16535,297 +16527,13 @@ var deleteCommand4 = new Command83().name("delete").description("Delete a variab
 // src/commands/variable/index.ts
 var variableCommand = new Command84().name("variable").description("Manage stored variables for agent runs").addCommand(listCommand12).addCommand(setCommand5).addCommand(deleteCommand4);
 
-// src/commands/model-provider/index.ts
+// src/commands/connector/index.ts
 import { Command as Command89 } from "commander";
 
-// src/commands/model-provider/list.ts
+// src/commands/connector/connect.ts
 import { Command as Command85 } from "commander";
-import chalk74 from "chalk";
-var listCommand13 = new Command85().name("list").alias("ls").description("List all model providers").action(
-  withErrorHandler(async () => {
-    const result = await listModelProviders();
-    if (result.modelProviders.length === 0) {
-      console.log(chalk74.dim("No model providers configured"));
-      console.log();
-      console.log("To add a model provider:");
-      console.log(chalk74.cyan("  vm0 model-provider setup"));
-      return;
-    }
-    const byFramework = result.modelProviders.reduce(
-      (acc, p) => {
-        const fw = p.framework;
-        if (!acc[fw]) {
-          acc[fw] = [];
-        }
-        acc[fw].push(p);
-        return acc;
-      },
-      {}
-    );
-    console.log(chalk74.bold("Model Providers:"));
-    console.log();
-    for (const [framework, providers] of Object.entries(byFramework)) {
-      console.log(`  ${chalk74.cyan(framework)}:`);
-      for (const provider of providers) {
-        const defaultTag = provider.isDefault ? chalk74.green(" (default)") : "";
-        const modelTag = provider.selectedModel ? chalk74.dim(` [${provider.selectedModel}]`) : "";
-        console.log(`    ${provider.type}${defaultTag}${modelTag}`);
-        console.log(
-          chalk74.dim(
-            `      Updated: ${new Date(provider.updatedAt).toLocaleString()}`
-          )
-        );
-      }
-      console.log();
-    }
-    console.log(
-      chalk74.dim(`Total: ${result.modelProviders.length} provider(s)`)
-    );
-  })
-);
-
-// src/commands/model-provider/setup.ts
-import { Command as Command86 } from "commander";
 import chalk75 from "chalk";
-import prompts4 from "prompts";
-async function handleInteractiveMode2() {
-  if (!isInteractive()) {
-    throw new Error("Interactive mode requires a TTY", {
-      cause: new Error(
-        'Use non-interactive mode: vm0 model-provider setup --type <type> --secret "<value>"'
-      )
-    });
-  }
-  const { modelProviders: configuredProviders } = await listModelProviders();
-  const configuredTypes = new Set(configuredProviders.map((p) => p.type));
-  const annotatedChoices = Object.entries(MODEL_PROVIDER_TYPES).map(
-    ([type3, config2]) => {
-      const isConfigured = configuredTypes.has(type3);
-      const isExperimental = hasAuthMethods(type3);
-      let title = config2.label;
-      if (isConfigured) {
-        title = `${title} \u2713`;
-      }
-      if (isExperimental) {
-        title = `${title} ${chalk75.dim("(experimental)")}`;
-      }
-      return {
-        title,
-        value: type3
-      };
-    }
-  );
-  const typeResponse = await prompts4(
-    {
-      type: "select",
-      name: "type",
-      message: "Select provider type:",
-      choices: annotatedChoices
-    },
-    { onCancel: () => process.exit(0) }
-  );
-  const type2 = typeResponse.type;
-  const checkResult = await checkModelProviderSecret(type2);
-  if (checkResult.exists) {
-    console.log();
-    console.log(`"${type2}" is already configured`);
-    console.log();
-    const actionResponse = await prompts4(
-      {
-        type: "select",
-        name: "action",
-        message: "",
-        choices: [
-          { title: "Keep existing secret", value: "keep" },
-          { title: "Update secret", value: "update" }
-        ]
-      },
-      { onCancel: () => process.exit(0) }
-    );
-    if (actionResponse.action === "keep") {
-      const selectedModel2 = await promptForModelSelection(type2);
-      return {
-        type: type2,
-        keepExistingSecret: true,
-        selectedModel: selectedModel2,
-        isInteractiveMode: true
-      };
-    }
-  }
-  const config = MODEL_PROVIDER_TYPES[type2];
-  console.log();
-  console.log(chalk75.dim(config.helpText));
-  console.log();
-  if (hasAuthMethods(type2)) {
-    const authMethod = await promptForAuthMethod(type2);
-    const secrets = await promptForSecrets(type2, authMethod);
-    const selectedModel2 = await promptForModelSelection(type2);
-    return {
-      type: type2,
-      authMethod,
-      secrets,
-      selectedModel: selectedModel2,
-      isInteractiveMode: true
-    };
-  }
-  const secretLabel = "secretLabel" in config ? config.secretLabel : "secret";
-  const secretResponse = await prompts4(
-    {
-      type: "password",
-      name: "secret",
-      message: `Enter your ${secretLabel}:`,
-      validate: (value) => value.length > 0 || `${secretLabel} is required`
-    },
-    { onCancel: () => process.exit(0) }
-  );
-  const secret = secretResponse.secret;
-  const selectedModel = await promptForModelSelection(type2);
-  return { type: type2, secret, selectedModel, isInteractiveMode: true };
-}
-async function promptSetAsDefault2(type2, framework, isDefault) {
-  if (isDefault) return;
-  const response = await prompts4(
-    {
-      type: "confirm",
-      name: "setDefault",
-      message: "Set this provider as default?",
-      initial: false
-    },
-    { onCancel: () => process.exit(0) }
-  );
-  if (response.setDefault) {
-    await setModelProviderDefault(type2);
-    console.log(chalk75.green(`\u2713 Default for ${framework} set to "${type2}"`));
-  }
-}
-var setupCommand3 = new Command86().name("setup").description("Configure a model provider").option("-t, --type <type>", "Provider type (for non-interactive mode)").option(
-  "-s, --secret <value>",
-  "Secret value (can be used multiple times, supports VALUE or KEY=VALUE format)",
-  collectSecrets,
-  []
-).option(
-  "-a, --auth-method <method>",
-  "Auth method (required for multi-auth providers like aws-bedrock)"
-).option("-m, --model <model>", "Model selection (for non-interactive mode)").action(
-  withErrorHandler(
-    async (options) => {
-      let input;
-      const secretArgs = options.secret ?? [];
-      if (options.type && secretArgs.length > 0) {
-        input = handleNonInteractiveMode({
-          type: options.type,
-          secret: secretArgs,
-          authMethod: options.authMethod,
-          model: options.model
-        });
-      } else if (options.type || secretArgs.length > 0) {
-        throw new Error("Both --type and --secret are required");
-      } else {
-        const result = await handleInteractiveMode2();
-        if (result === null) {
-          return;
-        }
-        input = result;
-      }
-      if (input.keepExistingSecret) {
-        const provider2 = await updateModelProviderModel(
-          input.type,
-          input.selectedModel
-        );
-        const defaultNote2 = provider2.isDefault ? ` (default for ${provider2.framework})` : "";
-        const modelNote2 = provider2.selectedModel ? ` with model: ${provider2.selectedModel}` : "";
-        if (!hasModelSelection(input.type)) {
-          console.log(
-            chalk75.green(`\u2713 Model provider "${input.type}" unchanged`)
-          );
-        } else {
-          console.log(
-            chalk75.green(
-              `\u2713 Model provider "${input.type}" updated${defaultNote2}${modelNote2}`
-            )
-          );
-        }
-        if (input.isInteractiveMode) {
-          await promptSetAsDefault2(
-            input.type,
-            provider2.framework,
-            provider2.isDefault
-          );
-        }
-        return;
-      }
-      const { provider, created } = await upsertModelProvider({
-        type: input.type,
-        secret: input.secret,
-        authMethod: input.authMethod,
-        secrets: input.secrets,
-        selectedModel: input.selectedModel
-      });
-      const action = created ? "created" : "updated";
-      const defaultNote = provider.isDefault ? ` (default for ${provider.framework})` : "";
-      const modelNote = provider.selectedModel ? ` with model: ${provider.selectedModel}` : "";
-      console.log(
-        chalk75.green(
-          `\u2713 Model provider "${input.type}" ${action}${defaultNote}${modelNote}`
-        )
-      );
-      if (input.isInteractiveMode) {
-        await promptSetAsDefault2(
-          input.type,
-          provider.framework,
-          provider.isDefault
-        );
-      }
-    }
-  )
-);
-
-// src/commands/model-provider/delete.ts
-import { Command as Command87 } from "commander";
-import chalk76 from "chalk";
-var deleteCommand5 = new Command87().name("delete").description("Delete a model provider").argument("<type>", "Model provider type to delete").action(
-  withErrorHandler(async (type2) => {
-    if (!Object.keys(MODEL_PROVIDER_TYPES).includes(type2)) {
-      const validTypes = Object.keys(MODEL_PROVIDER_TYPES).join(", ");
-      throw new Error(`Invalid type "${type2}"`, {
-        cause: new Error(`Valid types: ${validTypes}`)
-      });
-    }
-    await deleteModelProvider(type2);
-    console.log(chalk76.green(`\u2713 Model provider "${type2}" deleted`));
-  })
-);
-
-// src/commands/model-provider/set-default.ts
-import { Command as Command88 } from "commander";
-import chalk77 from "chalk";
-var setDefaultCommand2 = new Command88().name("set-default").description("Set a model provider as default for its framework").argument("<type>", "Model provider type to set as default").action(
-  withErrorHandler(async (type2) => {
-    if (!Object.keys(MODEL_PROVIDER_TYPES).includes(type2)) {
-      const validTypes = Object.keys(MODEL_PROVIDER_TYPES).join(", ");
-      throw new Error(`Invalid type "${type2}"`, {
-        cause: new Error(`Valid types: ${validTypes}`)
-      });
-    }
-    const provider = await setModelProviderDefault(type2);
-    console.log(
-      chalk77.green(
-        `\u2713 Default for ${provider.framework} set to "${provider.type}"`
-      )
-    );
-  })
-);
-
-// src/commands/model-provider/index.ts
-var modelProviderCommand2 = new Command89().name("model-provider").description("Manage model providers for agent runs").addCommand(listCommand13).addCommand(setupCommand3).addCommand(deleteCommand5).addCommand(setDefaultCommand2);
-
-// src/commands/connector/index.ts
-import { Command as Command94 } from "commander";
-
-// src/commands/connector/connect.ts
-import { Command as Command90 } from "commander";
-import chalk79 from "chalk";
-import { initClient as initClient16 } from "@ts-rest/core";
+import { initClient as initClient15 } from "@ts-rest/core";
 
 // src/commands/connector/lib/computer/start-services.ts
 import { spawn as spawn2 } from "child_process";
@@ -16833,7 +16541,7 @@ import { access as access2, constants } from "fs/promises";
 import { createServer } from "net";
 import { homedir as homedir4 } from "os";
 import { join as join12 } from "path";
-import chalk78 from "chalk";
+import chalk74 from "chalk";
 
 // src/commands/connector/lib/computer/ngrok.ts
 import ngrok from "@ngrok/ngrok";
@@ -16907,7 +16615,7 @@ async function checkComputerDependencies() {
   }
 }
 async function startComputerServices(credentials) {
-  console.log(chalk78.cyan("Starting computer connector services..."));
+  console.log(chalk74.cyan("Starting computer connector services..."));
   const wsgidavBinary = await findBinary("wsgidav");
   if (!wsgidavBinary) {
     throw new Error(
@@ -16934,7 +16642,7 @@ async function startComputerServices(credentials) {
   );
   wsgidav.stdout?.on("data", (data) => process.stdout.write(data));
   wsgidav.stderr?.on("data", (data) => process.stderr.write(data));
-  console.log(chalk78.green("\u2713 WebDAV server started"));
+  console.log(chalk74.green("\u2713 WebDAV server started"));
   const chrome = spawn2(
     chromeBinary,
     [
@@ -16948,7 +16656,7 @@ async function startComputerServices(credentials) {
   );
   chrome.stdout?.on("data", (data) => process.stdout.write(data));
   chrome.stderr?.on("data", (data) => process.stderr.write(data));
-  console.log(chalk78.green("\u2713 Chrome started"));
+  console.log(chalk74.green("\u2713 Chrome started"));
   try {
     await startNgrokTunnels(
       credentials.ngrokToken,
@@ -16957,18 +16665,18 @@ async function startComputerServices(credentials) {
       cdpPort
     );
     console.log(
-      chalk78.green(
+      chalk74.green(
         `\u2713 ngrok tunnels: webdav.${credentials.domain}, chrome.${credentials.domain}`
       )
     );
     console.log();
-    console.log(chalk78.green("\u2713 Computer connector active"));
+    console.log(chalk74.green("\u2713 Computer connector active"));
     console.log(`  WebDAV:     ~/Downloads \u2192 webdav.${credentials.domain}`);
     console.log(
       `  Chrome CDP: port ${cdpPort}   \u2192 chrome.${credentials.domain}`
     );
     console.log();
-    console.log(chalk78.dim("Press ^C twice to disconnect"));
+    console.log(chalk74.dim("Press ^C twice to disconnect"));
     console.log();
     let sigintCount = 0;
     await new Promise((resolve2) => {
@@ -16982,7 +16690,7 @@ async function startComputerServices(credentials) {
       const onSigint = () => {
         sigintCount++;
         if (sigintCount === 1) {
-          console.log(chalk78.dim("\nPress ^C again to disconnect and exit..."));
+          console.log(chalk74.dim("\nPress ^C again to disconnect and exit..."));
         } else {
           done();
         }
@@ -16992,11 +16700,11 @@ async function startComputerServices(credentials) {
     });
   } finally {
     console.log();
-    console.log(chalk78.cyan("Stopping services..."));
+    console.log(chalk74.cyan("Stopping services..."));
     wsgidav.kill("SIGTERM");
     chrome.kill("SIGTERM");
     await stopNgrokTunnels();
-    console.log(chalk78.green("\u2713 Services stopped"));
+    console.log(chalk74.green("\u2713 Services stopped"));
   }
 }
 
@@ -17021,10 +16729,10 @@ async function getHeaders2() {
 function renderHelpText(text) {
   return text.replace(
     /\[([^\]]+)\]\(([^)]+)\)/g,
-    (_m, label, url) => `${label} (${chalk79.cyan(url)})`
-  ).replace(/\*\*([^*]+)\*\*/g, (_m, content) => chalk79.bold(content)).replace(
+    (_m, label, url) => `${label} (${chalk75.cyan(url)})`
+  ).replace(/\*\*([^*]+)\*\*/g, (_m, content) => chalk75.bold(content)).replace(
     /^> (.+)$/gm,
-    (_m, content) => chalk79.yellow(`  ${content}`)
+    (_m, content) => chalk75.yellow(`  ${content}`)
   );
 }
 async function connectViaApiToken(connectorType, tokenValue) {
@@ -17049,7 +16757,7 @@ async function connectViaApiToken(connectorType, tokenValue) {
     for (const [secretName, secretConfig] of secretEntries) {
       if (!secretConfig.required) continue;
       const value = await promptPassword(
-        `${secretConfig.label}${secretConfig.placeholder ? chalk79.dim(` (${secretConfig.placeholder})`) : ""}:`
+        `${secretConfig.label}${secretConfig.placeholder ? chalk75.dim(` (${secretConfig.placeholder})`) : ""}:`
       );
       if (!value) {
         throw new Error("Cancelled");
@@ -17065,14 +16773,14 @@ async function connectViaApiToken(connectorType, tokenValue) {
     });
   }
   console.log(
-    chalk79.green(`
+    chalk75.green(`
 \u2713 ${config.label} connected successfully via API token!`)
   );
 }
 async function connectComputer(apiUrl, headers) {
   await checkComputerDependencies();
-  console.log(chalk79.cyan("Setting up computer connector..."));
-  const computerClient = initClient16(computerConnectorContract, {
+  console.log(chalk75.cyan("Setting up computer connector..."));
+  const computerClient = initClient15(computerConnectorContract, {
     baseUrl: apiUrl,
     baseHeaders: headers,
     jsonQuery: false
@@ -17086,9 +16794,9 @@ async function connectComputer(apiUrl, headers) {
   }
   const credentials = createResult.body;
   await startComputerServices(credentials);
-  console.log(chalk79.cyan("Disconnecting computer connector..."));
+  console.log(chalk75.cyan("Disconnecting computer connector..."));
   await deleteConnector("computer");
-  console.log(chalk79.green("\u2713 Disconnected computer"));
+  console.log(chalk75.green("\u2713 Disconnected computer"));
   process.exit(0);
 }
 async function resolveAuthMethod(connectorType, tokenFlag) {
@@ -17127,8 +16835,8 @@ async function resolveAuthMethod(connectorType, tokenFlag) {
   );
 }
 async function connectViaOAuth(connectorType, apiUrl, headers) {
-  console.log(`Connecting ${chalk79.cyan(connectorType)}...`);
-  const sessionsClient = initClient16(connectorSessionsContract, {
+  console.log(`Connecting ${chalk75.cyan(connectorType)}...`);
+  const sessionsClient = initClient15(connectorSessionsContract, {
     baseUrl: apiUrl,
     baseHeaders: headers,
     jsonQuery: false
@@ -17143,15 +16851,15 @@ async function connectViaOAuth(connectorType, apiUrl, headers) {
   }
   const session = createResult.body;
   const verificationUrl = `${apiUrl}${session.verificationUrl}`;
-  console.log(chalk79.green("\nSession created"));
-  console.log(chalk79.cyan(`
+  console.log(chalk75.green("\nSession created"));
+  console.log(chalk75.cyan(`
 To connect, visit: ${verificationUrl}`));
   console.log(
     `
 The session expires in ${Math.floor(session.expiresIn / 60)} minutes.`
   );
   console.log("\nWaiting for authorization...");
-  const sessionClient = initClient16(connectorSessionByIdContract, {
+  const sessionClient = initClient15(connectorSessionByIdContract, {
     baseUrl: apiUrl,
     baseHeaders: headers,
     jsonQuery: false
@@ -17176,7 +16884,7 @@ The session expires in ${Math.floor(session.expiresIn / 60)} minutes.`
     switch (status.status) {
       case "complete":
         console.log(
-          chalk79.green(`
+          chalk75.green(`
 
 ${connectorType} connected successfully!`)
         );
@@ -17188,13 +16896,13 @@ ${connectorType} connected successfully!`)
           `Connection failed: ${status.errorMessage || "Unknown error"}`
         );
       case "pending":
-        process.stdout.write(chalk79.dim("."));
+        process.stdout.write(chalk75.dim("."));
         break;
     }
   }
   throw new Error("Session timed out, please try again");
 }
-var connectCommand = new Command90().name("connect").description("Connect a third-party service (e.g., GitHub)").argument("<type>", "Connector type (e.g., github)").option("--token <value>", "API token value (skip interactive prompt)").action(
+var connectCommand = new Command85().name("connect").description("Connect a third-party service (e.g., GitHub)").argument("<type>", "Connector type (e.g., github)").option("--token <value>", "API token value (skip interactive prompt)").action(
   withErrorHandler(async (type2, options) => {
     const parseResult = connectorTypeSchema.safeParse(type2);
     if (!parseResult.success) {
@@ -17219,9 +16927,9 @@ var connectCommand = new Command90().name("connect").description("Connect a thir
 );
 
 // src/commands/connector/list.ts
-import { Command as Command91 } from "commander";
-import chalk80 from "chalk";
-var listCommand14 = new Command91().name("list").alias("ls").description("List all connectors and their status").action(
+import { Command as Command86 } from "commander";
+import chalk76 from "chalk";
+var listCommand13 = new Command86().name("list").alias("ls").description("List all connectors and their status").action(
   withErrorHandler(async () => {
     const result = await listConnectors();
     const connectedMap = new Map(result.connectors.map((c28) => [c28.type, c28]));
@@ -17243,25 +16951,26 @@ var listCommand14 = new Command91().name("list").alias("ls").description("List a
       statusText.padEnd(statusWidth),
       "ACCOUNT"
     ].join("  ");
-    console.log(chalk80.dim(header));
+    console.log(chalk76.dim(header));
     for (const type2 of allTypes) {
       const connector = connectedMap.get(type2);
-      const status = connector ? connector.needsReconnect ? chalk80.yellow("!".padEnd(statusWidth)) : chalk80.green("\u2713".padEnd(statusWidth)) : chalk80.dim("-".padEnd(statusWidth));
-      const account = connector?.needsReconnect ? chalk80.yellow("(reconnect needed)") : connector?.externalUsername ? `@${connector.externalUsername}` : chalk80.dim("-");
+      const scopeMismatch = connector !== void 0 && connector.authMethod === "oauth" && !hasRequiredScopes(type2, connector.oauthScopes);
+      const status = connector ? connector.needsReconnect ? chalk76.yellow("!".padEnd(statusWidth)) : scopeMismatch ? chalk76.yellow("!".padEnd(statusWidth)) : chalk76.green("\u2713".padEnd(statusWidth)) : chalk76.dim("-".padEnd(statusWidth));
+      const account = connector?.needsReconnect ? chalk76.yellow("(reconnect needed)") : scopeMismatch ? chalk76.yellow("(permissions update available)") : connector?.externalUsername ? `@${connector.externalUsername}` : chalk76.dim("-");
       const row = [type2.padEnd(typeWidth), status, account].join("  ");
       console.log(row);
     }
     console.log();
-    console.log(chalk80.dim("To connect a service:"));
-    console.log(chalk80.dim("  vm0 connector connect <type>"));
+    console.log(chalk76.dim("To connect a service:"));
+    console.log(chalk76.dim("  vm0 connector connect <type>"));
   })
 );
 
 // src/commands/connector/status.ts
-import { Command as Command92 } from "commander";
-import chalk81 from "chalk";
+import { Command as Command87 } from "commander";
+import chalk77 from "chalk";
 var LABEL_WIDTH = 16;
-var statusCommand8 = new Command92().name("status").description("Show detailed status of a connector").argument("<type>", "Connector type (e.g., github)").action(
+var statusCommand8 = new Command87().name("status").description("Show detailed status of a connector").argument("<type>", "Connector type (e.g., github)").action(
   withErrorHandler(async (type2) => {
     const parseResult = connectorTypeSchema.safeParse(type2);
     if (!parseResult.success) {
@@ -17271,11 +16980,11 @@ var statusCommand8 = new Command92().name("status").description("Show detailed s
       });
     }
     const connector = await getConnector(parseResult.data);
-    console.log(`Connector: ${chalk81.cyan(type2)}`);
+    console.log(`Connector: ${chalk77.cyan(type2)}`);
     console.log();
     if (connector) {
       console.log(
-        `${"Status:".padEnd(LABEL_WIDTH)}${chalk81.green("connected")}`
+        `${"Status:".padEnd(LABEL_WIDTH)}${chalk77.green("connected")}`
       );
       console.log(
         `${"Account:".padEnd(LABEL_WIDTH)}@${connector.externalUsername}`
@@ -17288,6 +16997,22 @@ var statusCommand8 = new Command92().name("status").description("Show detailed s
           `${"OAuth Scopes:".padEnd(LABEL_WIDTH)}${connector.oauthScopes.join(", ")}`
         );
       }
+      if (connector.authMethod === "oauth" && !hasRequiredScopes(parseResult.data, connector.oauthScopes)) {
+        const diff = getScopeDiff(parseResult.data, connector.oauthScopes);
+        console.log(
+          `${"Permissions:".padEnd(LABEL_WIDTH)}${chalk77.yellow("update available")}`
+        );
+        if (diff.addedScopes.length > 0) {
+          console.log(
+            `${"  Added:".padEnd(LABEL_WIDTH)}${diff.addedScopes.join(", ")}`
+          );
+        }
+        if (diff.removedScopes.length > 0) {
+          console.log(
+            `${"  Removed:".padEnd(LABEL_WIDTH)}${diff.removedScopes.join(", ")}`
+          );
+        }
+      }
       console.log(
         `${"Connected:".padEnd(LABEL_WIDTH)}${formatDateTime(connector.createdAt)}`
       );
@@ -17297,23 +17022,23 @@ var statusCommand8 = new Command92().name("status").description("Show detailed s
         );
       }
       console.log();
-      console.log(chalk81.dim("To disconnect:"));
-      console.log(chalk81.dim(`  vm0 connector disconnect ${type2}`));
+      console.log(chalk77.dim("To disconnect:"));
+      console.log(chalk77.dim(`  vm0 connector disconnect ${type2}`));
     } else {
       console.log(
-        `${"Status:".padEnd(LABEL_WIDTH)}${chalk81.dim("not connected")}`
+        `${"Status:".padEnd(LABEL_WIDTH)}${chalk77.dim("not connected")}`
       );
       console.log();
-      console.log(chalk81.dim("To connect:"));
-      console.log(chalk81.dim(`  vm0 connector connect ${type2}`));
+      console.log(chalk77.dim("To connect:"));
+      console.log(chalk77.dim(`  vm0 connector connect ${type2}`));
     }
   })
 );
 
 // src/commands/connector/disconnect.ts
-import { Command as Command93 } from "commander";
-import chalk82 from "chalk";
-var disconnectCommand = new Command93().name("disconnect").description("Disconnect a third-party service").argument("<type>", "Connector type to disconnect (e.g., github)").action(
+import { Command as Command88 } from "commander";
+import chalk78 from "chalk";
+var disconnectCommand = new Command88().name("disconnect").description("Disconnect a third-party service").argument("<type>", "Connector type to disconnect (e.g., github)").action(
   withErrorHandler(async (type2) => {
     const parseResult = connectorTypeSchema.safeParse(type2);
     if (!parseResult.success) {
@@ -17324,33 +17049,33 @@ var disconnectCommand = new Command93().name("disconnect").description("Disconne
     }
     const connectorType = parseResult.data;
     await deleteConnector(connectorType);
-    console.log(chalk82.green(`\u2713 Disconnected ${type2}`));
+    console.log(chalk78.green(`\u2713 Disconnected ${type2}`));
   })
 );
 
 // src/commands/connector/index.ts
-var connectorCommand = new Command94().name("connector").description("Manage third-party service connections").addCommand(listCommand14).addCommand(statusCommand8).addCommand(connectCommand).addCommand(disconnectCommand);
+var connectorCommand = new Command89().name("connector").description("Manage third-party service connections").addCommand(listCommand13).addCommand(statusCommand8).addCommand(connectCommand).addCommand(disconnectCommand);
 
 // src/commands/onboard/index.ts
-import { Command as Command95 } from "commander";
-import chalk86 from "chalk";
+import { Command as Command90 } from "commander";
+import chalk82 from "chalk";
 import { mkdir as mkdir8 } from "fs/promises";
 import { existsSync as existsSync12 } from "fs";
 
 // src/lib/ui/welcome-box.ts
-import chalk83 from "chalk";
+import chalk79 from "chalk";
 var gradientColors = [
-  chalk83.hex("#FFAB5E"),
+  chalk79.hex("#FFAB5E"),
   // Line 1 - lightest
-  chalk83.hex("#FF9642"),
+  chalk79.hex("#FF9642"),
   // Line 2
-  chalk83.hex("#FF8228"),
+  chalk79.hex("#FF8228"),
   // Line 3
-  chalk83.hex("#FF6D0A"),
+  chalk79.hex("#FF6D0A"),
   // Line 4
-  chalk83.hex("#E85D00"),
+  chalk79.hex("#E85D00"),
   // Line 5
-  chalk83.hex("#CC4E00")
+  chalk79.hex("#CC4E00")
   // Line 6 - darkest
 ];
 var vm0LogoLines = [
@@ -17372,15 +17097,15 @@ function renderVm0Banner() {
 function renderOnboardWelcome() {
   renderVm0Banner();
   console.log(`  Build agentic workflows using natural language.`);
-  console.log(`  ${chalk83.dim("Currently in beta, enjoy it free")}`);
+  console.log(`  ${chalk79.dim("Currently in beta, enjoy it free")}`);
   console.log(
-    `  ${chalk83.dim("Star us on GitHub: https://github.com/vm0-ai/vm0")}`
+    `  ${chalk79.dim("Star us on GitHub: https://github.com/vm0-ai/vm0")}`
   );
   console.log();
 }
 
 // src/lib/ui/step-runner.ts
-import chalk84 from "chalk";
+import chalk80 from "chalk";
 function createStepRunner(options = true) {
   const opts = typeof options === "boolean" ? { interactive: options } : options;
   const interactive = opts.interactive ?? true;
@@ -17395,25 +17120,25 @@ function createStepRunner(options = true) {
     }
     for (const [i, step] of completedSteps.entries()) {
       if (step.failed) {
-        console.log(chalk84.red(`\u2717 ${step.label}`));
+        console.log(chalk80.red(`\u2717 ${step.label}`));
       } else {
-        console.log(chalk84.green(`\u25CF ${step.label}`));
+        console.log(chalk80.green(`\u25CF ${step.label}`));
       }
       const isLastStep = i === completedSteps.length - 1;
       if (!isLastStep || !isFinal) {
-        console.log(chalk84.dim("\u2502"));
+        console.log(chalk80.dim("\u2502"));
       }
     }
   }
   async function executeStep(label, fn, isFinal) {
     let stepFailed = false;
-    console.log(chalk84.yellow(`\u25CB ${label}`));
+    console.log(chalk80.yellow(`\u25CB ${label}`));
     const ctx = {
       connector() {
-        console.log(chalk84.dim("\u2502"));
+        console.log(chalk80.dim("\u2502"));
       },
       detail(message) {
-        console.log(`${chalk84.dim("\u2502")} ${message}`);
+        console.log(`${chalk80.dim("\u2502")} ${message}`);
       },
       async prompt(promptFn) {
         return await promptFn();
@@ -17430,12 +17155,12 @@ function createStepRunner(options = true) {
         redrawCompletedSteps(isFinal);
       } else {
         if (stepFailed) {
-          console.log(chalk84.red(`\u2717 ${label}`));
+          console.log(chalk80.red(`\u2717 ${label}`));
         } else {
-          console.log(chalk84.green(`\u25CF ${label}`));
+          console.log(chalk80.green(`\u25CF ${label}`));
         }
         if (!isFinal) {
-          console.log(chalk84.dim("\u2502"));
+          console.log(chalk80.dim("\u2502"));
         }
       }
     }
@@ -17559,8 +17284,12 @@ var ONBOARD_PROVIDER_TYPES = [
   "minimax-api-key",
   "deepseek-api-key"
 ];
+async function checkIsOrgAdmin() {
+  const org = await getOrg();
+  return org.role === "admin";
+}
 async function checkModelProviderStatus() {
-  const response = await listModelProviders();
+  const response = await listOrgModelProviders();
   return {
     hasProvider: response.modelProviders.length > 0,
     providers: response.modelProviders
@@ -17580,7 +17309,7 @@ function getProviderChoices() {
   });
 }
 async function setupModelProvider(type2, secret, options) {
-  const response = await upsertModelProvider({
+  const response = await upsertOrgModelProvider({
     type: type2,
     secret,
     selectedModel: options?.selectedModel
@@ -17595,7 +17324,7 @@ async function setupModelProvider(type2, secret, options) {
 
 // src/lib/domain/onboard/claude-setup.ts
 import { spawn as spawn3 } from "child_process";
-import chalk85 from "chalk";
+import chalk81 from "chalk";
 var MARKETPLACE_NAME = "vm0-skills";
 var MARKETPLACE_REPO = "vm0-ai/vm0-skills";
 var PLUGIN_ID = "vm0@vm0-skills";
@@ -17632,12 +17361,12 @@ async function runClaudeCommand(args, cwd) {
 }
 function handlePluginError(error, context) {
   const displayContext = context ?? "Claude plugin";
-  console.error(chalk85.red(`\u2717 Failed to install ${displayContext}`));
+  console.error(chalk81.red(`\u2717 Failed to install ${displayContext}`));
   if (error instanceof Error) {
-    console.error(chalk85.red(`\u2717 ${error.message}`));
+    console.error(chalk81.red(`\u2717 ${error.message}`));
   }
   console.error(
-    chalk85.dim("Please ensure Claude CLI is installed and accessible.")
+    chalk81.dim("Please ensure Claude CLI is installed and accessible.")
   );
   process.exit(1);
 }
@@ -17680,7 +17409,7 @@ async function updateMarketplace() {
   ]);
   if (!result.success) {
     console.warn(
-      chalk85.yellow(
+      chalk81.yellow(
         `Warning: Could not update marketplace: ${result.error ?? "unknown error"}`
       )
     );
@@ -17726,9 +17455,9 @@ async function handleAuthentication(ctx) {
       onInitiating: () => {
       },
       onDeviceCodeReady: (url, code, expiresIn) => {
-        step.detail(`Copy code: ${chalk86.cyan.bold(code)}`);
-        step.detail(`Open: ${chalk86.cyan(url)}`);
-        step.detail(chalk86.dim(`Expires in ${expiresIn} minutes`));
+        step.detail(`Copy code: ${chalk82.cyan.bold(code)}`);
+        step.detail(`Open: ${chalk82.cyan(url)}`);
+        step.detail(chalk82.dim(`Expires in ${expiresIn} minutes`));
       },
       onPolling: () => {
       },
@@ -17746,9 +17475,17 @@ async function handleModelProvider(ctx) {
     if (providerStatus.hasProvider) {
       return;
     }
+    const isAdmin = await checkIsOrgAdmin();
+    if (!isAdmin) {
+      throw new Error("No model provider configured", {
+        cause: new Error(
+          "Contact your org admin to configure a model provider"
+        )
+      });
+    }
     if (!ctx.interactive) {
       throw new Error("No model provider configured", {
-        cause: new Error("Run 'vm0 model-provider setup' first")
+        cause: new Error("Run 'vm0 org model-provider setup' first")
       });
     }
     const choices = getProviderChoices();
@@ -17768,14 +17505,14 @@ async function handleModelProvider(ctx) {
     const selectedChoice = choices.find((c28) => c28.type === providerType);
     if (selectedChoice?.helpText) {
       for (const line of selectedChoice.helpText.split("\n")) {
-        step.detail(chalk86.dim(line));
+        step.detail(chalk82.dim(line));
       }
     }
     const secret = await step.prompt(
       () => promptPassword(`Enter your ${selectedChoice?.secretLabel ?? "secret"}:`)
     );
     if (!secret) {
-      console.log(chalk86.dim("Cancelled"));
+      console.log(chalk82.dim("Cancelled"));
       process.exit(0);
     }
     let selectedModel;
@@ -17794,7 +17531,7 @@ async function handleModelProvider(ctx) {
         () => promptSelect("Select model:", modelChoices)
       );
       if (modelSelection === void 0) {
-        console.log(chalk86.dim("Cancelled"));
+        console.log(chalk82.dim("Cancelled"));
         process.exit(0);
       }
       selectedModel = modelSelection === "" ? void 0 : modelSelection;
@@ -17804,7 +17541,7 @@ async function handleModelProvider(ctx) {
     });
     const modelNote = result.provider.selectedModel ? ` with model: ${result.provider.selectedModel}` : "";
     step.detail(
-      chalk86.green(
+      chalk82.green(
         `${providerType} ${result.created ? "created" : "updated"}${result.isDefault ? ` (default for ${result.framework})` : ""}${modelNote}`
       )
     );
@@ -17835,7 +17572,7 @@ async function handleAgentCreation(ctx) {
         agentName = inputName;
         if (existsSync12(agentName)) {
           step.detail(
-            chalk86.yellow(`${agentName}/ already exists, choose another name`)
+            chalk82.yellow(`${agentName}/ already exists, choose another name`)
           );
         } else {
           folderExists = false;
@@ -17856,7 +17593,7 @@ async function handleAgentCreation(ctx) {
       }
     }
     await mkdir8(agentName, { recursive: true });
-    step.detail(chalk86.green(`Created ${agentName}/`));
+    step.detail(chalk82.green(`Created ${agentName}/`));
   });
   return agentName;
 }
@@ -17872,7 +17609,7 @@ async function handlePluginInstallation(ctx, agentName) {
       shouldInstall = confirmed ?? true;
     }
     if (!shouldInstall) {
-      step.detail(chalk86.dim("Skipped"));
+      step.detail(chalk82.dim("Skipped"));
       return;
     }
     const scope = "project";
@@ -17880,7 +17617,7 @@ async function handlePluginInstallation(ctx, agentName) {
       const agentDir = `${process.cwd()}/${agentName}`;
       const result = await installVm0Plugin(scope, agentDir);
       step.detail(
-        chalk86.green(`Installed ${result.pluginId} (scope: ${result.scope})`)
+        chalk82.green(`Installed ${result.pluginId} (scope: ${result.scope})`)
       );
       pluginInstalled = true;
     } catch (error) {
@@ -17891,18 +17628,18 @@ async function handlePluginInstallation(ctx, agentName) {
 }
 function printNextSteps(agentName, pluginInstalled) {
   console.log();
-  console.log(chalk86.bold("Next step:"));
+  console.log(chalk82.bold("Next step:"));
   console.log();
   if (pluginInstalled) {
     console.log(
-      `  ${chalk86.cyan(`cd ${agentName} && claude "/${PRIMARY_SKILL_NAME} let's build an agent"`)}`
+      `  ${chalk82.cyan(`cd ${agentName} && claude "/${PRIMARY_SKILL_NAME} let's build an agent"`)}`
     );
   } else {
-    console.log(`  ${chalk86.cyan(`cd ${agentName} && vm0 init`)}`);
+    console.log(`  ${chalk82.cyan(`cd ${agentName} && vm0 init`)}`);
   }
   console.log();
 }
-var onboardCommand = new Command95().name("onboard").description("Guided setup for new VM0 users").option("-y, --yes", "Skip confirmation prompts").option("--name <name>", `Agent name (default: ${DEFAULT_AGENT_NAME})`).action(
+var onboardCommand = new Command90().name("onboard").description("Guided setup for new VM0 users").option("-y, --yes", "Skip confirmation prompts").option("--name <name>", `Agent name (default: ${DEFAULT_AGENT_NAME})`).action(
   withErrorHandler(async (options) => {
     const interactive = isInteractive();
     if (interactive) {
@@ -17927,21 +17664,21 @@ var onboardCommand = new Command95().name("onboard").description("Guided setup f
 );
 
 // src/commands/setup-claude/index.ts
-import { Command as Command96 } from "commander";
-import chalk87 from "chalk";
-var setupClaudeCommand = new Command96().name("setup-claude").description("Install VM0 Claude Plugin").option("--agent-dir <dir>", "Agent directory to run install in").option("--scope <scope>", "Installation scope (user or project)", "project").action(
+import { Command as Command91 } from "commander";
+import chalk83 from "chalk";
+var setupClaudeCommand = new Command91().name("setup-claude").description("Install VM0 Claude Plugin").option("--agent-dir <dir>", "Agent directory to run install in").option("--scope <scope>", "Installation scope (user or project)", "project").action(
   withErrorHandler(async (options) => {
-    console.log(chalk87.dim("Installing VM0 Claude Plugin..."));
+    console.log(chalk83.dim("Installing VM0 Claude Plugin..."));
     const scope = options.scope === "user" ? "user" : "project";
     const result = await installVm0Plugin(scope, options.agentDir);
     console.log(
-      chalk87.green(`\u2713 Installed ${result.pluginId} (scope: ${result.scope})`)
+      chalk83.green(`\u2713 Installed ${result.pluginId} (scope: ${result.scope})`)
     );
     console.log();
     console.log("Next step:");
     const cdPrefix = options.agentDir ? `cd ${options.agentDir} && ` : "";
     console.log(
-      chalk87.cyan(
+      chalk83.cyan(
         `  ${cdPrefix}claude "/${PRIMARY_SKILL_NAME} let's build a workflow"`
       )
     );
@@ -17949,36 +17686,36 @@ var setupClaudeCommand = new Command96().name("setup-claude").description("Insta
 );
 
 // src/commands/dashboard/index.ts
-import { Command as Command97 } from "commander";
-import chalk88 from "chalk";
-var dashboardCommand = new Command97().name("dashboard").description("Quick reference for common query commands").action(() => {
+import { Command as Command92 } from "commander";
+import chalk84 from "chalk";
+var dashboardCommand = new Command92().name("dashboard").description("Quick reference for common query commands").action(() => {
   console.log();
-  console.log(chalk88.bold("VM0 Dashboard"));
+  console.log(chalk84.bold("VM0 Dashboard"));
   console.log();
-  console.log(chalk88.bold("Agents"));
-  console.log(chalk88.dim("  List agents:      ") + "vm0 agent list");
+  console.log(chalk84.bold("Agents"));
+  console.log(chalk84.dim("  List agents:      ") + "vm0 agent list");
   console.log();
-  console.log(chalk88.bold("Runs"));
-  console.log(chalk88.dim("  Recent runs:      ") + "vm0 run list");
-  console.log(chalk88.dim("  View run logs:    ") + "vm0 logs <run-id>");
+  console.log(chalk84.bold("Runs"));
+  console.log(chalk84.dim("  Recent runs:      ") + "vm0 run list");
+  console.log(chalk84.dim("  View run logs:    ") + "vm0 logs <run-id>");
   console.log();
-  console.log(chalk88.bold("Schedules"));
-  console.log(chalk88.dim("  List schedules:   ") + "vm0 schedule list");
+  console.log(chalk84.bold("Schedules"));
+  console.log(chalk84.dim("  List schedules:   ") + "vm0 schedule list");
   console.log();
-  console.log(chalk88.bold("Account"));
-  console.log(chalk88.dim("  Usage stats:      ") + "vm0 usage");
-  console.log(chalk88.dim("  List secrets:     ") + "vm0 secret list");
-  console.log(chalk88.dim("  List variables:   ") + "vm0 variable list");
+  console.log(chalk84.bold("Account"));
+  console.log(chalk84.dim("  Usage stats:      ") + "vm0 usage");
+  console.log(chalk84.dim("  List secrets:     ") + "vm0 secret list");
+  console.log(chalk84.dim("  List variables:   ") + "vm0 variable list");
   console.log();
   console.log(
-    chalk88.dim("Not logged in? Run: ") + chalk88.cyan("vm0 auth login")
+    chalk84.dim("Not logged in? Run: ") + chalk84.cyan("vm0 auth login")
   );
   console.log();
 });
 
 // src/commands/preference/index.ts
-import { Command as Command98 } from "commander";
-import chalk89 from "chalk";
+import { Command as Command93 } from "commander";
+import chalk85 from "chalk";
 function detectTimezone2() {
   return Intl.DateTimeFormat().resolvedOptions().timeZone;
 }
@@ -17999,15 +17736,15 @@ function parseOnOff(flag, value) {
   );
 }
 function displayPreferences(prefs) {
-  console.log(chalk89.bold("Current preferences:"));
+  console.log(chalk85.bold("Current preferences:"));
   console.log(
-    `  Timezone:      ${prefs.timezone ? chalk89.cyan(prefs.timezone) : chalk89.dim("not set")}`
+    `  Timezone:      ${prefs.timezone ? chalk85.cyan(prefs.timezone) : chalk85.dim("not set")}`
   );
   console.log(
-    `  Email notify:  ${prefs.notifyEmail ? chalk89.green("on") : chalk89.dim("off")}`
+    `  Email notify:  ${prefs.notifyEmail ? chalk85.green("on") : chalk85.dim("off")}`
   );
   console.log(
-    `  Slack notify:  ${prefs.notifySlack ? chalk89.green("on") : chalk89.dim("off")}`
+    `  Slack notify:  ${prefs.notifySlack ? chalk85.green("on") : chalk85.dim("off")}`
   );
 }
 function buildUpdates(opts) {
@@ -18037,21 +17774,21 @@ function buildUpdates(opts) {
 function printUpdateResult(updates, result) {
   if (updates.timezone !== void 0) {
     console.log(
-      chalk89.green(
-        `Timezone set to ${chalk89.cyan(result.timezone ?? updates.timezone)}`
+      chalk85.green(
+        `Timezone set to ${chalk85.cyan(result.timezone ?? updates.timezone)}`
       )
     );
   }
   if (updates.notifyEmail !== void 0) {
     console.log(
-      chalk89.green(
+      chalk85.green(
         `Email notifications ${result.notifyEmail ? "enabled" : "disabled"}`
       )
     );
   }
   if (updates.notifySlack !== void 0) {
     console.log(
-      chalk89.green(
+      chalk85.green(
         `Slack notifications ${result.notifySlack ? "enabled" : "disabled"}`
       )
     );
@@ -18060,7 +17797,7 @@ function printUpdateResult(updates, result) {
 async function interactiveSetup(prefs) {
   if (!prefs.timezone) {
     const detectedTz = detectTimezone2();
-    console.log(chalk89.dim(`
+    console.log(chalk85.dim(`
 System timezone detected: ${detectedTz}`));
     const tz = await promptText(
       "Set timezone? (enter timezone or leave empty to skip)",
@@ -18071,7 +17808,7 @@ System timezone detected: ${detectedTz}`));
         throw new Error(`Invalid timezone: ${tz.trim()}`);
       }
       await updateUserPreferences({ timezone: tz.trim() });
-      console.log(chalk89.green(`Timezone set to ${chalk89.cyan(tz.trim())}`));
+      console.log(chalk85.green(`Timezone set to ${chalk85.cyan(tz.trim())}`));
     }
   }
   if (!prefs.notifyEmail) {
@@ -18081,11 +17818,11 @@ System timezone detected: ${detectedTz}`));
     );
     if (enable) {
       await updateUserPreferences({ notifyEmail: true });
-      console.log(chalk89.green("Email notifications enabled"));
+      console.log(chalk85.green("Email notifications enabled"));
     }
   }
 }
-var preferenceCommand = new Command98().name("preference").description("View or update your preferences").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").option("--notify-email <on|off>", "Enable or disable email notifications").option("--notify-slack <on|off>", "Enable or disable Slack notifications").action(
+var preferenceCommand = new Command93().name("preference").description("View or update your preferences").option("--timezone <timezone>", "IANA timezone (e.g., America/New_York)").option("--notify-email <on|off>", "Enable or disable email notifications").option("--notify-slack <on|off>", "Enable or disable Slack notifications").action(
   withErrorHandler(async (opts) => {
     const updates = buildUpdates(opts);
     if (updates) {
@@ -18100,32 +17837,32 @@ var preferenceCommand = new Command98().name("preference").description("View or
     } else if (!prefs.timezone) {
       console.log();
       console.log(
-        `To set timezone: ${chalk89.cyan("vm0 preference --timezone <timezone>")}`
+        `To set timezone: ${chalk85.cyan("vm0 preference --timezone <timezone>")}`
       );
       console.log(
-        chalk89.dim("Example: vm0 preference --timezone America/New_York")
+        chalk85.dim("Example: vm0 preference --timezone America/New_York")
       );
     }
   })
 );
 
 // src/commands/upgrade/index.ts
-import { Command as Command99 } from "commander";
-import chalk90 from "chalk";
-var upgradeCommand = new Command99().name("upgrade").description("Upgrade vm0 CLI to the latest version").action(
+import { Command as Command94 } from "commander";
+import chalk86 from "chalk";
+var upgradeCommand = new Command94().name("upgrade").description("Upgrade vm0 CLI to the latest version").action(
   withErrorHandler(async () => {
     console.log("Checking for updates...");
     const latestVersion = await getLatestVersion();
     if (latestVersion === null) {
       throw new Error("Could not check for updates. Please try again later.");
     }
-    if (latestVersion === "9.64.2") {
-      console.log(chalk90.green(`\u2713 Already up to date (${"9.64.2"})`));
+    if (latestVersion === "9.65.1") {
+      console.log(chalk86.green(`\u2713 Already up to date (${"9.65.1"})`));
       return;
     }
     console.log(
-      chalk90.yellow(
-        `Current version: ${"9.64.2"} -> Latest version: ${latestVersion}`
+      chalk86.yellow(
+        `Current version: ${"9.65.1"} -> Latest version: ${latestVersion}`
       )
     );
     console.log();
@@ -18133,26 +17870,26 @@ var upgradeCommand = new Command99().name("upgrade").description("Upgrade vm0 CL
     if (!isAutoUpgradeSupported(packageManager)) {
       if (packageManager === "unknown") {
         console.log(
-          chalk90.yellow(
+          chalk86.yellow(
             "Could not detect your package manager for auto-upgrade."
           )
         );
       } else {
         console.log(
-          chalk90.yellow(
+          chalk86.yellow(
             `Auto-upgrade is not supported for ${packageManager}.`
           )
         );
       }
-      console.log(chalk90.yellow("Please upgrade manually:"));
-      console.log(chalk90.cyan(`  ${getManualUpgradeCommand(packageManager)}`));
+      console.log(chalk86.yellow("Please upgrade manually:"));
+      console.log(chalk86.cyan(`  ${getManualUpgradeCommand(packageManager)}`));
       return;
     }
     console.log(`Upgrading via ${packageManager}...`);
     const success = await performUpgrade(packageManager);
     if (success) {
       console.log(
-        chalk90.green(`\u2713 Upgraded from ${"9.64.2"} to ${latestVersion}`)
+        chalk86.green(`\u2713 Upgraded from ${"9.65.1"} to ${latestVersion}`)
       );
       return;
     }
@@ -18165,8 +17902,8 @@ var upgradeCommand = new Command99().name("upgrade").description("Upgrade vm0 CL
 );
 
 // src/index.ts
-var program = new Command100();
-program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.64.2");
+var program = new Command95();
+program.name("vm0").description("VM0 CLI - Build and run agents with natural language").version("9.65.1");
 program.addCommand(authCommand);
 program.addCommand(infoCommand);
 program.addCommand(composeCommand);
@@ -18183,7 +17920,6 @@ program.addCommand(scheduleCommand);
 program.addCommand(usageCommand);
 program.addCommand(secretCommand);
 program.addCommand(variableCommand);
-program.addCommand(modelProviderCommand2);
 program.addCommand(connectorCommand);
 program.addCommand(onboardCommand);
 program.addCommand(setupClaudeCommand);