@vm0/runner 2.2.0 → 2.2.2

package/index.js

@@ -4783,11 +4783,32 @@ var volumeConfigSchema = z4.object({
   name: z4.string().min(1, "Volume name is required"),
   version: z4.string().min(1, "Volume version is required")
 });
+var SUPPORTED_APPS = ["github"];
+var appStringSchema = z4.string().regex(
+  /^[a-z]+(:(?:latest|dev))?$/,
+  "App must be in format 'app' or 'app:tag' (e.g., 'github', 'github:dev')"
+).refine(
+  (val) => {
+    const [app] = val.split(":");
+    return SUPPORTED_APPS.includes(app);
+  },
+  `Unsupported app. Supported apps: ${SUPPORTED_APPS.join(", ")}`
+);
 var agentDefinitionSchema = z4.object({
   description: z4.string().optional(),
+  /**
+   * @deprecated Use `apps` field instead for pre-installed tools.
+   * This field will be removed in a future version.
+   */
   image: z4.string().optional(),
-  // Optional when provider supports auto-config
   provider: z4.string().min(1, "Provider is required"),
+  /**
+   * Array of pre-installed apps/tools for the agent environment.
+   * Format: "app" or "app:tag" (e.g., "github", "github:dev", "github:latest")
+   * Default tag is "latest" if not specified.
+   * Currently supported apps: "github" (includes GitHub CLI)
+   */
+  apps: z4.array(appStringSchema).optional(),
   volumes: z4.array(z4.string()).optional(),
   working_dir: z4.string().optional(),
   // Optional when provider supports auto-config
@@ -5806,143 +5827,21 @@ var authContract = c6.router({
   }
 });
 
-// ../../packages/core/src/contracts/images.ts
+// ../../packages/core/src/contracts/cron.ts
 import { z as z10 } from "zod";
 var c7 = initContract();
-var buildStatusSchema = z10.enum(["building", "ready", "error"]);
-var imageInfoSchema = z10.object({
-  id: z10.string(),
-  alias: z10.string(),
-  versionId: z10.string().nullable(),
-  // null for legacy images without versioning
-  status: z10.string(),
-  errorMessage: z10.string().nullable(),
-  createdAt: z10.coerce.date(),
-  updatedAt: z10.coerce.date()
-});
-var createImageRequestSchema = z10.object({
-  dockerfile: z10.string().min(1, "dockerfile is required"),
-  alias: z10.string().min(3, "alias must be at least 3 characters").max(64, "alias must be at most 64 characters").regex(
-    /^[a-zA-Z0-9][a-zA-Z0-9-]{1,62}[a-zA-Z0-9]$/,
-    "alias must be 3-64 characters, alphanumeric and hyphens, start/end with alphanumeric"
-  ).refine(
-    (val) => !val.toLowerCase().startsWith("vm0-"),
-    'alias cannot start with "vm0-" (reserved for system templates)'
-  ).transform((s) => s.toLowerCase()),
-  deleteExisting: z10.boolean().optional()
-});
-var createImageResponseSchema = z10.object({
-  buildId: z10.string(),
-  imageId: z10.string(),
-  alias: z10.string(),
-  versionId: z10.string()
-  // nanoid(8), unique per build
-});
-var buildStatusResponseSchema = z10.object({
-  status: buildStatusSchema,
-  logs: z10.array(z10.string()),
-  logsOffset: z10.number(),
+var cleanupResultSchema = z10.object({
+  runId: z10.string(),
+  sandboxId: z10.string().nullable(),
+  status: z10.enum(["cleaned", "error"]),
   error: z10.string().optional()
 });
-var imagesMainContract = c7.router({
-  /**
-   * GET /api/images
-   * List all images for authenticated user
-   */
-  list: {
-    method: "GET",
-    path: "/api/images",
-    responses: {
-      200: z10.object({
-        images: z10.array(imageInfoSchema)
-      }),
-      401: apiErrorSchema,
-      500: apiErrorSchema
-    },
-    summary: "List user images"
-  },
-  /**
-   * POST /api/images
-   * Create an image build task from a Dockerfile
-   */
-  create: {
-    method: "POST",
-    path: "/api/images",
-    body: createImageRequestSchema,
-    responses: {
-      202: createImageResponseSchema,
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      500: apiErrorSchema
-    },
-    summary: "Create image build"
-  }
-});
-var imagesByIdContract = c7.router({
-  /**
-   * DELETE /api/images/:imageId
-   * Delete an image by ID
-   */
-  delete: {
-    method: "DELETE",
-    path: "/api/images/:imageId",
-    pathParams: z10.object({
-      imageId: z10.string().min(1, "imageId is required")
-    }),
-    responses: {
-      200: z10.object({
-        deleted: z10.boolean()
-      }),
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      403: apiErrorSchema,
-      404: apiErrorSchema,
-      500: apiErrorSchema
-    },
-    summary: "Delete image"
-  }
-});
-var imageBuildsContract = c7.router({
-  /**
-   * GET /api/images/:imageId/builds/:buildId
-   * Query build status with incremental logs
-   */
-  getStatus: {
-    method: "GET",
-    path: "/api/images/:imageId/builds/:buildId",
-    pathParams: z10.object({
-      imageId: z10.string().min(1, "imageId is required"),
-      buildId: z10.string().min(1, "buildId is required")
-    }),
-    query: z10.object({
-      logsOffset: z10.coerce.number().int().min(0).optional().default(0)
-    }),
-    responses: {
-      200: buildStatusResponseSchema,
-      400: apiErrorSchema,
-      401: apiErrorSchema,
-      404: apiErrorSchema,
-      500: apiErrorSchema
-    },
-    summary: "Get build status"
-  }
+var cleanupResponseSchema = z10.object({
+  cleaned: z10.number(),
+  errors: z10.number(),
+  results: z10.array(cleanupResultSchema)
 });
-
-// ../../packages/core/src/contracts/cron.ts
-import { z as z11 } from "zod";
-var c8 = initContract();
-var cleanupResultSchema = z11.object({
-  runId: z11.string(),
-  sandboxId: z11.string().nullable(),
-  status: z11.enum(["cleaned", "error"]),
-  error: z11.string().optional()
-});
-var cleanupResponseSchema = z11.object({
-  cleaned: z11.number(),
-  errors: z11.number(),
-  results: z11.array(cleanupResultSchema)
-});
-var cronCleanupSandboxesContract = c8.router({
+var cronCleanupSandboxesContract = c7.router({
   /**
    * GET /api/cron/cleanup-sandboxes
    * Cron job to cleanup sandboxes that have stopped sending heartbeats
@@ -5960,48 +5859,48 @@ var cronCleanupSandboxesContract = c8.router({
 });
 
 // ../../packages/core/src/contracts/proxy.ts
-import { z as z12 } from "zod";
-var proxyErrorSchema = z12.object({
-  error: z12.object({
-    message: z12.string(),
-    code: z12.enum([
+import { z as z11 } from "zod";
+var proxyErrorSchema = z11.object({
+  error: z11.object({
+    message: z11.string(),
+    code: z11.enum([
       "UNAUTHORIZED",
       "BAD_REQUEST",
       "BAD_GATEWAY",
       "INTERNAL_ERROR"
     ]),
-    targetUrl: z12.string().optional()
+    targetUrl: z11.string().optional()
   })
 });
 
 // ../../packages/core/src/contracts/scopes.ts
-import { z as z13 } from "zod";
-var c9 = initContract();
-var scopeTypeSchema = z13.enum(["personal", "organization", "system"]);
-var scopeSlugSchema = z13.string().min(3, "Scope slug must be at least 3 characters").max(64, "Scope slug must be at most 64 characters").regex(
+import { z as z12 } from "zod";
+var c8 = initContract();
+var scopeTypeSchema = z12.enum(["personal", "organization", "system"]);
+var scopeSlugSchema = z12.string().min(3, "Scope slug must be at least 3 characters").max(64, "Scope slug must be at most 64 characters").regex(
   /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]{1,2}$/,
   "Scope slug must contain only lowercase letters, numbers, and hyphens, and must start and end with an alphanumeric character"
 ).refine(
   (slug) => !slug.startsWith("vm0"),
   "Scope slug cannot start with 'vm0' (reserved)"
 ).transform((s) => s.toLowerCase());
-var scopeResponseSchema = z13.object({
-  id: z13.string().uuid(),
-  slug: z13.string(),
+var scopeResponseSchema = z12.object({
+  id: z12.string().uuid(),
+  slug: z12.string(),
   type: scopeTypeSchema,
-  displayName: z13.string().nullable(),
-  createdAt: z13.string(),
-  updatedAt: z13.string()
+  displayName: z12.string().nullable(),
+  createdAt: z12.string(),
+  updatedAt: z12.string()
 });
-var createScopeRequestSchema = z13.object({
+var createScopeRequestSchema = z12.object({
   slug: scopeSlugSchema,
-  displayName: z13.string().max(128).optional()
+  displayName: z12.string().max(128).optional()
 });
-var updateScopeRequestSchema = z13.object({
+var updateScopeRequestSchema = z12.object({
   slug: scopeSlugSchema,
-  force: z13.boolean().optional().default(false)
+  force: z12.boolean().optional().default(false)
 });
-var scopeContract = c9.router({
+var scopeContract = c8.router({
   /**
    * GET /api/scope
    * Get current user's scope
@@ -6056,42 +5955,42 @@ var scopeContract = c9.router({
 });
 
 // ../../packages/core/src/contracts/sessions.ts
-import { z as z14 } from "zod";
-var c10 = initContract();
-var sessionResponseSchema = z14.object({
-  id: z14.string(),
-  agentComposeId: z14.string(),
-  agentComposeVersionId: z14.string().nullable(),
-  conversationId: z14.string().nullable(),
-  artifactName: z14.string().nullable(),
-  vars: z14.record(z14.string(), z14.string()).nullable(),
-  secretNames: z14.array(z14.string()).nullable(),
-  volumeVersions: z14.record(z14.string(), z14.string()).nullable(),
-  createdAt: z14.string(),
-  updatedAt: z14.string()
+import { z as z13 } from "zod";
+var c9 = initContract();
+var sessionResponseSchema = z13.object({
+  id: z13.string(),
+  agentComposeId: z13.string(),
+  agentComposeVersionId: z13.string().nullable(),
+  conversationId: z13.string().nullable(),
+  artifactName: z13.string().nullable(),
+  vars: z13.record(z13.string(), z13.string()).nullable(),
+  secretNames: z13.array(z13.string()).nullable(),
+  volumeVersions: z13.record(z13.string(), z13.string()).nullable(),
+  createdAt: z13.string(),
+  updatedAt: z13.string()
 });
-var agentComposeSnapshotSchema = z14.object({
-  agentComposeVersionId: z14.string(),
-  vars: z14.record(z14.string(), z14.string()).optional(),
-  secretNames: z14.array(z14.string()).optional()
+var agentComposeSnapshotSchema = z13.object({
+  agentComposeVersionId: z13.string(),
+  vars: z13.record(z13.string(), z13.string()).optional(),
+  secretNames: z13.array(z13.string()).optional()
 });
-var artifactSnapshotSchema2 = z14.object({
-  artifactName: z14.string(),
-  artifactVersion: z14.string()
+var artifactSnapshotSchema2 = z13.object({
+  artifactName: z13.string(),
+  artifactVersion: z13.string()
 });
-var volumeVersionsSnapshotSchema2 = z14.object({
-  versions: z14.record(z14.string(), z14.string())
+var volumeVersionsSnapshotSchema2 = z13.object({
+  versions: z13.record(z13.string(), z13.string())
 });
-var checkpointResponseSchema = z14.object({
-  id: z14.string(),
-  runId: z14.string(),
-  conversationId: z14.string(),
+var checkpointResponseSchema = z13.object({
+  id: z13.string(),
+  runId: z13.string(),
+  conversationId: z13.string(),
   agentComposeSnapshot: agentComposeSnapshotSchema,
   artifactSnapshot: artifactSnapshotSchema2.nullable(),
   volumeVersionsSnapshot: volumeVersionsSnapshotSchema2.nullable(),
-  createdAt: z14.string()
+  createdAt: z13.string()
 });
-var sessionsByIdContract = c10.router({
+var sessionsByIdContract = c9.router({
   /**
    * GET /api/agent/sessions/:id
    * Get session by ID
@@ -6099,8 +5998,8 @@ var sessionsByIdContract = c10.router({
   getById: {
     method: "GET",
     path: "/api/agent/sessions/:id",
-    pathParams: z14.object({
-      id: z14.string().min(1, "Session ID is required")
+    pathParams: z13.object({
+      id: z13.string().min(1, "Session ID is required")
     }),
     responses: {
       200: sessionResponseSchema,
@@ -6111,7 +6010,7 @@ var sessionsByIdContract = c10.router({
     summary: "Get session by ID"
   }
 });
-var checkpointsByIdContract = c10.router({
+var checkpointsByIdContract = c9.router({
   /**
    * GET /api/agent/checkpoints/:id
    * Get checkpoint by ID
@@ -6119,8 +6018,8 @@ var checkpointsByIdContract = c10.router({
   getById: {
     method: "GET",
     path: "/api/agent/checkpoints/:id",
-    pathParams: z14.object({
-      id: z14.string().min(1, "Checkpoint ID is required")
+    pathParams: z13.object({
+      id: z13.string().min(1, "Checkpoint ID is required")
     }),
     responses: {
       200: checkpointResponseSchema,
@@ -6133,29 +6032,29 @@ var checkpointsByIdContract = c10.router({
 });
 
 // ../../packages/core/src/contracts/runners.ts
-import { z as z15 } from "zod";
-var c11 = initContract();
-var runnerGroupSchema = z15.string().regex(
+import { z as z14 } from "zod";
+var c10 = initContract();
+var runnerGroupSchema = z14.string().regex(
   /^[a-z0-9-]+\/[a-z0-9-]+$/,
   "Runner group must be in scope/name format (e.g., acme/production)"
 );
-var jobSchema = z15.object({
-  runId: z15.string().uuid(),
-  prompt: z15.string(),
-  agentComposeVersionId: z15.string(),
-  vars: z15.record(z15.string(), z15.string()).nullable(),
-  secretNames: z15.array(z15.string()).nullable(),
-  checkpointId: z15.string().uuid().nullable()
+var jobSchema = z14.object({
+  runId: z14.string().uuid(),
+  prompt: z14.string(),
+  agentComposeVersionId: z14.string(),
+  vars: z14.record(z14.string(), z14.string()).nullable(),
+  secretNames: z14.array(z14.string()).nullable(),
+  checkpointId: z14.string().uuid().nullable()
 });
-var runnersPollContract = c11.router({
+var runnersPollContract = c10.router({
   poll: {
     method: "POST",
     path: "/api/runners/poll",
-    body: z15.object({
+    body: z14.object({
       group: runnerGroupSchema
     }),
     responses: {
-      200: z15.object({
+      200: z14.object({
         job: jobSchema.nullable()
       }),
       400: apiErrorSchema,
@@ -6165,58 +6064,58 @@ var runnersPollContract = c11.router({
     summary: "Poll for pending jobs (long-polling with 30s timeout)"
   }
 });
-var storageEntrySchema = z15.object({
-  mountPath: z15.string(),
-  archiveUrl: z15.string().nullable()
+var storageEntrySchema = z14.object({
+  mountPath: z14.string(),
+  archiveUrl: z14.string().nullable()
 });
-var artifactEntrySchema = z15.object({
-  mountPath: z15.string(),
-  archiveUrl: z15.string().nullable(),
-  vasStorageName: z15.string(),
-  vasVersionId: z15.string()
+var artifactEntrySchema = z14.object({
+  mountPath: z14.string(),
+  archiveUrl: z14.string().nullable(),
+  vasStorageName: z14.string(),
+  vasVersionId: z14.string()
 });
-var storageManifestSchema = z15.object({
-  storages: z15.array(storageEntrySchema),
+var storageManifestSchema = z14.object({
+  storages: z14.array(storageEntrySchema),
   artifact: artifactEntrySchema.nullable()
 });
-var resumeSessionSchema = z15.object({
-  sessionId: z15.string(),
-  sessionHistory: z15.string()
+var resumeSessionSchema = z14.object({
+  sessionId: z14.string(),
+  sessionHistory: z14.string()
 });
-var storedExecutionContextSchema = z15.object({
-  workingDir: z15.string(),
+var storedExecutionContextSchema = z14.object({
+  workingDir: z14.string(),
   storageManifest: storageManifestSchema.nullable(),
-  environment: z15.record(z15.string(), z15.string()).nullable(),
+  environment: z14.record(z14.string(), z14.string()).nullable(),
   resumeSession: resumeSessionSchema.nullable(),
-  encryptedSecrets: z15.string().nullable(),
+  encryptedSecrets: z14.string().nullable(),
   // AES-256-GCM encrypted secrets
-  cliAgentType: z15.string(),
-  experimentalNetworkSecurity: z15.boolean().optional()
+  cliAgentType: z14.string(),
+  experimentalNetworkSecurity: z14.boolean().optional()
 });
-var executionContextSchema = z15.object({
-  runId: z15.string().uuid(),
-  prompt: z15.string(),
-  agentComposeVersionId: z15.string(),
-  vars: z15.record(z15.string(), z15.string()).nullable(),
-  secretNames: z15.array(z15.string()).nullable(),
-  checkpointId: z15.string().uuid().nullable(),
-  sandboxToken: z15.string(),
+var executionContextSchema = z14.object({
+  runId: z14.string().uuid(),
+  prompt: z14.string(),
+  agentComposeVersionId: z14.string(),
+  vars: z14.record(z14.string(), z14.string()).nullable(),
+  secretNames: z14.array(z14.string()).nullable(),
+  checkpointId: z14.string().uuid().nullable(),
+  sandboxToken: z14.string(),
   // New fields for E2B parity:
-  workingDir: z15.string(),
+  workingDir: z14.string(),
   storageManifest: storageManifestSchema.nullable(),
-  environment: z15.record(z15.string(), z15.string()).nullable(),
+  environment: z14.record(z14.string(), z14.string()).nullable(),
   resumeSession: resumeSessionSchema.nullable(),
-  secretValues: z15.array(z15.string()).nullable(),
-  cliAgentType: z15.string()
+  secretValues: z14.array(z14.string()).nullable(),
+  cliAgentType: z14.string()
 });
-var runnersJobClaimContract = c11.router({
+var runnersJobClaimContract = c10.router({
   claim: {
     method: "POST",
     path: "/api/runners/jobs/:id/claim",
-    pathParams: z15.object({
-      id: z15.string().uuid()
+    pathParams: z14.object({
+      id: z14.string().uuid()
     }),
-    body: z15.object({}),
+    body: z14.object({}),
     responses: {
       200: executionContextSchema,
       400: apiErrorSchema,
@@ -9440,7 +9339,7 @@ var statusCommand = new Command2("status").description("Check runner connectivit
 });
 
 // src/index.ts
-var version = true ? "2.2.0" : "0.1.0";
+var version = true ? "2.2.2" : "0.1.0";
 program.name("vm0-runner").version(version).description("Self-hosted runner for VM0 agents");
 program.addCommand(startCommand);
 program.addCommand(statusCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/runner",
-  "version": "2.2.0",
+  "version": "2.2.2",
   "description": "Self-hosted runner for VM0 agents",
   "repository": {
     "type": "git",