@vm0/runner 2.5.1 → 2.6.0

package/index.js

@@ -4891,7 +4891,9 @@ var storedExecutionContextSchema = z4.object({
   encryptedSecrets: z4.string().nullable(),
   // AES-256-GCM encrypted secrets
   cliAgentType: z4.string(),
-  experimentalFirewall: experimentalFirewallSchema.optional()
+  experimentalFirewall: experimentalFirewallSchema.optional(),
+  postCreateCommand: z4.string().nullable().optional()
+  // Lifecycle hook
 });
 var executionContextSchema = z4.object({
   runId: z4.string().uuid(),
@@ -4909,7 +4911,9 @@ var executionContextSchema = z4.object({
   secretValues: z4.array(z4.string()).nullable(),
   cliAgentType: z4.string(),
   // Experimental firewall configuration
-  experimentalFirewall: experimentalFirewallSchema.optional()
+  experimentalFirewall: experimentalFirewallSchema.optional(),
+  // Lifecycle hook - command to run after working dir creation
+  postCreateCommand: z4.string().nullable().optional()
 });
 var runnersJobClaimContract = c.router({
   claim: {
@@ -5302,12 +5306,19 @@ var agentEventsResponseSchema = z6.object({
 });
 var networkLogEntrySchema = z6.object({
   timestamp: z6.string(),
-  method: z6.string(),
-  url: z6.string(),
-  status: z6.number(),
-  latency_ms: z6.number(),
-  request_size: z6.number(),
-  response_size: z6.number()
+  // Common fields (all modes)
+  mode: z6.enum(["mitm", "sni"]).optional(),
+  action: z6.enum(["ALLOW", "DENY"]).optional(),
+  host: z6.string().optional(),
+  port: z6.number().optional(),
+  rule_matched: z6.string().nullable().optional(),
+  // MITM-only fields (optional)
+  method: z6.string().optional(),
+  url: z6.string().optional(),
+  status: z6.number().optional(),
+  latency_ms: z6.number().optional(),
+  request_size: z6.number().optional(),
+  response_size: z6.number().optional()
 });
 var networkLogsResponseSchema = z6.object({
   networkLogs: z6.array(networkLogEntrySchema),
@@ -5841,12 +5852,19 @@ var metricDataSchema = z8.object({
 });
 var networkLogSchema = z8.object({
   timestamp: z8.string(),
-  method: z8.string(),
-  url: z8.string(),
-  status: z8.number(),
-  latency_ms: z8.number(),
-  request_size: z8.number(),
-  response_size: z8.number()
+  // Common fields (all modes)
+  mode: z8.enum(["mitm", "sni"]).optional(),
+  action: z8.enum(["ALLOW", "DENY"]).optional(),
+  host: z8.string().optional(),
+  port: z8.number().optional(),
+  rule_matched: z8.string().nullable().optional(),
+  // MITM-only fields (optional)
+  method: z8.string().optional(),
+  url: z8.string().optional(),
+  status: z8.number().optional(),
+  latency_ms: z8.number().optional(),
+  request_size: z8.number().optional(),
+  response_size: z8.number().optional()
 });
 var webhookTelemetryContract = c5.router({
   /**
@@ -7111,6 +7129,9 @@ ARTIFACT_MOUNT_PATH = os.environ.get("VM0_ARTIFACT_MOUNT_PATH", "")
 ARTIFACT_VOLUME_NAME = os.environ.get("VM0_ARTIFACT_VOLUME_NAME", "")
 ARTIFACT_VERSION_ID = os.environ.get("VM0_ARTIFACT_VERSION_ID", "")
 
+# Lifecycle hook - command to execute after working directory creation
+POST_CREATE_COMMAND = os.environ.get("VM0_POST_CREATE_COMMAND", "")
+
 # Construct webhook endpoint URLs
 WEBHOOK_URL = f"{API_URL}/api/webhooks/agent/events"
 CHECKPOINT_URL = f"{API_URL}/api/webhooks/agent/checkpoints"
@@ -8972,7 +8993,7 @@ sys.path.insert(0, "/usr/local/bin/vm0-agent/lib")
 from common import (
     WORKING_DIR, PROMPT, RESUME_SESSION_ID, COMPLETE_URL, RUN_ID,
     EVENT_ERROR_FLAG, HEARTBEAT_URL, HEARTBEAT_INTERVAL, AGENT_LOG_FILE,
-    CLI_AGENT_TYPE, OPENAI_MODEL, validate_config
+    CLI_AGENT_TYPE, OPENAI_MODEL, POST_CREATE_COMMAND, validate_config
 )
 from log import log_info, log_error, log_warn
 from events import send_event
@@ -9082,6 +9103,26 @@ def _run() -> tuple[int, str]:
     except OSError as e:
         raise RuntimeError(f"Failed to create/change to working directory: {WORKING_DIR} - {e}") from e
 
+    # Execute postCreateCommand if specified (lifecycle hook)
+    # This runs after working directory is created but before agent execution
+    if POST_CREATE_COMMAND:
+        log_info(f"Running postCreateCommand: {POST_CREATE_COMMAND}")
+        try:
+            result = subprocess.run(
+                ["/bin/bash", "-c", POST_CREATE_COMMAND],
+                cwd=WORKING_DIR,
+                capture_output=True,
+                text=True
+            )
+            if result.returncode != 0:
+                stderr_output = result.stderr.strip() if result.stderr else "No error output"
+                raise RuntimeError(f"postCreateCommand failed with exit code {result.returncode}: {stderr_output}")
+            if result.stdout:
+                log_info(f"postCreateCommand output: {result.stdout.strip()}")
+            log_info("postCreateCommand completed successfully")
+        except subprocess.SubprocessError as e:
+            raise RuntimeError(f"Failed to execute postCreateCommand: {e}") from e
+
     # Set up Codex configuration if using Codex CLI
     # Claude Code uses ~/.claude by default (no configuration needed)
     if CLI_AGENT_TYPE == "codex":
@@ -10011,7 +10052,7 @@ def response(flow: http.HTTPFlow) -> None:
     if run_id:
         log_entry = {
             "timestamp": time.strftime("%Y-%m-%dT%H:%M:%S", time.gmtime()),
-            "mode": "mitm" if mitm_enabled else "filter",
+            "mode": "mitm" if mitm_enabled else "sni",
             "action": firewall_action,
             "host": host,
             "port": port,
@@ -10264,6 +10305,9 @@ function buildEnvironmentVariables(context, apiUrl) {
     envVars.VM0_ARTIFACT_VOLUME_NAME = artifact.vasStorageName;
     envVars.VM0_ARTIFACT_VERSION_ID = artifact.vasVersionId;
   }
+  if (context.postCreateCommand) {
+    envVars.VM0_POST_CREATE_COMMAND = context.postCreateCommand;
+  }
   if (context.resumeSession) {
     envVars.VM0_RESUME_SESSION_ID = context.resumeSession.sessionId;
   }
@@ -10787,7 +10831,7 @@ var statusCommand = new Command2("status").description("Check runner connectivit
 });
 
 // src/index.ts
-var version = true ? "2.5.1" : "0.1.0";
+var version = true ? "2.6.0" : "0.1.0";
 program.name("vm0-runner").version(version).description("Self-hosted runner for VM0 agents");
 program.addCommand(startCommand);
 program.addCommand(statusCommand);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vm0/runner",
-  "version": "2.5.1",
+  "version": "2.6.0",
   "description": "Self-hosted runner for VM0 agents",
   "repository": {
     "type": "git",