@vm0/cli 9.145.1 → 9.145.3

package/{chunk-AUHFGGCN.js → chunk-JRU5QXBJ.js}

@@ -74083,7 +74083,7 @@ if (DSN) {
   init2({
     dsn: DSN,
     environment: process.env.SENTRY_ENVIRONMENT ?? "production",
-    release: "9.145.1",
+    release: "9.145.3",
     sendDefaultPii: false,
     tracesSampleRate: 0,
     shutdownTimeout: 500,
@@ -74102,7 +74102,7 @@ if (DSN) {
     }
   });
   setContext("cli", {
-    version: "9.145.1",
+    version: "9.145.3",
     command: process.argv.slice(2).join(" ")
   });
   setContext("runtime", {
@@ -93212,10 +93212,11 @@ var composesByIdContract = c.router({
     path: "/api/agent/composes/:id",
     headers: authHeadersSchema,
     pathParams: external_exports.object({
-      id: external_exports.string().min(1, "Compose ID is required")
+      id: external_exports.string().uuid("Compose ID must be a valid UUID")
     }),
     responses: {
       200: composeResponseSchema,
+      400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -93344,10 +93345,11 @@ var composesInstructionsContract = c.router({
     path: "/api/agent/composes/:id/instructions",
     headers: authHeadersSchema,
     pathParams: external_exports.object({
-      id: external_exports.string().min(1, "Compose ID is required")
+      id: external_exports.string().uuid("Compose ID must be a valid UUID")
     }),
     responses: {
       200: composeInstructionsResponseSchema,
+      400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -102891,7 +102893,17 @@ var MODEL_PROVIDER_FIREWALL_CONFIGS = {
             "ChatGPT-Account-ID": "${{ secrets.CHATGPT_ACCOUNT_ID }}"
           }
         },
-        permissions: []
+        permissions: [
+          {
+            name: "codex:api",
+            rules: [
+              "GET /models",
+              "GET /responses",
+              "POST /responses",
+              "POST /analytics-events/events"
+            ]
+          }
+        ]
       },
       {
         base: "https://auth.openai.com",
@@ -118139,6 +118151,15 @@ var resumeSessionSchema = external_exports.object({
   sessionId: external_exports.string(),
   sessionHistory: external_exports.string()
 });
+var secretConnectorMetadataSchema = external_exports.object({
+  sourceType: external_exports.enum(["connector", "model-provider"]),
+  sourceUserId: external_exports.string().optional(),
+  metadataKey: external_exports.string().optional()
+});
+var secretConnectorMetadataMapSchema = external_exports.record(
+  external_exports.string(),
+  secretConnectorMetadataSchema
+);
 var storedExecutionContextSchema = external_exports.object({
   workingDir: external_exports.string(),
   storageManifest: storageManifestSchema.nullable(),
@@ -118148,6 +118169,8 @@ var storedExecutionContextSchema = external_exports.object({
   // AES-256-GCM encrypted Record<string, string> (secret name → value)
   // Maps secret names to OAuth connector types for runtime token refresh (e.g. { "GMAIL_ACCESS_TOKEN": "gmail" })
   secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
+  // Per-secret refresh metadata, used when a handler needs owner-specific storage (e.g. personal model providers)
+  secretConnectorMetadataMap: secretConnectorMetadataMapSchema.nullable().optional(),
   cliAgentType: external_exports.string(),
   // Debug flag to force real Claude in mock environments (internal use only)
   debugNoMockClaude: external_exports.boolean().optional(),
@@ -118194,6 +118217,8 @@ var executionContextSchema = external_exports.object({
   encryptedSecrets: external_exports.string().nullable(),
   // Maps secret names to OAuth connector types for runtime token refresh
   secretConnectorMap: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
+  // Per-secret refresh metadata, used when a handler needs owner-specific storage (e.g. personal model providers)
+  secretConnectorMetadataMap: secretConnectorMetadataMapSchema.nullable().optional(),
   cliAgentType: external_exports.string(),
   // Debug flag to force real Claude in mock environments (internal use only)
   debugNoMockClaude: external_exports.boolean().optional(),
@@ -118613,10 +118638,11 @@ var zeroComposesByIdContract = c35.router({
     path: "/api/zero/composes/:id",
     headers: authHeadersSchema,
     pathParams: external_exports.object({
-      id: external_exports.string().min(1, "Compose ID is required")
+      id: external_exports.string().uuid("Compose ID must be a valid UUID")
     }),
     responses: {
       200: composeResponseSchema,
+      400: apiErrorSchema,
       401: apiErrorSchema,
       403: apiErrorSchema,
       404: apiErrorSchema
@@ -121977,4 +122003,4 @@ undici/lib/web/fetch/body.js:
 undici/lib/web/websocket/frame.js:
   (*! ws. MIT License. Einar Otto Stangvik <einaros@gmail.com> *)
 */
-//# sourceMappingURL=chunk-AUHFGGCN.js.map
+//# sourceMappingURL=chunk-JRU5QXBJ.js.map