@vm0/cli 9.225.4 → 9.225.5

package/{agent-OHIA6RVP.js → agent-ZHZ5ZXPE.js}

@@ -4,10 +4,10 @@ const require = __createRequire(import.meta.url);
 import {
   loadConnectorPermissionInfos,
   policyIcon
-} from "./chunk-OYCQ4E3E.js";
+} from "./chunk-TOAIXNXB.js";
 import {
   permissionGrantsToFirewallPolicies
-} from "./chunk-XBJYIYNJ.js";
+} from "./chunk-7CKYSFOQ.js";
 import {
   isInteractive,
   promptConfirm
@@ -23,7 +23,7 @@ import {
   listZeroUserPermissionGrants,
   updateZeroAgent,
   updateZeroAgentInstructions
-} from "./chunk-RRVU7LVB.js";
+} from "./chunk-GTEVOYBW.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -595,4 +595,4 @@ Notes:
 export {
   zeroAgentCommand
 };
-//# sourceMappingURL=agent-OHIA6RVP.js.map
+//# sourceMappingURL=agent-ZHZ5ZXPE.js.map

package/{banking-Q4J4PXCN.js → banking-D3DOFV5W.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   callZeroBanking
-} from "./chunk-RRVU7LVB.js";
+} from "./chunk-GTEVOYBW.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -115,4 +115,4 @@ Notes:
 export {
   zeroBankingCommand
 };
-//# sourceMappingURL=banking-Q4J4PXCN.js.map
+//# sourceMappingURL=banking-D3DOFV5W.js.map

package/{chat-DWDX52ZP.js → chat-GDK4MYTX.js}

@@ -4,7 +4,7 @@ const require = __createRequire(import.meta.url);
 import {
   getZeroChatThread,
   renameZeroChatThread
-} from "./chunk-RRVU7LVB.js";
+} from "./chunk-GTEVOYBW.js";
 import "./chunk-LTDQISD7.js";
 import {
   withErrorHandler
@@ -120,4 +120,4 @@ Examples:
 export {
   zeroChatCommand
 };
-//# sourceMappingURL=chat-DWDX52ZP.js.map
+//# sourceMappingURL=chat-GDK4MYTX.js.map

package/{chunk-XBJYIYNJ.js → chunk-7CKYSFOQ.js}

@@ -3,7 +3,7 @@ import { createRequire as __createRequire } from "node:module";
 const require = __createRequire(import.meta.url);
 import {
   UNKNOWN_PERMISSION_GRANT
-} from "./chunk-RRVU7LVB.js";
+} from "./chunk-GTEVOYBW.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -3109,4 +3109,4 @@ export {
   getFirewallPermissionSummary,
   loadFirewallPermissionMetadata
 };
-//# sourceMappingURL=chunk-XBJYIYNJ.js.map
+//# sourceMappingURL=chunk-7CKYSFOQ.js.map

package/{chunk-IYPYSTBT.js → chunk-ABTGOAID.js}

@@ -10,10 +10,10 @@ import {
   parseBoundedLogCount,
   parseSearchQuery,
   parseTime
-} from "./chunk-CXZKSCSX.js";
+} from "./chunk-WB6G3XAE.js";
 import {
   searchZeroLogs
-} from "./chunk-RRVU7LVB.js";
+} from "./chunk-GTEVOYBW.js";
 import {
   withErrorHandler
 } from "./chunk-3F4RFLPX.js";
@@ -176,4 +176,4 @@ export {
   runLogsSearch,
   searchCommand
 };
-//# sourceMappingURL=chunk-IYPYSTBT.js.map
+//# sourceMappingURL=chunk-ABTGOAID.js.map

package/{chunk-RRVU7LVB.js → chunk-GTEVOYBW.js}

@@ -25592,6 +25592,16 @@ var artifactsArraySchema = external_exports.array(artifactConfigSchema).refine((
   });
   return new Set(names).size === names.length;
 }, "Artifact names must be unique");
+var agentFirewallsMapSchema = external_exports.record(
+  external_exports.string(),
+  external_exports.object({
+    permissions: external_exports.union([external_exports.literal("all"), external_exports.array(external_exports.string()).min(1)])
+  })
+);
+var legacyAgentFirewallsSchema = external_exports.union([
+  agentFirewallsMapSchema,
+  firewallsSchema
+]);
 var agentDefinitionSchema = external_exports.object({
   description: external_exports.string().optional(),
   framework: external_exports.enum(["claude-code", "codex"]),
@@ -25635,12 +25645,7 @@ var agentDefinitionSchema = external_exports.object({
    * Map format: { slack: { permissions: [...] | "all" } }
    * Resolved to full ExpandedFirewallConfig[] at runtime.
    */
-  firewalls: external_exports.record(
-    external_exports.string(),
-    external_exports.object({
-      permissions: external_exports.union([external_exports.literal("all"), external_exports.array(external_exports.string()).min(1)])
-    })
-  ).optional()
+  firewalls: agentFirewallsMapSchema.optional()
 });
 var agentComposeContentSchema = external_exports.object({
   version: external_exports.string().min(1, "Version is required"),
@@ -25655,7 +25660,7 @@ var agentComposeApiContentSchema = external_exports.object({
     agentDefinitionSchema.extend({
       // Legacy: older compose versions may have this field (map or expanded array).
       // Accepted for backward compat but ignored at runtime.
-      firewalls: external_exports.unknown().optional()
+      firewalls: legacyAgentFirewallsSchema.optional()
     })
   ),
   volumes: external_exports.record(external_exports.string(), volumeConfigSchema).optional(),
@@ -28523,7 +28528,6 @@ export {
   connectorTypeSchema,
   guaranteedConnectorProvidedBindingNames,
   initContract,
-  authHeadersSchema,
   hasRawWhitespace,
   hasUnsafeUrlCodepoint,
   parseSegment,
@@ -28535,6 +28539,7 @@ export {
   hasBaseUrlParams,
   validateBaseUrl,
   validateAuthBaseUrl,
+  authHeadersSchema,
   runnerGroupSchema,
   volumeConfigSchema,
   agentDefinitionSchema,
@@ -28689,4 +28694,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-RRVU7LVB.js.map
+//# sourceMappingURL=chunk-GTEVOYBW.js.map