@vm0/cli 9.237.0 → 9.237.2

package/{chunk-QFJ7HT7H.js → chunk-GPZFXJF6.js}

@@ -14,7 +14,7 @@ import {
   headersWithCliClientHeaders,
   initClient,
   initContract
-} from "./chunk-6AIUNS4S.js";
+} from "./chunk-NPC4JKK2.js";
 import {
   init_esm_shims
 } from "./chunk-DIRAZ3YX.js";
@@ -2674,7 +2674,7 @@ var firewallAwsSigv4AuthSchema = external_exports.object({
 }).strict();
 var firewallAuthSchema = external_exports.object({
   headers: external_exports.record(external_exports.string(), external_exports.string()).optional(),
-  base: external_exports.string().optional(),
+  base: external_exports.string().min(1).optional(),
   query: external_exports.record(external_exports.string(), external_exports.string()).optional(),
   awsSigv4: firewallAwsSigv4AuthSchema.optional()
 }).superRefine((auth, ctx) => {
@@ -2695,6 +2695,13 @@ var firewallAuthSchema = external_exports.object({
       message: "auth.query cannot be combined with auth.awsSigv4"
     });
   }
+  if (auth.base !== void 0) {
+    ctx.addIssue({
+      code: "custom",
+      path: ["base"],
+      message: "auth.base cannot be combined with auth.awsSigv4"
+    });
+  }
 });
 function hostPolicyHostHasFixedOwnership(value, options) {
   if (!options.allowLeadingDot && value.startsWith(".")) {
@@ -22381,6 +22388,11 @@ var secretConnectorMetadataMapSchema = external_exports.record(
 var storedExecutionContextSchema = external_exports.object({
   storageManifest: storageManifestSchema.nullable(),
   environment: external_exports.record(external_exports.string(), external_exports.string()).nullable(),
+  // API-only references used to reconstruct runner masking values from the
+  // stored environment. Missing means legacy/stripped data, null means no
+  // persistent secret map, and array order/repetition follows secret-map values.
+  // This field must not be included in the runner-facing ExecutionContext.
+  secretValueEnvironmentKeys: external_exports.array(external_exports.string()).nullable().optional(),
   // Connector-owned runtime vars used by proxy/firewall template resolution.
   // User-provided run vars stay in agent_runs.vars and are merged at claim time.
   vars: external_exports.record(external_exports.string(), external_exports.string()).nullable().optional(),
@@ -29629,4 +29641,4 @@ export {
   completeHostedSite,
   getHostedSiteFiles
 };
-//# sourceMappingURL=chunk-QFJ7HT7H.js.map
+//# sourceMappingURL=chunk-GPZFXJF6.js.map