From e490171ff24b4165b68b9835e76c1baf8903a149 Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Sun, 5 Jul 2026 08:08:37 -0400
Subject: [PATCH] fix: narrow secret target fast-path types

---
 src/secrets/target-registry-query.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/secrets/target-registry-query.ts b/src/secrets/target-registry-query.ts
index e9f700823693..a814af1ca939 100644
--- a/src/secrets/target-registry-query.ts
+++ b/src/secrets/target-registry-query.ts
@@ -444,6 +444,7 @@ export function discoverConfigSecretTargetsByIds(
     : null;
   const canUseConfiguredEntries =
     configuredEntries !== null &&
+    allowedTargetIds !== null &&
     Array.from(allowedTargetIds).every((targetId) => configuredEntriesById?.has(targetId));
   const registryState = canUseConfiguredEntries ? null : getCompiledSecretTargetRegistryState();
   const discoveryEntries = resolveDiscoveryEntries({