@paperclipai/shared 2026.824.0 → 2026.825.0-beta.0

package/dist/validators/issue.js

@@ -2,6 +2,7 @@ import { z } from "zod";
 import { ISSUE_EXECUTION_DECISION_OUTCOMES, ISSUE_EXECUTION_MONITOR_CLEAR_REASONS, ISSUE_EXECUTION_MONITOR_KINDS, ISSUE_EXECUTION_MONITOR_RECOVERY_POLICIES, ISSUE_EXECUTION_MONITOR_STATE_STATUSES, ISSUE_EXECUTION_POLICY_MODES, ISSUE_EXECUTION_STAGE_TYPES, ISSUE_EXECUTION_STATE_STATUSES, ISSUE_COMMENT_AUTHOR_TYPES, ISSUE_COMMENT_METADATA_ROW_TYPES, ISSUE_COMMENT_PRESENTATION_KINDS, ISSUE_COMMENT_PRESENTATION_TONES, ISSUE_COMMENT_PRESENTATION_DENSITIES, ISSUE_HARNESS_KINDS, ISSUE_MONITOR_SCHEDULED_BY, ISSUE_PRIORITIES, ISSUE_RECOVERY_ACTION_KINDS, ISSUE_RECOVERY_ACTION_OUTCOMES, ISSUE_RECOVERY_ACTION_OWNER_TYPES, ISSUE_RECOVERY_ACTION_STATUSES, ISSUE_REVIEW_POLICIES, ISSUE_WORK_MODES, clampIssueRequestDepth, ISSUE_STATUSES, ISSUE_THREAD_INTERACTION_CONTINUATION_POLICIES, ISSUE_THREAD_INTERACTION_CANONICAL_RESOLVER_POLICIES, ISSUE_THREAD_INTERACTION_EFFECTIVE_RESOLVER_POLICY_SOURCES, ISSUE_THREAD_INTERACTION_KINDS, ISSUE_THREAD_INTERACTION_RESOLVER_POLICIES, ISSUE_THREAD_INTERACTION_RESOLVER_POLICY_PROVENANCES, ISSUE_THREAD_INTERACTION_STATUSES, ISSUE_WATCHDOG_DISCOVERY_KINDS, MODEL_PROFILE_KEYS, REQUEST_CHECKBOX_CONFIRMATION_OPTION_LIMIT, REQUEST_ITEM_VERDICTS_ITEM_LIMIT, } from "../constants.js";
 import { multilineTextSchema } from "./text.js";
 import { lowTrustReviewPresetPolicySchema, trustAuthorizationPolicySchema } from "./trust-policy.js";
+import { objectWithoutDefaults } from "./partial.js";
 export const issueBlockedInboxStateSchema = z.enum([
     "needs_attention",
     "awaiting_decision",
@@ -25,12 +26,12 @@ export const issueBlockedInboxReasonSchema = z.enum([
     "open_recovery_issue",
 ]);
 export const issueBlockedInboxIssueRefSchema = z.object({
-    id: z.string().uuid(),
+    id: z.string().guid(),
     identifier: z.string().nullable(),
     title: z.string(),
     status: z.enum(ISSUE_STATUSES),
     priority: z.enum(ISSUE_PRIORITIES),
-    assigneeAgentId: z.string().uuid().nullable(),
+    assigneeAgentId: z.string().guid().nullable(),
     assigneeUserId: z.string().nullable(),
 }).strict();
 export const issueBlockedInboxAttentionSchema = z.object({
@@ -41,7 +42,7 @@ export const issueBlockedInboxAttentionSchema = z.object({
     stoppedSinceAt: z.string().datetime().nullable(),
     owner: z.object({
         type: z.enum(["agent", "user", "board", "external", "unknown"]),
-        agentId: z.string().uuid().nullable(),
+        agentId: z.string().guid().nullable(),
         userId: z.string().nullable(),
         label: z.string().nullable(),
     }).strict(),
@@ -52,8 +53,8 @@ export const issueBlockedInboxAttentionSchema = z.object({
     sourceIssue: issueBlockedInboxIssueRefSchema.nullable(),
     leafIssue: issueBlockedInboxIssueRefSchema.nullable(),
     recoveryIssue: issueBlockedInboxIssueRefSchema.nullable(),
-    approvalId: z.string().uuid().nullable(),
-    interactionId: z.string().uuid().nullable(),
+    approvalId: z.string().guid().nullable(),
+    interactionId: z.string().guid().nullable(),
     sampleIssueIdentifier: z.string().nullable(),
     redaction: z.object({
         externalDetailsRedacted: z.boolean(),
@@ -68,17 +69,55 @@ export const ISSUE_EXECUTION_WORKSPACE_PREFERENCES = [
     "reuse_existing",
     "agent_default",
 ];
+// Mirrors git check-ref-format for a single branch name. The runtime verifies
+// the branch actually exists before attaching, so this only rejects values
+// that could never be a branch (path escapes, option injection, ref syntax).
+export function isValidExistingBranchName(value) {
+    if (value.length === 0 || value.length > 255)
+        return false;
+    if (value.startsWith("-") || value.startsWith("/") || value.startsWith("."))
+        return false;
+    if (value.endsWith("/") || value.endsWith(".") || value.endsWith(".lock"))
+        return false;
+    if (value.includes("..") || value.includes("//") || value.includes("@{") || value.includes("/."))
+        return false;
+    // eslint-disable-next-line no-control-regex
+    if (/[\x00-\x20\x7f~^:?*[\\]/.test(value))
+        return false;
+    return true;
+}
 const executionWorkspaceStrategySchema = z
     .object({
     type: z.enum(["project_primary", "git_worktree", "adapter_managed", "cloud_sandbox"]).optional(),
     baseRef: z.string().optional().nullable(),
     branchTemplate: z.string().optional().nullable(),
+    existingBranch: z.string().trim().refine(isValidExistingBranchName, {
+        message: "existingBranch must be a valid git branch name",
+    }).optional().nullable(),
     worktreeParentDir: z.string().optional().nullable(),
     provisionCommand: z.string().optional().nullable(),
     runtimeProvisionCommand: z.string().optional().nullable(),
     teardownCommand: z.string().optional().nullable(),
 })
-    .strict();
+    .strict()
+    .superRefine((strategy, ctx) => {
+    if (!strategy.existingBranch)
+        return;
+    if (strategy.type !== "git_worktree") {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["existingBranch"],
+            message: "existingBranch requires workspaceStrategy.type \"git_worktree\"",
+        });
+    }
+    if (strategy.branchTemplate) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["existingBranch"],
+            message: "existingBranch and branchTemplate are mutually exclusive",
+        });
+    }
+});
 const ipv4CidrPattern = /^(?:(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\.){3}(?:25[0-5]|2[0-4]\d|[01]?\d\d?)\/(?:3[0-2]|[12]?\d)$/;
 const protectedTaskEgressCidrs = [
     "0.0.0.0/8",
@@ -113,7 +152,7 @@ export const issueExecutionWorkspaceSettingsSchema = z
     .object({
     mode: z.enum(ISSUE_EXECUTION_WORKSPACE_PREFERENCES).optional(),
     sharedWorkspaceConcurrency: z.enum(["auto", "serialize", "allow"]).optional(),
-    environmentId: z.string().uuid().optional().nullable(),
+    environmentId: z.string().guid().optional().nullable(),
     workspaceStrategy: executionWorkspaceStrategySchema.optional().nullable(),
     workspaceRuntime: z.record(z.string(), z.unknown()).optional().nullable(),
     networkEgress: z.object({
@@ -121,7 +160,16 @@ export const issueExecutionWorkspaceSettingsSchema = z
         allowCidrs: z.array(z.string().trim().regex(ipv4CidrPattern, "Invalid IPv4 CIDR (must use octets 0-255 and prefix 0-32)").max(64).refine(isAllowedTaskEgressCidr, "Task-scoped network egress CIDRs cannot overlap private, loopback, link-local, CGNAT, or multicast ranges")).max(100).optional(),
     }).strict().optional().nullable(),
 })
-    .strict();
+    .strict()
+    .superRefine((settings, ctx) => {
+    if (settings.workspaceStrategy?.existingBranch && settings.mode !== "isolated_workspace") {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["workspaceStrategy", "existingBranch"],
+            message: "existingBranch requires mode \"isolated_workspace\"",
+        });
+    }
+});
 export const issueAssigneeAdapterOverridesSchema = z
     .object({
     modelProfile: z.enum(MODEL_PROFILE_KEYS).optional(),
@@ -131,7 +179,7 @@ export const issueAssigneeAdapterOverridesSchema = z
     .strict();
 const issueExecutionStagePrincipalBaseSchema = z.object({
     type: z.enum(["agent", "user"]),
-    agentId: z.string().uuid().optional().nullable(),
+    agentId: z.string().guid().optional().nullable(),
     userId: z.string().optional().nullable(),
 });
 export const issueExecutionStagePrincipalSchema = issueExecutionStagePrincipalBaseSchema
@@ -153,7 +201,7 @@ export const issueExecutionStagePrincipalSchema = issueExecutionStagePrincipalBa
     }
 });
 export const issueExecutionStageParticipantSchema = issueExecutionStagePrincipalBaseSchema.extend({
-    id: z.string().uuid().optional(),
+    id: z.string().guid().optional(),
 }).superRefine((value, ctx) => {
     if (value.type === "agent") {
         if (!value.agentId) {
@@ -172,7 +220,7 @@ export const issueExecutionStageParticipantSchema = issueExecutionStagePrincipal
     }
 });
 export const issueExecutionStageSchema = z.object({
-    id: z.string().uuid().optional(),
+    id: z.string().guid().optional(),
     type: z.enum(ISSUE_EXECUTION_STAGE_TYPES),
     approvalsNeeded: z.literal(1).optional().default(1),
     participants: z.array(issueExecutionStageParticipantSchema).default([]),
@@ -218,30 +266,30 @@ export const issueReviewRequestSchema = z.object({
 }).strict();
 export const issueExecutionStateSchema = z.object({
     status: z.enum(ISSUE_EXECUTION_STATE_STATUSES),
-    currentStageId: z.string().uuid().nullable(),
+    currentStageId: z.string().guid().nullable(),
     currentStageIndex: z.number().int().nonnegative().nullable(),
     currentStageType: z.enum(ISSUE_EXECUTION_STAGE_TYPES).nullable(),
     currentParticipant: issueExecutionStagePrincipalSchema.nullable(),
     returnAssignee: issueExecutionStagePrincipalSchema.nullable(),
     reviewRequest: issueReviewRequestSchema.nullable().optional().default(null),
-    completedStageIds: z.array(z.string().uuid()).default([]),
-    lastDecisionId: z.string().uuid().nullable(),
+    completedStageIds: z.array(z.string().guid()).default([]),
+    lastDecisionId: z.string().guid().nullable(),
     lastDecisionOutcome: z.enum(ISSUE_EXECUTION_DECISION_OUTCOMES).nullable(),
     monitor: issueExecutionMonitorStateSchema.optional().nullable(),
     changesRequestedCount: z.number().int().nonnegative().optional().default(0),
 });
 export const issueRecoveryActionReadModelSchema = z.object({
-    id: z.string().uuid(),
-    companyId: z.string().uuid(),
-    sourceIssueId: z.string().uuid(),
-    recoveryIssueId: z.string().uuid().nullable(),
+    id: z.string().guid(),
+    companyId: z.string().guid(),
+    sourceIssueId: z.string().guid(),
+    recoveryIssueId: z.string().guid().nullable(),
     kind: z.enum(ISSUE_RECOVERY_ACTION_KINDS),
     status: z.enum(ISSUE_RECOVERY_ACTION_STATUSES),
     ownerType: z.enum(ISSUE_RECOVERY_ACTION_OWNER_TYPES),
-    ownerAgentId: z.string().uuid().nullable(),
+    ownerAgentId: z.string().guid().nullable(),
     ownerUserId: z.string().nullable(),
-    previousOwnerAgentId: z.string().uuid().nullable(),
-    returnOwnerAgentId: z.string().uuid().nullable(),
+    previousOwnerAgentId: z.string().guid().nullable(),
+    returnOwnerAgentId: z.string().guid().nullable(),
     cause: z.string().min(1),
     fingerprint: z.string().min(1),
     evidence: z.record(z.string(), z.unknown()),
@@ -265,7 +313,7 @@ const RESOLVE_ISSUE_RECOVERY_ACTION_OUTCOMES = [
     "cancelled",
 ];
 export const resolveIssueRecoveryActionSchema = z.object({
-    actionId: z.string().uuid().optional(),
+    actionId: z.string().guid().optional(),
     outcome: z.enum(RESOLVE_ISSUE_RECOVERY_ACTION_OUTCOMES),
     sourceIssueStatus: z.enum(["todo", "done", "in_review", "blocked"]),
     resolutionNote: multilineTextSchema.optional().nullable(),
@@ -339,20 +387,20 @@ function withCreateIssueStatusDefault(schema) {
     }, schema);
 }
 const createIssueBaseSchema = z.object({
-    projectId: z.string().uuid().optional().nullable(),
-    projectWorkspaceId: z.string().uuid().optional().nullable(),
-    goalId: z.string().uuid().optional().nullable(),
-    parentId: z.string().uuid().optional().nullable(),
-    blockedByIssueIds: z.array(z.string().uuid()).optional(),
+    projectId: z.string().guid().optional().nullable(),
+    projectWorkspaceId: z.string().guid().optional().nullable(),
+    goalId: z.string().guid().optional().nullable(),
+    parentId: z.string().guid().optional().nullable(),
+    blockedByIssueIds: z.array(z.string().guid()).optional(),
     unblockDescriptor: z.object({
         owner: z.union([
-            z.object({ agentId: z.string().uuid() }).strict(),
+            z.object({ agentId: z.string().guid() }).strict(),
             z.object({ userId: z.string().trim().min(1) }).strict(),
             z.literal("board"),
         ]),
         action: multilineTextSchema.pipe(z.string().trim().min(1).max(2_000)),
     }).strict().optional().nullable(),
-    inheritExecutionWorkspaceFromIssueId: z.string().uuid().optional().nullable(),
+    inheritExecutionWorkspaceFromIssueId: z.string().guid().optional().nullable(),
     title: z.string().min(1),
     description: multilineTextSchema.optional().nullable(),
     status: z.enum(ISSUE_STATUSES),
@@ -360,7 +408,7 @@ const createIssueBaseSchema = z.object({
     harnessKind: z.enum(ISSUE_HARNESS_KINDS).optional().nullable(),
     priority: z.enum(ISSUE_PRIORITIES).optional().default("medium"),
     reviewPolicy: z.enum(ISSUE_REVIEW_POLICIES).optional().nullable(),
-    assigneeAgentId: z.string().uuid().optional().nullable(),
+    assigneeAgentId: z.string().guid().optional().nullable(),
     assigneeUserId: z.string().optional().nullable(),
     requestDepth: issueRequestDepthInputSchema.optional().default(0),
     createdByUserId: z.string().optional().nullable(),
@@ -368,16 +416,16 @@ const createIssueBaseSchema = z.object({
     billingCode: z.string().optional().nullable(),
     assigneeAdapterOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable(),
     executionPolicy: issueExecutionPolicySchema.optional().nullable(),
-    executionWorkspaceId: z.string().uuid().optional().nullable(),
+    executionWorkspaceId: z.string().guid().optional().nullable(),
     executionWorkspacePreference: z.enum(ISSUE_EXECUTION_WORKSPACE_PREFERENCES).optional().nullable(),
     executionWorkspaceSettings: issueExecutionWorkspaceSettingsSchema.optional().nullable(),
-    labelIds: z.array(z.string().uuid()).optional(),
+    labelIds: z.array(z.string().guid()).optional(),
     watchdogDiscovery: z.object({
         kind: z.enum(ISSUE_WATCHDOG_DISCOVERY_KINDS),
         evidenceMarkdown: multilineTextSchema.optional().nullable(),
     }).strict().optional().nullable(),
     watchdog: z.object({
-        agentId: z.string().uuid(),
+        agentId: z.string().guid(),
         instructions: multilineTextSchema.optional().nullable(),
     }).strict().optional().nullable(),
 });
@@ -413,7 +461,7 @@ export const createIssueSchema = withCreateIssueStatusDefault(createIssueBaseSch
     ...onboardingFirstTaskMarkerSchema,
 })).superRefine(requireBlockedStatusForUnblockDescriptor);
 export const upsertIssueWatchdogSchema = z.object({
-    agentId: z.string().uuid(),
+    agentId: z.string().guid(),
     instructions: multilineTextSchema.optional().nullable(),
 }).strict();
 export const createChildIssueSchema = withCreateIssueStatusDefault(createIssueBaseSchema
@@ -427,23 +475,23 @@ export const createChildIssueSchema = withCreateIssueStatusDefault(createIssueBa
     blockParentUntilDone: z.boolean().optional().default(false),
 })).superRefine(requireBlockedStatusForUnblockDescriptor);
 export const createAcceptedPlanDecompositionSchema = z.object({
-    acceptedPlanRevisionId: z.string().uuid(),
+    acceptedPlanRevisionId: z.string().guid(),
     children: z.array(createChildIssueSchema).min(1).max(25),
 });
 export const createIssueLabelSchema = z.object({
     name: z.string().trim().min(1).max(48),
     color: z.string().regex(/^#(?:[0-9a-fA-F]{6})$/, "Color must be a 6-digit hex value"),
 });
-export const updateIssueSchema = createIssueBaseSchema.omit({
+export const updateIssueSchema = objectWithoutDefaults(createIssueBaseSchema.omit({
     createdByUserId: true,
     responsibleUserId: true,
     watchdog: true,
-}).partial().extend({
+})).partial().extend({
     requestDepth: issueRequestDepthInputSchema.optional(),
     assigneeAgentId: z.string().trim().min(1).optional().nullable(),
     comment: multilineTextSchema.pipe(z.string().min(1)).optional(),
     onBehalfOfUserId: z.string().trim().min(1).optional().nullable(),
-    reviewInteractionId: z.string().uuid().optional(),
+    reviewInteractionId: z.string().guid().optional(),
     reviewRequest: issueReviewRequestSchema.optional().nullable(),
     reopen: z.boolean().optional(),
     resume: z.boolean().optional(),
@@ -463,7 +511,7 @@ export const stalledReviewDecisionSchema = z.object({
     }
 });
 export const checkoutIssueSchema = z.object({
-    agentId: z.string().uuid(),
+    agentId: z.string().guid(),
     expectedStatuses: z.array(z.enum(ISSUE_STATUSES)).nonempty(),
 });
 const commentMetadataLabelSchema = z.string().trim().min(1).max(120);
@@ -496,19 +544,19 @@ const issueCommentMetadataKeyValueRowSchema = issueCommentMetadataBaseRowSchema.
 }).strict();
 const issueCommentMetadataIssueLinkRowSchema = issueCommentMetadataBaseRowSchema.extend({
     type: z.literal("issue_link"),
-    issueId: z.string().uuid().nullable().optional(),
+    issueId: z.string().guid().nullable().optional(),
     identifier: z.string().trim().min(1).max(80).nullable().optional(),
     title: z.string().trim().min(1).max(240).nullable().optional(),
 }).strict();
 const issueCommentMetadataAgentLinkRowSchema = issueCommentMetadataBaseRowSchema.extend({
     type: z.literal("agent_link"),
-    agentId: z.string().uuid(),
+    agentId: z.string().guid(),
     name: z.string().trim().min(1).max(160).nullable().optional(),
 }).strict();
 const issueCommentMetadataRunLinkRowSchema = issueCommentMetadataBaseRowSchema.extend({
     type: z.literal("run_link"),
-    runId: z.string().uuid(),
-    agentId: z.string().uuid().nullable().optional(),
+    runId: z.string().guid(),
+    agentId: z.string().guid().nullable().optional(),
     title: z.string().trim().min(1).max(160).nullable().optional(),
 }).strict();
 export const issueCommentMetadataRowSchema = z.discriminatedUnion("type", [
@@ -533,7 +581,7 @@ export const issueCommentMetadataSectionSchema = z.object({
 }).strict();
 export const issueCommentMetadataSchema = z.object({
     version: z.literal(1),
-    sourceRunId: z.string().uuid().nullable().optional(),
+    sourceRunId: z.string().guid().nullable().optional(),
     authorizationReason: z.string().trim().min(1).max(160).nullable().optional(),
     sections: z.array(issueCommentMetadataSectionSchema).min(1).max(20),
 }).strict();
@@ -569,15 +617,15 @@ export const issueDocumentKeySchema = z
 export const suggestedTaskDraftSchema = z.object({
     clientKey: z.string().trim().min(1).max(120),
     parentClientKey: z.string().trim().min(1).max(120).nullable().optional(),
-    parentId: z.string().uuid().nullable().optional(),
+    parentId: z.string().guid().nullable().optional(),
     title: z.string().trim().min(1).max(240),
     description: multilineTextSchema.pipe(z.string().trim().max(20000)).nullable().optional(),
     priority: z.enum(ISSUE_PRIORITIES).nullable().optional(),
     workMode: z.enum(ISSUE_WORK_MODES).nullable().optional(),
-    assigneeAgentId: z.string().uuid().nullable().optional(),
+    assigneeAgentId: z.string().guid().nullable().optional(),
     assigneeUserId: z.string().trim().min(1).nullable().optional(),
-    projectId: z.string().uuid().nullable().optional(),
-    goalId: z.string().uuid().nullable().optional(),
+    projectId: z.string().guid().nullable().optional(),
+    goalId: z.string().guid().nullable().optional(),
     billingCode: z.string().trim().max(120).nullable().optional(),
     labels: z.array(z.string().trim().min(1).max(48)).max(20).optional(),
     hiddenInPreview: z.boolean().optional(),
@@ -592,7 +640,7 @@ export const suggestedTaskDraftSchema = z.object({
 });
 export const suggestTasksPayloadSchema = z.object({
     version: z.literal(1),
-    defaultParentId: z.string().uuid().nullable().optional(),
+    defaultParentId: z.string().guid().nullable().optional(),
     tasks: z.array(suggestedTaskDraftSchema).min(1).max(50),
 }).superRefine((value, ctx) => {
     const seenClientKeys = new Set();
@@ -610,10 +658,10 @@ export const suggestTasksPayloadSchema = z.object({
 });
 export const suggestTasksResultCreatedTaskSchema = z.object({
     clientKey: z.string().trim().min(1).max(120),
-    issueId: z.string().uuid(),
+    issueId: z.string().guid(),
     identifier: z.string().trim().min(1).nullable().optional(),
     title: z.string().trim().min(1).nullable().optional(),
-    parentIssueId: z.string().uuid().nullable().optional(),
+    parentIssueId: z.string().guid().nullable().optional(),
     parentIdentifier: z.string().trim().min(1).nullable().optional(),
 });
 export const suggestTasksResultSchema = z.object({
@@ -695,10 +743,10 @@ export const askUserQuestionsResultSchema = z.object({
     cancelled: z.literal(true).optional(),
     cancellationReason: z.string().trim().max(4000).nullable().optional(),
     expirationReason: z.enum(["superseded_by_comment", "superseded_by_newer_interaction"]).optional(),
-    commentId: z.string().uuid().nullable().optional(),
+    commentId: z.string().guid().nullable().optional(),
     // Set alongside expirationReason "superseded_by_newer_interaction": the id of
     // the newer sibling ask_user_questions that replaced this one (PAP-437).
-    supersededByInteractionId: z.string().uuid().nullable().optional(),
+    supersededByInteractionId: z.string().guid().nullable().optional(),
     summaryMarkdown: z.string().max(20000).nullable().optional(),
 });
 const requestConfirmationHrefSchema = z.string().trim().min(1).max(2000).refine((value) => {
@@ -714,10 +762,10 @@ const requestConfirmationTargetBaseSchema = z.object({
 });
 export const requestConfirmationIssueDocumentTargetSchema = requestConfirmationTargetBaseSchema.extend({
     type: z.literal("issue_document"),
-    issueId: z.string().uuid().nullable().optional(),
-    documentId: z.string().uuid().nullable().optional(),
+    issueId: z.string().guid().nullable().optional(),
+    documentId: z.string().guid().nullable().optional(),
     key: issueDocumentKeySchema,
-    revisionId: z.string().uuid(),
+    revisionId: z.string().guid(),
     revisionNumber: z.number().int().positive().nullable().optional(),
 });
 export const requestConfirmationCustomTargetSchema = requestConfirmationTargetBaseSchema.extend({
@@ -732,12 +780,12 @@ export const requestConfirmationTargetSchema = z.discriminatedUnion("type", [
 ]);
 export const requestConfirmationToolActionPayloadSchema = z.object({
     version: z.literal(1),
-    actionRequestId: z.string().uuid(),
-    invocationId: z.string().uuid(),
+    actionRequestId: z.string().guid(),
+    invocationId: z.string().guid(),
     toolName: z.string().trim().min(1).max(500),
     toolDisplayName: z.string().trim().min(1).max(500),
-    connectionId: z.string().uuid().nullable(),
-    applicationId: z.string().uuid().nullable(),
+    connectionId: z.string().guid().nullable(),
+    applicationId: z.string().guid().nullable(),
     appDisplayName: z.string().trim().min(1).max(500).nullable(),
     risk: z.enum(["write", "destructive"]),
     previewMarkdown: z.string().trim().min(1).max(20000),
@@ -745,6 +793,16 @@ export const requestConfirmationToolActionPayloadSchema = z.object({
     argumentsHash: z.string().trim().min(1).max(255),
     expiresAt: z.string().datetime({ offset: true }),
 });
+export const requestConfirmationSecretProposalPayloadSchema = z.object({
+    version: z.literal(1),
+    proposalId: z.string().guid(),
+    sourceSecretLabel: z.string().trim().min(1).max(500),
+    configPath: z.string().trim().min(1).max(500),
+    targetAgentId: z.string().guid(),
+    targetAgentName: z.string().trim().min(1).max(500),
+    justification: z.string().trim().min(1).max(20000),
+    expiresAt: z.string().datetime({ offset: true }),
+});
 export const requestConfirmationPayloadSchema = z.object({
     version: z.literal(1),
     prompt: z.string().trim().min(1).max(1000),
@@ -758,6 +816,7 @@ export const requestConfirmationPayloadSchema = z.object({
     supersedeOnUserComment: z.boolean().optional(),
     target: requestConfirmationTargetSchema.nullable().optional(),
     toolAction: requestConfirmationToolActionPayloadSchema.optional(),
+    secretProposal: requestConfirmationSecretProposalPayloadSchema.optional(),
 });
 export const requestCheckboxConfirmationOptionSchema = z.object({
     id: z.string().trim().min(1).max(120),
@@ -860,9 +919,9 @@ export const requestConfirmationResumeFailureSchema = z.object({
     errorCode: z.string().trim().min(1).max(120).nullable(),
     attempt: z.number().int().min(0).max(100),
     maxAttempts: z.number().int().min(0).max(100),
-    runId: z.string().uuid().nullable().optional(),
-    retryRunId: z.string().uuid().nullable().optional(),
-    recoveryActionId: z.string().uuid().nullable().optional(),
+    runId: z.string().guid().nullable().optional(),
+    retryRunId: z.string().guid().nullable().optional(),
+    recoveryActionId: z.string().guid().nullable().optional(),
     updatedAt: z.string().trim().min(1).nullable().optional(),
 });
 export const requestConfirmationToolActionResultSchema = z.object({
@@ -877,6 +936,12 @@ export const requestConfirmationToolActionResultSchema = z.object({
     resultHref: z.string().trim().url().max(2000).nullable().optional(),
     updatedAt: z.string().datetime({ offset: true }),
 });
+export const requestConfirmationSecretProposalResultSchema = z.object({
+    version: z.literal(1),
+    status: z.enum(["executed", "failed", "rejected", "withdrawn", "expired"]),
+    errorCode: z.string().trim().min(1).max(120).nullable().optional(),
+    updatedAt: z.string().datetime({ offset: true }),
+});
 export const requestConfirmationResultSchema = z.object({
     version: z.literal(1),
     outcome: z.enum([
@@ -890,11 +955,12 @@ export const requestConfirmationResultSchema = z.object({
         "addressee_deleted",
     ]),
     reason: z.string().trim().max(4000).nullable().optional(),
-    commentId: z.string().uuid().nullable().optional(),
-    supersededByInteractionId: z.string().uuid().nullable().optional(),
+    commentId: z.string().guid().nullable().optional(),
+    supersededByInteractionId: z.string().guid().nullable().optional(),
     staleTarget: requestConfirmationTargetSchema.nullable().optional(),
     resumeFailure: requestConfirmationResumeFailureSchema.nullable().optional(),
     toolAction: requestConfirmationToolActionResultSchema.optional(),
+    secretProposal: requestConfirmationSecretProposalResultSchema.optional(),
 });
 export const requestCheckboxConfirmationResultSchema = requestConfirmationResultSchema.extend({
     selectedOptionIds: z.array(z.string().trim().min(1).max(120))
@@ -921,7 +987,7 @@ export const requestItemVerdictsItemSchema = z.object({
     description: z.string().trim().max(500).nullable().optional(),
     previewMarkdown: z.string().max(20000).nullable().optional(),
     href: requestConfirmationHrefSchema.nullable().optional(),
-    attachmentId: z.string().uuid().nullable().optional(),
+    attachmentId: z.string().guid().nullable().optional(),
 });
 export const requestItemVerdictsPayloadSchema = z.object({
     version: z.literal(1),
@@ -998,10 +1064,10 @@ export const requestItemVerdictsResultItemSchema = z.object({
     verdict: requestItemVerdictValueSchema,
     reason: z.string().trim().max(4000).nullable().optional(),
     resolvedByUserId: z.string().trim().min(1).max(255).nullable().optional(),
-    resolvedByAgentId: z.string().uuid().nullable().optional(),
-    resolvedByRunId: z.string().uuid().nullable().optional(),
+    resolvedByAgentId: z.string().guid().nullable().optional(),
+    resolvedByRunId: z.string().guid().nullable().optional(),
     resolvedAt: z.union([z.string().datetime(), z.date()]),
-    commentId: z.string().uuid().nullable().optional(),
+    commentId: z.string().guid().nullable().optional(),
 }).superRefine((value, ctx) => {
     if (!value.resolvedByUserId && !value.resolvedByAgentId) {
         ctx.addIssue({
@@ -1025,7 +1091,7 @@ export const requestItemVerdictsResultSchema = z.object({
     complete: z.boolean(),
     items: z.array(requestItemVerdictsResultItemSchema)
         .max(REQUEST_ITEM_VERDICTS_ITEM_LIMIT),
-    commentId: z.string().uuid().nullable().optional(),
+    commentId: z.string().guid().nullable().optional(),
     staleTarget: requestConfirmationTargetSchema.nullable().optional(),
 }).superRefine((value, ctx) => {
     const itemIds = new Set();
@@ -1042,15 +1108,15 @@ export const requestItemVerdictsResultSchema = z.object({
 });
 const createIssueThreadInteractionCommon = {
     resolverPolicy: issueThreadInteractionResolverPolicySchema.optional(),
-    addresseeAgentId: z.string().uuid().nullable().optional(),
+    addresseeAgentId: z.string().guid().nullable().optional(),
 };
 export const createIssueThreadInteractionSchema = z.discriminatedUnion("kind", [
     z.object({
         ...createIssueThreadInteractionCommon,
         kind: z.literal("suggest_tasks"),
         idempotencyKey: z.string().trim().max(255).nullable().optional(),
-        sourceCommentId: z.string().uuid().nullable().optional(),
-        sourceRunId: z.string().uuid().nullable().optional(),
+        sourceCommentId: z.string().guid().nullable().optional(),
+        sourceRunId: z.string().guid().nullable().optional(),
         title: z.string().trim().max(240).nullable().optional(),
         summary: z.string().trim().max(1000).nullable().optional(),
         continuationPolicy: issueThreadInteractionContinuationPolicySchema.optional().default("wake_assignee"),
@@ -1060,8 +1126,8 @@ export const createIssueThreadInteractionSchema = z.discriminatedUnion("kind", [
         ...createIssueThreadInteractionCommon,
         kind: z.literal("ask_user_questions"),
         idempotencyKey: z.string().trim().max(255).nullable().optional(),
-        sourceCommentId: z.string().uuid().nullable().optional(),
-        sourceRunId: z.string().uuid().nullable().optional(),
+        sourceCommentId: z.string().guid().nullable().optional(),
+        sourceRunId: z.string().guid().nullable().optional(),
         title: z.string().trim().max(240).nullable().optional(),
         summary: z.string().trim().max(1000).nullable().optional(),
         continuationPolicy: issueThreadInteractionContinuationPolicySchema.optional().default("wake_assignee"),
@@ -1071,8 +1137,8 @@ export const createIssueThreadInteractionSchema = z.discriminatedUnion("kind", [
         ...createIssueThreadInteractionCommon,
         kind: z.literal("request_confirmation"),
         idempotencyKey: z.string().trim().max(255).nullable().optional(),
-        sourceCommentId: z.string().uuid().nullable().optional(),
-        sourceRunId: z.string().uuid().nullable().optional(),
+        sourceCommentId: z.string().guid().nullable().optional(),
+        sourceRunId: z.string().guid().nullable().optional(),
         title: z.string().trim().max(240).nullable().optional(),
         summary: z.string().trim().max(1000).nullable().optional(),
         continuationPolicy: issueThreadInteractionContinuationPolicySchema.optional().default("none"),
@@ -1082,8 +1148,8 @@ export const createIssueThreadInteractionSchema = z.discriminatedUnion("kind", [
         ...createIssueThreadInteractionCommon,
         kind: z.literal("request_checkbox_confirmation"),
         idempotencyKey: z.string().trim().max(255).nullable().optional(),
-        sourceCommentId: z.string().uuid().nullable().optional(),
-        sourceRunId: z.string().uuid().nullable().optional(),
+        sourceCommentId: z.string().guid().nullable().optional(),
+        sourceRunId: z.string().guid().nullable().optional(),
         title: z.string().trim().max(240).nullable().optional(),
         summary: z.string().trim().max(1000).nullable().optional(),
         continuationPolicy: issueThreadInteractionContinuationPolicySchema.optional().default("wake_assignee"),
@@ -1093,8 +1159,8 @@ export const createIssueThreadInteractionSchema = z.discriminatedUnion("kind", [
         ...createIssueThreadInteractionCommon,
         kind: z.literal("request_item_verdicts"),
         idempotencyKey: z.string().trim().max(255).nullable().optional(),
-        sourceCommentId: z.string().uuid().nullable().optional(),
-        sourceRunId: z.string().uuid().nullable().optional(),
+        sourceCommentId: z.string().guid().nullable().optional(),
+        sourceRunId: z.string().guid().nullable().optional(),
         title: z.string().trim().max(240).nullable().optional(),
         summary: z.string().trim().max(1000).nullable().optional(),
         continuationPolicy: issueThreadInteractionContinuationPolicySchema.optional().default("wake_assignee"),
@@ -1167,10 +1233,10 @@ export const submitIssueThreadInteractionVerdictsSchema = z.object({
     }
 });
 export const linkIssueApprovalSchema = z.object({
-    approvalId: z.string().uuid(),
+    approvalId: z.string().guid(),
 });
 export const createIssueAttachmentMetadataSchema = z.object({
-    issueCommentId: z.string().uuid().optional().nullable(),
+    issueCommentId: z.string().guid().optional().nullable(),
 });
 export const ISSUE_DOCUMENT_FORMATS = ["markdown"];
 export const issueDocumentFormatSchema = z.enum(ISSUE_DOCUMENT_FORMATS);
@@ -1179,7 +1245,7 @@ export const upsertIssueDocumentSchema = z.object({
     format: issueDocumentFormatSchema,
     body: multilineTextSchema.pipe(z.string().max(524288)),
     changeSummary: z.string().trim().max(500).nullable().optional(),
-    baseRevisionId: z.string().uuid().nullable().optional(),
+    baseRevisionId: z.string().guid().nullable().optional(),
 });
 export const restoreIssueDocumentRevisionSchema = z.object({});
 //# sourceMappingURL=issue.js.map