@tickernelz/paperclip-pro-server 2026.929.1 → 2026.929.3

package/dist/routes/openapi.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/routes/openapi.ts"],"names":[],"mappings":"AA+2WA,wBAAgB,oBAAoB,IAAI,GAAG,CAY1C;AAED,eAAO,MAAM,gBAAgB,6BAAuB,CAAC;AAErD,wBAAgB,aAAa,+CAM5B"}
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../../src/routes/openapi.ts"],"names":[],"mappings":"AAm3WA,wBAAgB,oBAAoB,IAAI,GAAG,CAY1C;AAED,eAAO,MAAM,gBAAgB,6BAAuB,CAAC;AAErD,wBAAgB,aAAa,+CAM5B"}

package/dist/routes/openapi.js

@@ -349,6 +349,9 @@ const registry = new OpenAPIRegistry();
 const heartbeatRunIdParamSchema = z.string()
     .regex(/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89aAbB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/)
     .describe("Heartbeat run UUID; malformed values return 400");
+const cliAuthChallengeIdParamSchema = z.string().trim()
+    .regex(/^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89aAbB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/)
+    .describe("CLI auth challenge UUID; malformed values return 400");
 const ErrorSchema = registry.register("Error", z.object({ error: z.string() }));
 const responses = {
     ok: (schema = z.record(z.string(), z.unknown())) => ({
@@ -5769,7 +5772,7 @@ registry.registerPath({
     tags: ["access"],
     summary: "Approve a CLI auth challenge",
     request: {
-        params: z.object({ id: z.string() }),
+        params: z.object({ id: cliAuthChallengeIdParamSchema }),
         body: jsonBody(resolveCliAuthChallengeSchema),
     },
     responses: {
@@ -5785,7 +5788,7 @@ registry.registerPath({
     tags: ["access"],
     summary: "Cancel a CLI auth challenge",
     request: {
-        params: z.object({ id: z.string() }),
+        params: z.object({ id: cliAuthChallengeIdParamSchema }),
         body: jsonBody(resolveCliAuthChallengeSchema),
     },
     responses: { 200: r.ok(), 400: r.badRequest, 404: r.notFound },
@@ -8228,8 +8231,8 @@ registry.registerPath({
     path: "/api/cli-auth/challenges/{id}",
     tags: ["access"],
     summary: "Get a CLI auth challenge",
-    request: { params: z.object({ id: z.string() }) },
-    responses: { 200: r.ok(), 404: r.notFound },
+    request: { params: z.object({ id: cliAuthChallengeIdParamSchema }) },
+    responses: { 200: r.ok(), 400: r.badRequest, 404: r.notFound },
 });
 // ─── Invite onboarding ────────────────────────────────────────────────────────
 registry.registerPath({