@tickernelz/paperclip-pro 2026.1008.1 → 2026.1008.3

package/dist/index.js

@@ -10101,7 +10101,7 @@ function requireTitleOrDescription(value, ctx) {
     ctx.addIssue({ code: z19.ZodIssueCode.custom, path: ["title"], message: "Provide a title or task description" });
   }
 }
-var issueBlockedInboxStateSchema, issueBlockedInboxSeveritySchema, issueBlockedInboxReasonSchema, issueBlockedInboxIssueRefSchema, issueBlockedInboxAttentionSchema, ISSUE_EXECUTION_WORKSPACE_PREFERENCES, executionWorkspaceStrategySchema, ipv4CidrPattern, protectedTaskEgressCidrs, issueExecutionWorkspaceSettingsSchema, issueRunModelOverrideSubtaskScopeSchema, issueRunModelOverrideInheritanceStateSchema, issueAssigneeAdapterOverridesSchema, runModelOverrideValue, issueRunModelOverrideUpdateSchema, issueExecutionStagePrincipalBaseSchema, issueExecutionStagePrincipalSchema, issueExecutionStageParticipantSchema, issueExecutionStageSchema, issueExecutionMonitorPolicySchema, issueExecutionPolicySchema, issueExecutionMonitorStateSchema, issueReviewRequestSchema, issueExecutionStateSchema, issueRecoveryActionReadModelSchema, RESOLVE_ISSUE_RECOVERY_ACTION_OUTCOMES, retryWorkspaceExportSchema, resolveIssueRecoveryActionSchema, issueRequestDepthInputSchema, createIssueBaseSchema, createIssueDuplicateGuardSchema, onboardingFirstTaskMarkerSchema, createIssueInputSchema, createIssueSchema, setIssueTitleSchema, upsertIssueWatchdogSchema, createChildIssueSchema, createAcceptedPlanDecompositionSchema, issueCountFilterIdSchema, issueCountFlagQuerySchema, issueCountQuerySchema, createIssueLabelSchema, issueCommentAttachmentIdsSchema, updateIssueSchema, stalledReviewDecisionSchema, checkoutIssueSchema, commentMetadataLabelSchema, commentMetadataTextSchema, issueCommentAuthorTypeSchema, issueCommentPresentationSchema, issueCommentMetadataBaseRowSchema, issueCommentMetadataTextRowSchema, issueCommentMetadataCodeRowSchema, issueCommentMetadataKeyValueRowSchema, issueCommentMetadataIssueLinkRowSchema, issueCommentMetadataAgentLinkRowSchema, issueCommentMetadataRunLinkRowSchema, issueCommentMetadataRowSchema, issueCommentMetadataSectionSchema, issueCommentMetadataSchema, addIssueCommentSchema, issueThreadInteractionStatusSchema, issueThreadInteractionKindSchema, issueThreadInteractionCanonicalResolverPolicySchema, issueThreadInteractionResolverPolicySchema, issueThreadInteractionResolverPolicyProvenanceSchema, issueThreadInteractionEffectiveResolverPolicySourceSchema, issueThreadInteractionContinuationPolicySchema, connectionIntentPhaseSchema, connectionIntentBrandAssetSchema, connectionIntentPayloadSchema, connectionIntentResultSchema, issueDocumentKeySchema, suggestedTaskDraftSchema, suggestTasksPayloadSchema, suggestTasksResultCreatedTaskSchema, suggestTasksResultSchema, askUserQuestionsQuestionOptionSchema, askUserQuestionsQuestionSchema, paperclipQuestionOptionSchema, paperclipQuestionSchema, paperclipQuestionSetPayloadSchema, askUserQuestionsPayloadFields, askUserQuestionsPayloadSchema, askUserQuestionsAnswerSchema, askUserQuestionsResultSchema, requestConfirmationHrefSchema, requestConfirmationTargetBaseSchema, requestConfirmationIssueDocumentTargetSchema, requestConfirmationCustomTargetSchema, requestConfirmationTargetSchema, requestConfirmationToolActionPayloadSchema, requestConfirmationSecretProposalPayloadSchema, requestConfirmationPayloadSchema, requestCheckboxConfirmationOptionSchema, requestCheckboxConfirmationPayloadSchema, requestConfirmationResumeFailureSchema, requestConfirmationToolActionResultSchema, requestConfirmationSecretProposalResultSchema, requestConfirmationResultSchema, requestCheckboxConfirmationResultSchema, requestItemVerdictValueSchema, requestItemVerdictsItemSchema, requestItemVerdictsPayloadSchema, requestItemVerdictsResultItemSchema, requestItemVerdictsResultSchema, createIssueThreadInteractionCommon, createLegacyAskUserQuestionsPayloadSchema, createAskUserQuestionsPayloadSchema, createIssueThreadInteractionSchema, acceptIssueThreadInteractionSchema, resolveConfirmationFromCommentSchema, rejectIssueThreadInteractionSchema, cancelIssueThreadInteractionSchema, skipIssueThreadInteractionSchema, withdrawIssueThreadInteractionSchema, respondIssueThreadInteractionSchema, submitIssueThreadInteractionVerdictsSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, upsertIssueDocumentSchema, restoreIssueDocumentRevisionSchema;
+var issueBlockedInboxStateSchema, issueBlockedInboxSeveritySchema, issueBlockedInboxReasonSchema, issueBlockedInboxIssueRefSchema, issueBlockedInboxAttentionSchema, ISSUE_EXECUTION_WORKSPACE_PREFERENCES, executionWorkspaceStrategySchema, ipv4CidrPattern, protectedTaskEgressCidrs, issueExecutionWorkspaceSettingsSchema, issueRunModelOverrideSubtaskScopeSchema, issueRunModelOverrideInheritanceStateSchema, issueAssigneeAdapterOverridesSchema, runModelOverrideValue, issueRunModelOverrideUpdateSchema, issueExecutionStagePrincipalBaseSchema, issueExecutionStagePrincipalSchema, issueExecutionStageParticipantSchema, issueExecutionStageSchema, issueExecutionMonitorPolicySchema, issueExecutionPolicySchema, issueExecutionMonitorStateSchema, issueReviewRequestSchema, issueExecutionStateSchema, issueRecoveryActionReadModelSchema, RESOLVE_ISSUE_RECOVERY_ACTION_OUTCOMES, retryWorkspaceExportSchema, resolveIssueRecoveryActionSchema, issueRequestDepthInputSchema, createIssueBaseSchema, createIssueDuplicateGuardSchema, onboardingFirstTaskMarkerSchema, createIssueInputSchema, createIssueSchema, setIssueTitleSchema, upsertIssueWatchdogSchema, createChildIssueSchema, createAcceptedPlanDecompositionSchema, issueCountFilterIdSchema, issueCountFlagQuerySchema, issueCountQuerySchema, createIssueLabelSchema, issueCommentAttachmentIdsSchema, updateIssueSchema, stalledReviewDecisionSchema, checkoutIssueSchema, commentMetadataLabelSchema, commentMetadataTextSchema, issueCommentAuthorTypeSchema, issueCommentPresentationSchema, issueCommentMetadataBaseRowSchema, issueCommentMetadataTextRowSchema, issueCommentMetadataCodeRowSchema, issueCommentMetadataKeyValueRowSchema, issueCommentMetadataIssueLinkRowSchema, issueCommentMetadataAgentLinkRowSchema, issueCommentMetadataRunLinkRowSchema, issueCommentMetadataRowSchema, issueCommentMetadataSectionSchema, issueCommentMetadataSchema, addIssueCommentSchema, issueThreadInteractionStatusSchema, issueThreadInteractionKindSchema, issueThreadInteractionCanonicalResolverPolicySchema, issueThreadInteractionResolverPolicySchema, issueThreadInteractionResolverPolicyProvenanceSchema, issueThreadInteractionEffectiveResolverPolicySourceSchema, issueThreadInteractionContinuationPolicySchema, connectionIntentPhaseSchema, connectionIntentBrandAssetSchema, connectionIntentPayloadSchema, connectionIntentResultSchema, issueDocumentKeySchema, suggestedTaskDraftSchema, suggestTasksPayloadSchema, suggestTasksResultCreatedTaskSchema, suggestTasksResultSchema, askUserQuestionsQuestionOptionSchema, askUserQuestionsQuestionSchema, paperclipQuestionOptionSchema, paperclipQuestionSchema, paperclipQuestionSetPayloadSchema, askUserQuestionsPayloadFields, askUserQuestionsPayloadSchema, INTERACTION_NOTE_MAX_LENGTH, interactionNoteSchema, askUserQuestionsAnswerSchema, askUserQuestionsResultSchema, requestConfirmationHrefSchema, requestConfirmationTargetBaseSchema, requestConfirmationIssueDocumentTargetSchema, requestConfirmationCustomTargetSchema, requestConfirmationTargetSchema, requestConfirmationToolActionPayloadSchema, requestConfirmationSecretProposalPayloadSchema, requestConfirmationPayloadSchema, requestCheckboxConfirmationOptionSchema, requestCheckboxConfirmationPayloadSchema, requestConfirmationResumeFailureSchema, requestConfirmationToolActionResultSchema, requestConfirmationSecretProposalResultSchema, requestConfirmationResultSchema, requestCheckboxConfirmationResultSchema, requestItemVerdictValueSchema, requestItemVerdictsItemSchema, requestItemVerdictsPayloadSchema, requestItemVerdictsResultItemSchema, requestItemVerdictsResultSchema, createIssueThreadInteractionCommon, createLegacyAskUserQuestionsPayloadSchema, createAskUserQuestionsPayloadSchema, createIssueThreadInteractionSchema, acceptIssueThreadInteractionSchema, resolveConfirmationFromCommentSchema, rejectIssueThreadInteractionSchema, cancelIssueThreadInteractionSchema, skipIssueThreadInteractionSchema, withdrawIssueThreadInteractionSchema, respondIssueThreadInteractionSchema, submitIssueThreadInteractionVerdictsSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, upsertIssueDocumentSchema, restoreIssueDocumentRevisionSchema;
 var init_issue = __esm({
   "../packages/shared/src/validators/issue.ts"() {
     "use strict";
@@ -11061,10 +11061,15 @@ var init_issue = __esm({
         }
       }
     });
+    INTERACTION_NOTE_MAX_LENGTH = 2e4;
+    interactionNoteSchema = multilineTextSchema.pipe(z19.string().trim().max(INTERACTION_NOTE_MAX_LENGTH)).nullable().optional().describe(
+      "Optional Markdown note from the resolving board user, up to 20000 characters. Uploaded attachments appear as Markdown links inside it. Agents cannot send a note."
+    );
     askUserQuestionsAnswerSchema = z19.object({
       questionId: z19.string().trim().min(1).max(160),
       optionIds: z19.array(z19.string().trim().min(1).max(160)).max(129),
-      otherText: multilineTextSchema.pipe(z19.string().trim().max(1e5)).nullable().optional()
+      otherText: multilineTextSchema.pipe(z19.string().trim().max(1e5)).nullable().optional(),
+      note: interactionNoteSchema
     });
     askUserQuestionsResultSchema = z19.object({
       version: z19.literal(1),
@@ -11284,6 +11289,7 @@ var init_issue = __esm({
         "addressee_deleted"
       ]),
       reason: z19.string().trim().max(4e3).nullable().optional(),
+      note: interactionNoteSchema,
       commentId: z19.string().guid().nullable().optional(),
       supersededByInteractionId: z19.string().guid().nullable().optional(),
       staleTarget: requestConfirmationTargetSchema.nullable().optional(),
@@ -11549,7 +11555,8 @@ var init_issue = __esm({
     acceptIssueThreadInteractionSchema = z19.object({
       rememberAction: z19.boolean().optional(),
       selectedClientKeys: z19.array(z19.string().trim().min(1).max(120)).min(1).max(50).optional(),
-      selectedOptionIds: z19.array(z19.string().trim().min(1).max(120)).max(REQUEST_CHECKBOX_CONFIRMATION_OPTION_LIMIT).optional()
+      selectedOptionIds: z19.array(z19.string().trim().min(1).max(120)).max(REQUEST_CHECKBOX_CONFIRMATION_OPTION_LIMIT).optional(),
+      note: interactionNoteSchema
     }).superRefine((value, ctx) => {
       const seenClientKeys = /* @__PURE__ */ new Set();
       for (const [index130, clientKey] of (value.selectedClientKeys ?? []).entries()) {
@@ -11590,7 +11597,8 @@ var init_issue = __esm({
       }
     });
     rejectIssueThreadInteractionSchema = z19.object({
-      reason: z19.string().trim().max(4e3).optional()
+      reason: z19.string().trim().max(4e3).optional(),
+      note: interactionNoteSchema
     });
     cancelIssueThreadInteractionSchema = z19.object({
       reason: z19.string().trim().max(4e3).optional()
@@ -14711,7 +14719,7 @@ var init_smoke_lab = __esm({
 });
 
 // ../packages/shared/src/types/instance.ts
-var DAILY_RETENTION_PRESETS, WEEKLY_RETENTION_PRESETS, MONTHLY_RETENTION_PRESETS, DEFAULT_BACKUP_RETENTION, SPEECH_TO_TEXT_DEFAULTS, DEFAULT_MESSAGE_DELIVERY;
+var DAILY_RETENTION_PRESETS, WEEKLY_RETENTION_PRESETS, MONTHLY_RETENTION_PRESETS, DEFAULT_BACKUP_RETENTION, SPEECH_TO_TEXT_DEFAULTS, ATTACHMENT_MAX_MEGABYTES_MIN, ATTACHMENT_MAX_MEGABYTES_MAX, ATTACHMENT_ORPHAN_AFTER_DAYS_MIN, ATTACHMENT_ORPHAN_AFTER_DAYS_MAX, ATTACHMENT_CLOSED_TASK_AFTER_DAYS_MIN, ATTACHMENT_CLOSED_TASK_AFTER_DAYS_MAX, DEFAULT_ATTACHMENT_RETENTION, DEFAULT_MESSAGE_DELIVERY;
 var init_instance = __esm({
   "../packages/shared/src/types/instance.ts"() {
     "use strict";
@@ -14731,6 +14739,17 @@ var init_instance = __esm({
       maxAudioSeconds: 600,
       sttWaitSeconds: 15
     };
+    ATTACHMENT_MAX_MEGABYTES_MIN = 1;
+    ATTACHMENT_MAX_MEGABYTES_MAX = 500;
+    ATTACHMENT_ORPHAN_AFTER_DAYS_MIN = 1;
+    ATTACHMENT_ORPHAN_AFTER_DAYS_MAX = 365;
+    ATTACHMENT_CLOSED_TASK_AFTER_DAYS_MIN = 7;
+    ATTACHMENT_CLOSED_TASK_AFTER_DAYS_MAX = 3650;
+    DEFAULT_ATTACHMENT_RETENTION = {
+      enabled: false,
+      orphanAfterDays: 7,
+      closedTasks: { enabled: false, afterDays: 90 }
+    };
     DEFAULT_MESSAGE_DELIVERY = "steer";
   }
 });
@@ -15279,7 +15298,7 @@ function isSpeechToTextBaseUrl(value) {
   if (url.username || url.password || url.search || url.hash) return false;
   return ["/", "/v1", "/v1/"].includes(url.pathname);
 }
-var messageDeliverySchema, backupRetentionPolicySchema, speechToTextSettingsSchema, instanceGeneralSettingsSchema, patchInstanceGeneralSettingsSchema, instanceExperimentalSettingsSchema, patchInstanceExperimentalSettingsSchema, managedSettingMetadataSchema, instanceExperimentalSettingsWithManagedSchema, patchInstanceSettingsSchema, MAX_TASK_DRAIN_TTL_MS, startTaskDrainRequestSchema, instanceSettingsSchema;
+var messageDeliverySchema, backupRetentionPolicySchema, speechToTextSettingsSchema, attachmentMaxMegabytesSchema, attachmentRetentionSettingsSchema, instanceGeneralSettingsSchema, patchInstanceGeneralSettingsSchema, instanceExperimentalSettingsSchema, patchInstanceExperimentalSettingsSchema, managedSettingMetadataSchema, instanceExperimentalSettingsWithManagedSchema, patchInstanceSettingsSchema, MAX_TASK_DRAIN_TTL_MS, startTaskDrainRequestSchema, instanceSettingsSchema;
 var init_instance2 = __esm({
   "../packages/shared/src/validators/instance.ts"() {
     "use strict";
@@ -15307,6 +15326,15 @@ var init_instance2 = __esm({
     }).strict().refine((value) => !value.enabled || value.baseUrl !== "" && value.model !== "" && value.apiKeyEnvVar !== "", {
       message: "Speech-to-text needs a base URL, a model and an API key environment variable before it can be enabled"
     });
+    attachmentMaxMegabytesSchema = z36.number().int().min(ATTACHMENT_MAX_MEGABYTES_MIN).max(ATTACHMENT_MAX_MEGABYTES_MAX);
+    attachmentRetentionSettingsSchema = z36.object({
+      enabled: z36.boolean().default(DEFAULT_ATTACHMENT_RETENTION.enabled),
+      orphanAfterDays: z36.number().int().min(ATTACHMENT_ORPHAN_AFTER_DAYS_MIN).max(ATTACHMENT_ORPHAN_AFTER_DAYS_MAX).default(DEFAULT_ATTACHMENT_RETENTION.orphanAfterDays),
+      closedTasks: z36.object({
+        enabled: z36.boolean().default(DEFAULT_ATTACHMENT_RETENTION.closedTasks.enabled),
+        afterDays: z36.number().int().min(ATTACHMENT_CLOSED_TASK_AFTER_DAYS_MIN).max(ATTACHMENT_CLOSED_TASK_AFTER_DAYS_MAX).default(DEFAULT_ATTACHMENT_RETENTION.closedTasks.afterDays)
+      }).strict().default(DEFAULT_ATTACHMENT_RETENTION.closedTasks)
+    }).strict();
     instanceGeneralSettingsSchema = z36.object({
       censorUsernameInLogs: z36.boolean().default(false),
       feedbackDataSharingPreference: feedbackDataSharingPreferenceSchema.default(
@@ -15315,6 +15343,8 @@ var init_instance2 = __esm({
       backupRetention: backupRetentionPolicySchema.default(DEFAULT_BACKUP_RETENTION),
       defaultMessageDelivery: messageDeliverySchema.default(DEFAULT_MESSAGE_DELIVERY),
       speechToText: speechToTextSettingsSchema.default(SPEECH_TO_TEXT_DEFAULTS),
+      attachmentMaxMegabytes: attachmentMaxMegabytesSchema.nullable().default(null),
+      attachmentRetention: attachmentRetentionSettingsSchema.default(DEFAULT_ATTACHMENT_RETENTION),
       // Execution policy. Absent/"any" = unrestricted; "kubernetes" forces the
       // Kubernetes sandbox provider and denies local/ssh execution (cloud_tenant).
       executionMode: z36.enum(["kubernetes", "any"]).optional()
@@ -25438,7 +25468,8 @@ var init_assets = __esm({
         createdByAgentId: uuid5("created_by_agent_id").references(() => agents.id),
         createdByUserId: text10("created_by_user_id"),
         createdAt: timestamp5("created_at", { withTimezone: true }).notNull().defaultNow(),
-        updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow()
+        updatedAt: timestamp5("updated_at", { withTimezone: true }).notNull().defaultNow(),
+        purgedAt: timestamp5("purged_at", { withTimezone: true })
       },
       (table) => ({
         companyCreatedIdx: index3("assets_company_created_idx").on(table.companyId, table.createdAt),
@@ -25836,6 +25867,7 @@ var init_heartbeat_runs = __esm({
           sql3`(${table.contextSnapshot} ->> 'issueId')`,
           table.createdAt.desc()
         ),
+        companyCtxIssueRedactionIdx: index8("heartbeat_runs_company_ctx_issue_redaction_idx").on(table.companyId, sql3`(${table.contextSnapshot} ->> 'issueId')`).where(sql3`${table.contextSnapshot} ? 'paperclipSecretRedactions'`),
         companyCtxTaskCreatedIdx: index8("heartbeat_runs_company_ctx_task_created_idx").on(
           table.companyId,
           sql3`(${table.contextSnapshot} ->> 'taskId')`,
@@ -26274,6 +26306,7 @@ var init_instance_settings = __esm({
         defaultEnvironmentId: uuid16("default_environment_id").references(() => environments.id, { onDelete: "set null" }),
         general: jsonb11("general").$type().notNull().default({}),
         experimental: jsonb11("experimental").$type().notNull().default({}),
+        attachmentRetentionLastRun: jsonb11("attachment_retention_last_run").$type(),
         createdAt: timestamp17("created_at", { withTimezone: true }).notNull().defaultNow(),
         updatedAt: timestamp17("updated_at", { withTimezone: true }).notNull().defaultNow()
       },
@@ -31516,7 +31549,13 @@ var init_activity_log = __esm({
           table.createdAt
         ),
         runIdIdx: index71("activity_log_run_id_idx").on(table.runId),
-        entityIdx: index71("activity_log_entity_type_id_idx").on(table.entityType, table.entityId)
+        entityIdx: index71("activity_log_entity_type_id_idx").on(table.entityType, table.entityId),
+        companyEntityRunIdx: index71("activity_log_company_entity_run_idx").on(
+          table.companyId,
+          table.entityType,
+          table.entityId,
+          table.runId
+        )
       })
     );
   }
@@ -32925,7 +32964,8 @@ var init_heartbeat_run_events = __esm({
         runSourceEventUq: uniqueIndex71("heartbeat_run_events_run_source_event_uq").on(table.runId, table.sourceEventId).where(sql36`${table.sourceEventId} is not null`),
         runSourceSeqUq: uniqueIndex71("heartbeat_run_events_run_source_seq_uq").on(table.runId, table.sourceInstanceId, table.sourceSeq).where(sql36`${table.sourceInstanceId} is not null and ${table.sourceSeq} is not null`),
         companyRunIdx: index95("heartbeat_run_events_company_run_idx").on(table.companyId, table.runId),
-        companyCreatedIdx: index95("heartbeat_run_events_company_created_idx").on(table.companyId, table.createdAt)
+        companyCreatedIdx: index95("heartbeat_run_events_company_created_idx").on(table.companyId, table.createdAt),
+        retryExhaustedRunIdx: index95("heartbeat_run_events_retry_exhausted_run_idx").on(table.runId, table.id).where(sql36`${table.eventType} = 'lifecycle' and ${table.message} like 'Bounded retry exhausted%'`)
       })
     );
   }