mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-11-04 11:01:16 +01:00
feat(dot): add guided invitations and persistent agent connections (#15581)
Add guided external-agent invitations with live Dot connection checks and ongoing access until revoked. Keep expired credentials invalid and enforce permissions for private avatar uploads. Preserve Runner recovery and remote launch boundaries. Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
1 parent
04de3132c2
commit
2b4a1d7073
61 files changed
+7529
-4422
No files matched your search
@@ -89,6 +89,8 @@ export function isSecretSensitiveHttpRequest(
|
||||
if (isPrivateWebhookHttpRequest(method, url)) return true;
|
||||
if (url && normalizePath(url).startsWith("/mcp/files/")) return true;
|
||||
if (isPrivateAgentCommentaryHttpRequest(url)) return true;
|
||||
// Avatar uploads and dedicated Dot MCP calls may contain private image bytes.
|
||||
if (url && /^(?:\/mcp\/runner(?:\/|$)|\/api\/companies\/[^/]+\/agents\/[^/]+\/avatar(?:\/|$))/i.test(normalizePath(url).replace(/^https?:\/\/[^/]*/i, ""))) return true;
|
||||
if (!method || !url) return false;
|
||||
if (/^\/api\/chat-slack\/oauth(?:\/|$)/i.test(normalizePath(url).replace(/^https?:\/\/[^/]*/i, ""))) return true;
|
||||
if (/^\/api\/chat-endpoints\/[^/]+\/slack(?:\/|$)/i.test(normalizePath(url).replace(/^https?:\/\/[^/]*/i, ""))) return true;
|
||||
|
||||
Reference in new issue
Block a user