mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-25 09:41:04 +01:00
Closes the Greptile P2 on #10103: referencedCompanyId's null path had no coverage. Two cases, one per derivation branch: - direct-companyId branch: a proactive call referencing no company reaches the gate scope-less (handler sees no injected companyId) - scopeKind:company branch: empty scopeId resolves to null, not to an authorized company — denied with 'company context is required', proving no grant occurred (a wrong grant would fail with a different message) Refs LOOA-629 / PR #10103 (LOOA-693 security review flagged the same gap). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J4onvauR8cQq9uo9iJbcZ7