mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-27 19:35:13 +01:00
DottaandPaperclip
9c442cf48e
Add governed Supabase and Vercel deployment/configuration connectors with vaulted credentials, agent access policies, approvals, audit, and bounded provider operations. Deliver reviewed REST actions to native agents and guard Vercel preview intent on empty projects. Preserve secret-safe request identity and durable retry behavior. Verified by current-head CI, fresh Greptile 5/5 review, and real-agent deployment/configuration walkthroughs on disposable provider resources. Test resources and temporary provider tokens were removed after verification. Co-Authored-By: Paperclip <noreply@paperclip.ing>
24 lines
1.1 KiB
Plaintext
24 lines
1.1 KiB
Plaintext
sequenceDiagram
|
|
participant User
|
|
participant Paperclip
|
|
participant Vault
|
|
participant Supabase
|
|
User->>Paperclip: Select Supabase method and agent access
|
|
alt Hosted MCP browser sign-in
|
|
Paperclip->>Supabase: Read protected resource and issuer metadata
|
|
Paperclip->>Supabase: Register instance OAuth client
|
|
Paperclip->>User: Open authorization URL
|
|
User->>Supabase: Choose organization and consent
|
|
Supabase->>Paperclip: Instance callback with authorization code
|
|
Paperclip->>Supabase: Exchange code with PKCE
|
|
else Personal access token
|
|
User->>Paperclip: Enter token and optional or required project reference
|
|
end
|
|
Paperclip->>Vault: Store selected grant credential
|
|
Paperclip->>Supabase: MCP discovery or native project probe
|
|
User->>Paperclip: Set action permissions
|
|
Paperclip->>Paperclip: Authorize agent run and selected grant
|
|
Paperclip->>Vault: Resolve selected invocation credential
|
|
Paperclip->>Supabase: Invoke permitted action
|
|
Paperclip->>Paperclip: Record bounded result and audit
|