DottaandPaperclip 373b675f94 fix(server): prevent review policy verdict downgrade bypass ...

Authorize verdicts and policy changes against the stored restrictive review policy, remove downgrade guidance, and cover both restrictive policies with route regressions.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-08-15 01:12:34 +00:00

..

access.ts

fix(security): standardize paperclipai CLI guidance on safe npx path (#11343)

2026-08-13 16:43:21 -07:00

activity.ts

feat(activity): add two-tier all-actors audit feed (#10831)

2026-08-04 23:07:38 -05:00

adapters.ts

feat: make in-app features cloud-aware (#10850)

2026-08-04 23:00:14 -05:00

agents.ts

fix(agents): refuse to hire onto an adapter this instance cannot run (#10256)

2026-08-12 16:43:40 -07:00

approvals.ts

feat: maintained in_review review-path contract + stalled-review actions (#10675)

2026-08-04 13:54:40 -05:00

assets.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

attention.ts

feat(decisions): improve desk triage and queue parity (#10785)

2026-08-03 21:31:45 -05:00

auth.ts

feat: implement multi-user access and invite flows (#3784)

2026-04-17 09:44:19 -05:00

authz.ts

feat(secrets): thread the acting user into user-scoped secret resolution (#10115)

2026-07-23 13:30:26 -07:00

board-chat.ts

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

built-in-agents.ts

[codex] Add built-in agents and Reflection Coach bundle (#9206)

2026-07-09 16:29:30 -05:00

cases.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

cloud.ts

feat: make in-app features cloud-aware (#10850)

2026-08-04 23:00:14 -05:00

companies.ts

feat(server): chunked import preview endpoint and resumable upload in the Import page and CLI (#11224)

2026-08-11 16:06:37 -07:00

company-import-paths.ts

[codex] Runtime control-plane fixes (#6380)

2026-05-20 10:37:11 -05:00

company-skill-policy.ts

feat(skills): open-by-default company skill policy and core UX (#9564)

2026-07-15 11:42:40 -05:00

company-skills.ts

Add project folder browsing to skill imports (#9930)

2026-08-02 10:55:36 -05:00

costs.ts

security(server): close cross-tenant existence oracle (404 instead of 403) (#3967)

2026-07-14 15:53:09 -07:00

dashboard.ts

feat(server): recovery observability report and rate alert (#9644)

2026-07-16 02:34:00 -05:00

decision-queues.ts

feat(decisions): add desk workflow and retention (#10672)

2026-08-02 10:47:03 -05:00

decision-training.ts

feat: restore decision training library and inspector (#9779)

2026-07-17 13:27:32 -05:00

decisions.ts

feat(decisions): add desk workflow and retention (#10672)

2026-08-02 10:47:03 -05:00

environment-selection.ts

refactor(environments): make execution environments instance-scoped (#8375)

2026-06-20 09:42:53 -07:00

environments.ts

Resolve the environment secret companyId context on first save (#11291)

2026-08-12 11:32:15 -07:00

execution-workspaces.ts

feat(server): reopen an archived isolated execution workspace in place (#11322)

2026-08-13 07:44:19 -07:00

file-resources.ts

fix(files): only highlight accessible workspace file links (#11090)

2026-08-11 12:11:45 -04:00

folders.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

goals.ts

security(server): close cross-tenant existence oracle (404 instead of 403) (#3967)

2026-07-14 15:53:09 -07:00

health.ts

feat: make in-app features cloud-aware (#10850)

2026-08-04 23:00:14 -05:00

inbox-agent-policy.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

inbox-dismissals.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

index.ts

feat(server): receive and apply the Paperclip Cloud onboarding seed (#11098)

2026-08-12 22:54:07 -07:00

instance-database-backups.ts

feat: make in-app features cloud-aware (#10850)

2026-08-04 23:00:14 -05:00

instance-settings.ts

Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200)

2026-08-11 11:40:57 -07:00

issue-tree-control.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

issues-checkout-wakeup.ts

Cut over OpenClaw adapter to strict SSE streaming

2026-03-05 15:54:55 -06:00

issues.ts

fix(server): prevent review policy verdict downgrade bypass

2026-08-15 01:12:34 +00:00

llms.ts

[codex] Add built-in Hermes adapters (#8543)

2026-06-26 16:04:58 -05:00

onboarding-seed.ts

feat(server): receive and apply the Paperclip Cloud onboarding seed (#11098)

2026-08-12 22:54:07 -07:00

openapi.ts

feat(secrets): add agent-readable /secrets/catalog endpoint (#9530)

2026-08-13 17:43:43 -05:00

org-chart-svg.ts

Improve generated company org chart assets

2026-03-23 16:58:07 -05:00

pipelines.ts

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

plugin-ui-static.ts

feat(mcp) [split 2/8]: add governed access contracts (#9557)

2026-07-14 12:57:20 -05:00

plugins.ts

feat: make in-app features cloud-aware (#10850)

2026-08-04 23:00:14 -05:00

projects.ts

feat(workspaces): defer isolated setup until runtime start (#10653)

2026-08-02 10:37:10 -05:00

resource-memberships.ts

feat(server): add per-user document stars (#9952)

2026-07-27 19:13:35 -05:00

routines.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

secrets.ts

feat(secrets): add agent-readable /secrets/catalog endpoint (#9530)

2026-08-13 17:43:43 -05:00

setup-token-route.test.ts

feat: Claude agent setup-token login in a sandbox (#11286)

2026-08-12 13:02:49 -07:00

sidebar-badges.ts

feat: add attention queue and Decisions surface (#9380)

2026-07-10 17:09:57 -05:00

sidebar-preferences.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

smoke-lab.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

status-cards.ts

feat(status-cards): join summary-mentioned issues to watched set (#10205)

2026-07-24 16:44:56 -05:00

summary-slots.ts

feat: add built-in summarizer and summary slots (#9713)

2026-07-17 11:03:07 -05:00

teams-catalog.ts

[codex] Add teams catalog extraction (#7550)

2026-06-05 12:55:49 -05:00

tool-access.ts

fix(server): close tool-access cross-tenant ID oracles (#9589)

2026-08-12 16:09:18 -07:00

tool-gateway.ts

feat(mcp) [split 4/8]: wire gateway runtime and Smoke Lab (#9559)

2026-07-14 15:07:30 -05:00

user-profiles.ts

Skill Studio: three-pane skill IDE with sandboxed test runs (#9241)

2026-07-09 13:08:56 -05:00

workspace-command-authz.ts

feat(workspaces): defer isolated setup until runtime start (#10653)

2026-08-02 10:37:10 -05:00

workspace-runtime-service-authz.ts

security(server): close cross-tenant existence oracle (404 instead of 403) (#3967)

2026-07-14 15:53:09 -07:00