DottaandPaperclip 813e808af4 Remove filesystem history authorization from workspace preparation (#16963) ...

Remove physical-root source/reader authorization and sticky directory classifications from workspace preparation. Preserve current task/run authority, app-record privacy, credential authorization, containment, and lifecycle/publication integrity.

Validate replacement selections against persisted new inputs and refresh verified checkout ownership so bounded reuse survives earlier workspace relocation. Add real PostgreSQL/Git regressions, a reproducible history-scaling benchmark, and documentation.

Full CI passed all 48 jobs and Greptile scored 5/5 at 3d5da6c259. Five preparation-guard medians improved from 20,512.99 ms to 52.22 ms on the 8,500-workspace fixture; these are not end-to-end startup timings.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-20 09:19:59 -05:00

..

architecture

perf(runner): preload essential Claude task tools (#16885)

2026-10-19 14:29:22 -05:00

assets

fix: make task recovery durable and preserve current requests (#13075)

2026-09-09 09:14:25 -05:00

benchmarks

fix(tool-gateway): bound MCP discovery memory and concurrency (#14864)

2026-10-02 07:45:27 -05:00

connections

Connect and configure GitHub Copilot through Apps (#15705)

2026-10-20 07:02:22 -05:00

design

Draft: Build agent-ready design proposal system (#16875)

2026-10-19 17:45:26 -07:00

experimental

fix(heartbeat): wait for a live holder of a reused shared execution workspace (#16371)

2026-10-14 20:45:29 -07:00

logs

Improve CLI API parity coverage (#6626)

2026-06-02 17:13:29 -07:00

plans

Remove filesystem history authorization from workspace preparation (#16963)

2026-10-20 09:19:59 -05:00

plugins

feat(plugins): invalidate runtimes when connector access changes (#16605)

2026-10-19 12:49:11 -07:00

pr/5429

Add secrets provider vaults and remote import (#5429)

2026-05-09 18:22:17 -05:00

screenshots

fix(apps): show user avatars and center access rows (#15577)

2026-10-12 23:54:01 -05:00

spec

feat(adapters): confine local coding processes (#9504)

2026-07-14 11:01:19 -05:00

testing

feat: simplify agent onboarding and configuration (#13011)

2026-09-08 14:22:32 -05:00

acp-run-lifecycle.md

Preserve ACP bridge terminal evidence before disconnect (#15478)

2026-10-07 13:01:22 -07:00

adapter-model-audit-2026-09-22.md

feat(adapters): refresh current coding models and reasoning controls (#13829)

2026-09-22 16:56:00 -07:00

adapter-model-audit-2026-10-02.md

fix(codex): gate models on the Codex CLI floor before the ChatGPT backend rejects them (#15399)

2026-10-07 10:37:55 -07:00

AGENT-ARTIFACTS.md

feat(ui): upload files directly in task artifacts (#15964)

2026-10-12 08:11:31 -05:00

agent-commentary.md

fix: give commentary its own default read permission (#16903)

2026-10-19 16:58:17 -05:00

agent-files.md

docs: Pi core production readiness evidence (5/5) (#14956)

2026-10-09 11:15:09 -05:00

AGENT-IDENTITY.md

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

agent-instruction-revisions.md

feat(agents): persist agent files across tasks without revision history (#14420)

2026-09-29 08:25:56 -05:00

AGENT-LIFECYCLE.md

Persist agent-owned instance secrets through lifecycle results (#16191)

2026-10-13 10:13:42 -07:00

agent-observability.md

feat: configure company agent observability (#16874)

2026-10-19 15:36:04 -05:00

agent-permission-defaults.md

Remove the Pipelines experiment and preserve its data (#16834)

2026-10-19 08:09:46 -05:00

agent-personas.md

feat(onboarding): ClipLab sleepy-to-wake hero and step hand-offs (#13629)

2026-09-19 08:30:14 -05:00

AGENTCOMPANIES_SPEC_INVENTORY.md

Add routine support to recurring task portability

2026-03-23 16:57:38 -05:00

ANNOUNCEMENTS.md

feat: add native in-app announcements with persistent dismissal (#13403)

2026-09-14 10:19:54 -05:00

CHANNELS.md

feat(cli): add 'paperclipai channels' to show release lanes and the current one (#11210)

2026-08-11 08:47:32 -07:00

ci-profiling.md

perf(ci): reuse package downloads and overlap runtime checks (#16474)

2026-10-15 15:16:52 -05:00

CLI.md

Harden Board CLI approval and native verification fixtures (#16482)

2026-10-17 23:22:57 -05:00

CLIPHUB.md

refactor: rename packages to @paperclipai and CLI binary to paperclipai

2026-03-03 08:45:26 -06:00

cloud-build-readiness.md

fix(ci): cache native server integration builds in release verification (#15619)

2026-10-08 14:33:10 -07:00

cloud-ui-snippet.md

refactor(server): remove retired operator UI snippet injection (#13789)

2026-09-22 11:18:46 -07:00

composer-stop.md

refactor(heartbeat): extract prepared runtime execution (#15803)

2026-10-10 09:10:53 -05:00

connection-intents.md

refactor(storybook): organize folders and navigation by feature map (#16049)

2026-10-12 22:29:22 +00:00

CUSTOMER-SUCCESS-INSPECTION.md

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

DATABASE.md

Remove filesystem history authorization from workspace preparation (#16963)

2026-10-20 09:19:59 -05:00

decision-models.md

feat: add company fast-response acknowledgements (#15748)

2026-10-10 13:09:17 -05:00

dependency-wake-recovery.md

fix(recovery): preserve deliberate stops and dependency waits

2026-10-15 00:18:23 -07:00

DEPLOYMENT-MODES.md

fix(auth): let Cloud stack admins manage experimental settings (#16907)

2026-10-19 21:48:00 -05:00

DEVELOPING.md

Remove filesystem history authorization from workspace preparation (#16963)

2026-10-20 09:19:59 -05:00

DOCKER.md

perf(docker): start the server from a precompiled runtime bundle (#16672)

2026-10-17 16:22:35 -07:00

dot-runner-prototype.md

feat(runner): add experimental OpenAI Dot provider over MCP Events (#15402)

2026-10-07 19:11:50 -05:00

evals.md

feat: default new Apple Silicon Claude agents to Paperclip Runner (#15993)

2026-10-19 13:58:52 -05:00

execution-github-identity.md

fix(runner): preserve managed GitHub access in OpenCode (#16488)

2026-10-15 16:15:38 -05:00

execution-semantics.md

fix(runner): recover journaled completion proposals (#16962)

2026-10-20 09:09:22 -05:00

fast-responses.md

feat: add company fast-response acknowledgements (#15748)

2026-10-10 13:09:17 -05:00

GOAL.md

[codex] Refresh docs and agent skills (#4693)

2026-04-28 16:12:03 -05:00

grok-bot-agent.md

docs(grok): record production qualification and Cloud setup (#16722)

2026-10-18 07:15:53 -05:00

grok-native-runner.md

docs: Pi core production readiness evidence (5/5) (#14956)

2026-10-09 11:15:09 -05:00

HERMES_GATEWAY_ONBOARDING.md

Explain refused local Hermes gateway connections (#15520)

2026-10-07 18:55:55 -07:00

HERMES_GATEWAY_SMOKE.md

[codex] Add built-in Hermes adapters (#8543)

2026-06-26 16:04:58 -05:00

html-artifact-previews.md

feat(ui): render HTML artifacts in a secure sandbox (#15447)

2026-10-07 09:01:05 -05:00

idle-sleep-safety.md

fix(server): release idle tracking after aborted static UI files (#16685)

2026-10-17 20:28:57 -07:00

INSTALLING.md

fix(adapters): prevent engine fallback and preserve usable runtime defaults (#13105)

2026-09-09 13:27:24 -05:00

ISSUE-PRIVACY.md

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

LOW-TRUST-PRESETS.md

fix(auth): allow scoped low-trust work and owner-chat instruction edits (#14870)

2026-10-01 15:42:40 -05:00

MCP-ACCESS-GOVERNANCE.md

fix: repair MCP validation and cancelled execution recovery (#14951)

2026-10-02 13:47:59 -05:00

MCP-DEMO-SCRIPT.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

mcp-discovery-performance.md

fix(tool-gateway): bound MCP discovery memory and concurrency (#14864)

2026-10-02 07:45:27 -05:00

MCP-RUNTIME-OPERATIONS.md

fix(mcp): keep sibling tools available after transient calls (#16890)

2026-10-19 16:11:15 -05:00

memory-landscape.md

chore: improve worktree tooling and security docs

2026-04-10 22:26:30 -05:00

muse-personal-agent.md

Add personal Muse operator setup and composer controls (#16450)

2026-10-17 23:01:42 -05:00

native-workspace-finalization-recovery.md

fix(recovery): default saved-monitor waits and keep task recovery quiet (#16686)

2026-10-18 21:43:15 -05:00

observability.md

fix: derive startup warmth from per-layer reuse evidence (#16908)

2026-10-19 21:52:57 -05:00

openai-dot-runner.md

fix(ui): make external agent pairing codes copyable (#16274)

2026-10-14 06:36:47 -05:00

OPENCLAW_ONBOARDING.md

Introduce bind presets for deployment setup

2026-04-11 07:09:07 -05:00

preview-release-artifacts.md

ci: retire recurring public cloud image builds (#13827)

2026-09-23 19:35:19 -07:00

PRODUCT.md

Remove filesystem history authorization from workspace preparation (#16963)

2026-10-20 09:19:59 -05:00

project-repositories.md

fix(workspaces): classify restricted shared repository admission (#16895)

2026-10-19 16:03:16 -05:00

public-mcp.md

feat(dot): add guided invitations and persistent agent connections (#15581)

2026-10-08 16:26:41 -05:00

PUBLISHING.md

fix: preserve README images in npm package (#13488)

2026-09-15 13:34:30 -05:00

README-draft.md

docs: add README, draft README, and adapter logo assets

2026-03-02 10:31:59 -06:00

recoverable-disk-cleanup.md

fix(skills): expire unused version caches and restore saved contents (#16433)

2026-10-15 12:20:57 -05:00

RELEASE-AUTOMATION-SETUP.md

perf(ci): cache the Runner's release crate artifacts keyed by their inputs (#15932)

2026-10-12 11:25:31 -07:00

RELEASE-CHECKLIST.md

ci: retire recurring public cloud image builds (#13827)

2026-09-23 19:35:19 -07:00

RELEASE-NOTES-mcp-access-governance.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

RELEASING.md

fix(release): retry verified canary tarball 404s (#15768)

2026-10-10 16:49:15 -07:00

run-log-events.md

fix: derive startup warmth from per-layer reuse evidence (#16908)

2026-10-19 21:52:57 -05:00

runner-api-tools.md

fix(runner): match call_api to existing agent REST permissions (#16040)

2026-10-13 07:34:15 -05:00

runner-created-skills.md

feat(skills): let agents update company skills safely (#15049)

2026-10-03 12:37:55 -05:00

RUNNER-INTEGRATION-PLAYBOOK.md

docs: add native Runner integration playbook (#16846)

2026-10-19 08:50:44 -05:00

runner-integration-templates.md

docs: add native Runner integration playbook (#16846)

2026-10-19 08:50:44 -05:00

SEARCH.md

fix: improve task search relevance with a PostgreSQL rubric (#13335)

2026-09-12 16:22:58 -05:00

SECRETS-AWS-PROVIDER.md

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

SPEC-implementation.md

Remove filesystem history authorization from workspace preparation (#16963)

2026-10-20 09:19:59 -05:00

SPEC.md

Remove filesystem history authorization from workspace preparation (#16963)

2026-10-20 09:19:59 -05:00

standard-image-contract.md

feat: attest standard production images at full source commits (#13797)

2026-09-22 07:33:30 -07:00

STORYBOOK-DEPLOYMENT.md

feat: add readable Storybook branch bookmarks (#13231)

2026-09-11 10:19:36 -05:00

TASK-WATCHDOG.md

fix(interactions): authorize resolvers consistently (#11376)

2026-08-16 13:46:50 -05:00

TASKS-mcp.md

Add product spec and MCP task interface docs

2026-02-16 19:07:30 -06:00

TASKS.md

Add task management data model spec

2026-02-16 14:25:00 -06:00

TELEMETRY_WORKFLOW.md

Add telemetry proposal extractor (#9544)

2026-07-13 23:47:27 -07:00

testing-native-remote-continuity.md

fix(native): recover remote sessions while preserving warm runs (#16451)

2026-10-15 13:26:09 -05:00

TOASTS.md

fix: make multiplayer task toasts personal (#16153)

2026-10-13 08:09:19 -05:00

UNTRUSTED-PR-REVIEW.md

chore(docker): improve base image and organize docker files

2026-04-01 11:36:27 +00:00

workspace-restore-locks.md

fix(recovery): default saved-monitor waits and keep task recovery quiet (#16686)

2026-10-18 21:43:15 -05:00