DottaandPaperclip 26d3e18916 fix(recovery): restrict source resolution authority ...

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-08-15 19:19:38 +00:00

..

__tests__

fix(recovery): restrict source resolution authority

2026-08-15 19:19:38 +00:00

adapters

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

auth

feat(mcp) [split 3/8]: add tool access policy core (#9558)

2026-07-14 14:22:39 -05:00

built-ins/agents

fix: isolate execution workspace summaries (#10790)

2026-08-11 08:56:32 -04:00

http

fix(server): raise company import zip upload limit to 1 GB and make it operator-configurable (#11184)

2026-08-10 12:47:03 -07:00

lib

perf(server): reduce issue detail request overhead (#10414)

2026-08-11 14:39:23 -04:00

middleware

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

onboarding-assets

fix: reliably show plans in the Plan pane and restore sticky plan confirmation CTAs (#10930)

2026-08-05 19:32:07 -07:00

realtime

fix(server): authenticate cloud-proxied browsers on the live-events websocket (#11290)

2026-08-12 11:22:50 -07:00

routes

fix(recovery): restrict source resolution authority

2026-08-15 19:19:38 +00:00

secrets

feat(secrets): write through external values and deep-link details (#10196)

2026-07-27 19:08:07 -05:00

services

fix(recovery): restrict source resolution authority

2026-08-15 19:19:38 +00:00

storage

feat(run-logs): durable run-log store via object-storage mirror (#8984)

2026-07-14 15:45:39 -07:00

types

feat(mcp) [split 3/8]: add tool access policy core (#9558)

2026-07-14 14:22:39 -05:00

agent-auth-jwt.ts

fix(server): align agent run JWT default TTL with documented 48h default (#10176)

2026-08-12 16:44:20 -07:00

app.ts

feat(server): receive and apply the Paperclip Cloud onboarding seed (#11098)

2026-08-12 22:54:07 -07:00

attachment-types.ts

fix(server): accept Office issue attachments (#8562)

2026-07-21 10:47:33 -07:00

board-claim.ts

…

build-commit.ts

fix(server): preserve source SHA without Git metadata (#9638)

2026-07-15 20:03:52 -05:00

build-version.ts

fix(server): stamp the real build version into images instead of the package.json placeholder (#10257)

2026-07-25 10:06:28 -07:00

config-file.ts

fix(config): preserve extensions and guard invalid repairs (#11005)

2026-08-07 00:41:19 -05:00

config.ts

…

db-errors.ts

fix(issues): make DELETE /api/issues/:id succeed for issues with dependents (#11331)

2026-08-13 12:02:15 -07:00

dev-runner-worktree.ts

feat(workspaces): defer isolated setup until runtime start (#10653)

2026-08-02 10:37:10 -05:00

dev-server-status.ts

…

dev-watch-ignore.ts

fix(server): ignore sibling worktrees in dev watch (#11074)

2026-08-07 18:30:16 -07:00

errors.ts

security(invites): widen invite-token entropy and rate-limit public invite endpoints (#8979)

2026-07-14 15:47:58 -07:00

first-admin-claim.ts

…

home-paths.ts

feat(server): thread plural referenced-project workspaces through run prep (#10448)

2026-07-29 14:27:05 -07:00

index.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

instrumentation.test.ts

fix(server): export manual OpenTelemetry spans (#10565)

2026-07-31 12:47:57 -07:00

instrumentation.ts

feat(observability): give sandbox sync spans true wall-clock width (#10864)

2026-08-04 19:52:15 -07:00

log-redaction.ts

…

paths.ts

…

redaction.ts

feat: Claude agent setup-token login in a sandbox (#11286)

2026-08-12 13:02:49 -07:00

runtime-api.ts

…

server-info.ts

fix(server): preserve source SHA without Git metadata (#9638)

2026-07-15 20:03:52 -05:00

shutdown.test.ts

fix(server): preserve hot-restart shutdown snapshots (#10815)

2026-08-04 11:44:43 -05:00

shutdown.ts

fix(server): preserve hot-restart shutdown snapshots (#10815)

2026-08-04 11:44:43 -05:00

startup-banner.ts

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

static-index-html.ts

…

telemetry.ts

…

ui-branding.ts

Ensure worktree execution starts only after activation (#9374)

2026-07-10 16:11:26 -05:00

url-utils.test.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

url-utils.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

version.ts

fix(server): stamp the real build version into images instead of the package.json placeholder (#10257)

2026-07-25 10:06:28 -07:00

vite-html-renderer.ts

…

worktree-config.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00