DottaandPaperclip 5c0793090c fix(tool-gateway): keep admitted request audits safe during token cleanup ...

Resolve the nullable token reference with a row lock inside the audit INSERT. Deleted tokens retain their original ID in audit details. Red-green listing and HTTP provider-call tests reproduce cleanup during admitted work and verify that later requests still fail authentication.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-01 17:33:39 -05:00

..

architecture

fix(server): continue unfinished tasks after status replies (#14626)

2026-09-29 16:51:50 -05:00

assets

fix: make task recovery durable and preserve current requests (#13075)

2026-09-09 09:14:25 -05:00

benchmarks

fix(tool-gateway): bound discovery admission and retain regression evidence

2026-10-01 17:19:57 -05:00

connections

feat(apps): make MCP action test results readable (#14859)

2026-10-01 11:52:26 -05:00

design

feat: add Browser Use Cloud connector and live task browsers (#14627)

2026-09-30 07:13:16 -05:00

experimental

Fix default isolation for projects without workspace configuration (#13636)

2026-09-18 14:49:45 -07:00

logs

Improve CLI API parity coverage (#6626)

2026-06-02 17:13:29 -07:00

plans

feat: add Browser Use Cloud connector and live task browsers (#14627)

2026-09-30 07:13:16 -05:00

plugins

fix(runtime): finalize and recover sandbox workspace exports safely (#14402)

2026-09-28 10:57:32 -05:00

pr/5429

Add secrets provider vaults and remote import (#5429)

2026-05-09 18:22:17 -05:00

screenshots

feat(mcp) [split 7/8]: activate Apps and gateway UI (#9562)

2026-07-14 15:40:08 -05:00

spec

feat(adapters): confine local coding processes (#9504)

2026-07-14 11:01:19 -05:00

testing

feat: simplify agent onboarding and configuration (#13011)

2026-09-08 14:22:32 -05:00

acp-run-lifecycle.md

Fix oversized sandbox process launch payloads (#13793)

2026-09-21 20:54:07 -07:00

adapter-model-audit-2026-09-22.md

feat(adapters): refresh current coding models and reasoning controls (#13829)

2026-09-22 16:56:00 -07:00

AGENT-ARTIFACTS.md

fix(ui): open text attachments in task tabs (#14297)

2026-09-29 16:40:10 -05:00

agent-files.md

Defer agent directory cleanup until stop proof is available (#14866)

2026-10-01 14:28:47 -07:00

agent-instruction-revisions.md

feat(agents): persist agent files across tasks without revision history (#14420)

2026-09-29 08:25:56 -05:00

agent-personas.md

feat(onboarding): ClipLab sleepy-to-wake hero and step hand-offs (#13629)

2026-09-19 08:30:14 -05:00

AGENTCOMPANIES_SPEC_INVENTORY.md

…

ANNOUNCEMENTS.md

feat: add native in-app announcements with persistent dismissal (#13403)

2026-09-14 10:19:54 -05:00

CHANNELS.md

feat(cli): add 'paperclipai channels' to show release lanes and the current one (#11210)

2026-08-11 08:47:32 -07:00

CLI.md

fix(server): validate CLI auth challenge IDs (#14095)

2026-09-26 00:48:14 -07:00

CLIPHUB.md

…

cloud-build-readiness.md

ci: pin a checkout-independent Rust cache path so PR lanes hit master's cache (#14394)

2026-09-30 16:04:23 -07:00

cloud-ui-snippet.md

refactor(server): remove retired operator UI snippet injection (#13789)

2026-09-22 11:18:46 -07:00

composer-stop.md

feat(ui): improve task composer controls and pending input (#14322)

2026-09-28 23:02:39 +00:00

connection-intents.md

fix(connections): keep task context through Cloud enrollment and OAuth (#13098)

2026-09-09 10:55:11 -05:00

DATABASE.md

Stop replaying ambiguous database disconnects (#14773)

2026-09-30 18:34:00 -07:00

DEPLOYMENT-MODES.md

fix(auth): keep Cloud tenants on the Cloud sign-in flow (#14407)

2026-09-28 13:45:27 -05:00

DEVELOPING.md

fix(adapter-utils): release restore locks when a process crashes (#14869)

2026-10-01 12:14:48 -07:00

DOCKER.md

fix(runner): ship provider pack in the standard Docker image (#14854)

2026-10-01 11:07:50 -05:00

evals.md

feat: let agents name prompt-only tasks (#14761)

2026-09-30 16:48:24 -05:00

execution-github-identity.md

fix(runner): keep warm sessions alive with managed GitHub access (#13815)

2026-09-22 13:07:13 -05:00

execution-semantics.md

fix(chat): resume messages after failed runs without duplicate delivery (#14857)

2026-10-01 14:43:02 -05:00

GOAL.md

…

grok-native-runner.md

fix(runner): include Grok support in public installs with sandbox prerequisites (#14024)

2026-09-28 14:54:44 -05:00

HERMES_GATEWAY_ONBOARDING.md

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

HERMES_GATEWAY_SMOKE.md

[codex] Add built-in Hermes adapters (#8543)

2026-06-26 16:04:58 -05:00

INSTALLING.md

fix(adapters): prevent engine fallback and preserve usable runtime defaults (#13105)

2026-09-09 13:27:24 -05:00

LOW-TRUST-PRESETS.md

fix(auth): allow scoped low-trust work and owner-chat instruction edits (#14870)

2026-10-01 15:42:40 -05:00

MCP-ACCESS-GOVERNANCE.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

MCP-DEMO-SCRIPT.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

mcp-discovery-performance.md

fix(tool-gateway): keep admitted request audits safe during token cleanup

2026-10-01 17:33:39 -05:00

MCP-RUNTIME-OPERATIONS.md

feat(apps): consolidate connector management (#12684)

2026-09-01 14:55:35 -05:00

memory-landscape.md

…

native-workspace-finalization-recovery.md

fix(runtime): finalize and recover sandbox workspace exports safely (#14402)

2026-09-28 10:57:32 -05:00

observability.md

Add bounded evidence for directory lock timeouts (#14787)

2026-09-30 18:35:12 -07:00

OPENCLAW_ONBOARDING.md

…

preview-release-artifacts.md

ci: retire recurring public cloud image builds (#13827)

2026-09-23 19:35:19 -07:00

PRODUCT.md

Add GitHub-synced skill sources (#14713)

2026-09-30 13:32:58 -05:00

project-repositories.md

fix: provision all project repositories for local and sandbox tasks (#13442)

2026-09-14 18:37:51 -05:00

PUBLISHING.md

fix: preserve README images in npm package (#13488)

2026-09-15 13:34:30 -05:00

README-draft.md

…

RELEASE-AUTOMATION-SETUP.md

ci: pin a checkout-independent Rust cache path so PR lanes hit master's cache (#14394)

2026-09-30 16:04:23 -07:00

RELEASE-CHECKLIST.md

ci: retire recurring public cloud image builds (#13827)

2026-09-23 19:35:19 -07:00

RELEASE-NOTES-mcp-access-governance.md

feat(mcp) [split 8/8]: add e2e coverage and operator docs (#9563)

2026-07-14 15:48:57 -05:00

RELEASING.md

feat(release): draft stable notes at beta publish, read them from master at promotion (#11567)

2026-08-17 20:47:23 -07:00

run-log-events.md

fix: preserve warm Codex turns with incremental managed file checkpoints (#14735)

2026-09-30 13:33:37 -05:00

runner-api-tools.md

fix(runner): stream and page large API responses within capture budgets (#14301)

2026-09-28 10:36:32 -05:00

runner-created-skills.md

feat: create company skills from runner tasks (#13538)

2026-09-16 13:01:58 -05:00

SEARCH.md

fix: improve task search relevance with a PostgreSQL rubric (#13335)

2026-09-12 16:22:58 -05:00

SECRETS-AWS-PROVIDER.md

feat(secrets): add user-specific runtime secrets (#8825)

2026-07-05 05:58:20 -05:00

SPEC-implementation.md

fix(auth): allow scoped low-trust work and owner-chat instruction edits (#14870)

2026-10-01 15:42:40 -05:00

SPEC.md

fix(auth): allow scoped low-trust work and owner-chat instruction edits (#14870)

2026-10-01 15:42:40 -05:00

standard-image-contract.md

feat: attest standard production images at full source commits (#13797)

2026-09-22 07:33:30 -07:00

STORYBOOK-DEPLOYMENT.md

feat: add readable Storybook branch bookmarks (#13231)

2026-09-11 10:19:36 -05:00

TASK-WATCHDOG.md

fix(interactions): authorize resolvers consistently (#11376)

2026-08-16 13:46:50 -05:00

TASKS-mcp.md

…

TASKS.md

…

TELEMETRY_WORKFLOW.md

Add telemetry proposal extractor (#9544)

2026-07-13 23:47:27 -07:00

UNTRUSTED-PR-REVIEW.md

…

workspace-restore-locks.md

fix(adapter-utils): release restore locks when a process crashes (#14869)

2026-10-01 12:14:48 -07:00