PaperClipAI

0 Fork 0

mirror of https://github.com/paperclipai/paperclip.git synced 2026-10-28 20:21:50 +01:00

Files

T

nickyleachandPaperclip 888e64cd73 fix(server): contain retired skill releases and reject bearer headers in skill content

Mark the two frozen skill-release snapshots retired in the release
manifest, and enforce that flag at every point that can hand one to an
agent: reject a new pin on a retired release, fail closed instead of
materializing a retired snapshot at runtime, migrate existing agent
pins off retired releases, and disable a retired release in the agent
selector while keeping it visible for history.

Add a server-side content guard that rejects any company-skill file
carrying a bearer Authorization header, applied to both the single-file
write path and a new restore endpoint that validates a version's whole
file set before writing any of it back.

Co-authored-by: Paperclip <noreply@paperclip.ing>

2026-09-16 11:43:54 +00:00

adapter-utils

fix(adapters): compare a caller header name case-insensitively in the API helper

2026-09-16 11:03:59 +00:00

adapters

fix(adapters): teach the token-free API helper in gemini-local and hermes

2026-09-16 09:54:46 +00:00

fix(server): mask a registered bearer by fingerprint on every registry read

2026-09-16 07:31:37 +00:00

google-sheets-mcp-server

chore(deps-dev): bump vitest from 4.1.10 to 4.1.11 (#12262 )

2026-09-03 15:16:02 -07:00