DottaandPaperclip 8f16bfc85a fix(connections): bound resource checks and preserve current delegation ...

Limit and deduplicate management selectors before lookups, hide foreign resources, and reuse captured run identity only for request-local capability reads. Re-resolve resources at commit-time checks and enforce proposed provider scope. Preserve rate-limit admission during the final test dispatch check.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-10-26 10:29:34 -05:00

..

access.ts

Harden Board CLI approval and native verification fixtures (#16482)

2026-10-17 23:22:57 -05:00

activity.ts

perf(tasks): show recent conversation before historical activity (#17593)

2026-10-26 08:11:39 -05:00

adapter-login-route-spine.ts

feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730)

2026-08-19 11:51:31 -07:00

adapters.test.ts

feat: add Grok device login to the sandbox login panel (#12469)

2026-08-28 21:48:34 -07:00

adapters.ts

feat: default new Codex agents to Paperclip Runner on Linux and macOS (#15683)

2026-10-14 11:33:02 -05:00

agent-avatars.ts

feat: automate Slack bot app setup and installation (#15413)

2026-10-08 06:33:31 -05:00

agent-commentary.ts

fix: give commentary its own default read permission (#16903)

2026-10-19 16:58:17 -05:00

agent-observability.ts

feat: configure company agent observability (#16874)

2026-10-19 15:36:04 -05:00

agent-profile-avatar.ts

feat(dot): add guided invitations and persistent agent connections (#15581)

2026-10-08 16:26:41 -05:00

agent-project-access.ts

fix: explain project access denials and add an authorized repair path (#17509)

2026-10-24 16:16:29 -07:00

agents.ts

feat(connections): let agents configure connections within delegated authority

2026-10-26 08:55:24 -05:00

ai-connections.ts

fix(connections): preserve operator boundaries and refresh current contracts

2026-10-26 09:11:06 -05:00

announcements.ts

feat: add native in-app announcements with persistent dismissal (#13403)

2026-09-14 10:19:54 -05:00

approvals.ts

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

assets.ts

fix(runner): match call_api to existing agent REST permissions (#16040)

2026-10-13 07:34:15 -05:00

attention.ts

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

auth.ts

fix: always enable keyboard shortcuts (#14643)

2026-09-29 21:28:06 -07:00

authz.ts

feat(mcp): connect assistants to a team with user OAuth (#14846)

2026-10-06 11:48:53 -05:00

board-chat.ts

feat: add company fast-response acknowledgements (#15748)

2026-10-10 13:09:17 -05:00

browser-use.ts

Fix browser polling for unsaved agent chats (#15298)

2026-10-05 19:41:52 -07:00

built-in-agents.ts

feat(agents): persist agent files across tasks without revision history (#14420)

2026-09-29 08:25:56 -05:00

case-handoffs.ts

feat(cases): add persistent workflows with same-task agent handoffs (#16959)

2026-10-20 12:46:14 -05:00

cases-schemas.ts

feat(cases): add persistent workflows with same-task agent handoffs (#16959)

2026-10-20 12:46:14 -05:00

cases.ts

feat(cases): add persistent workflows with same-task agent handoffs (#16959)

2026-10-20 12:46:14 -05:00

chat-channels.identity.test.ts

feat(connections): simplify dedicated GitHub App setup (#15416)

2026-10-09 17:01:20 -05:00

chat-channels.ts

feat(connections): let agents configure connections within delegated authority

2026-10-26 08:55:24 -05:00

chat-channels.webhook.test.ts

feat: add experimental native chat connectors (#13038)

2026-09-10 10:06:45 -05:00

cloud.ts

Report bounded Cloud portfolio failure diagnostics (#15340)

2026-10-06 06:58:36 -07:00

companies.ts

fix: make accounting durable and synchronize cost reporting (#14997)

2026-10-06 22:26:48 -07:00

company-import-paths.ts

[codex] Runtime control-plane fixes (#6380)

2026-05-20 10:37:11 -05:00

company-skill-policy.ts

feat(skills): open-by-default company skill policy and core UX (#9564)

2026-07-15 11:42:40 -05:00

company-skills.ts

feat(skills): select and validate tracked GitHub branches (#16288)

2026-10-14 09:55:43 -05:00

connection-intents.test.ts

feat(connections): sync and group accounts managed by aggregators (#15254)

2026-10-05 14:57:04 -05:00

connection-intents.ts

feat(connections): sync and group accounts managed by aggregators (#15254)

2026-10-05 14:57:04 -05:00

connection-management-authz.ts

fix(connections): bound resource checks and preserve current delegation

2026-10-26 10:29:34 -05:00

costs.ts

fix(costs): preserve usage attribution and explain unavailable run costs (#15948)

2026-10-11 22:48:29 -07:00

customer-success.ts

feat(security): add read-only customer-success inspection APIs (#15405)

2026-10-06 21:38:15 -05:00

dashboard.ts

feat(server): recovery observability report and rate alert (#9644)

2026-07-16 02:34:00 -05:00

decision-models.ts

feat: add company decision models with permission and cost controls (#15473)

2026-10-07 15:53:13 -05:00

decision-queues.ts

feat(decisions): add desk workflow and retention (#10672)

2026-08-02 10:47:03 -05:00

decision-training.ts

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

decisions.ts

build(deps): bump zod from 3.25.76 to 4.4.3 (#11719)

2026-08-21 00:04:14 -07:00

dot-runner.ts

Fix Dot Cloud invitation and anonymous consent setup (#15722)

2026-10-09 15:19:33 -05:00

email.ts

feat(connections): let agents configure connections within delegated authority

2026-10-26 08:55:24 -05:00

environment-selection.ts

Own agent hiring and termination in a lifecycle module (#15631)

2026-10-09 09:05:12 -07:00

environments.ts

feat(runner): qualify Codex platform packages and cache hosted builds (#16028)

2026-10-13 06:24:07 -05:00

execution-workspaces.ts

Add plugin-owned project storage and task workspaces (#17001)

2026-10-20 16:35:33 -07:00

experimental-api-metadata.ts

feat(cases): add persistent workflows with same-task agent handoffs (#16959)

2026-10-20 12:46:14 -05:00

experimental-api-paths.ts

feat(cases): add persistent workflows with same-task agent handoffs (#16959)

2026-10-20 12:46:14 -05:00

fast-responses.ts

feat: add company fast-response acknowledgements (#15748)

2026-10-10 13:09:17 -05:00

file-resources.ts

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

folders.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

goals.ts

security(server): close cross-tenant existence oracle (404 instead of 403) (#3967)

2026-07-14 15:53:09 -07:00

grok-bot.ts

feat(runner): add experimental Grok Bot agent participation (#16219)

2026-10-13 20:57:42 -05:00

health.ts

fix(server): leave unclaimed warm Cloud databases idle (#15314)

2026-10-06 09:11:25 -07:00

inbox-agent-policy.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

inbox-dismissals.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

index.ts

feat(runner): add managed provider backends (#12699)

2026-09-02 00:48:30 -05:00

instance-database-backups.ts

fix: checkpoint database backups before idle sleep (#15629)

2026-10-08 15:58:55 -07:00

instance-settings.ts

fix(auth): let Cloud stack admins manage experimental settings (#16907)

2026-10-19 21:48:00 -05:00

issue-tree-control.ts

fix(ui): show eligible wake targets when resuming tasks (#17521)

2026-10-25 21:49:52 -05:00

issues-checkout-wakeup.ts

…

issues.ts

perf(tasks): show recent conversation before historical activity (#17593)

2026-10-26 08:11:39 -05:00

liveness.ts

Add database-free process liveness probes (#16101)

2026-10-13 07:43:46 -07:00

llms.ts

[codex] Add built-in Hermes adapters (#8543)

2026-06-26 16:04:58 -05:00

managed-agent-profiles.ts

feat(runner): add managed provider backends (#12699)

2026-09-02 00:48:30 -05:00

muse-qualification.ts

Connect personal Muse through secure native execution and Vault OAuth (#16448)

2026-10-17 22:44:36 -05:00

muse.ts

Connect personal Muse through secure native execution and Vault OAuth (#16448)

2026-10-17 22:44:36 -05:00

onboarding-seed.ts

feat(server): receive and apply the Paperclip Cloud onboarding seed (#11098)

2026-08-12 22:54:07 -07:00

openapi.ts

fix(connections): preserve operator boundaries and refresh current contracts

2026-10-26 09:11:06 -05:00

org-chart-svg.ts

Improve generated company org chart assets

2026-03-23 16:58:07 -05:00

plugin-ui-static.ts

feat(mcp) [split 2/8]: add governed access contracts (#9557)

2026-07-14 12:57:20 -05:00

plugins.ts

fix(plugins): scope operational reads to the caller's companies (#17435)

2026-10-24 09:28:17 -07:00

primary-agent.ts

feat: add personal primary agents (#15470)

2026-10-07 13:53:46 -05:00

project-tools.ts

feat: add experimental persistent agent chat (#13284)

2026-09-12 08:56:04 -05:00

projects.ts

Connect personal Muse through secure native execution and Vault OAuth (#16448)

2026-10-17 22:44:36 -05:00

prompt-injection-prevention.ts

feat(connections): add model-backed prompt injection prevention

2026-10-20 11:32:25 -05:00

public-mcp.ts

feat(runner): add experimental Grok Bot agent participation (#16219)

2026-10-13 20:57:42 -05:00

remote-agent-profiles.ts

feat(runner): add managed provider backends (#12699)

2026-09-02 00:48:30 -05:00

resource-memberships.ts

feat(server): add per-user document stars (#9952)

2026-07-27 19:13:35 -05:00

routines.ts

feat: add Fireflies connector and summary-ready routines (#13890)

2026-09-23 17:11:16 -05:00

secrets.ts

fix(security): harden privileged server boundaries (#12776)

2026-09-03 14:15:32 -05:00

setup-token-route.test.ts

test(server): reuse route modules across test cases (#16396)

2026-10-14 23:21:16 -07:00

sidebar-badges.ts

fix(inbox): keep other users’ failed runs out of Mine (#14572)

2026-09-29 09:40:21 -05:00

sidebar-preferences.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

slack-tools.ts

feat(slack): connect Paperclip conversations and scheduled messages (#13920)

2026-09-24 10:51:45 -05:00

smoke-lab.ts

feat: stamp responsible users on activity logs (#9731)

2026-07-16 20:54:55 -05:00

status-cards.ts

feat: enforce private task permissions across execution and data (#10633)

2026-10-07 07:06:40 -05:00

summary-slots.ts

feat: add built-in summarizer and summary slots (#9713)

2026-07-17 11:03:07 -05:00

task-workspaces.ts

Connect native Runner admission to plugin-owned workspaces (#16978)

2026-10-21 08:22:48 -07:00

teams-catalog.ts

[codex] Add teams catalog extraction (#7550)

2026-06-05 12:55:49 -05:00

tool-access-connection-intent.test.ts

feat(connections): simplify dedicated GitHub App setup (#15416)

2026-10-09 17:01:20 -05:00

tool-access.ts

fix(connections): bound resource checks and preserve current delegation

2026-10-26 10:29:34 -05:00

tool-gateway.ts

feat(connections): let agents configure connections within delegated authority

2026-10-26 08:55:24 -05:00

user-profiles.ts

Skill Studio: three-pane skill IDE with sandboxed test runs (#9241)

2026-07-09 13:08:56 -05:00

voice-sessions.auth.test.ts

fix(voice): accept authenticated Cloud callers (#16254)

2026-10-13 21:39:56 -05:00

voice-sessions.ts

fix(voice): accept authenticated Cloud callers (#16254)

2026-10-13 21:39:56 -05:00

workflows.ts

feat(cases): add reusable prompt workflows (#17114)

2026-10-21 15:00:12 -05:00

workspace-command-authz.ts

fix(security): harden privileged server boundaries (#12776)

2026-09-03 14:15:32 -05:00

workspace-runtime-service-authz.ts

feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525)

2026-08-17 06:23:33 -04:00