DottaandPaperclip 9ae6938ae4 Certify per-cycle API wake key fingerprints under idle hold ...

Negotiate API wake v2 with a signed per-hold challenge and project bounded active-key fingerprints in the read-only safety snapshot. Export neither bearer keys nor original stored hashes; preserve current tenant authentication and return a complete canonical receipt only for a safe owned report.

Verified Node24 server typecheck, 153 pure/route/security cases and 3 real PostgreSQL retained-key/current-auth scenarios.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-11-02 13:19:05 -06:00

..

__tests__

Certify per-cycle API wake key fingerprints under idle hold

2026-11-02 13:19:05 -06:00

adapters

feat(runner): deliver native Kimi Code (#18391)

2026-10-30 22:26:15 -05:00

auth

…

built-ins/agents

…

http

…

lib

…

maintenance

feat(server): verify existing-volume ephemeral enrollment (#18529)

2026-11-01 03:56:44 -06:00

middleware

Bind idle ingress eligibility to verified wake paths

2026-11-02 11:39:31 -06:00

modules

Drive remaining live run and resource recovery from durable work (#18419)

2026-10-31 16:00:35 -05:00

onboarding-assets

…

realtime

feat(server): support volume-free web server handoff (#18518)

2026-11-01 01:58:54 -06:00

routes

Merge reviewed sleep blocker inventory into ingress work

2026-11-02 11:41:32 -06:00

secrets

fix(config): require shared storage for managed cloud (#18350)

2026-10-30 16:21:46 -05:00

services

Certify per-cycle API wake key fingerprints under idle hold

2026-11-02 13:19:05 -06:00

storage

feat(workspaces): keep remote files off the webserver disk (#18403)

2026-10-31 14:54:01 -05:00

types

…

vendor/paperclip-runner

feat(runner): define bounded startup lifetime contracts (#18490)

2026-11-02 08:22:42 -08:00

agent-auth-jwt.ts

…

agent-run-cancellation.ts

…

app.ts

feat(server): support volume-free web server handoff (#18518)

2026-11-01 01:58:54 -06:00

attachment-types.ts

…

board-claim.ts

…

build-commit.ts

…

build-version.ts

…

chat-webhook-public-url.ts

…

config-file.ts

fix(config): require shared storage for managed cloud (#18350)

2026-10-30 16:21:46 -05:00

config.ts

fix(config): require shared storage for managed cloud (#18350)

2026-10-30 16:21:46 -05:00

database-retry.ts

…

db-errors.ts

…

dev-native-runner-status.ts

…

dev-runner-worktree.ts

…

dev-server-status.ts

…

dev-watch-ignore.ts

…

embedded-postgres-owner.test.ts

…

embedded-postgres-owner.ts

…

embedded-postgres-supervisor.ts

…

env-file-policy.ts

…

errors.ts

…

first-admin-claim.ts

…

home-paths.ts

…

index.ts

fix(server): deliver answers promptly during web handoff (#18530)

2026-11-01 03:39:48 -06:00

instrumentation.ts

Add shared native turn attribution boundaries (#18213)

2026-10-29 17:45:56 -07:00

legacy-run-task-ownership.ts

…

log-redaction.ts

…

managed-cloud-prerequisites.ts

fix(config): require shared storage for managed cloud (#18350)

2026-10-30 16:21:46 -05:00

paths.ts

fix(cloud): persist configuration and load release-image packages (#18335)

2026-10-30 19:21:33 +00:00

peer-version-check.ts

…

qualify-cloud-configuration.ts

fix(cloud): persist configuration and load release-image packages (#18335)

2026-10-30 19:21:33 +00:00

redaction.ts

…

retained-ui-assets.ts

feat(server): support volume-free web server handoff (#18518)

2026-11-01 01:58:54 -06:00

runtime-api.ts

…

runtime-tools-token.test.ts

…

runtime-tools-token.ts

…

sentry-dsn.ts

…

sentry-links.ts

…

sentry-run-failure-policy.ts

…

sentry.ts

fix(sentry): report saved-message task attempt failures (#18541)

2026-11-02 08:17:22 -06:00

server-info.ts

…

shutdown.test.ts

feat(server): support volume-free web server handoff (#18518)

2026-11-01 01:58:54 -06:00

shutdown.ts

feat(server): support volume-free web server handoff (#18518)

2026-11-01 01:58:54 -06:00

startup-banner.ts

…

startup-recovery-state.ts

feat(server): support volume-free web server handoff (#18518)

2026-11-01 01:58:54 -06:00

startup-recovery-timing.test.ts

…

startup-recovery-timing.ts

…

startup-refusals.ts

…

static-index-html.ts

…

static-ui-cache.ts

…

telemetry.ts

…

ui-branding.ts

…

url-utils.test.ts

…

url-utils.ts

…

version.ts

…

vite-html-renderer.ts

…

worktree-config.ts

…

worktree-seed-manifest.ts

…