DottaandPaperclip 9d758eacda fix: close connection delegation security gaps ...

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-08-21 04:01:27 +00:00

..

__tests__

fix: close connection delegation security gaps

2026-08-21 04:01:27 +00:00

adapters

feat: add kimi-local adapter for Kimi Code CLI (CLI + ACP engines) (#9967)

2026-08-20 12:06:33 -07:00

auth

fix(auth): support managed loopback session cookies

2026-08-20 21:20:02 +00:00

built-ins/agents

fix: isolate execution workspace summaries (#10790)

2026-08-11 08:56:32 -04:00

http

fix(server): raise company import zip upload limit to 1 GB and make it operator-configurable (#11184)

2026-08-10 12:47:03 -07:00

lib

perf(server): reduce issue detail request overhead (#10414)

2026-08-11 14:39:23 -04:00

middleware

feat: enforce personal connection delegations

2026-08-21 01:55:23 +00:00

onboarding-assets

fix: reliably show plans in the Plan pane and restore sticky plan confirmation CTAs (#10930)

2026-08-05 19:32:07 -07:00

realtime

fix(server): authenticate cloud-proxied browsers on the live-events websocket (#11290)

2026-08-12 11:22:50 -07:00

routes

fix: centralize membership suspension cleanup

2026-08-21 03:18:46 +00:00

secrets

feat(secrets): write through external values and deep-link details (#10196)

2026-07-27 19:08:07 -05:00

services

fix: close connection delegation security gaps

2026-08-21 04:01:27 +00:00

storage

feat(run-logs): durable run-log store via object-storage mirror (#8984)

2026-07-14 15:45:39 -07:00

types

feat(mcp) [split 3/8]: add tool access policy core (#9558)

2026-07-14 14:22:39 -05:00

agent-auth-jwt.ts

fix(server): align agent run JWT default TTL with documented 48h default (#10176)

2026-08-12 16:44:20 -07:00

app.ts

fix(apps): preserve MCP follow-ups after master sync

2026-08-20 21:20:02 +00:00

attachment-types.ts

fix(server): accept Office issue attachments (#8562)

2026-07-21 10:47:33 -07:00

board-claim.ts

[codex] Add agent permissions and controls plan (#6386)

2026-05-22 08:12:52 -05:00

build-commit.ts

fix(server): preserve source SHA without Git metadata (#9638)

2026-07-15 20:03:52 -05:00

build-version.ts

fix(server): stamp the real build version into images instead of the package.json placeholder (#10257)

2026-07-25 10:06:28 -07:00

config-file.ts

fix(config): preserve extensions and guard invalid repairs (#11005)

2026-08-07 00:41:19 -05:00

config.ts

fix(workspaces): restore managed runtime origin hint

2026-08-20 21:20:02 +00:00

db-errors.ts

fix(issues): make DELETE /api/issues/:id succeed for issues with dependents (#11331)

2026-08-13 12:02:15 -07:00

dev-runner-worktree.ts

feat(workspaces): sign the workspace login handoff and gate readiness (#11671)

2026-08-19 02:37:02 -05:00

dev-server-status.ts

[codex] UI and dev ops quality-of-life (#6384)

2026-05-19 15:52:39 -05:00

dev-watch-ignore.ts

fix(server): ignore sibling worktrees in dev watch (#11074)

2026-08-07 18:30:16 -07:00

embedded-postgres-supervisor.ts

fix(workspaces): recover degraded runtime databases (#11651)

2026-08-18 17:40:54 -05:00

errors.ts

feat(artifacts): bridge Markdown work products into the document review surface (#11822)

2026-08-20 17:28:01 -07:00

first-admin-claim.ts

[codex] Add private browser first-admin claim flow (#6755)

2026-05-27 21:15:01 -10:00

home-paths.ts

feat(server): thread plural referenced-project workspaces through run prep (#10448)

2026-07-29 14:27:05 -07:00

index.ts

fix(apps): preserve MCP follow-ups after master sync

2026-08-20 21:20:02 +00:00

instrumentation.test.ts

fix(server): export manual OpenTelemetry spans (#10565)

2026-07-31 12:47:57 -07:00

instrumentation.ts

fix(server): stamp built commit into service.version (#11748)

2026-08-19 21:20:40 -07:00

log-redaction.ts

Sync/master post pap1497 followups 2026 04 15 (#3779)

2026-04-15 21:13:56 -05:00

paths.ts

…

redaction.ts

fix(security): make removing an app revoke its credentials

2026-08-20 21:20:02 +00:00

runtime-api.ts

Prefer loopback runtime API URL for local agents (#5102)

2026-06-20 14:03:21 -07:00

server-info.ts

fix(server): preserve source SHA without Git metadata (#9638)

2026-07-15 20:03:52 -05:00

shutdown.test.ts

feat: Claude login on the new-agent page before agent creation (#11347)

2026-08-17 13:42:51 -07:00

shutdown.ts

feat: Claude login on the new-agent page before agent creation (#11347)

2026-08-17 13:42:51 -07:00

startup-banner.ts

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

static-index-html.ts

[codex] Bundle local branch fixes from PAP-10032 (#6604)

2026-05-25 07:25:26 -05:00

telemetry.ts

fix: add periodic flush and graceful shutdown for server-side telemetry

2026-04-02 10:47:29 -05:00

ui-branding.ts

Ensure worktree execution starts only after activation (#9374)

2026-07-10 16:11:26 -05:00

url-utils.test.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

url-utils.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

version.ts

fix(server): stamp the real build version into images instead of the package.json placeholder (#10257)

2026-07-25 10:06:28 -07:00

vite-html-renderer.ts

[codex] Add backup endpoint and dev runtime hardening (#4087)

2026-04-20 06:08:55 -05:00

worktree-config.ts

fix(workspaces): make managed runtimes reliable across restarts (#11740)

2026-08-19 14:55:16 -05:00

worktree-seed-manifest.ts

feat(workspaces): sign the workspace login handoff and gate readiness (#11671)

2026-08-19 02:37:02 -05:00