DottaandPaperclip a88c241b55 fix(runtime): verify allocated port ownership ...

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-08-16 19:23:16 +00:00

..

__tests__

fix(runtime): verify allocated port ownership

2026-08-16 19:23:16 +00:00

adapters

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

auth

feat(mcp) [split 3/8]: add tool access policy core (#9558)

2026-07-14 14:22:39 -05:00

built-ins/agents

fix: isolate execution workspace summaries (#10790)

2026-08-11 08:56:32 -04:00

http

fix(server): raise company import zip upload limit to 1 GB and make it operator-configurable (#11184)

2026-08-10 12:47:03 -07:00

lib

perf(server): reduce issue detail request overhead (#10414)

2026-08-11 14:39:23 -04:00

middleware

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

onboarding-assets

fix: reliably show plans in the Plan pane and restore sticky plan confirmation CTAs (#10930)

2026-08-05 19:32:07 -07:00

realtime

fix(server): authenticate cloud-proxied browsers on the live-events websocket (#11290)

2026-08-12 11:22:50 -07:00

routes

fix(interactions): authorize resolvers consistently (#11376)

2026-08-16 13:46:50 -05:00

secrets

feat(secrets): write through external values and deep-link details (#10196)

2026-07-27 19:08:07 -05:00

services

fix(runtime): verify allocated port ownership

2026-08-16 19:23:16 +00:00

storage

feat(run-logs): durable run-log store via object-storage mirror (#8984)

2026-07-14 15:45:39 -07:00

types

feat(mcp) [split 3/8]: add tool access policy core (#9558)

2026-07-14 14:22:39 -05:00

agent-auth-jwt.ts

fix(server): align agent run JWT default TTL with documented 48h default (#10176)

2026-08-12 16:44:20 -07:00

app.ts

feat(server): receive and apply the Paperclip Cloud onboarding seed (#11098)

2026-08-12 22:54:07 -07:00

attachment-types.ts

fix(server): accept Office issue attachments (#8562)

2026-07-21 10:47:33 -07:00

board-claim.ts

[codex] Add agent permissions and controls plan (#6386)

2026-05-22 08:12:52 -05:00

build-commit.ts

fix(server): preserve source SHA without Git metadata (#9638)

2026-07-15 20:03:52 -05:00

build-version.ts

fix(server): stamp the real build version into images instead of the package.json placeholder (#10257)

2026-07-25 10:06:28 -07:00

config-file.ts

fix(config): preserve extensions and guard invalid repairs (#11005)

2026-08-07 00:41:19 -05:00

config.ts

Add secrets provider vaults and remote import (#5429)

2026-05-09 18:22:17 -05:00

db-errors.ts

fix(issues): make DELETE /api/issues/:id succeed for issues with dependents (#11331)

2026-08-13 12:02:15 -07:00

dev-runner-worktree.ts

feat(workspaces): defer isolated setup until runtime start (#10653)

2026-08-02 10:37:10 -05:00

dev-server-status.ts

[codex] UI and dev ops quality-of-life (#6384)

2026-05-19 15:52:39 -05:00

dev-watch-ignore.ts

fix(server): ignore sibling worktrees in dev watch (#11074)

2026-08-07 18:30:16 -07:00

errors.ts

fix(interactions): authorize resolvers consistently (#11376)

2026-08-16 13:46:50 -05:00

first-admin-claim.ts

[codex] Add private browser first-admin claim flow (#6755)

2026-05-27 21:15:01 -10:00

home-paths.ts

feat(server): thread plural referenced-project workspaces through run prep (#10448)

2026-07-29 14:27:05 -07:00

index.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

instrumentation.test.ts

fix(server): export manual OpenTelemetry spans (#10565)

2026-07-31 12:47:57 -07:00

instrumentation.ts

feat(observability): give sandbox sync spans true wall-clock width (#10864)

2026-08-04 19:52:15 -07:00

log-redaction.ts

Sync/master post pap1497 followups 2026 04 15 (#3779)

2026-04-15 21:13:56 -05:00

paths.ts

…

redaction.ts

feat: Claude agent setup-token login in a sandbox (#11286)

2026-08-12 13:02:49 -07:00

runtime-api.ts

Prefer loopback runtime API URL for local agents (#5102)

2026-06-20 14:03:21 -07:00

server-info.ts

fix(server): preserve source SHA without Git metadata (#9638)

2026-07-15 20:03:52 -05:00

shutdown.test.ts

fix(server): preserve hot-restart shutdown snapshots (#10815)

2026-08-04 11:44:43 -05:00

shutdown.ts

fix(server): preserve hot-restart shutdown snapshots (#10815)

2026-08-04 11:44:43 -05:00

startup-banner.ts

fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400)

2026-08-14 22:11:16 -07:00

static-index-html.ts

[codex] Bundle local branch fixes from PAP-10032 (#6604)

2026-05-25 07:25:26 -05:00

telemetry.ts

fix: add periodic flush and graceful shutdown for server-side telemetry

2026-04-02 10:47:29 -05:00

ui-branding.ts

Ensure worktree execution starts only after activation (#9374)

2026-07-10 16:11:26 -05:00

url-utils.test.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

url-utils.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00

version.ts

fix(server): stamp the real build version into images instead of the package.json placeholder (#10257)

2026-07-25 10:06:28 -07:00

vite-html-renderer.ts

[codex] Add backup endpoint and dev runtime hardening (#4087)

2026-04-20 06:08:55 -05:00

worktree-config.ts

fix(runtime): only rewrite base-URL port for loopback hosts (#10258)

2026-08-13 09:47:13 -07:00