Step 5. Zapier, Arcade, Composio and Executor never reached ConnectionSetupFlow - they route to their own component, which still had the two-step Access then Connect wizard deleted everywhere else. They now open directly on the endpoint field with the resolved default stated above it, and the provider's authentication settings share one disclosure with the access controls rather than opening a second panel on the same screen. The same path was also sending an empty askFirstCatalogEntryIds, so these four were the one place the armed write gate did not apply. Both commit paths now derive it from askFirstCatalogEntryIdsFor against the server's suggestedDefaults. The access controls deliberately keep their existing authKind: a gateway URL can carry one person's token even though the method declares auth "none", so deriving it would have removed the shared-vs-mine choice and pinned every Zapier connection to the organization. For a pasted MCP server the flow no longer asks "does it need a key?" before anything has been tried. The probe already answers that; a credential challenge from the server is what puts the key field on screen. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@paperclipai/ui
Published static assets for the Paperclip board UI.
What gets published
The npm package contains the production build under dist/. It does not ship the UI source tree or workspace-only dependencies.
Storybook
Storybook config, stories, and fixtures live under ui/storybook/.
pnpm --filter @paperclipai/ui storybook
pnpm --filter @paperclipai/ui build-storybook
Typical use
Install the package, then serve or copy the built files from node_modules/@paperclipai/ui/dist.
Editor dependency identity
Keep the root and workspace overrides for @codemirror/state,
@codemirror/view, and @lezer/common aligned. CodeMirror requires shared
extension identity, while Lezer parsers and syntax highlighters require shared
NodeProp IDs. Multiple Lezer copies can crash code-block highlighting with
tags is not iterable. src/lib/codemirror-single-instance.test.ts checks the
installed dependency graph and highlights sample code through the editor's real
language dependencies. GitHub Actions owns regeneration of pnpm-lock.yaml.