Files
PaperClipAI/ui/src/pages/InstanceExperimentalSettings.test.tsx
T
DottaandPaperclip 22a3ea3414 Invite assistants from Connections with scoped browser and device consent (#14933)
## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work.
> - Public MCP lets people use their organization from an external
assistant.
> - Operators need a visible control for this experimental access.
> - Hosted users should select an organization once and then approve its
permissions.
> - This pull request adds the setting, invitation-first setup, and
browser or device consent.
> - Connections provides a copyable invitation with public instructions
that grant no access.
> - Users reach browser consent from their assistant and return to
inspect or revoke access.

## Linked Issues or Issue Description

Builds on merged foundation #14846. This PR now targets master. Related
settings convention: #13905.

**Current behavior**

The preview uses an environment variable to enable MCP. Hosted consent
repeats organization selection. Assistant access has no entry in
Connections, so users must already know the endpoint and how to reach
consent.

**Proposed behavior**

An administrator enables Settings → Experimental → Assistant connections
(MCP). A hosted connection shows the selected organization and its icon,
then asks for permissions. Requested write access starts checked when
the user’s role permits it; the user can opt out before connecting.
Direct instance connections show an organization picker with the first
available organization selected. The selection stays fixed across
refetches and still requires an explicit Connect action. Connections
includes Assistant Connection (MCP). Its setup page explains the
canonical endpoint, client configuration, browser authentication, and
connected access. It connects as the current person and does not select
or impersonate an agent.

**Reason and benefit**

Operators manage access with the other experiments. Users select one
organization, and both the UI and server enforce that choice.

**Breaking changes**

The old enable variable has no effect. Preview operators must enable the
setting once. Apply the additive consent-request migration before
deploying the tenant, then deploy the compatible Cloud broker. Existing
direct requests and grants keep their behavior.

## What Changed

- Simplify OAuth and device consent: show the Paperclip logo beside
“Connect {client} to Paperclip”, fall back to “your assistant”, and show
the identifying origin plus its favicon below, with the callback URL
also visible when different. Remove the hosted-organization creation
action. Default to the first available organization without silently
changing it on refetch; preserve company restrictions and write
opt-outs. Keep the button row contained on narrow screens.
- Make Copy invitation the primary action, using the shared animated
AgentSetupPrompt and a collapsed manual setup section with icon-labeled
line tabs. Remove redundant link actions, copy-status text, the extra
first-prompt well and revocation explanation from the setup page. Serve
shared version-aware HTML and Markdown instructions without private
organization data.
- Support guarded Client ID Metadata Documents alongside dynamic
registration, and include authorization response issuer identification.
- Add RFC 8628 device authorization with separately hashed codes,
expiry, shared request quotas, persistent polling backoff and atomic
redemption. Reuse human consent, role checks, scoped grants, audit and
revocation.
- Add CLI device login and a local stdio bridge. Store credentials
separately with private permissions and serialize rotating refreshes.
- Add device consent stories and five cold-start paid Product E2E cases
with independent grant, configuration and durable-work assertions.

- Add `enablePublicMcp` to the settings validator, normalizer, feature
catalog, and toggle UI. Check it live for OAuth, tools, subscriptions,
and event delivery. Keep connection management and revocation available
while disabled.
- Default the MCP origin to the existing auth public URL, with strict
validation and an explicit override.
- Persist the optional OAuth `company_id` restriction. Describe only
that company and reject approval for any other company, even if the
person belongs to both. Keep active-membership and role checks.
- Show the Paperclip icon and a large organization icon during consent.
Return the saved company logo through the company-scoped request
response and reuse the standard fallback icon. Use the requested concise
permission labels: “Read all of your Paperclip data” and “Allow write
access and creating tasks as me”. Use concise permission copy, retain a
compact client and callback-origin disclosure, and remove the footer
link.
- Default requested write access on for eligible roles. Preserve opt-out
across organization changes and refetch, reset defaults for a new
request, and submit read-only access when the request or role does not
allow writes. Align the shared checkbox with its label.
- Use organization wording in consent, management, settings, and
walkthroughs. Keep the organization fixed for hosted requests and retain
direct-instance choice.
- Add an Assistant Connection (MCP) card to the Connectors catalog, a
setup page in the app shell, and a return link from Experimental
settings. Include Codex, Claude Code, OpenCode, and generic remote MCP
instructions.
- Read the live gate and canonical server URL through authenticated
setup metadata. Show only the current person’s grants for the selected
organization, refresh after consent, and support revocation. Surface
catalog status failures with an explicit retry action; do not present
them as an empty connection list. Opening setup grants no authority.
- Start the eight guided chapters in Connections. Keep presenter notes
and chapter controls around real product pages in the app shell. Explain
the terminal, consent, delegation, retrieval, and revocation handoffs.
Mark conversation examples as illustrative. Cover first use, client
setup, connected, loading, and error states. Keep the existing consent
and management stories.
- Keep the paid-eval setup and browser helper aligned with the setting
and consent button.

## Verification

- Warm-standby integration fix `ec64ea05e`: public MCP ingress now
follows the Cloud claim guard; MCP and discovery paths return 503
instead of SPA HTML while unclaimed. Event polling checks the in-memory
claim before reading the persisted experimental setting. All 97 focused
OAuth/Cloud tests and server typecheck pass, including new request and
timer regressions for idle-before-claim and resume-after-claim behavior.
Fresh review is 5/5 with no unresolved threads, and all security scans
pass on this final head. All browser shards, typecheck, build, canary
installation and other test groups passed on the first attempt. The
unchanged Cursor sandbox default-command test timed out at 10 seconds;
the exact test passed locally without edits in 587 ms. The single
failed-job retry passed, with the original failure retained in workflow
37500711895. All 54 final-head checks pass on
`ec64ea05e9a03e2179d4e2f84c2de03761f7ce26` (two optional Storybook jobs
are intentionally skipped).

- Final master integration `8457828fc`: merged foundation #14846 and
current master, preserving the invitation changes and all 33 files from
the two newer upstream changes. No migration renumbering was required.
All 95 focused OAuth/Cloud integration tests, full recursive typecheck
and token gates pass. All CI gates passed on that integration head;
review identified the warm-standby issue fixed above.

- Security-review fix `8c1d0b696`: commit shared global/per-source
admission before outbound CIMD work, preserve failed-attempt receipts,
and validate resource/scope before fetching. Added migration
`0305_chubby_vin_gonzales.sql` and six concurrent/adversarial regression
cases. All 69 OAuth/metadata tests, 26 migration checks, full recursive
typecheck and production build pass. The security scanner passed that
commit. Follow-up `87f9658e7` limits only actual cache-miss fetches; 18
authorization requests sharing one proxy across two service instances
use just two fetches. All 70 OAuth/metadata tests and server typecheck
pass after that refinement. Final follow-up `8ebeae84c` reports
admission-storage failures as retryable HTTP 503 instead of invalid
client metadata. Its regression proves no outbound request before
admission and successful retry after storage recovers. All 71
OAuth/metadata tests and server typecheck pass. Final-head security
scanning passes; Greptile is 5/5 with no unresolved findings. CI passed
all browser shards, typecheck, build, token gates and canary
installation. One unchanged adapter-utils bridge test raced a
response-file write (expected a JSON error, received the safe
file-changed error). The exact test passed locally without edits. The
single failed-job retry passed; the original failure is retained in
workflow 37490609192. All 54 checks now pass on final head
`8ebeae84ca77c0cf7ac12c2006f0f8743fe50e0b`, with security scan and fresh
Greptile 5/5 and no unresolved threads. Foundation #14846 subsequently
merged as `e34abee670069cca84afb2efb86041bce7dccbec`; the final
integration above now targets master.

- Integration with current master: preserved the new Connections source
filters and pagination, kept all eval suites, and regenerated the
consent/device snapshots as migrations 0303/0304. All four MCP migration
SQL hashes are unchanged from the staging versions. Full recursive
typecheck and production build, 132 focused UI tests (including catalog
filtering), 89 server authorization/settings tests, 26 migration tests,
120 eval calibration tests and token gates pass. Review follow-up
`4820ce74c` also keeps active assistant grants in Installed, with
pending/error recovery and revocation/company-isolation coverage. All 76
setup/catalog tests, UI typecheck and token gates pass after that fix.
The unchanged signoff browser test timed out waiting for a heartbeat in
CI at `4820ce74c`; the exact test passed locally without code changes,
and the preceding CI head passed that shard. That same unchanged test
failed at the reviewer stage in the next CI run. All five signoff tests
passed three times locally (15/15), without test changes. All eight
browser shards pass at final head `8ebeae84c`; no browser-test edits or
failed-browser-job retries were needed.

- Setup-page refinement at `9ab009178`: all 17 focused setup/consent
tests pass, along with UI typecheck, production build, Storybook build
and token gates. Browser exercised the shared prompt preview and client
tab switching, and the updated InvitationCopied Storybook interaction
checks its clipboard fixture. All final-head CI checks pass at
`9ab009178`, with no unresolved review findings. Deployed successfully
to Butter in
https://github.com/paperclipai/paperclip-cloud/actions/runs/37475189524.
Verified the actual page, tab switching and line styling, removed
actions/copy, and successful native copy/paste of the complete Butter
invitation into a local-only test field. The existing Claude grant was
left intact.
- Consent follow-up at `dc8e9fd11`: all 10 consent tests and token gates
pass. UI typecheck and production build passed again at `4e4d5e4d9`;
Storybook build and eval-helper typecheck passed for `28101cf91`.
Follow-ups let the primary button wrap on narrow screens, preserve a
distinct callback URL, and use only bundled icons to avoid pre-consent
requests to client-selected sites. Browser-verified the real consent
component in desktop and 320px mobile stories, including default
selection, write access and preserved opt-out. Updated E2E
heading/default-selection helpers. All CI checks passed at `dc8e9fd11`,
with review 5/5 and no unresolved threads. The Butter preview
publication needed a retry because npm initially accepted the DB package
before making it visible; the retry succeeded and `dc8e9fd11` deployed.
Verified a fresh, unapproved native Codex CIMD request on Butter:
default organization/write selection, known-client heading and icon,
distinct callback origin, and removed creation action. No grant was
approved for this UI check. Prior paid runs below retain their exact
source provenance; this UI-only follow-up did not rerun paid
qualification.
- Source-pinned paid matrix at
`2992ef2710f47230e7f484c709c6ba02524f884c`: **15/15 passed**, five cases
each on GPT-5.4 Mini, Claude Haiku and Sonnet. Campaign
`local-2026-10-06T02-41-14-462Z`. Covers cold start, existing config,
unavailable host, denied consent and reconnect/later retrieval, with
independent configuration/grant/task/run/document assertions. Original
failures, transcripts, source fingerprints and billing remain retained.
- Final instruction follow-up `cda8178af`: **3/3 cold starts passed** on
Mini, Haiku and Sonnet. Campaign `local-2026-10-06T02-58-30-041Z`.
Latest `0637b9f1c` shares that same guidance across HTML, Markdown and
manual UI after review; generated Markdown is verified byte-identical to
the paid-evaluated version. Shared build, server/UI typechecks, token
gates and 63 auth/metadata tests passed again. Every CI gate passed at
prior HEAD `0637b9f1c`, with review 5/5 and no unresolved threads.
- Other focused checks: 11 CLI credential/refresh-lock tests, 120 eval
calibration tests, server/UI/eval typechecks, token gates and Storybook
build passed. Full recursive typecheck and production build passed
during implementation; CI also passed them at `2992ef271`.
- Local full-suite limitations: a large-file Git streaming test times
out on this Mac, and broader CLI/route runs hit DB hook timeouts. Fresh
MCP reruns passed, and the corresponding CI groups passed. No claim that
the local full suite is green.
- Actual clients: Codex 0.153.4 and Claude Code 2.1.245 reach CIMD
consent; device CLI reaches verification/consent. New grants await human
approval. Existing local OpenCode retrieved a saved result in a fresh
conversation through its previously approved grant.
- Fresh OpenCode 1.18.17 on Butter: started with no MCP config, received
the exact copied invitation, read public setup, configured its server
and started PKCE consent. Its shell command timed out; background retry
reached the client's own callback deadline while approval remained
pending. Latest instructions cover that handoff. **No completed Butter
read/delegation/result retrieval is claimed.**
- Cloud companion
https://github.com/paperclipai/paperclip-cloud/pull/672 passes
checks/review and deployed. Anonymous setup and device-protocol routing
verified. Core `2992ef271` deployed successfully and the actual Claude
web flow now reaches consent. Its extra JWT-bearer metadata is filtered
to implemented grants; unsupported token grants remain rejected. Final
`0637b9f1c` deployed successfully to Butter in
https://github.com/paperclipai/paperclip-cloud/actions/runs/37409195300;
live HTML and Markdown both contain the final guidance. The superseded
instruction-only build was canceled before deployment. This is a
core-only staging preview; private Cloud plugins are omitted. ChatGPT
web is signed out, so browser connector use is unverified.
- Screenshot gallery begins at Butter's dashboard and distinguishes real
setup/pending consent from local reuse and fixtures. It records the
timeout finding. New persistent access needs human confirmation before
the remaining actual-client acceptance work.
- Manual path: Connectors → Assistant Connection (MCP) → Copy invitation
→ paste into assistant → configure and start authorization → sign in and
approve → verify `paperclip_connection` → delegate → retrieve the saved
report later.
- Plan and instructions: `doc/plans/2026-10-05-assistant-invitations.md`
and `doc/public-mcp.md`.

## Risks

- Apply additive, replay-safe migration `0304_curvy_shadow_king.sql`
before using device authorization. The public setup link carries no
credential. Device codes and tokens stay private; neither sharing
instructions nor installing a plugin authorizes access.
- Apply additive migration `0305_chubby_vin_gonzales.sql` before
deploying the shared metadata admission gate. It retains at most 60
short-lived, hashed-source receipts per instance and rejects excess
attempts with 429.
- CIMD metadata fetching is a new external-input boundary. It requires
HTTPS, exact client ID and redirect validation, bounded responses and
guarded DNS/network access. Client names remain self-reported.
- Device support is per-instance. The central Cloud broker retains its
existing grant support. Host installation and tool reload capabilities
vary by client; instructions describe manual settings and restart
requirements.

- Consent names the registered client in its heading and displays its
identifying origin below. Known-origin icons are bundled; all other
origins show a neutral site icon without contacting client-selected
sites. Client names are self-reported; the callback origin is the
recipient check. The Cloud chooser also displays the original client and
receiving origin before tenant handoff.

- A user who accepts the preselected write permission can create tasks
and comments. Task creation and comments can start or wake agents and
use execution budget; the consent label uses the concise wording
explicitly requested by the maintainer. Scope requests, role checks, and
the final Connect action still apply.
- Migration `0303_supreme_garia.sql` adds one nullable UUID column with
`IF NOT EXISTS`. Requests without a company restriction keep the
direct-instance picker. The binding stays recorded if its company is
deleted; consent then fails closed.
- Deploy tenant support before the Cloud broker sends `company_id`.
Unknown or inaccessible organizations must never fall back to a
different company.
- The setting defaults off. Disabling access does not cancel work
already delegated. Existing tokens and unexpired subscriptions can
resume when enabled again; revocation remains separate.
- The catalog entry is visible for discovery while the feature is off.
Setup instructions, OAuth, and tool execution remain gated. No access is
granted by viewing the entry.
- Assistant sign-in starts in the external client so it owns PKCE and
callback state. Client command syntax can change and links to official
setup documentation are included.
- An authenticated instance and valid public URL are required. Hosting,
paid execution, and store publication remain separate rollout steps.

## Model Used

OpenAI GPT-6 in Codex, with tool use and code execution. The exact
serving model version and context window are not exposed in this
session.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change (e.g. `docs/...`, `fix/...`)
and contains no internal Paperclip ticket id or instance-derived details
- [x] I have run tests locally and they pass (focused checks pass;
unrelated local full-suite timeouts are explicitly recorded above)
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

---------

Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-10-06 12:35:16 -05:00

1160 lines
43 KiB
TypeScript

// @vitest-environment jsdom
import { flushSync } from "react-dom";
import { MemoryRouter } from "react-router-dom";
import { createRoot, type Root } from "react-dom/client";
import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
import { INSTANCE_FEATURE_KEYS } from "@paperclipai/shared";
import type {
InstanceExperimentalSettings as InstanceExperimentalSettingsPayload,
InstanceExperimentalSettingsWithManaged,
} from "@paperclipai/shared";
import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
import { InstanceExperimentalSettings } from "./InstanceExperimentalSettings";
import { queryKeys } from "../lib/queryKeys";
const mockInstanceSettingsApi = vi.hoisted(() => ({
getExperimental: vi.fn(),
updateExperimental: vi.fn(),
}));
vi.mock("@/api/instanceSettings", () => ({
instanceSettingsApi: mockInstanceSettingsApi,
}));
vi.mock("@/context/CompanyContext", () => ({
useCompany: () => ({ selectedCompany: { id: "butter", issuePrefix: "BUT" } }),
}));
vi.mock("../context/BreadcrumbContext", () => ({
useBreadcrumbs: () => ({ setBreadcrumbs: vi.fn() }),
}));
async function act(callback: () => void | Promise<void>) {
let result: void | Promise<void> = undefined;
flushSync(() => {
result = callback();
});
await result;
}
async function flushReact() {
for (let index = 0; index < 5; index += 1) {
await Promise.resolve();
await new Promise((resolve) => window.setTimeout(resolve, 0));
}
flushSync(() => {});
}
const CONFERENCE_TOGGLE_SELECTOR =
'button[aria-label="Toggle conference room chat experimental setting"]';
const STREAMLINED_TOGGLE_SELECTOR =
'button[aria-label="Toggle Streamlined UI experimental setting"]';
const TASK_WATCHDOGS_TOGGLE_SELECTOR =
'button[aria-label="Toggle task watchdogs experimental setting"]';
const CLASSIC_TASK_INTERFACE_TOGGLE_SELECTOR =
'button[aria-label="Toggle classic task interface experimental setting"]';
const GOALS_SIDEBAR_LINK_TOGGLE_SELECTOR =
'button[aria-label="Toggle goals sidebar link experimental setting"]';
const DECISIONS_TOGGLE_SELECTOR =
'button[aria-label="Toggle decisions experimental setting"]';
const SERVER_INFO_TOGGLE_SELECTOR =
'button[aria-label="Toggle server info debug view experimental setting"]';
const PAPERCLIP_DEVELOPER_MODE_TOGGLE_SELECTOR =
'button[aria-label="Toggle Paperclip developer mode experimental setting"]';
const BUILT_IN_AGENTS_TOGGLE_SELECTOR =
'button[aria-label="Toggle built-in agents experimental setting"]';
const BETA_SKILLS_TOGGLE_SELECTOR =
'button[aria-label="Toggle beta skills experimental setting"]';
const SUMMARIES_TOGGLE_SELECTOR =
'button[aria-label="Toggle summaries experimental setting"]';
const STATUS_CARDS_TOGGLE_SELECTOR =
'button[aria-label="Toggle status cards experimental setting"]';
const PAPERCLIP_RUNNER_TOGGLE_SELECTOR =
'button[aria-label="Toggle Paperclip Runner experimental setting"]';
function defaultExperimentalSettings(): InstanceExperimentalSettingsPayload {
return {
enableEnvironments: false,
enableNativeRunner: false,
enableAiConnectionRouters: false,
enableManagedSandboxOnly: false,
enableIsolatedWorkspaces: false,
enableIsolatedWorkspacesByDefault: false,
enableStreamlinedLeftNavigation: true,
enableStreamlinedUi: true,
enableApps: true,
enableMcpAggregators: true,
enablePublicMcp: false,
enableChatConnectors: false,
enableMemoryConnectors: false,
enablePipelines: false,
enableCases: false,
enableAgentChat: false,
enableCombinedInboxTasks: false,
enableConferenceRoomChat: false,
enableClassicTaskInterface: false,
enableIssuePlanDecompositions: false,
enableExperimentalFileViewer: false,
enableExternalObjects: false,
enableBuiltInAgents: false,
enableBetaSkills: false,
enableSummaries: false,
enableStatusCards: false,
enableDecisions: false,
enableGoalsSidebarLink: false,
enableServerInfoDebugView: false,
enablePaperclipDeveloperMode: false,
enableSimplifiedEnglishInteractions: false,
enableFirstTaskPlanProposal: false,
enableSmokeLab: false,
autoRestartDevServerWhenIdle: false,
enableWorkspaceBranchReconcileForward: true,
enableWorkspaceDirtyQuarantineRepair: true,
enableOwnerInstanceAdmin: false,
enableSandboxDuplexBridge: false,
enableRunnerPreviewIngress: false,
enableWorktreeRunExecution: false,
worktreeRunExecutionActivatedAt: null,
worktreeRunExecutionActivationInstanceId: null,
};
}
const WORKTREE_RUN_EXECUTION_TOGGLE_SELECTOR =
'button[aria-label="Toggle worktree run execution setting"]';
const ISOLATED_WORKSPACES_TOGGLE_SELECTOR =
'button[aria-label="Toggle isolated workspaces experimental setting"]';
const ISOLATED_WORKSPACES_BY_DEFAULT_TOGGLE_SELECTOR =
'button[aria-label="Toggle isolated workspaces by default experimental setting"]';
function setWorktreeRuntimeMeta(enabled: boolean) {
const name = "paperclip-worktree-enabled";
let meta = document.querySelector<HTMLMetaElement>(`meta[name="${name}"]`);
if (enabled) {
if (!meta) {
meta = document.createElement("meta");
meta.setAttribute("name", name);
document.head.appendChild(meta);
}
meta.setAttribute("content", "true");
} else if (meta) {
meta.remove();
}
}
function setWorktreeInstanceIdMeta(instanceId: string | null) {
const name = "paperclip-instance-id";
let meta = document.querySelector<HTMLMetaElement>(`meta[name="${name}"]`);
if (instanceId) {
if (!meta) {
meta = document.createElement("meta");
meta.setAttribute("name", name);
document.head.appendChild(meta);
}
meta.setAttribute("content", instanceId);
} else if (meta) {
meta.remove();
}
}
describe("InstanceExperimentalSettings — Conference Room Chat card (PAP-11233)", () => {
let container: HTMLDivElement;
let root: Root | null = null;
let currentExperimentalSettings: InstanceExperimentalSettingsPayload;
async function renderPage() {
root = createRoot(container);
const queryClient = new QueryClient({
defaultOptions: { queries: { retry: false } },
});
flushSync(() => {
root!.render(
<QueryClientProvider client={queryClient}>
<MemoryRouter initialEntries={["/BUT/company/settings/instance/experimental"]}>
<InstanceExperimentalSettings />
</MemoryRouter>
</QueryClientProvider>,
);
});
await flushReact();
}
beforeEach(() => {
container = document.createElement("div");
document.body.appendChild(container);
currentExperimentalSettings = defaultExperimentalSettings();
mockInstanceSettingsApi.getExperimental.mockImplementation(async () => ({
...currentExperimentalSettings,
}));
mockInstanceSettingsApi.updateExperimental.mockImplementation(async (patch) => {
currentExperimentalSettings = { ...currentExperimentalSettings, ...patch };
return { ...currentExperimentalSettings };
});
});
afterEach(() => {
flushSync(() => {
root?.unmount();
});
root = null;
container.remove();
setWorktreeRuntimeMeta(false);
setWorktreeInstanceIdMeta(null);
vi.clearAllMocks();
});
it("renders a page-level warning about instability and lack of guarantees", async () => {
await renderPage();
const warning = [...container.querySelectorAll('[role="alert"]')].find((alert) =>
alert.textContent?.includes("Experimental features may break at any time."),
);
expect(warning?.textContent).toContain("Experimental features may break at any time.");
expect(warning?.textContent).toContain("no compatibility guarantees");
});
it("does not render an Apps experimental setting", async () => {
await renderPage();
expect(container.querySelector('button[aria-label="Toggle apps experimental setting"]')).toBeNull();
expect(container.textContent).not.toContain("Show the Apps navigation");
});
it("defaults memory connectors off and persists an explicit toggle in both directions", async () => {
await renderPage();
const selector = 'button[aria-label="Toggle memory connectors experimental setting"]';
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe("false");
expect(container.textContent).toContain("Existing connections keep running.");
for (const enabled of [true, false]) {
await act(() => container.querySelector<HTMLButtonElement>(selector)!.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({ enableMemoryConnectors: enabled });
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe(String(enabled));
}
});
it("defaults Combined Inbox + Task List off and persists an explicit toggle in both directions", async () => {
await renderPage();
const selector = 'button[aria-label="Toggle combined inbox and task list experimental setting"]';
expect(container.textContent).toContain("Combined Inbox + Task List");
expect(container.textContent).not.toContain("Agent Chat v2");
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe("false");
for (const enabled of [true, false]) {
await act(() => container.querySelector<HTMLButtonElement>(selector)!.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({ enableCombinedInboxTasks: enabled });
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe(String(enabled));
}
});
it("does not offer a retired MCP aggregators toggle", async () => {
await renderPage();
expect(container.querySelector('button[aria-label="Toggle MCP aggregators experimental setting"]')).toBeNull();
expect(container.textContent).not.toContain("MCP aggregators");
});
it("defaults assistant connections off and persists an explicit toggle in both directions", async () => {
await renderPage();
const selector = 'button[aria-label="Toggle assistant connections experimental setting"]';
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe("false");
expect(container.textContent).toContain("work already delegated continues");
for (const enabled of [true, false]) {
await act(() => container.querySelector<HTMLButtonElement>(selector)!.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({ enablePublicMcp: enabled });
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe(String(enabled));
expect(Boolean(container.querySelector('a[href="/BUT/apps/assistant-connection"]'))).toBe(enabled);
}
});
it("defaults chat connectors off and persists an explicit toggle in both directions", async () => {
await renderPage();
const selector = 'button[aria-label="Toggle chat connectors experimental setting"]';
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe("false");
expect(container.textContent).toContain("Existing chat connections keep running");
for (const enabled of [true, false]) {
await act(() => container.querySelector<HTMLButtonElement>(selector)!.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({ enableChatConnectors: enabled });
expect(container.querySelector(selector)?.getAttribute("aria-checked")).toBe(String(enabled));
expect(currentExperimentalSettings.enableApps).toBe(true);
}
});
it("does not render the Conference Room Chat experimental setting for now", async () => {
await renderPage();
const headings = [...container.querySelectorAll("section h2")].map((h) => h.textContent);
expect(headings).not.toContain("Conference Room Chat");
expect(container.querySelector(CONFERENCE_TOGGLE_SELECTOR)).toBeNull();
});
it("does not render the Pipelines experimental setting for now", async () => {
await renderPage();
const headings = [...container.querySelectorAll("section h2")].map((h) => h.textContent);
expect(headings).not.toContain("Pipelines");
expect(container.querySelector('button[aria-label="Toggle pipelines experimental setting"]')).toBeNull();
});
it("does not render the toggle even when the stored flag is currently enabled", async () => {
currentExperimentalSettings = {
...currentExperimentalSettings,
enableConferenceRoomChat: true,
};
await renderPage();
const toggle = container.querySelector(CONFERENCE_TOGGLE_SELECTOR);
expect(toggle).toBeNull();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("renders and patches the Streamlined UI experimental toggle on and off", async () => {
await renderPage();
expect(container.textContent).toContain("Streamlined UI");
expect(container.textContent).toContain(
"Use the simplified main sidebar, shared Tasks and Inbox presentation, focused task detail layout, and contextual navigation across Agents, Routines, Skills, and Settings.",
);
const toggle = container.querySelector<HTMLButtonElement>(STREAMLINED_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("true");
await act(() => toggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({
enableStreamlinedUi: false,
});
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(() => toggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({
enableStreamlinedUi: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("does not render a Task Watchdogs toggle because watchdogs are always enabled", async () => {
await renderPage();
expect(container.textContent).not.toContain("Task Watchdogs");
expect(container.querySelector('button[aria-label="Toggle task watchdogs experimental setting"]')).toBeNull();
});
it("does not expose the retired Runner Preview Ingress setting separately", async () => {
currentExperimentalSettings.enableRunnerPreviewIngress = true;
await renderPage();
expect(container.textContent).not.toContain("Runner Preview Ingress");
expect(container.querySelector(
'button[aria-label="Toggle runner preview ingress experimental setting"]',
)).toBeNull();
});
it("keeps Paperclip Runner default-off and exposes an explicit opt-in", async () => {
await renderPage();
expect(container.textContent).toContain("Paperclip Runner");
expect(container.textContent).toContain("Onboarding continues to use legacy adapters");
const toggle = container.querySelector<HTMLButtonElement>(
PAPERCLIP_RUNNER_TOGGLE_SELECTOR,
);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableNativeRunner: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("renders and patches the Classic Task Interface experimental toggle on and off", async () => {
await renderPage();
expect(container.textContent).toContain("Classic Task Interface");
expect(container.textContent).toContain(
"Restores the previous task detail page",
);
expect(container.textContent).toContain(
"Switching takes effect immediately. No task data is affected.",
);
const toggle = container.querySelector<HTMLButtonElement>(
CLASSIC_TASK_INTERFACE_TOGGLE_SELECTOR,
);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableClassicTaskInterface: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
flushSync(() => {
root?.unmount();
});
root = null;
container.textContent = "";
await renderPage();
const enabledToggle = container.querySelector<HTMLButtonElement>(
CLASSIC_TASK_INTERFACE_TOGGLE_SELECTOR,
);
expect(enabledToggle?.getAttribute("aria-checked")).toBe("true");
await act(async () => {
enabledToggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({
enableClassicTaskInterface: false,
});
});
it("renders and patches the Decisions experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Decisions");
expect(container.textContent).toContain(
"Show the Decisions item in the main sidebar",
);
const toggle = container.querySelector<HTMLButtonElement>(DECISIONS_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableDecisions: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("renders and patches the Goals Sidebar Link experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Goals Sidebar Link");
expect(container.textContent).toContain(
"Restore the Goals item in the main sidebar while the goals surface is being evaluated.",
);
const toggle = container.querySelector<HTMLButtonElement>(GOALS_SIDEBAR_LINK_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableGoalsSidebarLink: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("hides the isolated-workspaces-by-default toggle while isolated workspaces are off", async () => {
await renderPage();
expect(container.querySelector(ISOLATED_WORKSPACES_TOGGLE_SELECTOR)).not.toBeNull();
expect(
container.querySelector(ISOLATED_WORKSPACES_BY_DEFAULT_TOGGLE_SELECTOR),
).toBeNull();
expect(container.textContent).not.toContain("Use Isolated Workspaces By Default");
});
it("keeps the dependent toggle hidden even when its stored flag is already on", async () => {
// The operator default is inert without isolated workspaces, so the server
// ignores a stored `true`. The control must not imply otherwise.
currentExperimentalSettings = {
...currentExperimentalSettings,
enableIsolatedWorkspaces: false,
enableIsolatedWorkspacesByDefault: true,
};
await renderPage();
expect(
container.querySelector(ISOLATED_WORKSPACES_BY_DEFAULT_TOGGLE_SELECTOR),
).toBeNull();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("renders and patches the isolated-workspaces-by-default toggle on and off", async () => {
currentExperimentalSettings = {
...currentExperimentalSettings,
enableIsolatedWorkspaces: true,
};
await renderPage();
expect(container.textContent).toContain("Use Isolated Workspaces By Default");
expect(container.textContent).toContain("per-task worktree");
const toggle = container.querySelector<HTMLButtonElement>(
ISOLATED_WORKSPACES_BY_DEFAULT_TOGGLE_SELECTOR,
);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableIsolatedWorkspacesByDefault: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenLastCalledWith({
enableIsolatedWorkspacesByDefault: false,
});
expect(toggle?.getAttribute("aria-checked")).toBe("false");
});
it("reflects a stored isolated-workspaces-by-default value as checked", async () => {
currentExperimentalSettings = {
...currentExperimentalSettings,
enableIsolatedWorkspaces: true,
enableIsolatedWorkspacesByDefault: true,
};
await renderPage();
const toggle = container.querySelector<HTMLButtonElement>(
ISOLATED_WORKSPACES_BY_DEFAULT_TOGGLE_SELECTOR,
);
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("hides the worktree run-execution toggle when not running in a worktree", async () => {
setWorktreeRuntimeMeta(false);
await renderPage();
const headings = [...container.querySelectorAll("section h2")].map((h) => h.textContent);
expect(headings).not.toContain("Run tasks in this worktree");
expect(container.querySelector(WORKTREE_RUN_EXECUTION_TOGGLE_SELECTOR)).toBeNull();
});
it("renders and patches the worktree run-execution toggle when in a worktree", async () => {
setWorktreeRuntimeMeta(true);
await renderPage();
expect(container.textContent).toContain("Run tasks in this worktree");
expect(container.textContent).toContain(
"isolated git-worktree preview instance",
);
const toggle = container.querySelector<HTMLButtonElement>(WORKTREE_RUN_EXECUTION_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableWorktreeRunExecution: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("shows the cutoff-copy for the worktree run-execution toggle when off", async () => {
setWorktreeRuntimeMeta(true);
await renderPage();
expect(container.textContent).toContain(
"Only tasks created after enabling will run automatically",
);
expect(container.textContent).toContain("Toggling off and on resets the cutoff.");
// Off => no armed banner and no fail-closed hint.
expect(container.textContent).not.toContain("Running tasks created after");
expect(container.textContent).not.toContain("Execution is suppressed");
});
it("shows the armed timestamp when the flag matches the current instance", async () => {
setWorktreeRuntimeMeta(true);
setWorktreeInstanceIdMeta("inst-current");
currentExperimentalSettings = {
...currentExperimentalSettings,
enableWorktreeRunExecution: true,
worktreeRunExecutionActivatedAt: "2026-07-10T18:34:00.000Z",
worktreeRunExecutionActivationInstanceId: "inst-current",
};
await renderPage();
expect(container.textContent).toContain("Running tasks created after");
expect(container.textContent).not.toContain("Execution is suppressed");
const toggle = container.querySelector<HTMLButtonElement>(WORKTREE_RUN_EXECUTION_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("fails closed with a re-enable hint when the flag was armed in another instance", async () => {
setWorktreeRuntimeMeta(true);
setWorktreeInstanceIdMeta("inst-current");
currentExperimentalSettings = {
...currentExperimentalSettings,
enableWorktreeRunExecution: true,
worktreeRunExecutionActivatedAt: "2026-07-10T18:34:00.000Z",
worktreeRunExecutionActivationInstanceId: "inst-other",
};
await renderPage();
expect(container.textContent).toContain("Execution is suppressed");
expect(container.textContent).toContain("armed in a different instance");
expect(container.textContent).toContain("Toggle it off and back on");
expect(container.textContent).not.toContain("Running tasks created after");
});
it("fails closed with a re-enable hint when the activation cutoff is missing", async () => {
setWorktreeRuntimeMeta(true);
setWorktreeInstanceIdMeta("inst-current");
currentExperimentalSettings = {
...currentExperimentalSettings,
enableWorktreeRunExecution: true,
worktreeRunExecutionActivatedAt: null,
worktreeRunExecutionActivationInstanceId: null,
};
await renderPage();
expect(container.textContent).toContain("Execution is suppressed");
expect(container.textContent).toContain("missing its activation cutoff");
expect(container.textContent).not.toContain("Running tasks created after");
});
it("renders and patches the Built-in Agents experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Built-in Agents");
expect(container.textContent).toContain("Show Paperclip-managed built-in agent surfaces");
const toggle = container.querySelector<HTMLButtonElement>(BUILT_IN_AGENTS_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableBuiltInAgents: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("renders and patches the Beta skills experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Beta skills");
expect(container.textContent).toContain("pin beta releases of the Paperclip core skill");
const toggle = container.querySelector<HTMLButtonElement>(BETA_SKILLS_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableBetaSkills: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("renders and patches the Summaries experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Summaries");
expect(container.textContent).toContain("Show Summarizer-generated status slots");
const toggle = container.querySelector<HTMLButtonElement>(SUMMARIES_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableSummaries: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("enables Summaries when enabling the Status Cards experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Status Cards");
expect(container.textContent).toContain("experimental shared status-card board");
const toggle = container.querySelector<HTMLButtonElement>(STATUS_CARDS_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableSummaries: true,
enableStatusCards: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
expect(
container.querySelector<HTMLButtonElement>(SUMMARIES_TOGGLE_SELECTOR)?.getAttribute("aria-checked"),
).toBe("true");
});
it("disables Status Cards when disabling Summaries", async () => {
currentExperimentalSettings = {
...currentExperimentalSettings,
enableSummaries: true,
enableStatusCards: true,
};
await renderPage();
const summariesToggle = container.querySelector<HTMLButtonElement>(SUMMARIES_TOGGLE_SELECTOR);
await act(async () => {
summariesToggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableSummaries: false,
enableStatusCards: false,
});
expect(summariesToggle?.getAttribute("aria-checked")).toBe("false");
expect(
container.querySelector<HTMLButtonElement>(STATUS_CARDS_TOGGLE_SELECTOR)?.getAttribute("aria-checked"),
).toBe("false");
});
it("renders and patches the Server Info Debug View experimental toggle", async () => {
await renderPage();
expect(container.textContent).toContain("Server Info Debug View");
expect(container.textContent).toContain(
'Show a "Server" section in the account drawer with the current server restart time and running commit.',
);
const toggle = container.querySelector<HTMLButtonElement>(SERVER_INFO_TOGGLE_SELECTOR);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableServerInfoDebugView: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
it("renders and patches Paperclip Developer Mode", async () => {
await renderPage();
expect(container.textContent).toContain("Paperclip Developer Mode");
expect(container.textContent).toContain("including Honeycomb trace queries on run pages");
const toggle = container.querySelector<HTMLButtonElement>(
PAPERCLIP_DEVELOPER_MODE_TOGGLE_SELECTOR,
);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
await act(async () => {
toggle?.click();
});
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enablePaperclipDeveloperMode: true,
});
expect(toggle?.getAttribute("aria-checked")).toBe("true");
});
});
describe("InstanceExperimentalSettings — cloud-managed keys", () => {
const MANAGED_BADGE_TEXT = "Managed by Paperclip Cloud";
let container: HTMLDivElement;
let root: Root | null = null;
let queryClient: QueryClient;
async function renderPage(settings: InstanceExperimentalSettingsWithManaged) {
mockInstanceSettingsApi.getExperimental.mockResolvedValue({ ...settings });
root = createRoot(container);
queryClient = new QueryClient({
defaultOptions: { queries: { retry: false } },
});
flushSync(() => {
root!.render(
<QueryClientProvider client={queryClient}>
<MemoryRouter initialEntries={["/BUT/company/settings/instance/experimental"]}>
<InstanceExperimentalSettings />
</MemoryRouter>
</QueryClientProvider>,
);
});
await flushReact();
}
beforeEach(() => {
container = document.createElement("div");
document.body.appendChild(container);
mockInstanceSettingsApi.updateExperimental.mockImplementation(async (patch) => ({
...defaultExperimentalSettings(),
...patch,
}));
});
afterEach(() => {
flushSync(() => {
root?.unmount();
});
root = null;
queryClient?.clear();
container.remove();
vi.clearAllMocks();
});
it("renders a managed key locked with the badge while unmanaged keys stay editable", async () => {
await renderPage({
...defaultExperimentalSettings(),
enableBuiltInAgents: true,
managedKeys: {
enableBuiltInAgents: { managed: true, managedBy: "paperclip-cloud" },
},
});
expect(container.textContent).toContain(MANAGED_BADGE_TEXT);
const builtInAgentsToggle = container.querySelector<HTMLButtonElement>(BUILT_IN_AGENTS_TOGGLE_SELECTOR);
expect(builtInAgentsToggle?.getAttribute("aria-checked")).toBe("true");
expect(builtInAgentsToggle?.disabled).toBe(true);
await act(() => builtInAgentsToggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
const summariesToggle = container.querySelector<HTMLButtonElement>(SUMMARIES_TOGGLE_SELECTOR);
expect(summariesToggle?.disabled).toBe(false);
await act(() => summariesToggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({
enableSummaries: true,
});
});
it("keeps a managed isolated-workspaces-by-default setting locked", async () => {
// The cloud overlay owns this key, so the tenant sees its value but cannot
// write it back and have the overlay immediately override the write.
await renderPage({
...defaultExperimentalSettings(),
enableIsolatedWorkspaces: true,
enableIsolatedWorkspacesByDefault: true,
managedKeys: {
enableIsolatedWorkspacesByDefault: { managed: true, managedBy: "paperclip-cloud" },
},
});
const toggle = container.querySelector<HTMLButtonElement>(
ISOLATED_WORKSPACES_BY_DEFAULT_TOGGLE_SELECTOR,
);
expect(toggle?.getAttribute("aria-checked")).toBe("true");
expect(toggle?.disabled).toBe(true);
expect(container.textContent).toContain(MANAGED_BADGE_TEXT);
await act(() => toggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("keeps a managed chat connectors setting locked", async () => {
await renderPage({
...defaultExperimentalSettings(),
managedKeys: { enableChatConnectors: { managed: true, managedBy: "paperclip-cloud" } },
});
const toggle = container.querySelector<HTMLButtonElement>('button[aria-label="Toggle chat connectors experimental setting"]');
expect(toggle?.disabled).toBe(true);
expect(toggle?.getAttribute("aria-checked")).toBe("false");
expect(container.textContent).toContain(MANAGED_BADGE_TEXT);
await act(() => toggle?.click());
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("locks Status Cards when managed Summaries is disabled", async () => {
await renderPage({
...defaultExperimentalSettings(),
managedKeys: {
enableSummaries: { managed: true, managedBy: "paperclip-cloud" },
},
});
const statusCardsToggle = container.querySelector<HTMLButtonElement>(STATUS_CARDS_TOGGLE_SELECTOR);
expect(statusCardsToggle?.disabled).toBe(true);
await act(() => statusCardsToggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("locks Summaries on when managed Status Cards is enabled", async () => {
await renderPage({
...defaultExperimentalSettings(),
enableSummaries: true,
enableStatusCards: true,
managedKeys: {
enableStatusCards: { managed: true, managedBy: "paperclip-cloud" },
},
});
const summariesToggle = container.querySelector<HTMLButtonElement>(SUMMARIES_TOGGLE_SELECTOR);
expect(summariesToggle?.disabled).toBe(true);
await act(() => summariesToggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("renders no managed badge and keeps toggles editable without managedKeys (self-hosted)", async () => {
await renderPage(defaultExperimentalSettings());
expect(container.textContent).not.toContain(MANAGED_BADGE_TEXT);
const builtInAgentsToggle = container.querySelector<HTMLButtonElement>(BUILT_IN_AGENTS_TOGGLE_SELECTOR);
expect(builtInAgentsToggle?.disabled).toBe(false);
await act(() => builtInAgentsToggle?.click());
await flushReact();
expect(mockInstanceSettingsApi.updateExperimental).toHaveBeenCalledWith({ enableBuiltInAgents: true });
});
});
describe("InstanceExperimentalSettings — card ordering and headings (PAP-393)", () => {
let container: HTMLDivElement;
let root: Root | null = null;
async function renderPage(settings: InstanceExperimentalSettingsWithManaged) {
mockInstanceSettingsApi.getExperimental.mockResolvedValue({ ...settings });
root = createRoot(container);
const queryClient = new QueryClient({
defaultOptions: { queries: { retry: false } },
});
flushSync(() => {
root!.render(
<QueryClientProvider client={queryClient}>
<MemoryRouter initialEntries={["/BUT/company/settings/instance/experimental"]}>
<InstanceExperimentalSettings />
</MemoryRouter>
</QueryClientProvider>,
);
});
await flushReact();
}
beforeEach(() => {
container = document.createElement("div");
document.body.appendChild(container);
mockInstanceSettingsApi.updateExperimental.mockImplementation(async (patch) => ({
...defaultExperimentalSettings(),
...patch,
}));
});
afterEach(() => {
flushSync(() => {
root?.unmount();
});
root = null;
container.remove();
setWorktreeRuntimeMeta(false);
vi.clearAllMocks();
});
it("groups developer and legacy settings into sections", async () => {
setWorktreeRuntimeMeta(true);
await renderPage(defaultExperimentalSettings());
const headings = [...container.querySelectorAll("section > div > h2")].map(
(heading) => heading.textContent ?? "",
);
expect(headings).toEqual([
"Experimental features",
"Paperclip Developer Mode",
"Legacy",
]);
const sections = [...container.querySelectorAll("section")];
expect(sections.at(0)?.textContent).not.toContain("Run tasks in this worktree");
expect(sections.at(0)?.textContent).not.toContain("Managed Environment Only");
expect(sections.at(-2)?.textContent).toContain("Run tasks in this worktree");
expect(sections.at(-2)?.textContent).toContain("Managed Environment Only");
expect(sections.at(-2)?.textContent).toContain("Auto-Restart Dev Server When Idle");
expect(sections.at(-2)?.textContent).toContain("Server Info Debug View");
expect(sections.at(-2)?.textContent).toContain("Smoke Lab");
expect(sections.at(-2)?.textContent).toContain("Task Plan Decomposition");
expect(sections.at(-1)?.textContent).toContain("These features are going to be removed.");
expect(sections.at(-1)?.textContent).toContain("Classic Task Interface");
expect(sections.at(-1)?.textContent).toContain("Goals Sidebar Link");
});
it("alphabetizes cards by their displayed title within each section", async () => {
setWorktreeRuntimeMeta(true);
await renderPage({ ...defaultExperimentalSettings(), enableIsolatedWorkspaces: true });
for (const section of container.querySelectorAll("section")) {
const titles = [...section.querySelectorAll("h3")].map((heading) => heading.textContent ?? "");
expect(titles.length).toBeGreaterThan(1);
expect(titles).toEqual([...titles].sort((a, b) => a.localeCompare(b, "en", { sensitivity: "base" })));
}
});
it("renders setting cards without a background color", async () => {
await renderPage(defaultExperimentalSettings());
const cards = [...container.querySelectorAll('[data-slot="card"]')];
expect(cards.length).toBeGreaterThan(10);
expect(cards.every((card) => card.classList.contains("bg-transparent"))).toBe(true);
});
it("no longer renders an 'Experimental' secondary badge on any card", async () => {
await renderPage(defaultExperimentalSettings());
const badges = [...container.querySelectorAll('[data-slot="badge"]')].map(
(badge) => badge.textContent?.trim(),
);
expect(badges).not.toContain("Experimental");
});
});
describe("InstanceExperimentalSettings — operator-hidden cards", () => {
let container: HTMLDivElement;
let root: Root | null = null;
let queryClient: QueryClient;
beforeEach(() => {
container = document.createElement("div");
document.body.appendChild(container);
});
afterEach(() => {
flushSync(() => root?.unmount());
root = null;
queryClient?.clear();
container.remove();
setWorktreeRuntimeMeta(false);
vi.clearAllMocks();
});
async function renderPage(
hiddenSettings?: string[],
settings: InstanceExperimentalSettingsWithManaged = defaultExperimentalSettings(),
) {
mockInstanceSettingsApi.getExperimental.mockResolvedValue(settings);
root = createRoot(container);
queryClient = new QueryClient({ defaultOptions: { queries: { retry: false } } });
queryClient.setQueryData(queryKeys.health, {
status: "ok",
...(hiddenSettings ? { hiddenSettings } : {}),
});
flushSync(() => {
root!.render(
<QueryClientProvider client={queryClient}>
<MemoryRouter initialEntries={["/BUT/company/settings/instance/experimental"]}>
<InstanceExperimentalSettings />
</MemoryRouter>
</QueryClientProvider>,
);
});
await flushReact();
}
it.each([
{ cloud: false, enabled: false },
{ cloud: false, enabled: true },
{ cloud: true, enabled: false },
{ cloud: true, enabled: true },
])("offers no AI routing control with cloud=$cloud and enabled=$enabled", async ({ cloud, enabled }) => {
await renderPage(undefined, {
...defaultExperimentalSettings(),
enableAiConnectionRouters: enabled,
...(cloud ? { managedKeys: { enableAiConnectionRouters: { managed: true, managedBy: "paperclip-cloud" as const } } } : {}),
});
expect(container.textContent).toContain("Experimental features");
expect(container.textContent).not.toContain("AI connection routers");
expect(container.querySelector('button[aria-label="Toggle AI connection routers experimental setting"]')).toBeNull();
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("renders nothing for an operator-hidden toggle and keeps the rest", async () => {
await renderPage(["instance.experimental.enableEnvironments"]);
expect(container.textContent).not.toContain("Enable Environments");
expect(container.textContent).toContain("Beta skills");
expect(container.textContent).not.toContain("Show the Apps navigation");
});
it("keeps only permitted controls in alphabetical order, including when hidden features are enabled", async () => {
setWorktreeRuntimeMeta(true);
const visible = new Set(["enableExternalObjects", "enableMemoryConnectors", "enableSimplifiedEnglishInteractions"]);
await renderPage(
INSTANCE_FEATURE_KEYS.filter((key) => !visible.has(key)).map((key) => `instance.experimental.${key}`),
{
...defaultExperimentalSettings(),
enableIsolatedWorkspaces: true,
enableIsolatedWorkspacesByDefault: true,
enablePaperclipDeveloperMode: true,
managedKeys: {
enableIsolatedWorkspacesByDefault: { managed: true, managedBy: "paperclip-cloud" },
},
},
);
expect([...container.querySelectorAll("h3")].map((heading) => heading.textContent)).toEqual([
"Enable External Objects",
"Memory connectors",
"Simplified English Interactions",
]);
expect([...container.querySelectorAll("section h2")].map((heading) => heading.textContent)).toEqual([
"Experimental features",
]);
expect(container.querySelectorAll('button[role="switch"]')).toHaveLength(3);
expect(mockInstanceSettingsApi.updateExperimental).not.toHaveBeenCalled();
});
it("retains a section when one of its controls is visible", async () => {
const visible = new Set(["enablePaperclipDeveloperMode", "enableGoalsSidebarLink"]);
await renderPage(INSTANCE_FEATURE_KEYS.filter((key) => !visible.has(key)).map((key) => `instance.experimental.${key}`));
expect(container.querySelector('[aria-labelledby="developer-mode-heading"] h3')?.textContent).toBe("Paperclip Developer Mode");
expect(container.querySelector('[aria-labelledby="legacy-heading"] h3')?.textContent).toBe("Goals Sidebar Link");
});
it("shows every toggle when nothing is hidden", async () => {
await renderPage();
expect(container.textContent).toContain("Enable Environments");
expect(container.textContent).toContain("Beta skills");
});
});