mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-25 02:26:12 +02:00
DottaandPaperclip
d0c8f0b090
## Thinking Path > - Paperclip is the open source app people use to manage AI agents for work. > - Low-trust agents may read only the projects in their allowed scope. > - Workspace setup correctly stops a task outside that scope. > - The task previously showed a generic failure, and agent settings did not offer an additive repair. > - This pull request explains the denial and lets authorized operators add projects while preserving other restrictions. > - The saved task then offers an explicit retry. Saving access does not start work. ## Linked Issues or Issue Description **What happened?** A project access denial appeared as an ordinary failed attempt. Operators could not add a second allowed project from agent settings. **Expected behavior** The task should explain the denied access and link to a working permission editor. The editor should preserve existing scope and restrictions, enforce operator authority, and retain drafts after a failed save. **Steps to reproduce** 1. Assign a low-trust agent to a task whose project is outside its allowed projects. 2. Let workspace setup deny project access. 3. Open the task, follow Manage project access, add the project, save, reload, and return to the task. 4. Confirm that the saved message remains and Retry task is a separate action. ## What Changed - Record a typed, non-retryable project denial before provider dispatch. Project denials do not enter automatic continuation or provider comment policy. - Project current and historical setup denials into a safe task notice. Keep unrelated failures, prior assignees, and approval/pause/budget gates separate. Recheck current project authority, including standard trust and root-issue grants. Accepted retries keep their working state. - Add board-only project-access reads and additive saves under the agent row lock. Enforce company scope, agent-management authority, pending-approval restrictions, and an audit record for new additions. - Add the production notice and searchable multi-project editor, including read-only, saving, cancellation, and failed-save states. Preserve the return-to-task query through canonical agent redirects. - Register board-only project-access routes in OpenAPI with a strict request schema. - Add production Storybook examples and API/persistence/concurrency regressions. Retain the approved design snapshot and update the behavior maps and implementation contract. ## Verification - Passed: `pnpm -r typecheck`, `pnpm build`, `pnpm build-storybook`, `pnpm check:token-gates`, `node scripts/check-maps.mjs`, and `node scripts/storybook-catalog.mjs`. - Passed: 11 permission/projection tests and 30 run-completion tests against an isolated PostgreSQL database. These cover historical failures, concurrent additions, idempotent audit, preserved restrictions, foreign projects, read-only users, agent self-grants, and no automatic wakeup. - Passed: all 27 OpenAPI route tests, including route coverage and the new board-only request/response contract. - Browser: the real app displayed a historical denial; Manage project access opened the editor; saving retained the original project and survived reload; Return to task showed the ready notice. Saving created one audit event and zero runs. Explicit Retry returned 202 and reached the separate sandbox requirement, which remained enforced. No external provider was used. - All five production Storybook interaction checks pass: blocked task, save, cancellation, failed-save recovery, and read-only settings. These use fixture callbacks; durable authorization is covered separately above. - `pnpm test:run` was attempted locally but stopped after repeated embedded PostgreSQL startup failures caused by macOS semaphore exhaustion. Full-suite CI is required before merge. The separate UI suite passed all 9,095 tests. The 41 focused server regressions also passed after rebasing onto the latest master. A further 26 recovery-classification tests pass, including a red-to-green regression for automatic continuation after a project denial. ## Risks - No schema migration. The new endpoint only adds same-company project IDs and preserves the rest of the stored policy. - The historical notice recognizes one exact setup denial message. It does not display arbitrary run errors or disclose a different source project's identity. - The retry still passes all current admission and isolation checks. The notice does not promise that other execution requirements are satisfied. - Related open work: #13309 covers inherited secret restrictions; #11234 covers the broader repository catalog. This change does not replace either policy surface. ## Model Used OpenAI Codex (GPT-6), with code execution and browser tools. The precise runtime model ID and context-window size were not exposed in this session. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass (focused server and full UI suites; full-suite infrastructure limit above) - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] All Paperclip CI gates are green - [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing>
990 lines
29 KiB
TypeScript
990 lines
29 KiB
TypeScript
export {
|
|
connectionsSearchInputSchema,
|
|
connectionRequestInputSchema,
|
|
completeConnectionIntentSchema,
|
|
declineConnectionIntentSchema,
|
|
type ConnectionsSearchInput,
|
|
type ConnectionRequestInput,
|
|
type CompleteConnectionIntent,
|
|
type DeclineConnectionIntent,
|
|
} from "./connection-intent.js";
|
|
|
|
export {
|
|
nativeFinalizationResultSchema,
|
|
nativeFinalizationResultV1Schema,
|
|
nativeReportedWorkDispositionSchema,
|
|
type NativeFinalizationResultInput,
|
|
} from "./native-finalization.js";
|
|
|
|
export {
|
|
decisionEffectStalenessSchema,
|
|
decisionOptionStyleSchema,
|
|
commentOnIssueDecisionEffectSchema,
|
|
createIssueDecisionEffectSchema,
|
|
updateIssueStatusDecisionEffectSchema,
|
|
assignIssueDecisionEffectSchema,
|
|
cancelIssueTreeDecisionEffectSchema,
|
|
resolveBlockerDecisionEffectSchema,
|
|
decisionEffectSchema,
|
|
decisionInputSchema,
|
|
decisionOptionSchema,
|
|
decisionOptionsSchema,
|
|
decisionInputsSchema,
|
|
decisionSpecSchema,
|
|
type DecisionEffectInput,
|
|
type DecisionOptionInput,
|
|
type DecisionInputInput,
|
|
type DecisionSpecInput,
|
|
} from "./decision.js";
|
|
|
|
export {
|
|
instanceSettingsSchema,
|
|
instanceGeneralSettingsSchema,
|
|
patchInstanceGeneralSettingsSchema,
|
|
type InstanceGeneralSettings,
|
|
type PatchInstanceGeneralSettings,
|
|
instanceExperimentalSettingsSchema,
|
|
instanceExperimentalSettingsWithManagedSchema,
|
|
managedSettingMetadataSchema,
|
|
patchInstanceExperimentalSettingsSchema,
|
|
patchInstanceSettingsSchema,
|
|
type InstanceExperimentalSettings,
|
|
type PatchInstanceExperimentalSettings,
|
|
type PatchInstanceSettings,
|
|
} from "./instance.js";
|
|
|
|
export {
|
|
upsertBudgetPolicySchema,
|
|
resolveBudgetIncidentSchema,
|
|
type UpsertBudgetPolicy,
|
|
type ResolveBudgetIncident,
|
|
} from "./budget.js";
|
|
|
|
export {
|
|
createSmokeRunSchema,
|
|
updateSmokeRunSchema,
|
|
recordSmokeRunStepSchema,
|
|
smokeRunStatusSchema,
|
|
smokeRunStepPathSchema,
|
|
smokeRunStepStatusSchema,
|
|
smokeRunTriggerSchema,
|
|
type CreateSmokeRun,
|
|
type UpdateSmokeRun,
|
|
type RecordSmokeRunStep,
|
|
} from "./smoke-lab.js";
|
|
|
|
export {
|
|
createCompanySchema,
|
|
interactionResolverGovernanceSchema,
|
|
updateCompanySchema,
|
|
updateCompanyBrandingSchema,
|
|
type CreateCompany,
|
|
type UpdateCompany,
|
|
type UpdateCompanyBranding,
|
|
} from "./company.js";
|
|
export {
|
|
environmentDriverSchema,
|
|
environmentStatusSchema,
|
|
environmentLeaseStatusSchema,
|
|
environmentLeaseCleanupStatusSchema,
|
|
createEnvironmentSchema,
|
|
updateEnvironmentSchema,
|
|
probeEnvironmentConfigSchema,
|
|
type CreateEnvironment,
|
|
type UpdateEnvironment,
|
|
type ProbeEnvironmentConfig,
|
|
} from "./environment.js";
|
|
export {
|
|
environmentCustomImageTemplateKindSchema,
|
|
environmentCustomImageTemplateStatusSchema,
|
|
environmentCustomImageSetupSessionStatusSchema,
|
|
environmentCustomImageSetupConnectionTypeSchema,
|
|
environmentCustomImageSetupConnectionSummarySchema,
|
|
environmentCustomImageTemplateSchema,
|
|
environmentCustomImageSetupSessionSchema,
|
|
startEnvironmentCustomImageSetupSessionSchema,
|
|
finishEnvironmentCustomImageSetupSessionSchema,
|
|
cancelEnvironmentCustomImageSetupSessionSchema,
|
|
relinkEnvironmentCustomImageTemplateSchema,
|
|
createEnvironmentCustomImageTerminalSessionTokenSchema,
|
|
environmentCustomImageTerminalSessionTokenSchema,
|
|
type EnvironmentCustomImageSetupConnectionSummary,
|
|
type EnvironmentCustomImageTemplate,
|
|
type EnvironmentCustomImageSetupSession,
|
|
type StartEnvironmentCustomImageSetupSession,
|
|
type FinishEnvironmentCustomImageSetupSession,
|
|
type CancelEnvironmentCustomImageSetupSession,
|
|
type RelinkEnvironmentCustomImageTemplate,
|
|
type CreateEnvironmentCustomImageTerminalSessionToken,
|
|
type EnvironmentCustomImageTerminalSessionToken,
|
|
} from "./environment-custom-images.js";
|
|
export {
|
|
feedbackDataSharingPreferenceSchema,
|
|
feedbackTargetTypeSchema,
|
|
feedbackTraceStatusSchema,
|
|
feedbackVoteValueSchema,
|
|
upsertIssueFeedbackVoteSchema,
|
|
type UpsertIssueFeedbackVote,
|
|
} from "./feedback.js";
|
|
export {
|
|
sidebarOrderPreferenceSchema,
|
|
upsertSidebarOrderPreferenceSchema,
|
|
type UpsertSidebarOrderPreference,
|
|
} from "./sidebar-preferences.js";
|
|
export {
|
|
resourceMembershipStateSchema,
|
|
updateDocumentResourceMembershipSchema,
|
|
updateResourceMembershipSchema,
|
|
type UpdateDocumentResourceMembership,
|
|
type UpdateResourceMembership,
|
|
} from "./resource-memberships.js";
|
|
export {
|
|
generateSummarySlotSchema,
|
|
summarySlotKeySchema,
|
|
summarySlotQuerySchema,
|
|
summarySlotScopeKindSchema,
|
|
summarySlotScopeSelectorSchema,
|
|
summarySlotStatusSchema,
|
|
writeSummarySlotSchema,
|
|
type GenerateSummarySlotInput,
|
|
type SummarySlotScopeSelectorInput,
|
|
type WriteSummarySlotInput,
|
|
} from "./summary-slot.js";
|
|
|
|
export * from "./status-card.js";
|
|
|
|
export {
|
|
externalObjectStatusCategorySchema,
|
|
externalObjectStatusToneSchema,
|
|
externalObjectLivenessStateSchema,
|
|
externalObjectMentionSourceKindSchema,
|
|
externalObjectMentionConfidenceSchema,
|
|
externalObjectProviderKeySchema,
|
|
externalObjectTypeSchema,
|
|
externalObjectCanonicalIdentitySchema,
|
|
externalObjectMentionSourceSchema,
|
|
type ExternalObjectCanonicalIdentityInput,
|
|
type ExternalObjectMentionSourceInput,
|
|
type ExternalObjectProviderKeyInput,
|
|
type ExternalObjectTypeInput,
|
|
} from "./external-object.js";
|
|
export {
|
|
companySkillSourceTypeSchema,
|
|
companySkillTrustLevelSchema,
|
|
companySkillCompatibilitySchema,
|
|
companySkillSourceBadgeSchema,
|
|
companySkillSharingScopeSchema,
|
|
companySkillListSortSchema,
|
|
companySkillListIncludeSchema,
|
|
companySkillFileInventoryEntrySchema,
|
|
companySkillVersionFileInventoryEntrySchema,
|
|
companySkillSchema,
|
|
companySkillListItemSchema,
|
|
companySkillUsageAgentSchema,
|
|
companySkillListQuerySchema,
|
|
companySkillCategoryCountSchema,
|
|
companySkillVersionSchema,
|
|
companySkillDetailSchema,
|
|
companySkillVersionCreateSchema,
|
|
companySkillStarResultSchema,
|
|
companySkillCommentSchema,
|
|
companySkillCommentCreateSchema,
|
|
companySkillCommentUpdateSchema,
|
|
companySkillForkSchema,
|
|
companySkillOriginalSummarySchema,
|
|
companySkillForkSummarySchema,
|
|
companySkillForkReassignmentSchema,
|
|
companySkillForkResultSchema,
|
|
companySkillForkPrecheckResultSchema,
|
|
companySkillRenameSchema,
|
|
companySkillRenameResultSchema,
|
|
companySkillUpdateSchema,
|
|
companySkillUpdateStatusSchema,
|
|
companySkillAuditFindingSchema,
|
|
companySkillAuditResultSchema,
|
|
companySkillImportSchema,
|
|
companySkillProjectScanRequestSchema,
|
|
companySkillProjectBrowseRequestSchema,
|
|
companySkillProjectBrowseEntrySchema,
|
|
companySkillProjectBrowseResultSchema,
|
|
companySkillProjectScanSkippedSchema,
|
|
companySkillProjectScanConflictSchema,
|
|
companySkillProjectScanResultSchema,
|
|
companySkillCreateSchema,
|
|
companySkillFileDetailSchema,
|
|
companySkillFileUpdateSchema,
|
|
companySkillFileDeleteSchema,
|
|
companySkillTestRunStatusSchema,
|
|
companySkillTestInputSchema,
|
|
companySkillTestInputCreateSchema,
|
|
companySkillTestInputUpdateSchema,
|
|
companySkillTestRunTemplateSchema,
|
|
companySkillTestRunTemplateCreateSchema,
|
|
companySkillTestRunTemplateUpdateSchema,
|
|
companySkillTestRunTemplateSnapshotSchema,
|
|
companySkillTestRunCostSummarySchema,
|
|
companySkillTestRunSchema,
|
|
companySkillTestRunCreateSchema,
|
|
companySkillTestRunListQuerySchema,
|
|
catalogSkillKindSchema,
|
|
catalogSkillFileSchema,
|
|
catalogSkillGitHubSourceSchema,
|
|
catalogSkillSourceSchema,
|
|
catalogSkillSchema,
|
|
catalogSkillListQuerySchema,
|
|
catalogSkillFileDetailSchema,
|
|
companySkillInstallCatalogSchema,
|
|
companySkillInstallCatalogResultSchema,
|
|
companySkillInstallUpdateSchema,
|
|
companySkillResetSchema,
|
|
type CompanySkillImport,
|
|
type CompanySkillListQuery,
|
|
type CompanySkillProjectScan,
|
|
type CompanySkillProjectBrowse,
|
|
type CompanySkillCreate,
|
|
type CompanySkillFileUpdate,
|
|
type CompanySkillTestInputCreate,
|
|
type CompanySkillTestInputUpdate,
|
|
type CompanySkillTestRunTemplateCreate,
|
|
type CompanySkillTestRunTemplateUpdate,
|
|
type CompanySkillTestRunCreate,
|
|
type CompanySkillTestRunListQuery,
|
|
type CompanySkillVersionCreate,
|
|
type CompanySkillCommentCreate,
|
|
type CompanySkillCommentUpdate,
|
|
type CompanySkillFork,
|
|
type CompanySkillRename,
|
|
type CatalogSkillListQuery,
|
|
type CompanySkillInstallCatalog,
|
|
type CompanySkillInstallUpdate,
|
|
type CompanySkillReset,
|
|
} from "./company-skill.js";
|
|
export {
|
|
folderKindSchema,
|
|
folderSlugSchema,
|
|
folderSchema,
|
|
folderListItemSchema,
|
|
folderListResultSchema,
|
|
createFolderSchema,
|
|
updateFolderSchema,
|
|
moveFolderSchema,
|
|
moveFolderItemSchema,
|
|
ensureMySkillFolderSchema,
|
|
type CreateFolder,
|
|
type UpdateFolder,
|
|
type MoveFolder,
|
|
type MoveFolderItem,
|
|
type EnsureMySkillFolder,
|
|
} from "./folder.js";
|
|
export {
|
|
catalogTeamKindSchema,
|
|
catalogTeamTrustLevelSchema,
|
|
catalogTeamCompatibilitySchema,
|
|
catalogTeamFileKindSchema,
|
|
catalogTeamSkillRequirementTypeSchema,
|
|
catalogTeamSkillRequirementSchema,
|
|
catalogTeamEnvInputSummarySchema,
|
|
catalogTeamSourceRefSchema,
|
|
catalogTeamFileSchema,
|
|
catalogTeamSchema,
|
|
catalogTeamListQuerySchema,
|
|
catalogTeamFileDetailSchema,
|
|
catalogTeamSourcePolicySchema,
|
|
catalogTeamPreviewSchema,
|
|
catalogTeamInstallSchema,
|
|
catalogTeamSkillPreparationSchema,
|
|
type CatalogTeamListQuery,
|
|
type CatalogTeamPreview,
|
|
type CatalogTeamInstall,
|
|
} from "./teams-catalog.js";
|
|
export {
|
|
agentSkillStateSchema,
|
|
agentSkillSyncModeSchema,
|
|
agentSkillAssignmentModeSchema,
|
|
agentDesiredSkillEntrySchema,
|
|
agentDesiredSkillSelectionSchema,
|
|
agentSkillEntrySchema,
|
|
agentSkillSnapshotSchema,
|
|
agentSkillSyncSchema,
|
|
type AgentSkillSync,
|
|
} from "./adapter-skills.js";
|
|
export {
|
|
portabilityIncludeSchema,
|
|
portabilityEnvInputSchema,
|
|
portabilityCompanyManifestEntrySchema,
|
|
portabilitySidebarOrderSchema,
|
|
portabilityAgentManifestEntrySchema,
|
|
portabilitySkillManifestEntrySchema,
|
|
portabilityManifestSchema,
|
|
portabilitySourceSchema,
|
|
portabilityTargetSchema,
|
|
portabilityAgentSelectionSchema,
|
|
portabilityCollisionStrategySchema,
|
|
companyPortabilityExportSchema,
|
|
companyPortabilityPreviewSchema,
|
|
companyPortabilityImportSchema,
|
|
type CompanyPortabilityExport,
|
|
type CompanyPortabilityPreview,
|
|
type CompanyPortabilityImport,
|
|
} from "./company-portability.js";
|
|
|
|
export {
|
|
trustPresetSchema,
|
|
lowTrustBoundarySchema,
|
|
lowTrustReviewPresetPolicySchema,
|
|
assignmentAuthorizationPolicySchema,
|
|
protectedAgentAuthorizationPolicySchema,
|
|
trustAuthorizationPolicySchema,
|
|
sourceTrustArtifactKindSchema,
|
|
sourceTrustMetadataSchema,
|
|
type TrustPresetInput,
|
|
type LowTrustBoundaryInput,
|
|
type TrustAuthorizationPolicyInput,
|
|
type SourceTrustMetadataInput,
|
|
} from "./trust-policy.js";
|
|
|
|
export {
|
|
createAgentSchema,
|
|
builtInAgentEmptyMutationSchema,
|
|
builtInAgentProvisionSchema,
|
|
builtInAgentResetSchema,
|
|
createAgentHireSchema,
|
|
updateAgentSchema,
|
|
agentRuntimeSettingsPatchSchema,
|
|
type AgentRuntimeSettingsPatch,
|
|
agentRuntimeConfigSchema,
|
|
agentInstructionsBundleModeSchema,
|
|
updateAgentInstructionsBundleSchema,
|
|
upsertAgentInstructionsFileSchema,
|
|
updateAgentInstructionsPathSchema,
|
|
agentApiKeyScopeSchema,
|
|
normalizeAgentApiKeyScope,
|
|
standardAgentKeyScopeSchema,
|
|
taskBridgeAgentKeyScopeSchema,
|
|
skillTestAgentKeyScopeSchema,
|
|
createAgentKeySchema,
|
|
agentMineInboxQuerySchema,
|
|
wakeAgentSchema,
|
|
resetAgentSessionSchema,
|
|
testAdapterEnvironmentSchema,
|
|
qualifyAgentRunnerSchema,
|
|
agentPermissionsSchema,
|
|
updateAgentPermissionsSchema,
|
|
addAgentProjectAccessSchema,
|
|
type CreateAgent,
|
|
type BuiltInAgentProvision,
|
|
type BuiltInAgentReset,
|
|
type CreateAgentHire,
|
|
type UpdateAgent,
|
|
type UpdateAgentInstructionsBundle,
|
|
type UpsertAgentInstructionsFile,
|
|
type UpdateAgentInstructionsPath,
|
|
type AgentApiKeyScope,
|
|
type TaskBridgeAgentKeyScope,
|
|
type SkillTestAgentKeyScope,
|
|
type CreateAgentKey,
|
|
type AgentMineInboxQuery,
|
|
type WakeAgent,
|
|
type ResetAgentSession,
|
|
type TestAdapterEnvironment,
|
|
type UpdateAgentPermissions,
|
|
} from "./agent.js";
|
|
|
|
export {
|
|
projectDiscoverySchema,
|
|
createProjectSchema,
|
|
updateProjectSchema,
|
|
addProjectAccessMemberSchema,
|
|
createProjectWorkspaceSchema,
|
|
updateProjectWorkspaceSchema,
|
|
projectExecutionWorkspacePolicySchema,
|
|
projectWorkspaceRuntimeConfigSchema,
|
|
type CreateProject,
|
|
type UpdateProject,
|
|
type AddProjectAccessMember,
|
|
type CreateProjectWorkspace,
|
|
type UpdateProjectWorkspace,
|
|
type ProjectExecutionWorkspacePolicy,
|
|
} from "./project.js";
|
|
|
|
export {
|
|
createDocumentAnnotationCommentSchema,
|
|
createDocumentAnnotationThreadSchema,
|
|
documentAnnotationAnchorConfidenceSchema,
|
|
documentAnnotationAnchorSelectorSchema,
|
|
documentAnnotationAnchorStateSchema,
|
|
documentAnnotationTextPositionSelectorSchema,
|
|
documentAnnotationTextQuoteSelectorSchema,
|
|
documentAnnotationThreadStatusSchema,
|
|
updateDocumentAnnotationThreadSchema,
|
|
type CreateDocumentAnnotationComment,
|
|
type CreateDocumentAnnotationThread,
|
|
type UpdateDocumentAnnotationThread,
|
|
} from "./document-annotation.js";
|
|
|
|
export {
|
|
createIssueSchema,
|
|
issueSummariesQuerySchema,
|
|
setIssueTitleSchema,
|
|
type SetIssueTitle,
|
|
createIssueInputSchema,
|
|
createChildIssueSchema,
|
|
createAcceptedPlanDecompositionSchema,
|
|
resolveCreateIssueStatusDefault,
|
|
createIssueLabelSchema,
|
|
issueBlockedInboxAttentionSchema,
|
|
issueBlockedInboxIssueRefSchema,
|
|
issueBlockedInboxReasonSchema,
|
|
issueBlockedInboxSeveritySchema,
|
|
issueBlockedInboxStateSchema,
|
|
updateIssueSchema,
|
|
stalledReviewDecisionSchema,
|
|
issueExecutionPolicySchema,
|
|
issueExecutionMonitorPolicySchema,
|
|
issueExecutionStateSchema,
|
|
issueRecoveryActionReadModelSchema,
|
|
resolveIssueRecoveryActionSchema,
|
|
isValidExistingBranchName,
|
|
retryWorkspaceExportSchema,
|
|
recoverWorkspaceSchema,
|
|
taskRetrySchema,
|
|
reconstructWorkspaceSchema,
|
|
resumeWorkspaceFinalizationSchema,
|
|
issueReviewRequestSchema,
|
|
issueExecutionWorkspaceSettingsSchema,
|
|
checkoutIssueSchema,
|
|
issueCommentAuthorTypeSchema,
|
|
issueCommentPresentationSchema,
|
|
issueCommentMetadataRowSchema,
|
|
issueCommentMetadataSectionSchema,
|
|
issueCommentMetadataSchema,
|
|
addIssueCommentSchema,
|
|
issueThreadInteractionStatusSchema,
|
|
issueThreadInteractionKindSchema,
|
|
issueThreadInteractionCanonicalResolverPolicySchema,
|
|
issueThreadInteractionResolverPolicySchema,
|
|
issueThreadInteractionResolverPolicyProvenanceSchema,
|
|
issueThreadInteractionEffectiveResolverPolicySourceSchema,
|
|
issueThreadInteractionContinuationPolicySchema,
|
|
connectionIntentPhaseSchema,
|
|
connectionIntentPayloadSchema,
|
|
connectionIntentResultSchema,
|
|
suggestedTaskDraftSchema,
|
|
suggestTasksPayloadSchema,
|
|
suggestTasksResultCreatedTaskSchema,
|
|
suggestTasksResultSchema,
|
|
askUserQuestionsQuestionOptionSchema,
|
|
askUserQuestionsQuestionSchema,
|
|
paperclipQuestionSetPayloadSchema,
|
|
askUserQuestionsPayloadSchema,
|
|
askUserQuestionsAnswerSchema,
|
|
askUserQuestionsResultSchema,
|
|
requestConfirmationIssueDocumentTargetSchema,
|
|
requestConfirmationCustomTargetSchema,
|
|
requestConfirmationTargetSchema,
|
|
requestConfirmationPayloadSchema,
|
|
requestConfirmationResumeFailureSchema,
|
|
requestConfirmationResultSchema,
|
|
requestConfirmationSecretProposalPayloadSchema,
|
|
requestConfirmationSecretProposalResultSchema,
|
|
requestCheckboxConfirmationOptionSchema,
|
|
requestCheckboxConfirmationPayloadSchema,
|
|
requestCheckboxConfirmationResultSchema,
|
|
requestItemVerdictValueSchema,
|
|
requestItemVerdictsItemSchema,
|
|
requestItemVerdictsPayloadSchema,
|
|
requestItemVerdictsResultItemSchema,
|
|
requestItemVerdictsResultSchema,
|
|
createIssueThreadInteractionSchema,
|
|
acceptIssueThreadInteractionSchema,
|
|
resolveConfirmationFromCommentSchema,
|
|
type ResolveConfirmationFromComment,
|
|
rejectIssueThreadInteractionSchema,
|
|
cancelIssueThreadInteractionSchema,
|
|
skipIssueThreadInteractionSchema,
|
|
withdrawIssueThreadInteractionSchema,
|
|
respondIssueThreadInteractionSchema,
|
|
submitIssueThreadInteractionVerdictsSchema,
|
|
linkIssueApprovalSchema,
|
|
createIssueAttachmentMetadataSchema,
|
|
issueDocumentFormatSchema,
|
|
issueDocumentKeySchema,
|
|
upsertIssueDocumentSchema,
|
|
restoreIssueDocumentRevisionSchema,
|
|
upsertIssueWatchdogSchema,
|
|
type CreateIssue,
|
|
type CreateChildIssue,
|
|
type CreateAcceptedPlanDecomposition,
|
|
type CreateIssueLabel,
|
|
type UpdateIssue,
|
|
type StalledReviewDecision,
|
|
type IssueExecutionWorkspaceSettings,
|
|
type IssueRecoveryActionReadModel,
|
|
type ResolveIssueRecoveryAction,
|
|
type CheckoutIssue,
|
|
type AddIssueComment,
|
|
type CreateIssueThreadInteraction,
|
|
type CreateIssueThreadInteractionInput,
|
|
type AcceptIssueThreadInteraction,
|
|
type RejectIssueThreadInteraction,
|
|
type CancelIssueThreadInteraction,
|
|
type SkipIssueThreadInteraction,
|
|
type WithdrawIssueThreadInteraction,
|
|
type RespondIssueThreadInteraction,
|
|
type SubmitIssueThreadInteractionVerdicts,
|
|
type LinkIssueApproval,
|
|
type CreateIssueAttachmentMetadata,
|
|
type IssueDocumentFormat,
|
|
type UpsertIssueDocument,
|
|
type RestoreIssueDocumentRevision,
|
|
type UpsertIssueWatchdog,
|
|
} from "./issue.js";
|
|
|
|
export {
|
|
COMPANY_SEARCH_EXTRACT_DEFAULT_LIMIT,
|
|
COMPANY_SEARCH_EXTRACT_DEFAULT_MATCHES_PER_ISSUE,
|
|
COMPANY_SEARCH_EXTRACT_MAX_LIMIT,
|
|
COMPANY_SEARCH_EXTRACT_MAX_MATCHES_PER_ISSUE,
|
|
COMPANY_SEARCH_EXTRACT_MAX_OFFSET,
|
|
COMPANY_SEARCH_DEFAULT_LIMIT,
|
|
COMPANY_SEARCH_MAX_LIMIT,
|
|
COMPANY_SEARCH_MAX_OFFSET,
|
|
COMPANY_SEARCH_MAX_QUERY_LENGTH,
|
|
COMPANY_SEARCH_MAX_TOKENS,
|
|
companySearchQuerySchema,
|
|
companySearchExtractQuerySchema,
|
|
type CompanySearchExtractQuery,
|
|
type CompanySearchQuery,
|
|
} from "./search.js";
|
|
|
|
export {
|
|
createIssueTreeHoldSchema,
|
|
issueTreeControlModeSchema,
|
|
issueTreeHoldReleasePolicySchema,
|
|
previewIssueTreeControlSchema,
|
|
releaseIssueTreeHoldSchema,
|
|
type CreateIssueTreeHold,
|
|
type PreviewIssueTreeControl,
|
|
type ReleaseIssueTreeHold,
|
|
} from "./issue-tree-control.js";
|
|
|
|
export {
|
|
createIssueWorkProductSchema,
|
|
issueWorkProductMetadataSchema,
|
|
updateIssueWorkProductSchema,
|
|
attachmentArtifactWorkProductMetadataSchema,
|
|
issueWorkProductTypeSchema,
|
|
issueWorkProductStatusSchema,
|
|
issueWorkProductReviewStateSchema,
|
|
type CreateIssueWorkProduct,
|
|
type IssueWorkProductMetadata,
|
|
type UpdateIssueWorkProduct,
|
|
} from "./work-product.js";
|
|
|
|
export {
|
|
COMPANY_ARTIFACTS_DEFAULT_LIMIT,
|
|
COMPANY_ARTIFACTS_MAX_LIMIT,
|
|
COMPANY_ARTIFACTS_MAX_QUERY_LENGTH,
|
|
companyArtifactGroupBySchema,
|
|
companyArtifactGroupSchema,
|
|
companyArtifactMediaKindSchema,
|
|
companyArtifactSchema,
|
|
companyArtifactSourceSchema,
|
|
companyArtifactsQuerySchema,
|
|
companyArtifactsResponseSchema,
|
|
type CompanyArtifactsQuery,
|
|
} from "./artifact.js";
|
|
|
|
export {
|
|
executionWorkspaceConfigSchema,
|
|
reconcileExecutionWorkspaceBranchSchema,
|
|
updateExecutionWorkspaceSchema,
|
|
workspaceOverviewQuerySchema,
|
|
executionWorkspaceDeliveryStateSchema,
|
|
executionWorkspaceStatusSchema,
|
|
executionWorkspaceCloseActionKindSchema,
|
|
executionWorkspaceCloseActionSchema,
|
|
executionWorkspaceCloseGitReadinessSchema,
|
|
executionWorkspaceCloseLinkedIssueSchema,
|
|
executionWorkspaceCloseReadinessSchema,
|
|
executionWorkspaceCloseReadinessStateSchema,
|
|
type ReconcileExecutionWorkspaceBranch,
|
|
type UpdateExecutionWorkspace,
|
|
type WorkspaceOverviewQuery,
|
|
} from "./execution-workspace.js";
|
|
|
|
export {
|
|
normalizedWorkspaceFileAvailabilityQuerySchema,
|
|
resolvedWorkspaceResourceSchema,
|
|
workspaceFileAvailabilityRequestSchema,
|
|
workspaceFileAvailabilityResponseSchema,
|
|
workspaceFileAvailabilityResultSchema,
|
|
workspaceFileListModeSchema,
|
|
workspaceFileListQuerySchema,
|
|
workspaceFileContentSchema,
|
|
workspaceFilePreviewKindSchema,
|
|
workspaceFileRefSchema,
|
|
workspaceFileResourceKindSchema,
|
|
workspaceFileResourceQuerySchema,
|
|
workspaceFileSelectorSchema,
|
|
workspaceFileWorkspaceKindSchema,
|
|
type WorkspaceFileAvailabilityRequestInput,
|
|
type WorkspaceFileListQuery,
|
|
type WorkspaceFileResourceQuery,
|
|
} from "./workspace-file-resource.js";
|
|
|
|
export {
|
|
createGoalSchema,
|
|
updateGoalSchema,
|
|
type CreateGoal,
|
|
type UpdateGoal,
|
|
} from "./goal.js";
|
|
|
|
export {
|
|
applyOnboardingSeedSchema,
|
|
type ApplyOnboardingSeed,
|
|
} from "./onboarding-seed.js";
|
|
|
|
export {
|
|
createApprovalSchema,
|
|
resolveApprovalSchema,
|
|
requestApprovalRevisionSchema,
|
|
resubmitApprovalSchema,
|
|
addApprovalCommentSchema,
|
|
type CreateApproval,
|
|
type ResolveApproval,
|
|
type RequestApprovalRevision,
|
|
type ResubmitApproval,
|
|
type AddApprovalComment,
|
|
} from "./approval.js";
|
|
|
|
export {
|
|
envBindingPlainSchema,
|
|
envBindingSecretRefSchema,
|
|
envBindingUserSecretRefSchema,
|
|
envBindingSchema,
|
|
envConfigSchema,
|
|
createSecretSchema,
|
|
createUserSecretDefinitionSchema,
|
|
updateUserSecretDefinitionSchema,
|
|
createUserSecretValueSchema,
|
|
updateUserSecretValueSchema,
|
|
rotateUserSecretValueSchema,
|
|
createUserSecretDeclarationSchema,
|
|
createSecretProviderConfigSchema,
|
|
updateSecretProviderConfigSchema,
|
|
secretProviderConfigDiscoveryPreviewSchema,
|
|
remoteSecretImportPreviewSchema,
|
|
remoteSecretImportSchema,
|
|
remoteSecretImportSelectionSchema,
|
|
localEncryptedProviderConfigSchema,
|
|
awsSecretsManagerProviderConfigSchema,
|
|
gcpSecretManagerProviderConfigSchema,
|
|
vaultProviderConfigSchema,
|
|
secretProviderConfigPayloadSchema,
|
|
createSecretBindingSchema,
|
|
rotateSecretSchema,
|
|
secretBindingTargetSchema,
|
|
updateSecretSchema,
|
|
type CreateSecretBinding,
|
|
type CreateSecret,
|
|
type CreateUserSecretDefinition,
|
|
type UpdateUserSecretDefinition,
|
|
type CreateUserSecretValue,
|
|
type UpdateUserSecretValue,
|
|
type CreateUserSecretDeclaration,
|
|
type CreateSecretProviderConfig,
|
|
type UpdateSecretProviderConfig,
|
|
type SecretProviderConfigDiscoveryPreview,
|
|
type RemoteSecretImportPreview,
|
|
type RemoteSecretImport,
|
|
type RemoteSecretImportSelection,
|
|
type RotateSecret,
|
|
type UpdateSecret,
|
|
} from "./secret.js";
|
|
|
|
export {
|
|
createRoutineSchema,
|
|
updateRoutineSchema,
|
|
createRoutineTriggerSchema,
|
|
updateRoutineTriggerSchema,
|
|
routineVariableSchema,
|
|
routineRevisionSnapshotRoutineV1Schema,
|
|
routineRevisionSnapshotTriggerV1Schema,
|
|
routineRevisionSnapshotV1Schema,
|
|
routineRevisionSnapshotSchema,
|
|
runRoutineSchema,
|
|
rotateRoutineTriggerSecretSchema,
|
|
type CreateRoutine,
|
|
type UpdateRoutine,
|
|
type CreateRoutineTrigger,
|
|
type UpdateRoutineTrigger,
|
|
type RunRoutine,
|
|
type RotateRoutineTriggerSecret,
|
|
} from "./routine.js";
|
|
|
|
export {
|
|
createCostEventSchema, createServiceCostEventSchema,
|
|
updateBudgetSchema,
|
|
type CreateCostEvent,
|
|
type UpdateBudget,
|
|
} from "./cost.js";
|
|
|
|
export {
|
|
createFinanceEventSchema,
|
|
type CreateFinanceEvent,
|
|
} from "./finance.js";
|
|
|
|
export {
|
|
ASSET_NAMESPACE_MAX_LENGTH,
|
|
ASSET_NAMESPACE_RULE,
|
|
createAssetImageMetadataSchema,
|
|
sanitizeAssetNamespace,
|
|
type CreateAssetImageMetadata,
|
|
} from "./asset.js";
|
|
|
|
|
|
export {
|
|
createCompanyInviteSchema,
|
|
createOpenClawInvitePromptSchema,
|
|
acceptInviteSchema,
|
|
listCompanyInvitesQuerySchema,
|
|
listJoinRequestsQuerySchema,
|
|
claimJoinRequestApiKeySchema,
|
|
boardCliAuthAccessLevelSchema,
|
|
createCliAuthChallengeSchema,
|
|
resolveCliAuthChallengeSchema,
|
|
createBoardApiKeySchema,
|
|
currentUserProfileSchema,
|
|
authSessionSchema,
|
|
updateCurrentUserProfileSchema,
|
|
updateCompanyMemberSchema,
|
|
updateCompanyMemberWithPermissionsSchema,
|
|
archiveCompanyMemberSchema,
|
|
updateMemberPermissionsSchema,
|
|
searchAdminUsersQuerySchema,
|
|
updateUserCompanyAccessSchema,
|
|
type CreateCompanyInvite,
|
|
type CreateOpenClawInvitePrompt,
|
|
type AcceptInvite,
|
|
type ListCompanyInvitesQuery,
|
|
type ListJoinRequestsQuery,
|
|
type ClaimJoinRequestApiKey,
|
|
type BoardCliAuthAccessLevel,
|
|
type CreateCliAuthChallenge,
|
|
type ResolveCliAuthChallenge,
|
|
type CreateBoardApiKey,
|
|
type CurrentUserProfile,
|
|
type AuthSession,
|
|
type UpdateCurrentUserProfile,
|
|
type UpdateCompanyMember,
|
|
type UpdateCompanyMemberWithPermissions,
|
|
type ArchiveCompanyMember,
|
|
type UpdateMemberPermissions,
|
|
type SearchAdminUsersQuery,
|
|
type UpdateUserCompanyAccess,
|
|
} from "./access.js";
|
|
|
|
export {
|
|
jsonSchemaSchema,
|
|
pluginJobDeclarationSchema,
|
|
pluginWebhookDeclarationSchema,
|
|
pluginToolDeclarationSchema,
|
|
pluginEnvironmentDriverDeclarationSchema,
|
|
sandboxProviderCapabilitiesSchema,
|
|
pluginUiSlotDeclarationSchema,
|
|
pluginLauncherActionDeclarationSchema,
|
|
pluginLauncherRenderDeclarationSchema,
|
|
pluginLauncherDeclarationSchema,
|
|
pluginDatabaseDeclarationSchema,
|
|
pluginManagedSkillFileDeclarationSchema,
|
|
pluginManagedSkillDeclarationSchema,
|
|
pluginApiRouteDeclarationSchema,
|
|
pluginManifestV1Schema,
|
|
installPluginSchema,
|
|
upsertPluginConfigSchema,
|
|
patchPluginConfigSchema,
|
|
updatePluginStatusSchema,
|
|
uninstallPluginSchema,
|
|
pluginStateScopeKeySchema,
|
|
setPluginStateSchema,
|
|
listPluginStateSchema,
|
|
type PluginJobDeclarationInput,
|
|
type PluginWebhookDeclarationInput,
|
|
type PluginToolDeclarationInput,
|
|
type PluginEnvironmentDriverDeclarationInput,
|
|
type SandboxProviderCapabilitiesInput,
|
|
type PluginUiSlotDeclarationInput,
|
|
type PluginLauncherActionDeclarationInput,
|
|
type PluginLauncherRenderDeclarationInput,
|
|
type PluginLauncherDeclarationInput,
|
|
type PluginDatabaseDeclarationInput,
|
|
type PluginManagedSkillFileDeclarationInput,
|
|
type PluginManagedSkillDeclarationInput,
|
|
type PluginApiRouteDeclarationInput,
|
|
type PluginManifestV1Input,
|
|
type InstallPlugin,
|
|
type UpsertPluginConfig,
|
|
type PatchPluginConfig,
|
|
type UpdatePluginStatus,
|
|
type UninstallPlugin,
|
|
type PluginStateScopeKey,
|
|
type SetPluginState,
|
|
type ListPluginState,
|
|
} from "./plugin.js";
|
|
|
|
export {
|
|
createToolActionRequestSchema,
|
|
toolApplicationTypeSchema,
|
|
toolApplicationStatusSchema,
|
|
toolAuditEventTypeSchema,
|
|
toolAuditOutcomeSchema,
|
|
toolCatalogEntryKindSchema,
|
|
toolCatalogEntryStatusSchema,
|
|
toolConnectionHealthStatusSchema,
|
|
toolConnectionKindSchema,
|
|
toolConnectionStatusSchema,
|
|
toolConnectionPurposeSchema,
|
|
toolConnectionTransportSchema,
|
|
toolCredentialSecretRefSchema,
|
|
toolCredentialPlacementSchema,
|
|
toolInvocationApprovalStateSchema,
|
|
toolInvocationStatusSchema,
|
|
toolMcpGatewayAuthConfigSchema,
|
|
toolMcpGatewayContextScopeTypeSchema,
|
|
toolMcpGatewayDefaultProfileModeSchema,
|
|
toolMcpGatewayHeaderPolicySchema,
|
|
toolMcpGatewayMetadataPolicySchema,
|
|
toolMcpGatewayOnDemandToolsConfigSchema,
|
|
toolMcpGatewayStatusSchema,
|
|
toolMcpGatewayTokenActionSchema,
|
|
toolMcpGatewayTokenSubjectTypeSchema,
|
|
toolPolicyDecisionSchema,
|
|
toolPolicyTypeSchema,
|
|
toolProfileBindingTargetTypeSchema,
|
|
toolProfileDefaultActionSchema,
|
|
toolProfileEntryEffectSchema,
|
|
toolProfileEntrySelectorTypeSchema,
|
|
toolProfileStatusSchema,
|
|
toolRateLimitWindowKindSchema,
|
|
toolRedactedValueSummarySchema,
|
|
toolRiskLevelSchema,
|
|
toolRuntimeKindSchema,
|
|
toolRuntimeSlotStatusSchema,
|
|
toolTransportConfigSchema,
|
|
toolAccessSelectorSchema,
|
|
toolPolicyConditionsSchema,
|
|
toolRateLimitRuleSchema,
|
|
toolTrustRuleArgumentFiltersSchema,
|
|
toolTrustRuleBatchApprovalSchema,
|
|
toolTrustRuleScopeSchema,
|
|
toolConnectionTestCallSchema,
|
|
connectionTokenIssuancePathSchema,
|
|
connectionTokenRequestSchema,
|
|
connectionTokenScopeSchema,
|
|
connectionTokenSubjectSchema,
|
|
startConnectionAuthorizationSchema,
|
|
createConnectionGrantDelegationSchema,
|
|
replaceConnectionGrantMembersSchema,
|
|
createToolTrustRuleFromActionRequestSchema,
|
|
revokeToolTrustRuleSchema,
|
|
toolPolicyTestRequestSchema,
|
|
importMcpJsonSchema,
|
|
mcpConnectionCredentialRefSchema,
|
|
createToolApplicationSchema,
|
|
connectToolAppSchema,
|
|
GENERIC_MCP_AUTH_MODES,
|
|
genericMcpAuthModeSchema,
|
|
genericMcpOAuthClientSchema,
|
|
type GenericMcpAuthMode,
|
|
type GenericMcpOAuthClient,
|
|
reconnectToolAppSchema,
|
|
finishToolAppSchema,
|
|
finalizeOAuthAccessSchema,
|
|
startToolOAuthSchema,
|
|
updateToolApplicationSchema,
|
|
createToolConnectionSchema,
|
|
createToolMcpGatewaySchema,
|
|
createToolMcpGatewayTokenSchema,
|
|
createToolStdioCommandTemplateSchema,
|
|
disableToolStdioCommandTemplateSchema,
|
|
updateToolConnectionSchema,
|
|
putToolConnectionInstallsSchema,
|
|
updateToolMcpGatewaySchema,
|
|
createToolInvocationSchema,
|
|
createToolPolicySchema,
|
|
createToolProfileBindingForProfileSchema,
|
|
createToolProfileBindingSchema,
|
|
createToolProfileEntryForProfileSchema,
|
|
createToolProfileEntrySchema,
|
|
createToolProfileSchema,
|
|
createToolProfileWithEntriesSchema,
|
|
deleteToolProfileSchema,
|
|
duplicateToolPolicySchema,
|
|
duplicateToolProfileSchema,
|
|
reorderToolPoliciesSchema,
|
|
reviewToolProfileNewToolsSchema,
|
|
unbindToolProfileBindingSchema,
|
|
updateToolPolicySchema,
|
|
updateToolProfileEntrySchema,
|
|
updateToolProfileSchema,
|
|
updateToolProfileWithEntriesSchema,
|
|
upsertToolCatalogEntrySchema,
|
|
type CreateToolActionRequest,
|
|
type ConnectToolApp,
|
|
type ReconnectToolApp,
|
|
type CreateToolApplication,
|
|
type FinishToolApp,
|
|
type FinalizeOAuthAccess,
|
|
type StartToolOAuth,
|
|
type UpdateToolApplication,
|
|
type CreateToolConnection,
|
|
type CreateToolMcpGateway,
|
|
type CreateToolMcpGatewayToken,
|
|
type CreateToolStdioCommandTemplate,
|
|
type DisableToolStdioCommandTemplate,
|
|
type UpdateToolConnection,
|
|
type PutToolConnectionInstalls,
|
|
type UpdateToolMcpGateway,
|
|
type CreateToolInvocation,
|
|
type CreateToolPolicy,
|
|
type CreateToolProfile,
|
|
type CreateToolProfileBinding,
|
|
type CreateToolProfileBindingForProfile,
|
|
type CreateToolProfileEntry,
|
|
type CreateToolProfileEntryForProfile,
|
|
type CreateToolProfileWithEntries,
|
|
type DeleteToolProfile,
|
|
type DuplicateToolPolicy,
|
|
type DuplicateToolProfile,
|
|
type ImportMcpJson,
|
|
type ReviewToolProfileNewTools,
|
|
type ReorderToolPolicies,
|
|
type UpdateToolPolicy,
|
|
type UpdateToolProfileEntry,
|
|
type UpdateToolProfile,
|
|
type UpdateToolProfileWithEntries,
|
|
type UnbindToolProfileBinding,
|
|
type UpsertToolCatalogEntry,
|
|
type ConnectionTokenRequestInput,
|
|
type CreateConnectionGrantDelegation,
|
|
type ReplaceConnectionGrantMembersInput,
|
|
type ToolPolicyTestRequestInput,
|
|
type CreateToolTrustRuleFromActionRequest,
|
|
type RevokeToolTrustRule,
|
|
} from "./tool-access.js";
|
|
export * from "./skill-policy.js";
|
|
export * from "./provider-trace.js";
|
|
export * from "./app-definition.js";
|
|
export * from "./chat-channels.js";
|
|
export * from "./chat-github.js";
|
|
|
|
export * from "./email.js";
|
|
|
|
export { restoreAgentInstructionSchema } from "./agent.js";
|
|
|
|
export * from "./skill-source.js";
|
|
export * from "./agent-commentary.js";
|
|
export * from "./task-workspace.js";
|
|
export * from "./workspace-repository.js";
|