Devin FoleyandPaperclip 2a4a001d37 Preserve GitHub access repair guidance for MCP callers (#19655) ...

Return GitHub permission denials as failed MCP tool results with trusted,
connection-specific recovery guidance. Explain the personal-account and
organization App installation boundary without replaying writes or bypassing
provider-content checks. Align the repair steps with the Permissions UI.

Cover enabled model checks and malicious provider failures across direct
calls, connection tests and stored approvals. Repair the CI-exposed synthetic
onboarding environment fixture without weakening cancellation assertions.

Verified 311 targeted tests, six onboarding Playwright tests, server
typecheck, module boundaries, full CI and Apex 5/5 with all threads resolved.

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-11-06 16:32:27 -08:00

..

architecture

fix(runner): explain ACPX session-start failures and name typed causes (#18847)

2026-11-03 13:24:36 -08:00

assets

…

benchmarks

perf(recovery): project current wait facts during action reconciliation (#18793)

2026-11-03 10:13:03 -06:00

connections

Preserve GitHub access repair guidance for MCP callers (#19655)

2026-11-06 16:32:27 -08:00

design

Draft: Build agent-ready design proposal system (#16875)

2026-10-19 17:45:26 -07:00

experimental

…

logs

…

performance

perf(chat): reuse bound-run authorization query templates (#18966)

2026-11-04 08:32:31 -06:00

plans

Prepare online ephemeral enrollment through signed Cloud control (#19660)

2026-11-06 18:00:28 -06:00

plugins

Add gated release/resume methods to plugin Runner owners (#19584)

2026-11-06 11:42:32 -08:00

pr/5429

…

screenshots

…

spec

…

testing

…

acp-run-lifecycle.md

…

adapter-model-audit-2026-09-22.md

…

adapter-model-audit-2026-10-02.md

…

adapter-model-audit-2026-10-23.md

feat(adapters): refresh model catalogs and sandbox CLI pins (Oct 23 audit) (#17809)

2026-10-26 16:32:13 -07:00

AGENT-ARTIFACTS.md

Require publication for explicit JSON file outputs (#18228)

2026-10-29 19:17:46 -05:00

agent-commentary.md

fix: give commentary its own default read permission (#16903)

2026-10-19 16:58:17 -05:00

agent-configuration-yaml.md

fix: keep agent YAML compact and preserve omitted settings (#18168)

2026-10-29 11:17:17 -05:00

agent-files.md

fix(storage): preserve agent and skill files during online conversion (#19656)

2026-11-06 17:31:04 -06:00

AGENT-IDENTITY.md

fix(codex): deliver configured service secrets to shell tools (#17216)

2026-10-22 18:17:34 -05:00

agent-instruction-revisions.md

…

AGENT-LIFECYCLE.md

fix(agents): select environment plugins only for agents on that environment (#19173)

2026-11-04 20:59:02 -08:00

agent-observability.md

fix(opencode): export bounded tool argument diagnostics (#18699)

2026-11-06 11:01:25 -06:00

agent-permission-defaults.md

feat(auth): add independent agent configuration read permission (#18766)

2026-11-03 07:26:27 -06:00

agent-personas.md

…

AGENTCOMPANIES_SPEC_INVENTORY.md

…

ANNOUNCEMENTS.md

…

CHANNELS.md

…

chat-milestone-query-performance.md

perf(server): prefilter chat milestone run candidates (#17892)

2026-10-27 11:22:25 -05:00

ci-profiling.md

fix(ci): keep CODEOWNER PRs on AWS as master advances (#18821)

2026-11-03 12:47:16 -06:00

CLI.md

Harden Board CLI approval and native verification fixtures (#16482)

2026-10-17 23:22:57 -05:00

CLIPHUB.md

…

cloud-build-readiness.md

perf(ci): admit release candidates and isolate native image capacity (#18869)

2026-11-03 18:01:07 -06:00

cloud-configuration-migration.md

fix(cloud): persist configuration and load release-image packages (#18335)

2026-10-30 19:21:33 +00:00

cloud-membership-sync-performance.md

fix(server): coalesce Cloud membership synchronization writes (#17890)

2026-10-27 11:21:44 -05:00

cloud-runtime-configuration.md

fix(config): require shared storage for managed cloud (#18350)

2026-10-30 16:21:46 -05:00

cloud-ui-snippet.md

…

company-chat-deletion.md

fix(server): remove chat endpoints before company agents (#17561)

2026-10-27 23:06:31 -05:00

composer-stop.md

fix(tree-control): resume work a subtree pause interrupted (#19394)

2026-11-05 22:08:01 -06:00

connection-intents.md

fix(connections): keep agent access consistent through setup and permission changes (#19352)

2026-11-05 17:38:32 -08:00

connection-review-counts.md

perf(apps): scope sidebar review counts to one connection (#18688)

2026-11-02 17:12:22 -06:00

CUSTOMER-SUCCESS-INSPECTION.md

…

DATABASE.md

fix(tree-control): resume work a pause gate refused after release (#19421)

2026-11-06 03:03:15 -06:00

decision-models.md

refactor(accounting): remove company serialization from paid settlement (#18917)

2026-11-04 07:29:28 -06:00

dependency-wake-recovery.md

fix(heartbeat): recover deferred dependency completion wakes (#19457)

2026-11-06 11:49:38 -06:00

DEPLOYMENT-MODES.md

fix(auth): let Cloud stack admins manage experimental settings (#16907)

2026-10-19 21:48:00 -05:00

DEVELOPING.md

fix(ui): contain patch previews and highlight diff source (#19478)

2026-11-07 00:06:50 +00:00

DOCKER.md

feat(connections): deploy and configure Supabase and Vercel (#17217)

2026-10-23 11:37:29 -07:00

dot-runner-prototype.md

…

evals.md

feat(evals): run the staging-soak reliability cases from a TestOps plan (#19549)

2026-11-06 14:19:58 -06:00

execution-github-identity.md

fix(runner): preserve native Claude GitHub broker transport (#18850)

2026-11-03 13:15:01 -08:00

execution-semantics.md

fix(native): do not spend a recovery attempt resuming a cleanly drained run (#19625)

2026-11-06 18:12:12 -06:00

fast-responses.md

refactor(accounting): remove company serialization from paid settlement (#18917)

2026-11-04 07:29:28 -06:00

GOAL.md

…

grok-bot-agent.md

docs(grok): record production qualification and Cloud setup (#16722)

2026-10-18 07:15:53 -05:00

grok-native-runner.md

fix(runner): attest upstream releases and bind ACPX uniformly for every harness (#18325)

2026-10-30 09:10:50 -07:00

HERMES_GATEWAY_ONBOARDING.md

…

HERMES_GATEWAY_SMOKE.md

…

html-artifact-previews.md

…

idle-agent-timers.md

perf: schedule agent timers from durable deadlines (#17876)

2026-10-29 08:58:27 -05:00

idle-approval-queue-seeding.md

fix(server): wake approval queue seeding from committed changes (#17510)

2026-10-27 20:33:01 -05:00

idle-approval-retention.md

fix(server): schedule approval retention from durable deadlines (#17497)

2026-10-27 19:23:24 -05:00

idle-approved-tool-recovery.md

fix(server): recover approved tool actions from committed changes (#17454)

2026-10-27 16:10:44 -05:00

idle-decision-archive-delivery.md

fix(server): wake archive notification delivery from committed changes (#17475)

2026-10-27 17:26:54 -05:00

idle-decision-continuations.md

fix(server): wake decision continuations from committed changes (#17478)

2026-10-27 17:44:51 -05:00

idle-decision-effect-recovery.md

fix(server): recover decision effects from saved claim deadlines (#17482)

2026-10-27 18:24:55 -05:00

idle-decision-expiry.md

fix(server): schedule decision TTL expiry from saved deadlines (#17479)

2026-10-27 18:10:36 -05:00

idle-decision-targets.md

fix(server): wake decision target checks from committed changes (#17486)

2026-10-27 18:53:50 -05:00

idle-discord-command-registration.md

fix(chat): retain receiver ownership during runtime construction (#18930)

2026-11-03 22:57:39 -06:00

idle-domain-deadlines.md

Preserve domain deadlines across owned idle sleep (#18656)

2026-11-03 15:40:56 -06:00

idle-environment-cleanup.md

fix(environments): persist sandbox ownership before creation (#18357)

2026-10-30 17:38:23 -05:00

idle-execution-control.md

fix(native): release a session-resume owner when the resumed run fails before its provider claim (#19371)

2026-11-06 07:19:09 -08:00

idle-gateway-credential-expiry.md

fix(server): schedule gateway credential expiry from committed changes (#17450)

2026-10-27 14:58:11 -05:00

idle-grok-dispatch.md

fix(server): wake Grok dispatch from committed reservations (#17490)

2026-10-27 19:07:53 -05:00

idle-incoming-wake.md

feat(server): bind idle credential eligibility to incoming wake proof (#18639)

2026-11-03 14:30:07 -06:00

idle-interrupted-tool-recovery.md

fix(server): schedule interrupted tool claims by their deadlines (#17458)

2026-10-27 16:33:30 -05:00

idle-issue-monitors.md

fix(ui): explain monitor waits during active runs (#19519)

2026-11-06 16:16:58 -06:00

idle-join-request-retention.md

fix(server): schedule join request retention from durable deadlines (#17508)

2026-10-27 20:03:16 -05:00

idle-login-cleanup.md

fix(server): schedule custom-image setup expiry from committed changes (#17443)

2026-10-27 14:17:01 -05:00

idle-native-status-reassessment.md

fix(server): wake native status reassessment from committed changes (#17709)

2026-10-29 03:40:01 -05:00

idle-plugin-jobs.md

fix(server): schedule plugin jobs from saved deadlines (#17518)

2026-10-27 21:07:10 -05:00

idle-secret-proposal-expiry.md

fix(server): schedule secret-proposal expiry from committed changes (#17446)

2026-10-27 14:36:28 -05:00

idle-sleep-safety.md

fix(server): certify background deadlines for idle tenants (#19001)

2026-11-06 13:48:55 -06:00

idle-teams-attempt-recovery.md

fix(server): recover Teams attempts from saved claim deadlines (#17592)

2026-10-28 10:51:16 -05:00

idle-teams-consent-expiry.md

fix(server): schedule Teams consent expiry from saved deadlines (#17590)

2026-10-28 10:32:30 -05:00

idle-terminal-workspace-pagination.md

fix(server): preserve terminal workspace cursors and retry deadlines (#17505)

2026-10-27 19:42:58 -05:00

idle-tool-connection-health.md

fix(server): schedule tool health from committed changes and deadlines (#17554)

2026-10-27 21:37:50 -05:00

idle-tool-review-expiry.md

fix(server): schedule pending tool-review expiry from committed changes (#17453)

2026-10-27 15:26:19 -05:00

idle-tool-review-projection.md

fix(server): wake tool-review card repair from committed changes (#17468)

2026-10-27 17:09:31 -05:00

idle-voice-call-reports.md

fix(server): schedule voice call reports from saved deadlines (#17586)

2026-10-28 09:41:15 -05:00

idle-voice-inbound-cleanup.md

fix(server): schedule inbound voice cleanup from durable obligations (#17580)

2026-10-28 08:30:15 -05:00

idle-voice-inbound-retention.md

fix(server): schedule inbound voice history retention by deadline (#17583)

2026-10-28 08:57:58 -05:00

idle-voice-reply-delivery.md

fix(server): deliver voice replies from commits and saved deadlines (#17578)

2026-10-28 07:50:27 -05:00

idle-voice-session-recovery.md

fix(server): schedule live voice recovery from session changes and deadlines (#17576)

2026-10-28 07:38:48 -05:00

INSTALLING.md

…

ISSUE-PRIVACY.md

…

live-transcript-delivery.md

feat(live): deliver recoverable transcripts to interested views (#17456)

2026-10-27 22:23:30 -05:00

LOW-TRUST-PRESETS.md

fix(sentry): keep low-trust project denials on the task (#19531)

2026-11-06 12:04:51 -08:00

manual-e2e-private-evidence.md

fix(evals): let an allowlisted manual dispatch authorize its private evidence (#19599)

2026-11-06 14:26:31 -06:00

MCP-ACCESS-GOVERNANCE.md

fix(runner): page oversized assigned tool results (#16980)

2026-10-20 11:52:59 -05:00

MCP-DEMO-SCRIPT.md

…

mcp-discovery-performance.md

refactor(perf): reuse database test setup for profile benchmark (#18683)

2026-11-02 16:50:58 -06:00

MCP-RUNTIME-OPERATIONS.md

feat(connections): deploy and configure Supabase and Vercel (#17217)

2026-10-23 11:37:29 -07:00

memory-landscape.md

…

muse-personal-agent.md

Add personal Muse operator setup and composer controls (#16450)

2026-10-17 23:01:42 -05:00

native-workspace-finalization-recovery.md

fix(server): stop a queued answer from blocking saved-work recovery (#19318)

2026-11-05 11:45:16 -08:00

observability.md

fix: preserve ordinary diagnostic text during environment secret redaction (#19461)

2026-11-06 09:01:55 -06:00

openai-dot-runner.md

…

OPENCLAW_ONBOARDING.md

…

opencode-cold-recovery.md

fix(runner): retain qualified OpenCode artifacts for cold recovery (#19622)

2026-11-06 17:30:00 -06:00

PR-MERGE-REVIEW-WEBHOOK.md

feat(ci): request advisory merge review after PR verification (#19480)

2026-11-06 15:25:57 -06:00

preview-release-artifacts.md

…

PRODUCT.md

fix: reserve agent In Progress display for active runs (#19453)

2026-11-06 07:59:38 -06:00

project-repositories.md

fix(workspaces): classify restricted shared repository admission (#16895)

2026-10-19 16:03:16 -05:00

prompt-injection-prevention.md

refactor(accounting): remove company serialization from paid settlement (#18917)

2026-11-04 07:29:28 -06:00

public-mcp.md

…

PUBLISHING.md

…

README-draft.md

…

recoverable-disk-cleanup.md

Reject failover backups behind the accepted event cursor (#19613)

2026-11-06 13:55:43 -08:00

recovery-file-cutover.md

Add bounded recovery file inventory before server cutover (#18347)

2026-10-30 15:21:13 -05:00

RELEASE-AUTOMATION-SETUP.md

fix(ci): let the lockfile bot own the sandbox provider lockfiles (#19522)

2026-11-06 10:07:57 -08:00

RELEASE-CHECKLIST.md

…

RELEASE-NOTES-mcp-access-governance.md

…

RELEASING.md

Require published migrators before publishing Core images (#19023)

2026-11-04 11:51:42 -08:00

run-evidence-storage.md

fix(logs): drain existing admissions before finalization (#19055)

2026-11-04 16:34:36 -06:00

run-identity-reads.md

perf(server): scope run identity reads to operation needs (#17931)

2026-10-27 16:31:21 -05:00

run-log-events.md

fix(native): re-bootstrap a claimed Daytona run killed before runner launch (#19616)

2026-11-06 17:17:14 -06:00

runner-api-tools.md

fix(runner): install verified API artifacts in execution workspaces (#18494)

2026-11-02 08:27:09 -06:00

runner-created-skills.md

…

RUNNER-INTEGRATION-PLAYBOOK.md

Support per-turn Runner sessions on ephemeral web servers (#18932)

2026-11-04 02:12:51 -06:00

runner-integration-templates.md

docs: add native Runner integration playbook (#16846)

2026-10-19 08:50:44 -05:00

runner-launch-preparation.md

fix: allow managed Git helpers to select a private interpreter (#18337)

2026-10-30 09:29:51 -07:00

SEARCH.md

…

SECRETS-AWS-PROVIDER.md

…

skill-ephemeral-web-servers.md

Preserve admitted runtime skill bundles during server replacement (#19675)

2026-11-06 18:23:53 -06:00

skill-package-storage.md

feat(skills): make managed content independent of web-server disk (#18334)

2026-10-30 16:18:27 -05:00

sleep-qualification.md

test: verify sleep producer readiness and CI contracts (#18795)

2026-11-03 17:41:15 -06:00

SPEC-implementation.md

fix(accounting): close a remote run's lost receipt once its sandboxes are terminated (#19606)

2026-11-06 18:17:11 -06:00

SPEC.md

feat(ui): submit task composers with Enter by default (#19272)

2026-11-05 11:40:18 -06:00

standard-image-contract.md

…

STORYBOOK-DEPLOYMENT.md

…

task-recovery.md

fix(recovery): reclaim verified inactive provider caches on full disks (#19192)

2026-11-04 23:14:57 -08:00

TASK-WATCHDOG.md

fix(watchdogs): reject incomplete subtree scans (#15063)

2026-10-26 20:53:47 -07:00

TASKS-mcp.md

…

TASKS.md

…

TELEMETRY_WORKFLOW.md

…

testing-native-remote-continuity.md

fix(server): recognize recoverable result finalization during upgrades (#19651)

2026-11-06 17:30:28 -06:00

TOASTS.md

fix(ui): show task identifiers in activity toasts (#18802)

2026-11-03 13:28:15 -06:00

UNTRUSTED-PR-REVIEW.md

…

workspace-activity-query-performance.md

perf(server): decode workspace run context keys once (#17898)

2026-10-27 11:23:09 -05:00

workspace-restore-locks.md

fix(observability): report directory-merge lock holder diagnostics (#17755)

2026-11-05 16:48:46 -08:00