paperclip/server
HKTITAN 717cc0f076 fix(server): allow board members the null-mapped visibility actions agents already get
permissionForAction() intentionally returns null for agent:read,
company_scope:read, issue:read, project:read, runtime:manage and
secrets:read (no explicit grant required), but the board-actor path's
!permissionKey guard denied them all with deny_unsupported_action before
any membership evaluation — board users with active company membership
saw no agents on the Dashboard (filterAgentsForActor dropped every row).

Mirror the agent actor path: board users with an active company
membership are allowed exactly those six actions
(allow_simple_company_member); without a membership they get
deny_missing_membership. agent:wake and issue:mutate keep falling
through to deny_unsupported_action — neither has a board analog today.

Fixes #7890

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-10 22:18:37 +05:30
..
scripts fix(server): use stable tsx/cli entry point in dev-watch 2026-03-28 06:42:03 +07:00
src fix(server): allow board members the null-mapped visibility actions agents already get 2026-06-10 22:18:37 +05:30
CHANGELOG.md chore: release v0.3.1 2026-03-12 13:09:22 -05:00
package.json refactor(deps-dev): bump vitest from 3.2.4 to 4.1.8 (#7581) 2026-06-05 21:11:32 -07:00
tsconfig.json Fix root TypeScript solution config 2026-03-09 14:09:30 -05:00
vitest.config.ts refactor(deps-dev): bump vitest from 3.2.4 to 4.1.8 (#7581) 2026-06-05 21:11:32 -07:00