paperclip/server/src/services
santastabber 8774909361
fix(heartbeat): reuse sessions across execution handoffs (#9917)
## Thinking Path

> - Paperclip uses durable task sessions so local adapters can resume
work across sequential heartbeat runs.
> - `execution_review_requested` and `execution_changes_requested` are
issue-local execution-policy handoffs, not new task assignments.
> - The existing `agent_task_sessions` lookup, adapter session codec,
workspace resolution, and effective config freshness checks already
decide whether reuse is safe.
> - Treating those two handoff wake reasons as unconditional
fresh-session boundaries discards a valid saved task session before
adapter resume can be attempted.
> - This makes Dev → CodeReview → Dev loops repeatedly cold-start even
when task, issue, agent, adapter, workspace, and config identity are
unchanged.
> - The fix is to let normal review/change-request handoffs reach the
durable task-session path while preserving explicit fresh-session and
unsafe-boundary resets.

## Linked Issues or Issue Description

Fixes #8246.

cc @cryppadotta — this is the narrow handoff-session policy change
discussed there: normal `execution_review_requested` /
`execution_changes_requested` wakes no longer force a fresh task session
by wake reason alone, while assignment, approval, review-participant
recovery, timer wakes, explicit `forceFreshSession`, and
config/workspace/model/session freshness still keep their safety
boundaries.

## What Changed

- Removed normal `execution_review_requested` and
`execution_changes_requested` from the unconditional task-session reset
policy.
- Kept fresh-session boundaries for:
  - `issue_assigned`
  - `execution_approval_requested`
  - `execution_review_participant_recovery`
  - `heartbeat_timer`
  - explicit `forceFreshSession`
  - existing config/model/workspace/session freshness reset paths
- Updated heartbeat session-policy tests so execution handoffs are
resume-eligible by wake reason alone.
- Preserved PF-4 timer-wake behavior and its explicit reset reason.

## Verification

- `npx pnpm@9.15.4 exec vitest run
server/src/__tests__/heartbeat-workspace-session.test.ts
server/src/__tests__/heartbeat-timer-wake-session-reset-pf4.test.ts
server/src/__tests__/codex-local-execute.test.ts
server/src/__tests__/issue-comment-reopen-routes.test.ts
--reporter=verbose` — 220 tests passed.
- `npx pnpm@9.15.4 --filter @paperclipai/server typecheck` — passed.
- `git diff --check` — passed.
- `coderabbit review --agent -t committed --base origin/master` — 0
findings.

## Risks

- Moderate behavior change in session-boundary policy: normal
review/change-request handoffs may now reuse a saved per-task session
when the existing identity/freshness checks pass.
- Safety boundaries remain in place for new assignments, approval gates,
review-participant recovery, timer/discovery wakes, explicit
fresh-session requests, and config/model/workspace/session drift.
- If a saved session is stale or incompatible, existing freshness/resume
fallback behavior still handles reset/fresh execution.

> For core feature work, check ROADMAP.md first and discuss it in #dev
before opening the PR. Feature PRs that overlap with planned core work
may need to be redirected — check the roadmap first. See
CONTRIBUTING.md.

## Model Used

OpenAI GPT-5.5. Tool use and local verification were enabled.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links
- [x] My branch name describes the change and contains no internal
Paperclip ticket ID
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated relevant documentation to reflect my changes — N/A,
server policy/test-only change
- [x] I have considered and documented any risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I will address all Greptile and reviewer comments before
requesting merge

Co-authored-by: santastabber <184111696+santastabber@users.noreply.github.com>
2026-08-17 14:30:47 -07:00
..
recovery fix(recovery): skip successful-run handoff for recovery-action-driven runs (#9010) 2026-08-14 23:21:34 -05:00
runtime-exposure fix(runtime-exposure): mediate leased app/HMR port pairs centrally (#11526) 2026-08-17 06:47:55 -04:00
access.ts [codex] prevent invalid agents from receiving assignments and runs (#7663) 2026-06-06 12:45:57 -05:00
activity-log.ts feat(server): allow agents to resolve review confirmations (#10939) 2026-08-05 23:40:05 -05:00
activity.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
adapter-models-env.test.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
adapter-models-env.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
adapter-plugin-store.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
adapter-registry-bootstrap.reconcile.test.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
adapter-registry-bootstrap.test.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
adapter-registry-bootstrap.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
agent-action-audit.ts feat(activity): add two-tier all-actors audit feed (#10831) 2026-08-04 23:07:38 -05:00
agent-assignability.ts [codex] prevent invalid agents from receiving assignments and runs (#7663) 2026-06-06 12:45:57 -05:00
agent-instructions.ts
…
agent-invokability.ts fix(runtime): keep agent pause durable at execution-start (#8317) 2026-06-19 08:35:53 -07:00
agent-permissions.ts [codex] Gate skill mutations with skills:create permission (#8616) 2026-06-25 09:49:10 -05:00
agent-secret-bindings.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
agent-start-lock.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
agents.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
approvals.ts fix: prevent duplicate built-in agents and self-heal reconciliation (#10223) 2026-07-28 11:12:58 -07:00
assets.ts
…
attention-resolver-audience.test.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
attention.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
authorization.ts fix board key issue writes across assignees (#9025) 2026-08-13 10:14:05 -07:00
batch-insert.ts Harden company import: durable UI, async jobs, integrity guard, batched inserts (#10523) 2026-07-30 16:52:58 -07:00
board-auth.test.ts perf(server): reduce issue detail request overhead (#10414) 2026-08-11 14:39:23 -04:00
board-auth.ts perf(server): reduce issue detail request overhead (#10414) 2026-08-11 14:39:23 -04:00
budgets.ts [codex] Enforce backend execution release gates (#9089) 2026-07-06 16:33:36 -05:00
built-in-agent-metadata.ts [codex] Add built-in agents and Reflection Coach bundle (#9206) 2026-07-09 16:29:30 -05:00
built-in-agents.ts feat: make chat-style tasks the default experience (#11101) 2026-08-11 09:06:21 -07:00
bundled-plugins.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
catalog-provenance.ts [codex] Add skills CLI and catalog management (#6782) 2026-05-28 07:33:51 -10:00
change-consent-gate.ts [codex] Add built-in agents and Reflection Coach bundle (#9206) 2026-07-09 16:29:30 -05:00
cloud-instance.ts feat: make in-app features cloud-aware (#10850) 2026-08-04 23:00:14 -05:00
codex-auth-reconciliation.ts fix(codex-local): seed managed auth into isolated homes (#8403) 2026-06-20 16:17:54 -07:00
codex-device-login-reaper.ts Add sandbox device-login for the Codex adapter (#11237) 2026-08-12 08:58:25 -07:00
codex-device-login-service.ts Add sandbox device-login for the Codex adapter (#11237) 2026-08-12 08:58:25 -07:00
companies.ts fix(server): return 404 instead of 500 for non-UUID company refs (#9959) 2026-08-12 16:08:49 -07:00
company-artifacts.ts feat(server): add per-user document stars (#9952) 2026-07-27 19:13:35 -05:00
company-export-readme.ts fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400) 2026-08-14 22:11:16 -07:00
company-import-transfers.ts feat(server): chunked resumable company import transfers (#11223) 2026-08-11 15:25:07 -07:00
company-member-roles.ts [codex] Add built-in agents and Reflection Coach bundle (#9206) 2026-07-09 16:29:30 -05:00
company-portability.ts feat(server): preserve task timestamps and hierarchy through company import/export (#11193) 2026-08-10 17:01:33 -07:00
company-search-extract.ts fix(search): honor extract match limits + harden pr-gardening candidate discovery (#9652) 2026-07-15 21:44:21 -05:00
company-search-rate-limit.ts Add full company search page (#5293) 2026-05-06 06:32:37 -05:00
company-search.ts feat(search): add bulk extract endpoint (#9507) 2026-07-15 19:05:06 -05:00
company-skill-policy.ts feat(skills): open-by-default company skill policy and core UX (#9564) 2026-07-15 11:42:40 -05:00
company-skills.ts feat(skills): require explicit merge modes (#10978) 2026-08-07 00:42:08 -05:00
company-transfer-runs.ts feat(server): chunked resumable company import transfers (#11223) 2026-08-11 15:25:07 -07:00
costs.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
cron.ts
…
cross-issue-influence-limit.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
dashboard.ts perf(server): cut steady-state DB hot paths in dashboard, attention, and productivity sweeps (#10992) 2026-08-06 11:56:40 -05:00
database-backup-health.ts Fix DB backup health alerts (#9147) 2026-07-07 05:54:20 -05:00
decision-queues.ts feat(decisions): add desk workflow and retention (#10672) 2026-08-02 10:47:03 -05:00
decision-retention.ts feat(decisions): add desk workflow and retention (#10672) 2026-08-02 10:47:03 -05:00
decision-signing.ts fix(server): stop requiring PAPERCLIP_DECISION_SIGNING_SECRET at startup (#10594) 2026-07-31 22:48:32 -07:00
decision-training.ts feat: restore decision training library and inspector (#9779) 2026-07-17 13:27:32 -05:00
decision-wakeup.ts feat(decisions): add desk workflow and retention (#10672) 2026-08-02 10:47:03 -05:00
decisions.ts fix(decisions): retire completed-target decisions and link targets from the card (#10892) 2026-08-05 09:55:01 -05:00
default-agent-instructions.ts
…
document-annotations.ts Cases: experimental first-class case object (#9198) 2026-07-09 22:11:03 -05:00
documents.ts Harden company import: durable UI, async jobs, integrity guard, batched inserts (#10523) 2026-07-30 16:52:58 -07:00
effective-run-config-fingerprints.ts Refresh run config before reusing workspaces (#8797) 2026-06-30 14:50:25 -07:00
environment-config.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
environment-custom-image-runtime.ts fix(sandbox): keep custom-image snapshots applied to config tests, probes, and saves (#9385) 2026-07-10 14:32:47 -07:00
environment-custom-image-setup-session-utils.ts Add browser SSH terminal for custom image setup (#8911) 2026-07-03 16:44:21 -07:00
environment-custom-image-terminal-sessions.test.ts Add browser SSH terminal for custom image setup (#8911) 2026-07-03 16:44:21 -07:00
environment-custom-image-terminal-sessions.ts Add browser SSH terminal for custom image setup (#8911) 2026-07-03 16:44:21 -07:00
environment-custom-images.ts fix(sandbox): keep custom-image snapshots applied to config tests, probes, and saves (#9385) 2026-07-10 14:32:47 -07:00
environment-execution-target.ts feat(sandbox): stream session output by capability, drop three operator flags (#11557) 2026-08-17 13:25:30 -07:00
environment-probe.ts fix(sandbox): keep custom-image snapshots applied to config tests, probes, and saves (#9385) 2026-07-10 14:32:47 -07:00
environment-run-orchestrator.ts fix: ACP run lifecycle corrections — failure settlement, workspace sync-back, lease cleanup (#11454) 2026-08-15 18:52:08 -07:00
environment-runtime.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
environments.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
execution-allowlist.test.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
execution-allowlist.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
execution-policy-bootstrap.test.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
execution-policy-bootstrap.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
execution-workspace-policy.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
execution-workspaces.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
export-fidelity.ts Replace host-to-host Cloud Sync with full-fidelity company Import/Export (#10507) 2026-07-30 11:37:00 -07:00
external-objects.ts fix(external-objects): refresh PR status labels (#10704) 2026-08-02 20:24:52 -07:00
feedback-redaction.ts
…
feedback-share-client.ts
…
feedback.ts Redact deleted issue comments 2026-06-05 03:20:46 +00:00
finance.ts
…
folders.ts feat: organize skills with nested folders and My Skills (#9633) 2026-07-16 15:50:45 -05:00
git-credentials.ts fix(server): serialize managed-checkout materialization and stop misattributing clone failures (#10723) 2026-08-02 22:14:58 -07:00
github-external-object-provider.ts Recognize delivered workspaces and reap terminal worktrees (#10908) 2026-08-05 16:34:04 -05:00
github-fetch.ts feat(server): authenticate server-side git clone and fetch with a company-secret GitHub token (#10720) 2026-08-02 20:27:09 -07:00
github-pull-request-merge.ts Recognize delivered workspaces and reap terminal worktrees (#10908) 2026-08-05 16:34:04 -05:00
goals.ts
…
heartbeat-run-runtime-status.test.ts Improve live agent feedback during sandboxed runs (#8915) 2026-07-02 22:21:56 -07:00
heartbeat-run-runtime-status.ts Improve live agent feedback during sandboxed runs (#8915) 2026-07-02 22:21:56 -07:00
heartbeat-run-summary.ts fix(server): gate heartbeat-fallback comment to never publish raw transcript (#10143) 2026-08-12 16:43:13 -07:00
heartbeat-stop-metadata.test.ts fix: run restart recovery, workspace self-heal, quota-aware retries, failed-run metrics (#9183) 2026-07-07 20:30:09 -05:00
heartbeat-stop-metadata.ts Enforce durable external-wait liveness (#9373) 2026-07-10 13:21:12 -05:00
heartbeat.ts fix(heartbeat): reuse sessions across execution handoffs (#9917) 2026-08-17 14:30:47 -07:00
hire-hook.ts
…
hot-restart.test.ts fix(server): preserve hot restart intent across path upgrade (#10593) 2026-07-31 21:55:59 -07:00
hot-restart.ts fix(server): preserve hot-restart shutdown snapshots (#10815) 2026-08-04 11:44:43 -05:00
import-write-types.ts feat(server): preserve task timestamps and hierarchy through company import/export (#11193) 2026-08-10 17:01:33 -07:00
inbox-agent-policy.ts feat(inbox): let agents safely tidy user inboxes (#9724) 2026-07-16 16:49:18 -05:00
inbox-dismissals.ts feat: add attention queue and Decisions surface (#9380) 2026-07-10 17:09:57 -05:00
index.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
instance-settings.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
invite-grants.ts feat: implement multi-user access and invite flows (#3784) 2026-04-17 09:44:19 -05:00
invite-rate-limit.ts security(invites): widen invite-token entropy and rate-limit public invite endpoints (#8979) 2026-07-14 15:47:58 -07:00
issue-approvals.ts
…
issue-assignment-wakeup.ts feat: add built-in summarizer and summary slots (#9713) 2026-07-17 11:03:07 -05:00
issue-change-receipt.ts feat: add authoritative issue PATCH receipts (#10478) 2026-07-31 18:52:59 -07:00
issue-continuation-summary.ts fix: run restart recovery, workspace self-heal, quota-aware retries, failed-run metrics (#9183) 2026-07-07 20:30:09 -05:00
issue-dependency-wakeups.ts Add dependency wake reconciliation backstop (#8943) 2026-07-03 18:30:51 -07:00
issue-execution-policy.ts fix(server): let board users cancel issues with an active review stage (#10655) 2026-08-01 15:43:13 -07:00
issue-goal-fallback.ts
…
issue-liveness.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
issue-recovery-actions.ts Add execution workspace branch reconciliation route (#9170) 2026-07-07 13:41:23 -07:00
issue-references.ts Redact deleted issue comments 2026-06-05 03:20:46 +00:00
issue-review-policy.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
issue-rewake-throttle.ts feat(issues): contain cross-issue agent side effects (#10837) 2026-08-04 13:17:49 -05:00
issue-thread-interaction-resolution.test.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
issue-thread-interaction-resolution.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
issue-thread-interactions.test.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
issue-thread-interactions.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
issue-tree-control.ts feat: add built-in summarizer and summary slots (#9713) 2026-07-17 11:03:07 -05:00
issue-visibility.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
issues.ts fix(server): flag truncated issue descriptions (#4771) 2026-08-17 14:02:01 -07:00
json-schema-secret-refs.ts fix(server): accept secret_ref binding objects in sandbox provider environment config (#10355) 2026-07-28 10:50:13 -07:00
live-events.ts
…
local-service-supervisor.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
low-trust-runtime-containment.ts Add low-trust review containment (#7530) 2026-06-05 16:48:02 -05:00
managed-config.ts feat(server): computed owner instance-admin elevation for cloud-managed instances, behind platform floors (#10343) 2026-07-27 18:58:31 -07:00
managed-environments.test.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
managed-environments.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
managed-resource-drift.test.ts fix(server): preserve managed environment drift on boot (#10979) 2026-08-07 00:41:42 -05:00
managed-resource-drift.ts fix(server): preserve managed environment drift on boot (#10979) 2026-08-07 00:41:42 -05:00
mcp-http.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
onboarding-greeting.test.ts feat: make chat-style tasks the default experience (#11101) 2026-08-11 09:06:21 -07:00
onboarding-greeting.ts feat: make chat-style tasks the default experience (#11101) 2026-08-11 09:06:21 -07:00
onboarding-seed.ts feat(server): receive and apply the Paperclip Cloud onboarding seed (#11098) 2026-08-12 22:54:07 -07:00
pipeline-case-outputs.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
pipeline-conversation-context.ts Add pipeline workflow primitives and operator UI (#7903) 2026-06-26 12:02:44 -05:00
pipelines-aggregation.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
pipelines.ts feat(routines): expose activity gate API (#9438) 2026-07-24 16:47:24 -05:00
plan-review-context.ts feat(annotations): include issue document annotations in agent review context (#11332) 2026-08-13 14:23:09 -07:00
plugin-capability-validator.ts feat(plugin-sdk): interactions/approvals respond + attachment read capabilities for the chat gateway (#10066) 2026-07-22 21:30:34 -07:00
plugin-config-validator.ts
…
plugin-database.ts Fix LLM Wiki package and migration validation (#6010) 2026-05-15 10:20:02 -05:00
plugin-dev-watcher.ts [codex] Improve local plugin development workflow (#5821) 2026-05-12 17:38:24 -05:00
plugin-environment-driver.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
plugin-event-bus.ts
…
plugin-host-service-cleanup.ts
…
plugin-host-services.ts fix(issues): base comment-wake decisions on post-insert issue state (#10068) 2026-08-17 14:18:15 -07:00
plugin-install-guard.ts feat: make in-app features cloud-aware (#10850) 2026-08-04 23:00:14 -05:00
plugin-job-coordinator.ts
…
plugin-job-scheduler.ts
…
plugin-job-store.ts
…
plugin-lifecycle.ts [codex] Runtime control-plane fixes (#6380) 2026-05-20 10:37:11 -05:00
plugin-loader.ts fix: pass sandbox provider credential env vars to plugin workers; hide Local default under managed-sandbox-only (#11244) 2026-08-11 19:10:45 -07:00
plugin-local-folders.ts [codex] Roll up May 17 branch changes (#6210) 2026-05-17 17:15:06 -05:00
plugin-log-retention.ts
…
plugin-managed-agents.ts [codex] Add LLM Wiki plugin host support (#5597) 2026-05-10 07:34:12 -05:00
plugin-managed-routines.ts feat(routines): expose activity gate API (#9438) 2026-07-24 16:47:24 -05:00
plugin-managed-skills.ts [codex] Add LLM Wiki plugin host support (#5597) 2026-05-10 07:34:12 -05:00
plugin-manifest-validator.ts
…
plugin-registry.ts fix(plugin-sdk): thread companyId through configChanged + fail-closed cross-tenant guard (LOOA-687) (#10096) 2026-07-23 09:50:48 -07:00
plugin-runtime-sandbox.ts
…
plugin-secrets-handler.ts feat(mcp) [split 2/8]: add governed access contracts (#9557) 2026-07-14 12:57:20 -05:00
plugin-state-store.ts
…
plugin-stream-bus.ts
…
plugin-tool-dispatcher.ts fix(plugin-tool-dispatcher): propagate pluginDbId so worker.isRunning resolves (#5671) 2026-06-03 19:13:21 -07:00
plugin-tool-registry.ts fix(plugin-tool-dispatcher): propagate pluginDbId so worker.isRunning resolves (#5671) 2026-06-03 19:13:21 -07:00
plugin-worker-manager.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
portable-path.ts [codex] Add skills CLI and catalog management (#6782) 2026-05-28 07:33:51 -10:00
principal-access-compatibility.ts [codex] Add agent permissions and controls plan (#6386) 2026-05-22 08:12:52 -05:00
productivity-review.ts fix(server): keep imported tasks quiescent under the productivity review sweep (#11191) 2026-08-10 17:00:32 -07:00
project-workspace-runtime-config.ts [codex] Respect manual workspace runtime controls (#4125) 2026-04-20 10:39:37 -05:00
projects.ts Exclude archived projects from the default project list route (#10146) 2026-07-24 07:19:58 -07:00
quota-windows.ts
…
recovery-observability.ts feat: maintained in_review review-path contract + stalled-review actions (#10675) 2026-08-04 13:54:40 -05:00
remote-http-endpoint-guard.ts feat(connections): add v3 schema core (#9958) 2026-07-21 15:16:26 -05:00
resource-memberships.ts feat(server): add per-user document stars (#9952) 2026-07-27 19:13:35 -05:00
responsible-user-denial-run-outcomes.test.ts feat(secrets): add user-specific runtime secrets (#8825) 2026-07-05 05:58:20 -05:00
responsible-user-denial-run-outcomes.ts feat(secrets): add user-specific runtime secrets (#8825) 2026-07-05 05:58:20 -05:00
routable-blocked.ts Route blocked transitions to explicit unblock owners (#10112) 2026-07-23 15:49:28 -05:00
routines-formatter-cache.test.ts fix(server): cache Intl.DateTimeFormat per timezone in cron minute-stepper (#8033) (#8034) 2026-06-12 10:15:53 -07:00
routines.ts fix(routines): reject HMAC webhook replays (#9994) 2026-08-12 16:09:00 -07:00
run-continuations.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
run-liveness.ts Enforce durable external-wait liveness (#9373) 2026-07-10 13:21:12 -05:00
run-log-store.test.ts Add opt-in in-flight run-log mirroring with graceful-shutdown flush (#10512) 2026-07-30 14:01:02 -07:00
run-log-store.ts Add opt-in in-flight run-log mirroring with graceful-shutdown flush (#10512) 2026-07-30 14:01:02 -07:00
run-scratch.test.ts fix(server): clean heartbeat run scratch directories (#9234) 2026-07-08 13:38:36 -05:00
run-scratch.ts fix(server): clean heartbeat run scratch directories (#9234) 2026-07-08 13:38:36 -05:00
run-secret-redaction.ts fix(server): keep Date fields intact through secret redaction; harden chat notice timestamps (#10984) 2026-08-06 10:29:07 -05:00
runtime-skill-selections.ts feat(skills): add beta releases for the core Paperclip skill (#10228) 2026-07-27 19:45:59 -05:00
sandbox-orphan-cleanup-spool.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
sandbox-provider-runtime.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
secret-proposals.ts feat(secrets): add human-approved secret proposals (#9934) 2026-08-05 21:49:40 -05:00
secrets.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
session-workspace-cwd.test.ts fix(remote-sandbox): harden host workspace resumes (#5922) 2026-05-13 16:23:04 -05:00
session-workspace-cwd.ts fix(remote-sandbox): harden host workspace resumes (#5922) 2026-05-13 16:23:04 -05:00
setup-token-session.test.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
setup-token-session.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
setup-token-transport-binding.test.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
setup-token-transport-binding.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
sidebar-badges.ts
…
sidebar-preferences.ts
…
skills-catalog.ts fix(server): resolve published skills catalog package root and fallback (#8327) 2026-06-19 09:14:41 -07:00
smoke-lab.ts feat(connections): add v3 schema core (#9958) 2026-07-21 15:16:26 -05:00
source-trust.ts Add low-trust review containment (#7530) 2026-06-05 16:48:02 -05:00
stalled-review-decisions.ts feat: maintained in_review review-path contract + stalled-review actions (#10675) 2026-08-04 13:54:40 -05:00
status-card-finalization.ts feat(status-cards): add experimental status card update view (#10101) 2026-07-24 12:26:43 -05:00
status-card-update-engine.ts feat(status-cards): join summary-mentioned issues to watched set (#10205) 2026-07-24 16:44:56 -05:00
status-cards.ts feat(status-cards): join summary-mentioned issues to watched set (#10205) 2026-07-24 16:44:56 -05:00
successful-run-handoff-state.ts fix(issues): quiet missing-disposition warnings while a live continuation is running (#10899) 2026-08-05 15:59:01 -05:00
summary-slot-finalization.ts feat: add built-in summarizer and summary slots (#9713) 2026-07-17 11:03:07 -05:00
summary-slots.ts fix: isolate execution workspace summaries (#10790) 2026-08-11 08:56:32 -04:00
systemd-notify.ts feat(cli): add managed install, update, and service lifecycle (#10045) 2026-07-31 18:52:23 -07:00
task-watchdog-scope.ts [codex] feat(watchdog): add task watchdog control plane (#8339) 2026-06-19 15:38:52 -05:00
task-watchdogs.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
teams-catalog.ts [codex] Add teams catalog extraction (#7550) 2026-06-05 12:55:49 -05:00
tool-access-policy.ts feat(connections): add v3 schema core (#9958) 2026-07-21 15:16:26 -05:00
tool-access.ts fix(tool-gateway): keep unsigned ask-first requests out of the review queue without cancelling them (#11338) 2026-08-13 16:15:12 -07:00
tool-content-guards.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-gateway.ts fix(tool-gateway): keep unsigned ask-first requests out of the review queue without cancelling them (#11338) 2026-08-13 16:15:12 -07:00
tool-oauth-legacy-backfill.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-profile-binding-precedence.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-runtime-metrics.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-runtime-supervisor.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
trust-preset-resolver.ts Add low-trust review containment (#7530) 2026-06-05 16:48:02 -05:00
work-products.ts Harden company import: durable UI, async jobs, integrity guard, batched inserts (#10523) 2026-07-30 16:52:58 -07:00
work-timeline.ts fix(ui): load the full selected timeline window (#9576) 2026-07-30 21:40:57 -07:00
workspace-file-resources.ts fix(files): only highlight accessible workspace file links (#11090) 2026-08-11 12:11:45 -04:00
workspace-instance-cleanup.ts feat(workspaces): defer isolated setup until runtime start (#10653) 2026-08-02 10:37:10 -05:00
workspace-operation-log-store.ts
…
workspace-operations.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
workspace-realization.ts feat(workspaces): defer isolated setup until runtime start (#10653) 2026-08-02 10:37:10 -05:00
workspace-runtime-exposure-backfill.test.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
workspace-runtime-exposure.test.ts fix(runtime-exposure): mediate leased app/HMR port pairs centrally (#11526) 2026-08-17 06:47:55 -04:00
workspace-runtime-leases.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
workspace-runtime-read-model.test.ts feat(runtime-exposure): least-privilege Tailscale HTTPS broker, shared contract, and persisted exposure state (#11524) 2026-08-17 05:54:12 -04:00
workspace-runtime-read-model.ts fix(server): bound inherited workspace runtime services (#10589) 2026-07-31 18:54:11 -07:00
workspace-runtime-ready-comment.test.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
workspace-runtime.ts fix(runtime-exposure): mediate leased app/HMR port pairs centrally (#11526) 2026-08-17 06:47:55 -04:00