paperclip/server/src/services
Dotta bc9ba7cd26
feat(runner): project native runs into task threads (#12321)
## Thinking Path

> - Paperclip is the open source app people use to manage AI agents for
work.
> - The experimental Paperclip Runner can execute a guarded Codex run
and persist provider-neutral events.
> - The task page still reads direct-adapter transcripts and cannot
present those native events.
> - Structured runner questions must also use the existing task
interaction experience.
> - Runtime selection must use the persisted run mode, not an adapter
name or a current feature flag.
> - This pull request projects native events and questions into the
existing task thread.
> - Direct adapters keep their existing transcript, composer,
interaction, and finalization paths.
> - The benefit is a complete native Codex task thread without a
behavior change for existing adapters.

## Linked Issues or Issue Description

Refs #12202. This pull request replaces that stale implementation on
current `master`.

**What happened?**

The server persists native runner events and structured input requests.
The task page only consumes direct-adapter transcripts. A native run
therefore cannot present a complete transcript, usage, or question flow
through the normal task experience.

**Expected behavior**

Native runs project persisted provider-neutral events into the existing
task thread. Native structured questions use the existing interaction
card. Direct adapters retain their current behavior.

**Steps to reproduce**

1. Enable the experimental runner.
2. Start a native Codex run that emits progress, usage, a structured
question, and a final reply.
3. Open the task page.
4. Observe that the direct-adapter transcript path cannot project the
native event records.

**Paperclip version or commit**

`master` at `67f9867bc`.

## What Changed

- Add the canonical structured-question validator and shared contract
exports.
- Materialize native input requests as existing task interactions.
- Validate native answers and deliver them through the durable
question-response receipt.
- Resume the original PRP request with an idempotent `request.resolve`
command.
- Project native messages, tool activity, cumulative usage, and final
replies into the existing transcript model.
- Propagate persisted `runtimeMode` to the task page and select native
handling only for `runtimeMode: "native"`.
- Expire pending interactions through the shared issue service on every
terminal transition, including decisions, stalled reviews, tree control,
and pipeline retry cleanup.
- Queue native run cancellation while a transaction is open and execute
it only after the owning transaction commits.
- Keep nonterminal and non-runner issue paths on their existing service
call shapes and behavior.

## Verification

- `pnpm --filter @paperclipai/server typecheck` — passed, including the
Rust runner release build and protocol/catalog drift gates.
- Focused native-thread and lifecycle suites — 18 files and 481 tests
passed during review.
- `issue-execution-policy-routes.test.ts` — 19/19 passed after the final
transactional-queue expectation update.
- `issue-agent-mutation-ownership-routes.test.ts` — 87/87 passed in the
final isolated compatibility rerun.
- GitHub Actions — policy, build, canary, typecheck/release registry, 5
serialized server shards, 8 general-test shards, 3 browser shards, and
both aggregate gates passed on `7793f3193`.
- Security — Snyk, Socket Project Report, Socket PR Alerts, and
Superagent passed.
- Greptile — 5/5 on `7793f3193`; all actionable review threads resolved.
- `git diff --check` — passed.
- Diff against `master`: 44 files.

## Compatibility Boundary

- Native transcript polling only runs when the persisted run reports
`runtimeMode: "native"`.
- Missing or legacy runtime modes continue through
`useLiveRunTranscripts`.
- Legacy questions keep the existing optional free-text choice.
- Native closed select sets can suppress that legacy fallback.
- Terminal cleanup uses the same issue service for native and legacy
interactions; only a bound native question schedules a native run
cancellation.
- Native cancellation happens after transaction commit, so failed or
rolled-back writes do not cancel a still-valid run.
- The durable delivery service checks the original native request before
it considers a continuation run.
- This pull request adds no migration, dependency, workflow, manifest,
or lockfile change.

## Risks

The main risk is routing a direct-adapter task through native handling
or changing terminal issue behavior. The implementation selects the
native path only from persisted runtime facts, retains the existing
nonterminal call shape, and schedules native cancellation only for a
validated bound native question after commit. Focused and
repository-wide tests cover both paths. Native requests remain bound to
the company, issue, run, and agent; answers are validated, durable, and
idempotent across reconnects.

## Model Used

OpenAI Codex, GPT-5 family. The client does not expose the exact
deployment ID or context window. Agentic reasoning, tool use, and code
execution were enabled.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have searched GitHub for duplicate or related PRs and linked
them above
- [x] I have either (a) linked existing issues with `Fixes: #` / `Closes
#` / `Refs #` OR (b) described the issue in-PR following the relevant
issue template
- [x] I have not referenced internal/instance-local Paperclip issues or
links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip`
URLs)
- [x] My branch name describes the change and contains no internal
Paperclip ticket id or instance-derived details
- [x] I have run the affected local tests and they pass
- [x] I have added or updated tests where applicable
- [x] I have updated the compatibility notes for this change
- [x] I have considered and documented risks above
- [x] All Paperclip CI gates are green
- [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups
- [x] I addressed all Greptile and reviewer comments before requesting
merge
2026-08-29 19:26:20 -05:00
..
native-runtime feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
recovery fix(recovery): make silent-run detection UI-only (#12242) 2026-08-26 15:26:12 -05:00
runtime-exposure fix(workspaces): make managed runtimes reliable across restarts (#11740) 2026-08-19 14:55:16 -05:00
scripts feat: add Grok device login to the sandbox login panel (#12469) 2026-08-28 21:48:34 -07:00
access.ts feat(apps): add connection grants and delegated identities (#12341) 2026-08-29 12:08:33 -05:00
activity-log.ts feat(server): allow agents to resolve review confirmations (#10939) 2026-08-05 23:40:05 -05:00
activity.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
adapter-login-lease.test.ts feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730) 2026-08-19 11:51:31 -07:00
adapter-login-lease.ts feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730) 2026-08-19 11:51:31 -07:00
adapter-models-env.test.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
adapter-models-env.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
adapter-plugin-store.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
adapter-registry-bootstrap.reconcile.test.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
adapter-registry-bootstrap.test.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
adapter-registry-bootstrap.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
agent-action-audit.ts build(deps): bump zod from 3.25.76 to 4.4.3 (#11719) 2026-08-21 00:04:14 -07:00
agent-assignability.ts [codex] prevent invalid agents from receiving assignments and runs (#7663) 2026-06-06 12:45:57 -05:00
agent-instructions.ts chore: mark bootstrapPromptTemplate as deprecated 2026-03-26 11:12:25 -05:00
agent-invokability.ts fix(runtime): keep agent pause durable at execution-start (#8317) 2026-06-19 08:35:53 -07:00
agent-permissions.ts [codex] Gate skill mutations with skills:create permission (#8616) 2026-06-25 09:49:10 -05:00
agent-secret-bindings.ts Add governed secret alias confirmation cards (#11486) 2026-08-18 09:44:24 -05:00
agent-start-lock.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
agents.ts feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730) 2026-08-19 11:51:31 -07:00
approvals.ts fix: prevent duplicate built-in agents and self-heal reconciliation (#10223) 2026-07-28 11:12:58 -07:00
approved-execution-wait.test.ts feat(apps): refine Postman and Shopify setup (#12357) 2026-08-29 12:08:35 -05:00
approved-execution-wait.ts feat(apps): refine Postman and Shopify setup (#12357) 2026-08-29 12:08:35 -05:00
artifact-review-documents.ts feat(artifacts): bridge Markdown work products into the document review surface (#11822) 2026-08-20 17:28:01 -07:00
assets.ts refactor: rename packages to @paperclipai and CLI binary to paperclipai 2026-03-03 08:45:26 -06:00
attention-resolver-audience.test.ts feat(apps): add connection grants and delegated identities (#12341) 2026-08-29 12:08:33 -05:00
attention.ts feat(apps): add connection grants and delegated identities (#12341) 2026-08-29 12:08:33 -05:00
authorization.ts feat(connections): add self-serve intent runtime (#12345) 2026-08-29 12:08:34 -05:00
batch-insert.ts Harden company import: durable UI, async jobs, integrity guard, batched inserts (#10523) 2026-07-30 16:52:58 -07:00
board-auth.test.ts perf(server): reduce issue detail request overhead (#10414) 2026-08-11 14:39:23 -04:00
board-auth.ts perf(server): reduce issue detail request overhead (#10414) 2026-08-11 14:39:23 -04:00
budgets.ts [codex] Enforce backend execution release gates (#9089) 2026-07-06 16:33:36 -05:00
built-in-agent-metadata.ts [codex] Add built-in agents and Reflection Coach bundle (#9206) 2026-07-09 16:29:30 -05:00
built-in-agents.ts feat: make chat-style tasks the default experience (#11101) 2026-08-11 09:06:21 -07:00
bundled-plugins.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
catalog-provenance.ts [codex] Add skills CLI and catalog management (#6782) 2026-05-28 07:33:51 -10:00
change-consent-gate.ts [codex] Add built-in agents and Reflection Coach bundle (#9206) 2026-07-09 16:29:30 -05:00
cloud-instance.ts feat: make in-app features cloud-aware (#10850) 2026-08-04 23:00:14 -05:00
codex-auth-reconciliation.ts fix(codex-local): seed managed auth into isolated homes (#8403) 2026-06-20 16:17:54 -07:00
companies.ts Remove the company brand color and per-company attachment limit (#12291) 2026-08-27 12:11:05 -07:00
company-artifacts.ts feat(server): add per-user document stars (#9952) 2026-07-27 19:13:35 -05:00
company-export-readme.ts fix(security): route paperclipai CLI guidance through safe npx form (CWE-78) (#11400) 2026-08-14 22:11:16 -07:00
company-import-transfers.ts feat(server): chunked resumable company import transfers (#11223) 2026-08-11 15:25:07 -07:00
company-member-roles.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
company-portability.ts Remove the company brand color and per-company attachment limit (#12291) 2026-08-27 12:11:05 -07:00
company-search-extract.ts fix(search): honor extract match limits + harden pr-gardening candidate discovery (#9652) 2026-07-15 21:44:21 -05:00
company-search-rate-limit.ts Add full company search page (#5293) 2026-05-06 06:32:37 -05:00
company-search.ts feat(search): add bulk extract endpoint (#9507) 2026-07-15 19:05:06 -05:00
company-skill-policy.ts feat(skills): open-by-default company skill policy and core UX (#9564) 2026-07-15 11:42:40 -05:00
company-skills.ts fix(server): surface skill materialization failures instead of dropping the skill (#12146) 2026-08-25 13:51:57 -07:00
company-transfer-runs.ts feat(server): chunked resumable company import transfers (#11223) 2026-08-11 15:25:07 -07:00
composio-session-manager.ts feat(apps): add Composio and Gmail connectors (#12342) 2026-08-29 12:08:33 -05:00
composio.test.ts feat(apps): add Composio and Gmail connectors (#12342) 2026-08-29 12:08:33 -05:00
composio.ts feat(apps): add Composio and Gmail connectors (#12342) 2026-08-29 12:08:33 -05:00
connection-intents.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
costs.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
cron.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
cross-issue-influence-limit.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
dashboard.ts perf(server): cut steady-state DB hot paths in dashboard, attention, and productivity sweeps (#10992) 2026-08-06 11:56:40 -05:00
database-backup-health.ts Fix DB backup health alerts (#9147) 2026-07-07 05:54:20 -05:00
decision-queues.ts feat(decisions): add desk workflow and retention (#10672) 2026-08-02 10:47:03 -05:00
decision-retention.ts feat(decisions): add desk workflow and retention (#10672) 2026-08-02 10:47:03 -05:00
decision-signing.ts fix(server): stop requiring PAPERCLIP_DECISION_SIGNING_SECRET at startup (#10594) 2026-07-31 22:48:32 -07:00
decision-training.ts feat: restore decision training library and inspector (#9779) 2026-07-17 13:27:32 -05:00
decision-wakeup.ts feat(decisions): add desk workflow and retention (#10672) 2026-08-02 10:47:03 -05:00
decisions.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
default-agent-instructions.ts Add default agent instructions bundle 2026-03-20 07:42:36 -05:00
device-login-credential-read.ts feat: add Grok device login to the sandbox login panel (#12469) 2026-08-28 21:48:34 -07:00
device-login-reaper.ts feat: add Grok device login to the sandbox login panel (#12469) 2026-08-28 21:48:34 -07:00
device-login-service.ts feat: add Grok device login to the sandbox login panel (#12469) 2026-08-28 21:48:34 -07:00
document-annotations.ts Cases: experimental first-class case object (#9198) 2026-07-09 22:11:03 -05:00
documents.ts Harden company import: durable UI, async jobs, integrity guard, batched inserts (#10523) 2026-07-30 16:52:58 -07:00
duplex-observability-recorder.ts refactor: disambiguate the Telemetry and Observability data paths (#12128) 2026-08-24 16:42:33 -07:00
effective-run-config-fingerprints.ts Refresh run config before reusing workspaces (#8797) 2026-06-30 14:50:25 -07:00
environment-config.ts build(deps): bump zod from 3.25.76 to 4.4.3 (#11719) 2026-08-21 00:04:14 -07:00
environment-custom-image-runtime.ts feat(server): add a one-click relink action for detached custom-image templates (#11641) 2026-08-18 11:43:39 -07:00
environment-custom-image-setup-session-utils.ts Add browser SSH terminal for custom image setup (#8911) 2026-07-03 16:44:21 -07:00
environment-custom-image-terminal-sessions.test.ts Add browser SSH terminal for custom image setup (#8911) 2026-07-03 16:44:21 -07:00
environment-custom-image-terminal-sessions.ts Add browser SSH terminal for custom image setup (#8911) 2026-07-03 16:44:21 -07:00
environment-custom-images.ts refactor(environment): classify environment capabilities from static driver definitions (#12045) 2026-08-23 21:24:59 -07:00
environment-driver-traits.ts refactor(environment): classify environment capabilities from static driver definitions (#12045) 2026-08-23 21:24:59 -07:00
environment-execution-target.ts refactor(adapter-utils): replace the process-wide byte ledger with route-local byte bounds (#12465) 2026-08-28 14:36:18 -07:00
environment-probe.ts fix(sandbox): keep custom-image snapshots applied to config tests, probes, and saves (#9385) 2026-07-10 14:32:47 -07:00
environment-run-orchestrator.ts refactor(adapter-utils): replace the process-wide byte ledger with route-local byte bounds (#12465) 2026-08-28 14:36:18 -07:00
environment-runtime.ts feat(duplex): run the Daytona sandbox callback bridge over Node HTTP/2 (#12120) 2026-08-25 07:35:39 -07:00
environments.ts feat: environment delete with agent reassignment and consented sandbox destroy (#12053) 2026-08-23 16:53:17 -07:00
execution-allowlist.test.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
execution-allowlist.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
execution-policy-bootstrap.test.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
execution-policy-bootstrap.ts feat(server): kubernetes execution integration for sandbox-provider plugins (stage 2/3) (#7938) 2026-06-10 21:09:02 -07:00
execution-workspace-branch-ownership.ts fix(workspaces): attach PR preparation to existing branches (#11703) 2026-08-21 17:23:18 -05:00
execution-workspace-policy.ts fix(workspaces): attach PR preparation to existing branches (#11703) 2026-08-21 17:23:18 -05:00
execution-workspaces.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
export-fidelity.ts Replace host-to-host Cloud Sync with full-fidelity company Import/Export (#10507) 2026-07-30 11:37:00 -07:00
external-objects.ts fix(external-objects): refresh PR status labels (#10704) 2026-08-02 20:24:52 -07:00
feedback-redaction.ts Add feedback voting and thumbs capture flow 2026-04-02 09:11:49 -05:00
feedback-share-client.ts Restore feedback trace export fixes 2026-04-03 15:59:42 -05:00
feedback.ts Let operators supply defaults for selected instance settings (#12285) 2026-08-27 11:29:05 -07:00
finance.ts Sync/master post pap1497 followups 2026 04 15 (#3779) 2026-04-15 21:13:56 -05:00
folders.ts feat: organize skills with nested folders and My Skills (#9633) 2026-07-16 15:50:45 -05:00
git-credentials.ts fix(server): serialize managed-checkout materialization and stop misattributing clone failures (#10723) 2026-08-02 22:14:58 -07:00
github-external-object-provider.ts Recognize delivered workspaces and reap terminal worktrees (#10908) 2026-08-05 16:34:04 -05:00
github-fetch.ts feat(server): authenticate server-side git clone and fetch with a company-secret GitHub token (#10720) 2026-08-02 20:27:09 -07:00
github-pull-request-merge.ts Recognize delivered workspaces and reap terminal worktrees (#10908) 2026-08-05 16:34:04 -05:00
gmail-tool-governance.test.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
goals.ts Improve onboarding defaults and issue goal fallback 2026-03-12 08:50:31 -05:00
heartbeat-policy.ts fix: preserve recovery retries across restarts (#11817) 2026-08-20 17:09:42 -05:00
heartbeat-run-runtime-status.test.ts feat(environments): refer to the managed default environment by name, not the sandbox driver key (#11838) 2026-08-21 12:51:22 -07:00
heartbeat-run-runtime-status.ts Improve live agent feedback during sandboxed runs (#8915) 2026-07-02 22:21:56 -07:00
heartbeat-run-summary.ts fix(server): gate heartbeat-fallback comment to never publish raw transcript (#10143) 2026-08-12 16:43:13 -07:00
heartbeat-stop-metadata.test.ts fix: run restart recovery, workspace self-heal, quota-aware retries, failed-run metrics (#9183) 2026-07-07 20:30:09 -05:00
heartbeat-stop-metadata.ts Enforce durable external-wait liveness (#9373) 2026-07-10 13:21:12 -05:00
heartbeat.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
hire-hook.ts fix(adapters): honor paused overrides and isolate UI parser state 2026-04-04 14:04:33 -05:00
hot-restart.test.ts fix(server): preserve hot restart intent across path upgrade (#10593) 2026-07-31 21:55:59 -07:00
hot-restart.ts fix(server): preserve hot-restart shutdown snapshots (#10815) 2026-08-04 11:44:43 -05:00
import-write-types.ts feat(server): preserve task timestamps and hierarchy through company import/export (#11193) 2026-08-10 17:01:33 -07:00
inbox-agent-policy.ts feat(inbox): let agents safely tidy user inboxes (#9724) 2026-07-16 16:49:18 -05:00
inbox-dismissals.ts feat: add attention queue and Decisions surface (#9380) 2026-07-10 17:09:57 -05:00
index.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
instance-settings.ts Let operators supply defaults for selected instance settings (#12285) 2026-08-27 11:29:05 -07:00
invite-grants.ts feat: implement multi-user access and invite flows (#3784) 2026-04-17 09:44:19 -05:00
invite-rate-limit.ts security(invites): widen invite-token entropy and rate-limit public invite endpoints (#8979) 2026-07-14 15:47:58 -07:00
issue-approvals.ts refactor: rename packages to @paperclipai and CLI binary to paperclipai 2026-03-03 08:45:26 -06:00
issue-assignment-wakeup.ts feat: add built-in summarizer and summary slots (#9713) 2026-07-17 11:03:07 -05:00
issue-change-receipt.ts feat: add authoritative issue PATCH receipts (#10478) 2026-07-31 18:52:59 -07:00
issue-continuation-summary.ts fix: run restart recovery, workspace self-heal, quota-aware retries, failed-run metrics (#9183) 2026-07-07 20:30:09 -05:00
issue-dependency-wakeups.test.ts fix(issues): cycle-aware issue_blockers_resolved after terminal reset (#11979) 2026-08-23 08:50:38 -07:00
issue-dependency-wakeups.ts fix(issues): cycle-aware issue_blockers_resolved after terminal reset (#11979) 2026-08-23 08:50:38 -07:00
issue-execution-policy.ts fix(server): let board users cancel issues with an active review stage (#10655) 2026-08-01 15:43:13 -07:00
issue-goal-fallback.ts Seed onboarding project and issue goal context 2026-03-24 11:48:59 -05:00
issue-liveness.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
issue-prefix.test.ts feat(server): derive hosted-tenant issue prefixes from the company name and follow renames (#12292) 2026-08-27 11:34:42 -07:00
issue-prefix.ts feat(server): derive hosted-tenant issue prefixes from the company name and follow renames (#12292) 2026-08-27 11:34:42 -07:00
issue-recovery-actions.ts fix(recovery): stop automatic stranded-task takeovers (#11961) 2026-08-22 11:41:24 -05:00
issue-references.ts Redact deleted issue comments 2026-06-05 03:20:46 +00:00
issue-review-policy.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
issue-rewake-throttle.ts feat(issues): contain cross-issue agent side effects (#10837) 2026-08-04 13:17:49 -05:00
issue-thread-interaction-resolution.test.ts feat(apps): add connection grants and delegated identities (#12341) 2026-08-29 12:08:33 -05:00
issue-thread-interaction-resolution.ts feat(apps): add connection grants and delegated identities (#12341) 2026-08-29 12:08:33 -05:00
issue-thread-interactions.test.ts fix(interactions): deliver question answers durably (#12307) 2026-08-27 12:12:21 -05:00
issue-thread-interactions.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
issue-tree-control.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
issue-visibility.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
issues.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
json-schema-secret-refs.ts fix(server): accept secret_ref binding objects in sandbox provider environment config (#10355) 2026-07-28 10:50:13 -07:00
live-events.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
local-service-supervisor.ts fix(workspaces): read process cwd on macOS so port-owner adoption works (#11763) 2026-08-21 16:03:43 -07:00
login-command.test.ts feat: add Grok device login to the sandbox login panel (#12469) 2026-08-28 21:48:34 -07:00
login-command.ts feat: add Grok device login to the sandbox login panel (#12469) 2026-08-28 21:48:34 -07:00
low-trust-runtime-containment.ts Add low-trust review containment (#7530) 2026-06-05 16:48:02 -05:00
managed-config.ts feat(server): computed owner instance-admin elevation for cloud-managed instances, behind platform floors (#10343) 2026-07-27 18:58:31 -07:00
managed-environments.test.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
managed-environments.ts Let tenants edit env vars on managed sandbox environments; add managed-sandbox-only mode (#11200) 2026-08-11 11:40:57 -07:00
managed-resource-drift.test.ts fix(server): preserve managed environment drift on boot (#10979) 2026-08-07 00:41:42 -05:00
managed-resource-drift.ts fix(server): preserve managed environment drift on boot (#10979) 2026-08-07 00:41:42 -05:00
managed-workspace-identity.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
mcp-http.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
onboarding-greeting.test.ts feat: make chat-style tasks the default experience (#11101) 2026-08-11 09:06:21 -07:00
onboarding-greeting.ts feat: make chat-style tasks the default experience (#11101) 2026-08-11 09:06:21 -07:00
onboarding-seed.ts feat(server): CEO agents get the core paperclip skills by default (#12138) 2026-08-25 13:51:39 -07:00
paperclip-id-gmail-connector.test.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
paperclip-id-gmail-connector.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
pipeline-case-outputs.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
pipeline-conversation-context.ts Add pipeline workflow primitives and operator UI (#7903) 2026-06-26 12:02:44 -05:00
pipelines-aggregation.ts Skill Studio: three-pane skill IDE with sandboxed test runs (#9241) 2026-07-09 13:08:56 -05:00
pipelines.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
plan-review-context.ts feat(annotations): include issue document annotations in agent review context (#11332) 2026-08-13 14:23:09 -07:00
plugin-capability-validator.ts feat(plugin-sdk): interactions/approvals respond + attachment read capabilities for the chat gateway (#10066) 2026-07-22 21:30:34 -07:00
plugin-config-validator.ts Refactor secret-ref format registration to use a UI hint for Paperclip secret UUIDs 2026-03-14 15:43:56 -07:00
plugin-database.ts Fix LLM Wiki package and migration validation (#6010) 2026-05-15 10:20:02 -05:00
plugin-dev-watcher.ts [codex] Improve local plugin development workflow (#5821) 2026-05-12 17:38:24 -05:00
plugin-environment-driver.ts refactor(environment): classify environment capabilities from static driver definitions (#12045) 2026-08-23 21:24:59 -07:00
plugin-event-bus.ts Simplify plugin runtime and cleanup lifecycle 2026-03-13 16:58:29 -05:00
plugin-host-service-cleanup.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-host-services.ts feat: parallelize sandbox file-sync behind a provider opt-in capability (#11736) 2026-08-19 12:34:11 -07:00
plugin-install-guard.ts feat: make in-app features cloud-aware (#10850) 2026-08-04 23:00:14 -05:00
plugin-job-coordinator.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-job-scheduler.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-job-store.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-lifecycle.ts [codex] Runtime control-plane fixes (#6380) 2026-05-20 10:37:11 -05:00
plugin-loader.ts fix(plugins): retry errored plugins at boot instead of leaving them dead (#12054) 2026-08-23 16:52:42 -07:00
plugin-local-folders.ts [codex] Roll up May 17 branch changes (#6210) 2026-05-17 17:15:06 -05:00
plugin-log-retention.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-managed-agents.ts fix(server): authorize agent resume through direct grants (#12047) 2026-08-23 16:15:32 -05:00
plugin-managed-routines.ts feat(routines): expose activity gate API (#9438) 2026-07-24 16:47:24 -05:00
plugin-managed-skills.ts [codex] Add LLM Wiki plugin host support (#5597) 2026-05-10 07:34:12 -05:00
plugin-manifest-validator.ts build(deps): bump zod from 3.25.76 to 4.4.3 (#11719) 2026-08-21 00:04:14 -07:00
plugin-registry.ts fix(plugin-sdk): thread companyId through configChanged + fail-closed cross-tenant guard (LOOA-687) (#10096) 2026-07-23 09:50:48 -07:00
plugin-runtime-sandbox.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-secrets-handler.ts feat(mcp) [split 2/8]: add governed access contracts (#9557) 2026-07-14 12:57:20 -05:00
plugin-state-store.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-stream-bus.ts Add plugin framework and settings UI 2026-03-13 16:22:34 -05:00
plugin-tool-dispatcher.ts fix(plugin-tool-dispatcher): propagate pluginDbId so worker.isRunning resolves (#5671) 2026-06-03 19:13:21 -07:00
plugin-tool-registry.ts fix(plugin-tool-dispatcher): propagate pluginDbId so worker.isRunning resolves (#5671) 2026-06-03 19:13:21 -07:00
plugin-worker-manager.ts refactor(adapter-utils): replace the process-wide byte ledger with route-local byte bounds (#12465) 2026-08-28 14:36:18 -07:00
portable-path.ts [codex] Add skills CLI and catalog management (#6782) 2026-05-28 07:33:51 -10:00
principal-access-compatibility.ts [codex] Add agent permissions and controls plan (#6386) 2026-05-22 08:12:52 -05:00
productivity-review.ts fix(server): keep imported tasks quiescent under the productivity review sweep (#11191) 2026-08-10 17:00:32 -07:00
project-workspace-runtime-config.ts [codex] Respect manual workspace runtime controls (#4125) 2026-04-20 10:39:37 -05:00
projects.ts Exclude archived projects from the default project list route (#10146) 2026-07-24 07:19:58 -07:00
question-response-delivery.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
quota-windows.ts feat(costs): add billing, quota, and budget control plane 2026-03-16 15:11:01 -05:00
recovery-observability.ts fix(recovery): stop automatic stranded-task takeovers (#11961) 2026-08-22 11:41:24 -05:00
remote-http-endpoint-guard.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
remote-http-fetch.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
remote-url-credentials.test.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
remote-url-credentials.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
resource-memberships.ts feat(server): add per-user document stars (#9952) 2026-07-27 19:13:35 -05:00
responsible-user-denial-run-outcomes.test.ts feat(secrets): add user-specific runtime secrets (#8825) 2026-07-05 05:58:20 -05:00
responsible-user-denial-run-outcomes.ts feat(secrets): add user-specific runtime secrets (#8825) 2026-07-05 05:58:20 -05:00
routable-blocked.ts Route blocked transitions to explicit unblock owners (#10112) 2026-07-23 15:49:28 -05:00
routines-formatter-cache.test.ts fix(server): cache Intl.DateTimeFormat per timezone in cron minute-stepper (#8033) (#8034) 2026-06-12 10:15:53 -07:00
routines.ts fix(routines): clear transient execution failures (#9689) 2026-08-19 15:43:26 -05:00
run-continuations.ts [codex] Add runtime lifecycle recovery and live issue visibility (#4419) 2026-04-24 15:50:32 -05:00
run-liveness.ts Enforce durable external-wait liveness (#9373) 2026-07-10 13:21:12 -05:00
run-log-store.test.ts Add opt-in in-flight run-log mirroring with graceful-shutdown flush (#10512) 2026-07-30 14:01:02 -07:00
run-log-store.ts Add opt-in in-flight run-log mirroring with graceful-shutdown flush (#10512) 2026-07-30 14:01:02 -07:00
run-scratch.test.ts fix(server): clean heartbeat run scratch directories (#9234) 2026-07-08 13:38:36 -05:00
run-scratch.ts fix(server): clean heartbeat run scratch directories (#9234) 2026-07-08 13:38:36 -05:00
run-secret-redaction.ts fix(server): keep Date fields intact through secret redaction; harden chat notice timestamps (#10984) 2026-08-06 10:29:07 -05:00
runtime-skill-selections.ts feat(skills): add beta releases for the core Paperclip skill (#10228) 2026-07-27 19:45:59 -05:00
sandbox-orphan-cleanup-spool.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
sandbox-provider-runtime.ts feat: Claude login on the new-agent page before agent creation (#11347) 2026-08-17 13:42:51 -07:00
secret-proposal-authorization.ts Add governed secret alias confirmation cards (#11486) 2026-08-18 09:44:24 -05:00
secret-proposal-notifications.ts Add governed secret alias confirmation cards (#11486) 2026-08-18 09:44:24 -05:00
secret-proposals.ts Add governed secret alias confirmation cards (#11486) 2026-08-18 09:44:24 -05:00
secrets.ts feat(connections): add self-serve intent runtime (#12345) 2026-08-29 12:08:34 -05:00
session-workspace-cwd.test.ts fix(remote-sandbox): harden host workspace resumes (#5922) 2026-05-13 16:23:04 -05:00
session-workspace-cwd.ts fix(remote-sandbox): harden host workspace resumes (#5922) 2026-05-13 16:23:04 -05:00
setting-defaults.ts Let operators supply defaults for selected instance settings (#12285) 2026-08-27 11:29:05 -07:00
settings-visibility.ts feat: operator-configurable settings visibility via PAPERCLIP_HIDDEN_SETTINGS (#11823) 2026-08-20 17:54:44 -07:00
setup-token-reaper.test.ts feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730) 2026-08-19 11:51:31 -07:00
setup-token-reaper.ts feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730) 2026-08-19 11:51:31 -07:00
setup-token-session.test.ts feat(auth): normalize agent login in the sandbox onto one session table and a capability contract (#11730) 2026-08-19 11:51:31 -07:00
setup-token-session.ts fix(setup-token): pin the start guard to the served adapter (#12179) 2026-08-25 19:48:44 -07:00
setup-token-transport-binding.test.ts feat(login): use the login pseudo-terminal for Codex device login and de-Claude the shared channel (#12020) 2026-08-23 09:44:59 -07:00
setup-token-transport-binding.ts feat(login): use the login pseudo-terminal for Codex device login and de-Claude the shared channel (#12020) 2026-08-23 09:44:59 -07:00
sidebar-badges.ts Persist non-issue inbox dismissals 2026-04-09 06:16:05 -05:00
sidebar-preferences.ts [codex] Improve workspace runtime and navigation ergonomics (#3680) 2026-04-14 12:57:11 -05:00
skills-catalog.ts fix(server): resolve published skills catalog package root and fallback (#8327) 2026-06-19 09:14:41 -07:00
smoke-lab.ts feat(apps): add connection grants and delegated identities (#12341) 2026-08-29 12:08:33 -05:00
source-trust.ts Add low-trust review containment (#7530) 2026-06-05 16:48:02 -05:00
stalled-review-decisions.ts feat(runner): project native runs into task threads (#12321) 2026-08-29 19:26:20 -05:00
status-card-finalization.ts feat(status-cards): add experimental status card update view (#10101) 2026-07-24 12:26:43 -05:00
status-card-update-engine.ts feat(status-cards): join summary-mentioned issues to watched set (#10205) 2026-07-24 16:44:56 -05:00
status-cards.ts feat(status-cards): join summary-mentioned issues to watched set (#10205) 2026-07-24 16:44:56 -05:00
successful-run-handoff-state.ts fix(issues): quiet missing-disposition warnings while a live continuation is running (#10899) 2026-08-05 15:59:01 -05:00
summary-slot-finalization.ts feat: add built-in summarizer and summary slots (#9713) 2026-07-17 11:03:07 -05:00
summary-slots.ts fix: isolate execution workspace summaries (#10790) 2026-08-11 08:56:32 -04:00
systemd-notify.ts feat(cli): add managed install, update, and service lifecycle (#10045) 2026-07-31 18:52:23 -07:00
task-watchdog-scope.ts [codex] feat(watchdog): add task watchdog control plane (#8339) 2026-06-19 15:38:52 -05:00
task-watchdogs.ts fix(interactions): authorize resolvers consistently (#11376) 2026-08-16 13:46:50 -05:00
teams-catalog.ts [codex] Add teams catalog extraction (#7550) 2026-06-05 12:55:49 -05:00
tool-access-policy.ts feat(apps): add secure remote MCP and PostHog setup (#12339) 2026-08-29 12:08:32 -05:00
tool-access.ts feat(apps): refine Postman and Shopify setup (#12357) 2026-08-29 12:08:35 -05:00
tool-connection-activity.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
tool-content-guards.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-gateway.ts feat(apps): refine Postman and Shopify setup (#12357) 2026-08-29 12:08:35 -05:00
tool-oauth-legacy-backfill.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-profile-binding-precedence.test.ts feat(apps): add secure remote MCP and PostHog setup (#12339) 2026-08-29 12:08:32 -05:00
tool-profile-binding-precedence.ts feat(apps): add secure remote MCP and PostHog setup (#12339) 2026-08-29 12:08:32 -05:00
tool-runtime-metrics.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
tool-runtime-supervisor.ts feat(mcp) [split 3/8]: add tool access policy core (#9558) 2026-07-14 14:22:39 -05:00
trust-preset-resolver.ts Add low-trust review containment (#7530) 2026-06-05 16:48:02 -05:00
vercel-connect.test.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
vercel-connect.ts feat(connections): add managed external MCP connectors (#12346) 2026-08-29 12:08:34 -05:00
work-products.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
work-timeline.ts fix(ui): load the full selected timeline window (#9576) 2026-07-30 21:40:57 -07:00
workspace-file-resources.ts fix: bound workspace Git scans (#11572) 2026-08-17 22:11:30 -05:00
workspace-git-operation-scheduler.test.ts fix(adapter-utils): harden the referenced-project ignore scan (#12214) 2026-08-26 08:30:42 -07:00
workspace-git-operation-scheduler.ts fix(adapter-utils): honor .gitignore for referenced-project staging (#12184) 2026-08-25 14:22:47 -07:00
workspace-instance-cleanup.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
workspace-login-handoff-issuer.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
workspace-operation-log-store.ts Add workspace operation tracking and fix project properties JSX 2026-03-17 09:36:35 -05:00
workspace-operations.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
workspace-readiness.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
workspace-realization.ts refactor(environment): classify environment capabilities from static driver definitions (#12045) 2026-08-23 21:24:59 -07:00
workspace-runtime-exposure-backfill.test.ts feat(runtime): managed Tailscale HTTPS lifecycle, durable runtime leases, and bounded control recovery (#11525) 2026-08-17 06:23:33 -04:00
workspace-runtime-exposure.test.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
workspace-runtime-leases.ts feat(workspaces): sign the workspace login handoff and gate readiness (#11671) 2026-08-19 02:37:02 -05:00
workspace-runtime-read-model.test.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
workspace-runtime-read-model.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00
workspace-runtime-ready-comment.test.ts fix(workspaces): attach PR preparation to existing branches (#11703) 2026-08-21 17:23:18 -05:00
workspace-runtime.ts feat(apps): improve gateway and workspace connection UX (#12340) 2026-08-29 12:08:32 -05:00