2026-03-17 09:24:28 -05:00
|
|
|
export {
|
2026-03-20 08:00:39 -05:00
|
|
|
instanceGeneralSettingsSchema,
|
|
|
|
|
patchInstanceGeneralSettingsSchema,
|
|
|
|
|
type InstanceGeneralSettings,
|
|
|
|
|
type PatchInstanceGeneralSettings,
|
2026-03-17 09:24:28 -05:00
|
|
|
instanceExperimentalSettingsSchema,
|
|
|
|
|
patchInstanceExperimentalSettingsSchema,
|
|
|
|
|
type InstanceExperimentalSettings,
|
|
|
|
|
type PatchInstanceExperimentalSettings,
|
|
|
|
|
} from "./instance.js";
|
|
|
|
|
|
2026-03-14 22:00:12 -05:00
|
|
|
export {
|
|
|
|
|
upsertBudgetPolicySchema,
|
|
|
|
|
resolveBudgetIncidentSchema,
|
|
|
|
|
type UpsertBudgetPolicy,
|
|
|
|
|
type ResolveBudgetIncident,
|
|
|
|
|
} from "./budget.js";
|
|
|
|
|
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
export {
|
|
|
|
|
createCompanySchema,
|
|
|
|
|
updateCompanySchema,
|
2026-03-18 21:03:41 -05:00
|
|
|
updateCompanyBrandingSchema,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
type CreateCompany,
|
|
|
|
|
type UpdateCompany,
|
2026-03-18 21:03:41 -05:00
|
|
|
type UpdateCompanyBranding,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
} from "./company.js";
|
2026-04-02 09:11:49 -05:00
|
|
|
export {
|
|
|
|
|
feedbackDataSharingPreferenceSchema,
|
|
|
|
|
feedbackTargetTypeSchema,
|
|
|
|
|
feedbackTraceStatusSchema,
|
|
|
|
|
feedbackVoteValueSchema,
|
|
|
|
|
upsertIssueFeedbackVoteSchema,
|
|
|
|
|
type UpsertIssueFeedbackVote,
|
|
|
|
|
} from "./feedback.js";
|
[codex] Improve workspace runtime and navigation ergonomics (#3680)
## Thinking Path
> - Paperclip orchestrates AI agents for zero-human companies
> - That operator experience depends not just on issue chat, but also on
how workspaces, inbox groups, and navigation state behave over
long-running sessions
> - The current branch included a separate cluster of workspace-runtime
controls, inbox grouping, sidebar ordering, and worktree lifecycle fixes
> - Those changes cross server, shared contracts, database state, and UI
navigation, but they still form one coherent operator workflow area
> - This pull request isolates the workspace/runtime and navigation
ergonomics work into one standalone branch
> - The benefit is better workspace recovery and navigation persistence
without forcing reviewers through the unrelated issue-detail/chat work
## What Changed
- Improved execution workspace and project workspace controls, request
wiring, layout, and JSON editor ergonomics
- Hardened linked worktree reuse/startup behavior and documented the
`worktree repair` flow for recovering linked worktrees safely
- Added inbox workspace grouping, mobile collapse, archive undo,
keyboard navigation, shared group-header styling, and persisted
collapsed-group behavior
- Added persistent sidebar order preferences with the supporting DB
migration, shared/server contracts, routes, services, hooks, and UI
integration
- Scoped issue-list preferences by context and added targeted UI/server
tests for workspace controls, inbox behavior, sidebar preferences, and
worktree validation
## Verification
- `pnpm vitest run
server/src/__tests__/sidebar-preferences-routes.test.ts
ui/src/pages/Inbox.test.tsx
ui/src/components/ProjectWorkspaceSummaryCard.test.tsx
ui/src/components/WorkspaceRuntimeControls.test.tsx
ui/src/api/workspace-runtime-control.test.ts`
- `server/src/__tests__/workspace-runtime.test.ts` was attempted, but
the embedded Postgres suite self-skipped/hung on this host after
reporting an init-script issue, so it is not counted as a local pass
here
## Risks
- Medium: this branch includes migration-backed preference storage plus
worktree/runtime behavior, so merge review should pay attention to state
persistence and worktree recovery semantics
- The sidebar preference migration is standalone, but it should still be
watched for conflicts if another migration lands first
## Model Used
- OpenAI Codex coding agent (GPT-5-class runtime in Codex CLI; exact
deployed model ID is not exposed in this environment), reasoning
enabled, tool use and local code execution enabled
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [ ] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [ ] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
---------
Co-authored-by: Paperclip <noreply@paperclip.ing>
2026-04-14 12:57:11 -05:00
|
|
|
export {
|
|
|
|
|
sidebarOrderPreferenceSchema,
|
|
|
|
|
upsertSidebarOrderPreferenceSchema,
|
|
|
|
|
type UpsertSidebarOrderPreference,
|
|
|
|
|
} from "./sidebar-preferences.js";
|
2026-03-14 10:55:04 -05:00
|
|
|
export {
|
|
|
|
|
companySkillSourceTypeSchema,
|
|
|
|
|
companySkillTrustLevelSchema,
|
|
|
|
|
companySkillCompatibilitySchema,
|
2026-03-14 13:52:20 -05:00
|
|
|
companySkillSourceBadgeSchema,
|
2026-03-14 10:55:04 -05:00
|
|
|
companySkillFileInventoryEntrySchema,
|
|
|
|
|
companySkillSchema,
|
|
|
|
|
companySkillListItemSchema,
|
|
|
|
|
companySkillUsageAgentSchema,
|
|
|
|
|
companySkillDetailSchema,
|
2026-03-14 13:52:20 -05:00
|
|
|
companySkillUpdateStatusSchema,
|
2026-03-14 10:55:04 -05:00
|
|
|
companySkillImportSchema,
|
2026-03-16 19:09:33 -05:00
|
|
|
companySkillProjectScanRequestSchema,
|
|
|
|
|
companySkillProjectScanSkippedSchema,
|
|
|
|
|
companySkillProjectScanConflictSchema,
|
|
|
|
|
companySkillProjectScanResultSchema,
|
2026-03-14 13:52:20 -05:00
|
|
|
companySkillCreateSchema,
|
|
|
|
|
companySkillFileDetailSchema,
|
|
|
|
|
companySkillFileUpdateSchema,
|
2026-03-14 10:55:04 -05:00
|
|
|
type CompanySkillImport,
|
2026-03-16 19:09:33 -05:00
|
|
|
type CompanySkillProjectScan,
|
2026-03-14 13:52:20 -05:00
|
|
|
type CompanySkillCreate,
|
|
|
|
|
type CompanySkillFileUpdate,
|
2026-03-14 10:55:04 -05:00
|
|
|
} from "./company-skill.js";
|
2026-03-13 22:49:42 -05:00
|
|
|
export {
|
|
|
|
|
agentSkillStateSchema,
|
|
|
|
|
agentSkillSyncModeSchema,
|
|
|
|
|
agentSkillEntrySchema,
|
|
|
|
|
agentSkillSnapshotSchema,
|
|
|
|
|
agentSkillSyncSchema,
|
|
|
|
|
type AgentSkillSync,
|
|
|
|
|
} from "./adapter-skills.js";
|
2026-03-02 16:43:59 -06:00
|
|
|
export {
|
|
|
|
|
portabilityIncludeSchema,
|
2026-03-14 09:46:16 -05:00
|
|
|
portabilityEnvInputSchema,
|
2026-03-02 16:43:59 -06:00
|
|
|
portabilityCompanyManifestEntrySchema,
|
2026-03-23 16:49:46 -05:00
|
|
|
portabilitySidebarOrderSchema,
|
2026-03-02 16:43:59 -06:00
|
|
|
portabilityAgentManifestEntrySchema,
|
2026-03-14 18:59:26 -05:00
|
|
|
portabilitySkillManifestEntrySchema,
|
2026-03-02 16:43:59 -06:00
|
|
|
portabilityManifestSchema,
|
|
|
|
|
portabilitySourceSchema,
|
|
|
|
|
portabilityTargetSchema,
|
|
|
|
|
portabilityAgentSelectionSchema,
|
|
|
|
|
portabilityCollisionStrategySchema,
|
|
|
|
|
companyPortabilityExportSchema,
|
|
|
|
|
companyPortabilityPreviewSchema,
|
|
|
|
|
companyPortabilityImportSchema,
|
|
|
|
|
type CompanyPortabilityExport,
|
|
|
|
|
type CompanyPortabilityPreview,
|
|
|
|
|
type CompanyPortabilityImport,
|
|
|
|
|
} from "./company-portability.js";
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
|
2026-02-16 13:31:47 -06:00
|
|
|
export {
|
|
|
|
|
createAgentSchema,
|
2026-02-19 13:02:25 -06:00
|
|
|
createAgentHireSchema,
|
2026-02-16 13:31:47 -06:00
|
|
|
updateAgentSchema,
|
2026-03-17 13:42:00 -05:00
|
|
|
agentInstructionsBundleModeSchema,
|
|
|
|
|
updateAgentInstructionsBundleSchema,
|
|
|
|
|
upsertAgentInstructionsFileSchema,
|
2026-03-02 14:21:24 -06:00
|
|
|
updateAgentInstructionsPathSchema,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
createAgentKeySchema,
|
2026-03-26 20:06:29 -05:00
|
|
|
agentMineInboxQuerySchema,
|
2026-02-17 12:24:38 -06:00
|
|
|
wakeAgentSchema,
|
2026-02-19 14:01:40 -06:00
|
|
|
resetAgentSessionSchema,
|
2026-02-20 12:50:23 -06:00
|
|
|
testAdapterEnvironmentSchema,
|
2026-02-19 09:10:38 -06:00
|
|
|
agentPermissionsSchema,
|
|
|
|
|
updateAgentPermissionsSchema,
|
2026-02-16 13:31:47 -06:00
|
|
|
type CreateAgent,
|
2026-02-19 13:02:25 -06:00
|
|
|
type CreateAgentHire,
|
2026-02-16 13:31:47 -06:00
|
|
|
type UpdateAgent,
|
2026-03-17 13:42:00 -05:00
|
|
|
type UpdateAgentInstructionsBundle,
|
|
|
|
|
type UpsertAgentInstructionsFile,
|
2026-03-02 14:21:24 -06:00
|
|
|
type UpdateAgentInstructionsPath,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
type CreateAgentKey,
|
2026-03-26 20:06:29 -05:00
|
|
|
type AgentMineInboxQuery,
|
2026-02-17 12:24:38 -06:00
|
|
|
type WakeAgent,
|
2026-02-19 14:01:40 -06:00
|
|
|
type ResetAgentSession,
|
2026-02-20 12:50:23 -06:00
|
|
|
type TestAdapterEnvironment,
|
2026-02-19 09:10:38 -06:00
|
|
|
type UpdateAgentPermissions,
|
2026-02-16 13:31:47 -06:00
|
|
|
} from "./agent.js";
|
|
|
|
|
|
|
|
|
|
export {
|
|
|
|
|
createProjectSchema,
|
|
|
|
|
updateProjectSchema,
|
2026-02-25 08:38:37 -06:00
|
|
|
createProjectWorkspaceSchema,
|
|
|
|
|
updateProjectWorkspaceSchema,
|
2026-03-10 09:03:31 -05:00
|
|
|
projectExecutionWorkspacePolicySchema,
|
2026-03-28 16:46:43 -05:00
|
|
|
projectWorkspaceRuntimeConfigSchema,
|
2026-02-16 13:31:47 -06:00
|
|
|
type CreateProject,
|
|
|
|
|
type UpdateProject,
|
2026-02-25 08:38:37 -06:00
|
|
|
type CreateProjectWorkspace,
|
|
|
|
|
type UpdateProjectWorkspace,
|
2026-03-10 09:03:31 -05:00
|
|
|
type ProjectExecutionWorkspacePolicy,
|
2026-02-16 13:31:47 -06:00
|
|
|
} from "./project.js";
|
|
|
|
|
|
|
|
|
|
export {
|
|
|
|
|
createIssueSchema,
|
2026-02-25 08:38:37 -06:00
|
|
|
createIssueLabelSchema,
|
2026-02-16 13:31:47 -06:00
|
|
|
updateIssueSchema,
|
2026-04-06 08:40:38 -05:00
|
|
|
issueExecutionPolicySchema,
|
|
|
|
|
issueExecutionStateSchema,
|
2026-03-10 09:03:31 -05:00
|
|
|
issueExecutionWorkspaceSettingsSchema,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
checkoutIssueSchema,
|
|
|
|
|
addIssueCommentSchema,
|
2026-02-19 13:02:25 -06:00
|
|
|
linkIssueApprovalSchema,
|
2026-02-20 10:31:56 -06:00
|
|
|
createIssueAttachmentMetadataSchema,
|
2026-03-13 21:30:48 -05:00
|
|
|
issueDocumentFormatSchema,
|
|
|
|
|
issueDocumentKeySchema,
|
|
|
|
|
upsertIssueDocumentSchema,
|
2026-03-26 08:24:57 -05:00
|
|
|
restoreIssueDocumentRevisionSchema,
|
2026-02-16 13:31:47 -06:00
|
|
|
type CreateIssue,
|
2026-02-25 08:38:37 -06:00
|
|
|
type CreateIssueLabel,
|
2026-02-16 13:31:47 -06:00
|
|
|
type UpdateIssue,
|
2026-03-10 09:03:31 -05:00
|
|
|
type IssueExecutionWorkspaceSettings,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
type CheckoutIssue,
|
|
|
|
|
type AddIssueComment,
|
2026-02-19 13:02:25 -06:00
|
|
|
type LinkIssueApproval,
|
2026-02-20 10:31:56 -06:00
|
|
|
type CreateIssueAttachmentMetadata,
|
2026-03-13 21:30:48 -05:00
|
|
|
type IssueDocumentFormat,
|
|
|
|
|
type UpsertIssueDocument,
|
2026-03-26 08:24:57 -05:00
|
|
|
type RestoreIssueDocumentRevision,
|
2026-02-16 13:31:47 -06:00
|
|
|
} from "./issue.js";
|
|
|
|
|
|
2026-03-13 17:12:25 -05:00
|
|
|
export {
|
|
|
|
|
createIssueWorkProductSchema,
|
|
|
|
|
updateIssueWorkProductSchema,
|
|
|
|
|
issueWorkProductTypeSchema,
|
|
|
|
|
issueWorkProductStatusSchema,
|
|
|
|
|
issueWorkProductReviewStateSchema,
|
|
|
|
|
type CreateIssueWorkProduct,
|
|
|
|
|
type UpdateIssueWorkProduct,
|
|
|
|
|
} from "./work-product.js";
|
|
|
|
|
|
|
|
|
|
export {
|
2026-03-28 12:15:34 -05:00
|
|
|
executionWorkspaceConfigSchema,
|
2026-03-13 17:12:25 -05:00
|
|
|
updateExecutionWorkspaceSchema,
|
|
|
|
|
executionWorkspaceStatusSchema,
|
2026-03-28 16:15:20 -05:00
|
|
|
executionWorkspaceCloseActionKindSchema,
|
|
|
|
|
executionWorkspaceCloseActionSchema,
|
|
|
|
|
executionWorkspaceCloseGitReadinessSchema,
|
|
|
|
|
executionWorkspaceCloseLinkedIssueSchema,
|
|
|
|
|
executionWorkspaceCloseReadinessSchema,
|
|
|
|
|
executionWorkspaceCloseReadinessStateSchema,
|
2026-03-13 17:12:25 -05:00
|
|
|
type UpdateExecutionWorkspace,
|
|
|
|
|
} from "./execution-workspace.js";
|
|
|
|
|
|
2026-02-16 13:31:47 -06:00
|
|
|
export {
|
|
|
|
|
createGoalSchema,
|
|
|
|
|
updateGoalSchema,
|
|
|
|
|
type CreateGoal,
|
|
|
|
|
type UpdateGoal,
|
|
|
|
|
} from "./goal.js";
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
|
|
|
|
|
export {
|
|
|
|
|
createApprovalSchema,
|
|
|
|
|
resolveApprovalSchema,
|
2026-02-19 09:10:38 -06:00
|
|
|
requestApprovalRevisionSchema,
|
|
|
|
|
resubmitApprovalSchema,
|
|
|
|
|
addApprovalCommentSchema,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
type CreateApproval,
|
|
|
|
|
type ResolveApproval,
|
2026-02-19 09:10:38 -06:00
|
|
|
type RequestApprovalRevision,
|
|
|
|
|
type ResubmitApproval,
|
|
|
|
|
type AddApprovalComment,
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
} from "./approval.js";
|
|
|
|
|
|
2026-02-19 15:43:43 -06:00
|
|
|
export {
|
|
|
|
|
envBindingPlainSchema,
|
|
|
|
|
envBindingSecretRefSchema,
|
|
|
|
|
envBindingSchema,
|
|
|
|
|
envConfigSchema,
|
|
|
|
|
createSecretSchema,
|
|
|
|
|
rotateSecretSchema,
|
|
|
|
|
updateSecretSchema,
|
|
|
|
|
type CreateSecret,
|
|
|
|
|
type RotateSecret,
|
|
|
|
|
type UpdateSecret,
|
|
|
|
|
} from "./secret.js";
|
|
|
|
|
|
2026-03-19 08:39:24 -05:00
|
|
|
export {
|
|
|
|
|
createRoutineSchema,
|
|
|
|
|
updateRoutineSchema,
|
|
|
|
|
createRoutineTriggerSchema,
|
|
|
|
|
updateRoutineTriggerSchema,
|
2026-04-02 11:38:57 -05:00
|
|
|
routineVariableSchema,
|
2026-03-19 08:39:24 -05:00
|
|
|
runRoutineSchema,
|
|
|
|
|
rotateRoutineTriggerSecretSchema,
|
|
|
|
|
type CreateRoutine,
|
|
|
|
|
type UpdateRoutine,
|
|
|
|
|
type CreateRoutineTrigger,
|
|
|
|
|
type UpdateRoutineTrigger,
|
|
|
|
|
type RunRoutine,
|
|
|
|
|
type RotateRoutineTriggerSecret,
|
|
|
|
|
} from "./routine.js";
|
|
|
|
|
|
Expand data model with companies, approvals, costs, and heartbeats
Add new DB schemas: companies, agent_api_keys, approvals, cost_events,
heartbeat_runs, issue_comments. Add corresponding shared types and
validators. Update existing schemas (agents, goals, issues, projects)
with new fields for company association, budgets, and richer metadata.
Generate initial Drizzle migration. Update seed data.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-17 09:07:22 -06:00
|
|
|
export {
|
|
|
|
|
createCostEventSchema,
|
|
|
|
|
updateBudgetSchema,
|
|
|
|
|
type CreateCostEvent,
|
|
|
|
|
type UpdateBudget,
|
|
|
|
|
} from "./cost.js";
|
2026-02-20 12:50:23 -06:00
|
|
|
|
2026-03-14 22:00:12 -05:00
|
|
|
export {
|
|
|
|
|
createFinanceEventSchema,
|
|
|
|
|
type CreateFinanceEvent,
|
|
|
|
|
} from "./finance.js";
|
|
|
|
|
|
2026-02-20 12:50:23 -06:00
|
|
|
export {
|
|
|
|
|
createAssetImageMetadataSchema,
|
|
|
|
|
type CreateAssetImageMetadata,
|
|
|
|
|
} from "./asset.js";
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
|
|
|
|
|
export {
|
|
|
|
|
createCompanyInviteSchema,
|
2026-03-07 18:19:06 -06:00
|
|
|
createOpenClawInvitePromptSchema,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
acceptInviteSchema,
|
feat: implement multi-user access and invite flows (#3784)
## Thinking Path
> - Paperclip is the control plane for autonomous AI companies.
> - V1 needs to stay local-first while also supporting shared,
authenticated deployments.
> - Human operators need real identities, company membership, invite
flows, profile surfaces, and company-scoped access controls.
> - Agents and operators also need the existing issue, inbox, workspace,
approval, and plugin flows to keep working under those authenticated
boundaries.
> - This branch accumulated the multi-user implementation, follow-up QA
fixes, workspace/runtime refinements, invite UX improvements,
release-branch conflict resolution, and review hardening.
> - This pull request consolidates that branch onto the current `master`
branch as a single reviewable PR.
> - The benefit is a complete multi-user implementation path with tests
and docs carried forward without dropping existing branch work.
## What Changed
- Added authenticated human-user access surfaces: auth/session routes,
company user directory, profile settings, company access/member
management, join requests, and invite management.
- Added invite creation, invite landing, onboarding, logo/branding,
invite grants, deduped join requests, and authenticated multi-user E2E
coverage.
- Tightened company-scoped and instance-admin authorization across
board, plugin, adapter, access, issue, and workspace routes.
- Added profile-image URL validation hardening, avatar preservation on
name-only profile updates, and join-request uniqueness migration cleanup
for pending human requests.
- Added an atomic member role/status/grants update path so Company
Access saves no longer leave partially updated permissions.
- Improved issue chat, inbox, assignee identity rendering,
sidebar/account/company navigation, workspace routing, and execution
workspace reuse behavior for multi-user operation.
- Added and updated server/UI tests covering auth, invites, membership,
issue workspace inheritance, plugin authz, inbox/chat behavior, and
multi-user flows.
- Merged current `public-gh/master` into this branch, resolved all
conflicts, and verified no `pnpm-lock.yaml` change is included in this
PR diff.
## Verification
- `pnpm exec vitest run server/src/__tests__/issues-service.test.ts
ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx`
- `pnpm run preflight:workspace-links && pnpm exec vitest run
server/src/__tests__/plugin-routes-authz.test.ts`
- `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts
server/src/__tests__/workspace-runtime-service-authz.test.ts
server/src/__tests__/access-validators.test.ts`
- `pnpm exec vitest run
server/src/__tests__/authz-company-access.test.ts
server/src/__tests__/routines-routes.test.ts
server/src/__tests__/sidebar-preferences-routes.test.ts
server/src/__tests__/approval-routes-idempotency.test.ts
server/src/__tests__/openclaw-invite-prompt-route.test.ts
server/src/__tests__/agent-cross-tenant-authz-routes.test.ts
server/src/__tests__/routines-e2e.test.ts`
- `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts
ui/src/pages/CompanyAccess.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/db typecheck && pnpm --filter @paperclipai/server
typecheck`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/server typecheck`
- `pnpm --filter @paperclipai/ui typecheck`
- `pnpm db:generate`
- `npx playwright test --config tests/e2e/playwright.config.ts --list`
- Confirmed branch has no uncommitted changes and is `0` commits behind
`public-gh/master` before PR creation.
- Confirmed no `pnpm-lock.yaml` change is staged or present in the PR
diff.
## Risks
- High review surface area: this PR contains the accumulated multi-user
branch plus follow-up fixes, so reviewers should focus especially on
company-boundary enforcement and authenticated-vs-local deployment
behavior.
- UI behavior changed across invites, inbox, issue chat, access
settings, and sidebar navigation; no browser screenshots are included in
this branch-consolidation PR.
- Plugin install, upgrade, and lifecycle/config mutations now require
instance-admin access, which is intentional but may change expectations
for non-admin board users.
- A join-request dedupe migration rejects duplicate pending human
requests before creating unique indexes; deployments with unusual
historical duplicates should review the migration behavior.
- Company member role/status/grant saves now use a new combined
endpoint; older separate endpoints remain for compatibility.
- Full production build was not run locally in this heartbeat; CI should
cover the full matrix.
## Model Used
- OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use
environment. Exact deployed model identifier and context window were not
exposed by the runtime.
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
Note on screenshots: this is a branch-consolidation PR for an
already-developed multi-user branch, and no browser screenshots were
captured during this heartbeat.
---------
Co-authored-by: dotta <dotta@example.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-17 09:44:19 -05:00
|
|
|
listCompanyInvitesQuerySchema,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
listJoinRequestsQuerySchema,
|
2026-02-26 16:33:20 -06:00
|
|
|
claimJoinRequestApiKeySchema,
|
2026-03-23 07:48:03 -05:00
|
|
|
boardCliAuthAccessLevelSchema,
|
|
|
|
|
createCliAuthChallengeSchema,
|
|
|
|
|
resolveCliAuthChallengeSchema,
|
feat: implement multi-user access and invite flows (#3784)
## Thinking Path
> - Paperclip is the control plane for autonomous AI companies.
> - V1 needs to stay local-first while also supporting shared,
authenticated deployments.
> - Human operators need real identities, company membership, invite
flows, profile surfaces, and company-scoped access controls.
> - Agents and operators also need the existing issue, inbox, workspace,
approval, and plugin flows to keep working under those authenticated
boundaries.
> - This branch accumulated the multi-user implementation, follow-up QA
fixes, workspace/runtime refinements, invite UX improvements,
release-branch conflict resolution, and review hardening.
> - This pull request consolidates that branch onto the current `master`
branch as a single reviewable PR.
> - The benefit is a complete multi-user implementation path with tests
and docs carried forward without dropping existing branch work.
## What Changed
- Added authenticated human-user access surfaces: auth/session routes,
company user directory, profile settings, company access/member
management, join requests, and invite management.
- Added invite creation, invite landing, onboarding, logo/branding,
invite grants, deduped join requests, and authenticated multi-user E2E
coverage.
- Tightened company-scoped and instance-admin authorization across
board, plugin, adapter, access, issue, and workspace routes.
- Added profile-image URL validation hardening, avatar preservation on
name-only profile updates, and join-request uniqueness migration cleanup
for pending human requests.
- Added an atomic member role/status/grants update path so Company
Access saves no longer leave partially updated permissions.
- Improved issue chat, inbox, assignee identity rendering,
sidebar/account/company navigation, workspace routing, and execution
workspace reuse behavior for multi-user operation.
- Added and updated server/UI tests covering auth, invites, membership,
issue workspace inheritance, plugin authz, inbox/chat behavior, and
multi-user flows.
- Merged current `public-gh/master` into this branch, resolved all
conflicts, and verified no `pnpm-lock.yaml` change is included in this
PR diff.
## Verification
- `pnpm exec vitest run server/src/__tests__/issues-service.test.ts
ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx`
- `pnpm run preflight:workspace-links && pnpm exec vitest run
server/src/__tests__/plugin-routes-authz.test.ts`
- `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts
server/src/__tests__/workspace-runtime-service-authz.test.ts
server/src/__tests__/access-validators.test.ts`
- `pnpm exec vitest run
server/src/__tests__/authz-company-access.test.ts
server/src/__tests__/routines-routes.test.ts
server/src/__tests__/sidebar-preferences-routes.test.ts
server/src/__tests__/approval-routes-idempotency.test.ts
server/src/__tests__/openclaw-invite-prompt-route.test.ts
server/src/__tests__/agent-cross-tenant-authz-routes.test.ts
server/src/__tests__/routines-e2e.test.ts`
- `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts
ui/src/pages/CompanyAccess.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/db typecheck && pnpm --filter @paperclipai/server
typecheck`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/server typecheck`
- `pnpm --filter @paperclipai/ui typecheck`
- `pnpm db:generate`
- `npx playwright test --config tests/e2e/playwright.config.ts --list`
- Confirmed branch has no uncommitted changes and is `0` commits behind
`public-gh/master` before PR creation.
- Confirmed no `pnpm-lock.yaml` change is staged or present in the PR
diff.
## Risks
- High review surface area: this PR contains the accumulated multi-user
branch plus follow-up fixes, so reviewers should focus especially on
company-boundary enforcement and authenticated-vs-local deployment
behavior.
- UI behavior changed across invites, inbox, issue chat, access
settings, and sidebar navigation; no browser screenshots are included in
this branch-consolidation PR.
- Plugin install, upgrade, and lifecycle/config mutations now require
instance-admin access, which is intentional but may change expectations
for non-admin board users.
- A join-request dedupe migration rejects duplicate pending human
requests before creating unique indexes; deployments with unusual
historical duplicates should review the migration behavior.
- Company member role/status/grant saves now use a new combined
endpoint; older separate endpoints remain for compatibility.
- Full production build was not run locally in this heartbeat; CI should
cover the full matrix.
## Model Used
- OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use
environment. Exact deployed model identifier and context window were not
exposed by the runtime.
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
Note on screenshots: this is a branch-consolidation PR for an
already-developed multi-user branch, and no browser screenshots were
captured during this heartbeat.
---------
Co-authored-by: dotta <dotta@example.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-17 09:44:19 -05:00
|
|
|
currentUserProfileSchema,
|
|
|
|
|
authSessionSchema,
|
|
|
|
|
updateCurrentUserProfileSchema,
|
|
|
|
|
updateCompanyMemberSchema,
|
|
|
|
|
updateCompanyMemberWithPermissionsSchema,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
updateMemberPermissionsSchema,
|
feat: implement multi-user access and invite flows (#3784)
## Thinking Path
> - Paperclip is the control plane for autonomous AI companies.
> - V1 needs to stay local-first while also supporting shared,
authenticated deployments.
> - Human operators need real identities, company membership, invite
flows, profile surfaces, and company-scoped access controls.
> - Agents and operators also need the existing issue, inbox, workspace,
approval, and plugin flows to keep working under those authenticated
boundaries.
> - This branch accumulated the multi-user implementation, follow-up QA
fixes, workspace/runtime refinements, invite UX improvements,
release-branch conflict resolution, and review hardening.
> - This pull request consolidates that branch onto the current `master`
branch as a single reviewable PR.
> - The benefit is a complete multi-user implementation path with tests
and docs carried forward without dropping existing branch work.
## What Changed
- Added authenticated human-user access surfaces: auth/session routes,
company user directory, profile settings, company access/member
management, join requests, and invite management.
- Added invite creation, invite landing, onboarding, logo/branding,
invite grants, deduped join requests, and authenticated multi-user E2E
coverage.
- Tightened company-scoped and instance-admin authorization across
board, plugin, adapter, access, issue, and workspace routes.
- Added profile-image URL validation hardening, avatar preservation on
name-only profile updates, and join-request uniqueness migration cleanup
for pending human requests.
- Added an atomic member role/status/grants update path so Company
Access saves no longer leave partially updated permissions.
- Improved issue chat, inbox, assignee identity rendering,
sidebar/account/company navigation, workspace routing, and execution
workspace reuse behavior for multi-user operation.
- Added and updated server/UI tests covering auth, invites, membership,
issue workspace inheritance, plugin authz, inbox/chat behavior, and
multi-user flows.
- Merged current `public-gh/master` into this branch, resolved all
conflicts, and verified no `pnpm-lock.yaml` change is included in this
PR diff.
## Verification
- `pnpm exec vitest run server/src/__tests__/issues-service.test.ts
ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx`
- `pnpm run preflight:workspace-links && pnpm exec vitest run
server/src/__tests__/plugin-routes-authz.test.ts`
- `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts
server/src/__tests__/workspace-runtime-service-authz.test.ts
server/src/__tests__/access-validators.test.ts`
- `pnpm exec vitest run
server/src/__tests__/authz-company-access.test.ts
server/src/__tests__/routines-routes.test.ts
server/src/__tests__/sidebar-preferences-routes.test.ts
server/src/__tests__/approval-routes-idempotency.test.ts
server/src/__tests__/openclaw-invite-prompt-route.test.ts
server/src/__tests__/agent-cross-tenant-authz-routes.test.ts
server/src/__tests__/routines-e2e.test.ts`
- `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts
ui/src/pages/CompanyAccess.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/db typecheck && pnpm --filter @paperclipai/server
typecheck`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/server typecheck`
- `pnpm --filter @paperclipai/ui typecheck`
- `pnpm db:generate`
- `npx playwright test --config tests/e2e/playwright.config.ts --list`
- Confirmed branch has no uncommitted changes and is `0` commits behind
`public-gh/master` before PR creation.
- Confirmed no `pnpm-lock.yaml` change is staged or present in the PR
diff.
## Risks
- High review surface area: this PR contains the accumulated multi-user
branch plus follow-up fixes, so reviewers should focus especially on
company-boundary enforcement and authenticated-vs-local deployment
behavior.
- UI behavior changed across invites, inbox, issue chat, access
settings, and sidebar navigation; no browser screenshots are included in
this branch-consolidation PR.
- Plugin install, upgrade, and lifecycle/config mutations now require
instance-admin access, which is intentional but may change expectations
for non-admin board users.
- A join-request dedupe migration rejects duplicate pending human
requests before creating unique indexes; deployments with unusual
historical duplicates should review the migration behavior.
- Company member role/status/grant saves now use a new combined
endpoint; older separate endpoints remain for compatibility.
- Full production build was not run locally in this heartbeat; CI should
cover the full matrix.
## Model Used
- OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use
environment. Exact deployed model identifier and context window were not
exposed by the runtime.
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
Note on screenshots: this is a branch-consolidation PR for an
already-developed multi-user branch, and no browser screenshots were
captured during this heartbeat.
---------
Co-authored-by: dotta <dotta@example.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-17 09:44:19 -05:00
|
|
|
searchAdminUsersQuerySchema,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
updateUserCompanyAccessSchema,
|
|
|
|
|
type CreateCompanyInvite,
|
2026-03-07 18:19:06 -06:00
|
|
|
type CreateOpenClawInvitePrompt,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
type AcceptInvite,
|
feat: implement multi-user access and invite flows (#3784)
## Thinking Path
> - Paperclip is the control plane for autonomous AI companies.
> - V1 needs to stay local-first while also supporting shared,
authenticated deployments.
> - Human operators need real identities, company membership, invite
flows, profile surfaces, and company-scoped access controls.
> - Agents and operators also need the existing issue, inbox, workspace,
approval, and plugin flows to keep working under those authenticated
boundaries.
> - This branch accumulated the multi-user implementation, follow-up QA
fixes, workspace/runtime refinements, invite UX improvements,
release-branch conflict resolution, and review hardening.
> - This pull request consolidates that branch onto the current `master`
branch as a single reviewable PR.
> - The benefit is a complete multi-user implementation path with tests
and docs carried forward without dropping existing branch work.
## What Changed
- Added authenticated human-user access surfaces: auth/session routes,
company user directory, profile settings, company access/member
management, join requests, and invite management.
- Added invite creation, invite landing, onboarding, logo/branding,
invite grants, deduped join requests, and authenticated multi-user E2E
coverage.
- Tightened company-scoped and instance-admin authorization across
board, plugin, adapter, access, issue, and workspace routes.
- Added profile-image URL validation hardening, avatar preservation on
name-only profile updates, and join-request uniqueness migration cleanup
for pending human requests.
- Added an atomic member role/status/grants update path so Company
Access saves no longer leave partially updated permissions.
- Improved issue chat, inbox, assignee identity rendering,
sidebar/account/company navigation, workspace routing, and execution
workspace reuse behavior for multi-user operation.
- Added and updated server/UI tests covering auth, invites, membership,
issue workspace inheritance, plugin authz, inbox/chat behavior, and
multi-user flows.
- Merged current `public-gh/master` into this branch, resolved all
conflicts, and verified no `pnpm-lock.yaml` change is included in this
PR diff.
## Verification
- `pnpm exec vitest run server/src/__tests__/issues-service.test.ts
ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx`
- `pnpm run preflight:workspace-links && pnpm exec vitest run
server/src/__tests__/plugin-routes-authz.test.ts`
- `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts
server/src/__tests__/workspace-runtime-service-authz.test.ts
server/src/__tests__/access-validators.test.ts`
- `pnpm exec vitest run
server/src/__tests__/authz-company-access.test.ts
server/src/__tests__/routines-routes.test.ts
server/src/__tests__/sidebar-preferences-routes.test.ts
server/src/__tests__/approval-routes-idempotency.test.ts
server/src/__tests__/openclaw-invite-prompt-route.test.ts
server/src/__tests__/agent-cross-tenant-authz-routes.test.ts
server/src/__tests__/routines-e2e.test.ts`
- `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts
ui/src/pages/CompanyAccess.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/db typecheck && pnpm --filter @paperclipai/server
typecheck`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/server typecheck`
- `pnpm --filter @paperclipai/ui typecheck`
- `pnpm db:generate`
- `npx playwright test --config tests/e2e/playwright.config.ts --list`
- Confirmed branch has no uncommitted changes and is `0` commits behind
`public-gh/master` before PR creation.
- Confirmed no `pnpm-lock.yaml` change is staged or present in the PR
diff.
## Risks
- High review surface area: this PR contains the accumulated multi-user
branch plus follow-up fixes, so reviewers should focus especially on
company-boundary enforcement and authenticated-vs-local deployment
behavior.
- UI behavior changed across invites, inbox, issue chat, access
settings, and sidebar navigation; no browser screenshots are included in
this branch-consolidation PR.
- Plugin install, upgrade, and lifecycle/config mutations now require
instance-admin access, which is intentional but may change expectations
for non-admin board users.
- A join-request dedupe migration rejects duplicate pending human
requests before creating unique indexes; deployments with unusual
historical duplicates should review the migration behavior.
- Company member role/status/grant saves now use a new combined
endpoint; older separate endpoints remain for compatibility.
- Full production build was not run locally in this heartbeat; CI should
cover the full matrix.
## Model Used
- OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use
environment. Exact deployed model identifier and context window were not
exposed by the runtime.
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
Note on screenshots: this is a branch-consolidation PR for an
already-developed multi-user branch, and no browser screenshots were
captured during this heartbeat.
---------
Co-authored-by: dotta <dotta@example.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-17 09:44:19 -05:00
|
|
|
type ListCompanyInvitesQuery,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
type ListJoinRequestsQuery,
|
2026-02-26 16:33:20 -06:00
|
|
|
type ClaimJoinRequestApiKey,
|
2026-03-23 07:48:03 -05:00
|
|
|
type BoardCliAuthAccessLevel,
|
|
|
|
|
type CreateCliAuthChallenge,
|
|
|
|
|
type ResolveCliAuthChallenge,
|
feat: implement multi-user access and invite flows (#3784)
## Thinking Path
> - Paperclip is the control plane for autonomous AI companies.
> - V1 needs to stay local-first while also supporting shared,
authenticated deployments.
> - Human operators need real identities, company membership, invite
flows, profile surfaces, and company-scoped access controls.
> - Agents and operators also need the existing issue, inbox, workspace,
approval, and plugin flows to keep working under those authenticated
boundaries.
> - This branch accumulated the multi-user implementation, follow-up QA
fixes, workspace/runtime refinements, invite UX improvements,
release-branch conflict resolution, and review hardening.
> - This pull request consolidates that branch onto the current `master`
branch as a single reviewable PR.
> - The benefit is a complete multi-user implementation path with tests
and docs carried forward without dropping existing branch work.
## What Changed
- Added authenticated human-user access surfaces: auth/session routes,
company user directory, profile settings, company access/member
management, join requests, and invite management.
- Added invite creation, invite landing, onboarding, logo/branding,
invite grants, deduped join requests, and authenticated multi-user E2E
coverage.
- Tightened company-scoped and instance-admin authorization across
board, plugin, adapter, access, issue, and workspace routes.
- Added profile-image URL validation hardening, avatar preservation on
name-only profile updates, and join-request uniqueness migration cleanup
for pending human requests.
- Added an atomic member role/status/grants update path so Company
Access saves no longer leave partially updated permissions.
- Improved issue chat, inbox, assignee identity rendering,
sidebar/account/company navigation, workspace routing, and execution
workspace reuse behavior for multi-user operation.
- Added and updated server/UI tests covering auth, invites, membership,
issue workspace inheritance, plugin authz, inbox/chat behavior, and
multi-user flows.
- Merged current `public-gh/master` into this branch, resolved all
conflicts, and verified no `pnpm-lock.yaml` change is included in this
PR diff.
## Verification
- `pnpm exec vitest run server/src/__tests__/issues-service.test.ts
ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx`
- `pnpm run preflight:workspace-links && pnpm exec vitest run
server/src/__tests__/plugin-routes-authz.test.ts`
- `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts
server/src/__tests__/workspace-runtime-service-authz.test.ts
server/src/__tests__/access-validators.test.ts`
- `pnpm exec vitest run
server/src/__tests__/authz-company-access.test.ts
server/src/__tests__/routines-routes.test.ts
server/src/__tests__/sidebar-preferences-routes.test.ts
server/src/__tests__/approval-routes-idempotency.test.ts
server/src/__tests__/openclaw-invite-prompt-route.test.ts
server/src/__tests__/agent-cross-tenant-authz-routes.test.ts
server/src/__tests__/routines-e2e.test.ts`
- `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts
ui/src/pages/CompanyAccess.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/db typecheck && pnpm --filter @paperclipai/server
typecheck`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/server typecheck`
- `pnpm --filter @paperclipai/ui typecheck`
- `pnpm db:generate`
- `npx playwright test --config tests/e2e/playwright.config.ts --list`
- Confirmed branch has no uncommitted changes and is `0` commits behind
`public-gh/master` before PR creation.
- Confirmed no `pnpm-lock.yaml` change is staged or present in the PR
diff.
## Risks
- High review surface area: this PR contains the accumulated multi-user
branch plus follow-up fixes, so reviewers should focus especially on
company-boundary enforcement and authenticated-vs-local deployment
behavior.
- UI behavior changed across invites, inbox, issue chat, access
settings, and sidebar navigation; no browser screenshots are included in
this branch-consolidation PR.
- Plugin install, upgrade, and lifecycle/config mutations now require
instance-admin access, which is intentional but may change expectations
for non-admin board users.
- A join-request dedupe migration rejects duplicate pending human
requests before creating unique indexes; deployments with unusual
historical duplicates should review the migration behavior.
- Company member role/status/grant saves now use a new combined
endpoint; older separate endpoints remain for compatibility.
- Full production build was not run locally in this heartbeat; CI should
cover the full matrix.
## Model Used
- OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use
environment. Exact deployed model identifier and context window were not
exposed by the runtime.
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
Note on screenshots: this is a branch-consolidation PR for an
already-developed multi-user branch, and no browser screenshots were
captured during this heartbeat.
---------
Co-authored-by: dotta <dotta@example.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-17 09:44:19 -05:00
|
|
|
type CurrentUserProfile,
|
|
|
|
|
type AuthSession,
|
|
|
|
|
type UpdateCurrentUserProfile,
|
|
|
|
|
type UpdateCompanyMember,
|
|
|
|
|
type UpdateCompanyMemberWithPermissions,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
type UpdateMemberPermissions,
|
feat: implement multi-user access and invite flows (#3784)
## Thinking Path
> - Paperclip is the control plane for autonomous AI companies.
> - V1 needs to stay local-first while also supporting shared,
authenticated deployments.
> - Human operators need real identities, company membership, invite
flows, profile surfaces, and company-scoped access controls.
> - Agents and operators also need the existing issue, inbox, workspace,
approval, and plugin flows to keep working under those authenticated
boundaries.
> - This branch accumulated the multi-user implementation, follow-up QA
fixes, workspace/runtime refinements, invite UX improvements,
release-branch conflict resolution, and review hardening.
> - This pull request consolidates that branch onto the current `master`
branch as a single reviewable PR.
> - The benefit is a complete multi-user implementation path with tests
and docs carried forward without dropping existing branch work.
## What Changed
- Added authenticated human-user access surfaces: auth/session routes,
company user directory, profile settings, company access/member
management, join requests, and invite management.
- Added invite creation, invite landing, onboarding, logo/branding,
invite grants, deduped join requests, and authenticated multi-user E2E
coverage.
- Tightened company-scoped and instance-admin authorization across
board, plugin, adapter, access, issue, and workspace routes.
- Added profile-image URL validation hardening, avatar preservation on
name-only profile updates, and join-request uniqueness migration cleanup
for pending human requests.
- Added an atomic member role/status/grants update path so Company
Access saves no longer leave partially updated permissions.
- Improved issue chat, inbox, assignee identity rendering,
sidebar/account/company navigation, workspace routing, and execution
workspace reuse behavior for multi-user operation.
- Added and updated server/UI tests covering auth, invites, membership,
issue workspace inheritance, plugin authz, inbox/chat behavior, and
multi-user flows.
- Merged current `public-gh/master` into this branch, resolved all
conflicts, and verified no `pnpm-lock.yaml` change is included in this
PR diff.
## Verification
- `pnpm exec vitest run server/src/__tests__/issues-service.test.ts
ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx`
- `pnpm run preflight:workspace-links && pnpm exec vitest run
server/src/__tests__/plugin-routes-authz.test.ts`
- `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts
server/src/__tests__/workspace-runtime-service-authz.test.ts
server/src/__tests__/access-validators.test.ts`
- `pnpm exec vitest run
server/src/__tests__/authz-company-access.test.ts
server/src/__tests__/routines-routes.test.ts
server/src/__tests__/sidebar-preferences-routes.test.ts
server/src/__tests__/approval-routes-idempotency.test.ts
server/src/__tests__/openclaw-invite-prompt-route.test.ts
server/src/__tests__/agent-cross-tenant-authz-routes.test.ts
server/src/__tests__/routines-e2e.test.ts`
- `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts
ui/src/pages/CompanyAccess.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/db typecheck && pnpm --filter @paperclipai/server
typecheck`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/server typecheck`
- `pnpm --filter @paperclipai/ui typecheck`
- `pnpm db:generate`
- `npx playwright test --config tests/e2e/playwright.config.ts --list`
- Confirmed branch has no uncommitted changes and is `0` commits behind
`public-gh/master` before PR creation.
- Confirmed no `pnpm-lock.yaml` change is staged or present in the PR
diff.
## Risks
- High review surface area: this PR contains the accumulated multi-user
branch plus follow-up fixes, so reviewers should focus especially on
company-boundary enforcement and authenticated-vs-local deployment
behavior.
- UI behavior changed across invites, inbox, issue chat, access
settings, and sidebar navigation; no browser screenshots are included in
this branch-consolidation PR.
- Plugin install, upgrade, and lifecycle/config mutations now require
instance-admin access, which is intentional but may change expectations
for non-admin board users.
- A join-request dedupe migration rejects duplicate pending human
requests before creating unique indexes; deployments with unusual
historical duplicates should review the migration behavior.
- Company member role/status/grant saves now use a new combined
endpoint; older separate endpoints remain for compatibility.
- Full production build was not run locally in this heartbeat; CI should
cover the full matrix.
## Model Used
- OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use
environment. Exact deployed model identifier and context window were not
exposed by the runtime.
## Checklist
- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge
Note on screenshots: this is a branch-consolidation PR for an
already-developed multi-user branch, and no browser screenshots were
captured during this heartbeat.
---------
Co-authored-by: dotta <dotta@example.com>
Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-17 09:44:19 -05:00
|
|
|
type SearchAdminUsersQuery,
|
feat: add auth/access foundation - deps, DB schema, shared types, and config
Add Better Auth, drizzle-orm, @dnd-kit, and remark-gfm dependencies.
Introduce DB schema for auth tables (user, session, account, verification),
company memberships, instance user roles, permission grants, invites, and
join requests. Add assigneeUserId to issues. Extend shared config schema
with deployment mode/exposure/auth settings, add access types and validators,
and wire up new API path constants.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 14:40:16 -06:00
|
|
|
type UpdateUserCompanyAccess,
|
|
|
|
|
} from "./access.js";
|
2026-03-13 16:22:34 -05:00
|
|
|
|
|
|
|
|
export {
|
|
|
|
|
jsonSchemaSchema,
|
|
|
|
|
pluginJobDeclarationSchema,
|
|
|
|
|
pluginWebhookDeclarationSchema,
|
|
|
|
|
pluginToolDeclarationSchema,
|
|
|
|
|
pluginUiSlotDeclarationSchema,
|
|
|
|
|
pluginLauncherActionDeclarationSchema,
|
|
|
|
|
pluginLauncherRenderDeclarationSchema,
|
|
|
|
|
pluginLauncherDeclarationSchema,
|
|
|
|
|
pluginManifestV1Schema,
|
|
|
|
|
installPluginSchema,
|
|
|
|
|
upsertPluginConfigSchema,
|
|
|
|
|
patchPluginConfigSchema,
|
|
|
|
|
updatePluginStatusSchema,
|
|
|
|
|
uninstallPluginSchema,
|
|
|
|
|
pluginStateScopeKeySchema,
|
|
|
|
|
setPluginStateSchema,
|
|
|
|
|
listPluginStateSchema,
|
|
|
|
|
type PluginJobDeclarationInput,
|
|
|
|
|
type PluginWebhookDeclarationInput,
|
|
|
|
|
type PluginToolDeclarationInput,
|
|
|
|
|
type PluginUiSlotDeclarationInput,
|
|
|
|
|
type PluginLauncherActionDeclarationInput,
|
|
|
|
|
type PluginLauncherRenderDeclarationInput,
|
|
|
|
|
type PluginLauncherDeclarationInput,
|
|
|
|
|
type PluginManifestV1Input,
|
|
|
|
|
type InstallPlugin,
|
|
|
|
|
type UpsertPluginConfig,
|
|
|
|
|
type PatchPluginConfig,
|
|
|
|
|
type UpdatePluginStatus,
|
|
|
|
|
type UninstallPlugin,
|
|
|
|
|
type PluginStateScopeKey,
|
|
|
|
|
type SetPluginState,
|
|
|
|
|
type ListPluginState,
|
|
|
|
|
} from "./plugin.js";
|