mirror of
https://github.com/alkimake/paperclip.git
synced 2026-06-15 18:30:39 +09:00
## Thinking Path > - Paperclip is the control plane for autonomous AI companies. > - V1 needs to stay local-first while also supporting shared, authenticated deployments. > - Human operators need real identities, company membership, invite flows, profile surfaces, and company-scoped access controls. > - Agents and operators also need the existing issue, inbox, workspace, approval, and plugin flows to keep working under those authenticated boundaries. > - This branch accumulated the multi-user implementation, follow-up QA fixes, workspace/runtime refinements, invite UX improvements, release-branch conflict resolution, and review hardening. > - This pull request consolidates that branch onto the current `master` branch as a single reviewable PR. > - The benefit is a complete multi-user implementation path with tests and docs carried forward without dropping existing branch work. ## What Changed - Added authenticated human-user access surfaces: auth/session routes, company user directory, profile settings, company access/member management, join requests, and invite management. - Added invite creation, invite landing, onboarding, logo/branding, invite grants, deduped join requests, and authenticated multi-user E2E coverage. - Tightened company-scoped and instance-admin authorization across board, plugin, adapter, access, issue, and workspace routes. - Added profile-image URL validation hardening, avatar preservation on name-only profile updates, and join-request uniqueness migration cleanup for pending human requests. - Added an atomic member role/status/grants update path so Company Access saves no longer leave partially updated permissions. - Improved issue chat, inbox, assignee identity rendering, sidebar/account/company navigation, workspace routing, and execution workspace reuse behavior for multi-user operation. - Added and updated server/UI tests covering auth, invites, membership, issue workspace inheritance, plugin authz, inbox/chat behavior, and multi-user flows. - Merged current `public-gh/master` into this branch, resolved all conflicts, and verified no `pnpm-lock.yaml` change is included in this PR diff. ## Verification - `pnpm exec vitest run server/src/__tests__/issues-service.test.ts ui/src/components/IssueChatThread.test.tsx ui/src/pages/Inbox.test.tsx` - `pnpm run preflight:workspace-links && pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts` - `pnpm exec vitest run server/src/__tests__/plugin-routes-authz.test.ts server/src/__tests__/workspace-runtime-service-authz.test.ts server/src/__tests__/access-validators.test.ts` - `pnpm exec vitest run server/src/__tests__/authz-company-access.test.ts server/src/__tests__/routines-routes.test.ts server/src/__tests__/sidebar-preferences-routes.test.ts server/src/__tests__/approval-routes-idempotency.test.ts server/src/__tests__/openclaw-invite-prompt-route.test.ts server/src/__tests__/agent-cross-tenant-authz-routes.test.ts server/src/__tests__/routines-e2e.test.ts` - `pnpm exec vitest run server/src/__tests__/auth-routes.test.ts ui/src/pages/CompanyAccess.test.tsx` - `pnpm --filter @paperclipai/shared typecheck && pnpm --filter @paperclipai/db typecheck && pnpm --filter @paperclipai/server typecheck` - `pnpm --filter @paperclipai/shared typecheck && pnpm --filter @paperclipai/server typecheck` - `pnpm --filter @paperclipai/ui typecheck` - `pnpm db:generate` - `npx playwright test --config tests/e2e/playwright.config.ts --list` - Confirmed branch has no uncommitted changes and is `0` commits behind `public-gh/master` before PR creation. - Confirmed no `pnpm-lock.yaml` change is staged or present in the PR diff. ## Risks - High review surface area: this PR contains the accumulated multi-user branch plus follow-up fixes, so reviewers should focus especially on company-boundary enforcement and authenticated-vs-local deployment behavior. - UI behavior changed across invites, inbox, issue chat, access settings, and sidebar navigation; no browser screenshots are included in this branch-consolidation PR. - Plugin install, upgrade, and lifecycle/config mutations now require instance-admin access, which is intentional but may change expectations for non-admin board users. - A join-request dedupe migration rejects duplicate pending human requests before creating unique indexes; deployments with unusual historical duplicates should review the migration behavior. - Company member role/status/grant saves now use a new combined endpoint; older separate endpoints remain for compatibility. - Full production build was not run locally in this heartbeat; CI should cover the full matrix. ## Model Used - OpenAI Codex coding agent, GPT-5-based model, CLI/tool-use environment. Exact deployed model identifier and context window were not exposed by the runtime. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] If this change affects the UI, I have included before/after screenshots - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] I will address all Greptile and reviewer comments before requesting merge Note on screenshots: this is a branch-consolidation PR for an already-developed multi-user branch, and no browser screenshots were captured during this heartbeat. --------- Co-authored-by: dotta <dotta@example.com> Co-authored-by: Paperclip <noreply@paperclip.ing> Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
195 lines
5.6 KiB
TypeScript
195 lines
5.6 KiB
TypeScript
import type { CSSProperties } from "react";
|
|
import { parseAgentMentionHref, parseProjectMentionHref, parseSkillMentionHref, parseUserMentionHref } from "@paperclipai/shared";
|
|
import { getAgentIcon } from "./agent-icons";
|
|
import { hexToRgb, pickTextColorForPillBg } from "./color-contrast";
|
|
|
|
export type ParsedMentionChip =
|
|
| {
|
|
kind: "agent";
|
|
agentId: string;
|
|
icon: string | null;
|
|
}
|
|
| {
|
|
kind: "project";
|
|
projectId: string;
|
|
color: string | null;
|
|
}
|
|
| {
|
|
kind: "user";
|
|
userId: string;
|
|
}
|
|
| {
|
|
kind: "skill";
|
|
skillId: string;
|
|
slug: string | null;
|
|
};
|
|
|
|
const iconMaskCache = new Map<string, string>();
|
|
|
|
export function parseMentionChipHref(href: string): ParsedMentionChip | null {
|
|
const agent = parseAgentMentionHref(href);
|
|
if (agent) {
|
|
return {
|
|
kind: "agent",
|
|
agentId: agent.agentId,
|
|
icon: agent.icon,
|
|
};
|
|
}
|
|
|
|
const project = parseProjectMentionHref(href);
|
|
if (project) {
|
|
return {
|
|
kind: "project",
|
|
projectId: project.projectId,
|
|
color: project.color,
|
|
};
|
|
}
|
|
|
|
const user = parseUserMentionHref(href);
|
|
if (user) {
|
|
return {
|
|
kind: "user",
|
|
userId: user.userId,
|
|
};
|
|
}
|
|
|
|
const skill = parseSkillMentionHref(href);
|
|
if (skill) {
|
|
return {
|
|
kind: "skill",
|
|
skillId: skill.skillId,
|
|
slug: skill.slug,
|
|
};
|
|
}
|
|
|
|
return null;
|
|
}
|
|
|
|
export function mentionChipInlineStyle(mention: ParsedMentionChip): CSSProperties | undefined {
|
|
const style: CSSProperties & Record<string, string> = {};
|
|
|
|
if (mention.kind === "project" && mention.color) {
|
|
const projectStyle = projectMentionColors(mention.color);
|
|
Object.assign(style, projectStyle);
|
|
style["--paperclip-mention-project-color"] = mention.color;
|
|
}
|
|
|
|
if (mention.kind === "agent") {
|
|
const iconMask = buildAgentIconMask(mention.icon);
|
|
if (iconMask) {
|
|
style["--paperclip-mention-icon-mask"] = iconMask;
|
|
}
|
|
}
|
|
|
|
return Object.keys(style).length > 0 ? (style as CSSProperties) : undefined;
|
|
}
|
|
|
|
export function applyMentionChipDecoration(element: HTMLElement, mention: ParsedMentionChip) {
|
|
clearMentionChipDecoration(element);
|
|
element.dataset.mentionKind = mention.kind;
|
|
element.setAttribute("contenteditable", "false");
|
|
element.classList.add("paperclip-mention-chip", `paperclip-mention-chip--${mention.kind}`);
|
|
if (mention.kind === "project") {
|
|
element.classList.add("paperclip-project-mention-chip");
|
|
}
|
|
|
|
const style = mentionChipInlineStyle(mention);
|
|
if (!style) return;
|
|
for (const [key, value] of Object.entries(style)) {
|
|
if (typeof value === "string") {
|
|
if (key.startsWith("--")) {
|
|
element.style.setProperty(key, value);
|
|
} else {
|
|
(element.style as CSSStyleDeclaration & Record<string, string>)[key] = value;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
export function clearMentionChipDecoration(element: HTMLElement) {
|
|
delete element.dataset.mentionKind;
|
|
element.classList.remove(
|
|
"paperclip-mention-chip",
|
|
"paperclip-mention-chip--agent",
|
|
"paperclip-mention-chip--project",
|
|
"paperclip-mention-chip--user",
|
|
"paperclip-mention-chip--skill",
|
|
"paperclip-project-mention-chip",
|
|
);
|
|
element.removeAttribute("contenteditable");
|
|
element.style.removeProperty("border-color");
|
|
element.style.removeProperty("background-color");
|
|
element.style.removeProperty("color");
|
|
element.style.removeProperty("--paperclip-mention-project-color");
|
|
element.style.removeProperty("--paperclip-mention-icon-mask");
|
|
}
|
|
|
|
function projectMentionColors(color: string): Pick<CSSProperties, "borderColor" | "backgroundColor" | "color"> {
|
|
const rgb = hexToRgb(color);
|
|
if (!rgb) return {};
|
|
return {
|
|
borderColor: color,
|
|
backgroundColor: `rgba(${rgb.r}, ${rgb.g}, ${rgb.b}, 0.22)`,
|
|
color: pickTextColorForPillBg(color),
|
|
};
|
|
}
|
|
|
|
function buildAgentIconMask(iconName: string | null): string | null {
|
|
const cacheKey = iconName ?? "__default__";
|
|
const cached = iconMaskCache.get(cacheKey);
|
|
if (cached) return cached;
|
|
|
|
const Icon = getAgentIcon(iconName);
|
|
const iconNode = resolveLucideIconNode(Icon);
|
|
if (!Array.isArray(iconNode) || iconNode.length === 0) return null;
|
|
|
|
const body = iconNode.map(([tag, attrs]) => {
|
|
const attrString = Object.entries(attrs)
|
|
.filter(([key]) => key !== "key")
|
|
.map(([key, value]) => `${key}="${escapeAttribute(String(value))}"`)
|
|
.join(" ");
|
|
return `<${tag}${attrString ? ` ${attrString}` : ""}></${tag}>`;
|
|
}).join("");
|
|
|
|
const svg =
|
|
`<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" ` +
|
|
`fill="none" stroke="#000" stroke-width="2" stroke-linecap="round" ` +
|
|
`stroke-linejoin="round">${body}</svg>`;
|
|
const url = `url("data:image/svg+xml,${encodeURIComponent(svg)}")`;
|
|
iconMaskCache.set(cacheKey, url);
|
|
return url;
|
|
}
|
|
|
|
function resolveLucideIconNode(
|
|
icon: unknown,
|
|
): Array<[string, Record<string, string>]> | null {
|
|
const staticIconNode = (
|
|
icon as {
|
|
iconNode?: Array<[string, Record<string, string>]>;
|
|
}
|
|
).iconNode;
|
|
if (Array.isArray(staticIconNode) && staticIconNode.length > 0) {
|
|
return staticIconNode;
|
|
}
|
|
|
|
const render = (
|
|
icon as {
|
|
render?: (props: Record<string, unknown>, ref: unknown) => {
|
|
props?: { iconNode?: Array<[string, Record<string, string>]> };
|
|
} | null;
|
|
}
|
|
).render;
|
|
const rendered = typeof render === "function" ? render({}, null) : null;
|
|
const renderedIconNode = rendered?.props?.iconNode;
|
|
return Array.isArray(renderedIconNode) && renderedIconNode.length > 0
|
|
? renderedIconNode
|
|
: null;
|
|
}
|
|
|
|
function escapeAttribute(value: string): string {
|
|
return value
|
|
.replaceAll("&", "&")
|
|
.replaceAll('"', """)
|
|
.replaceAll("<", "<")
|
|
.replaceAll(">", ">");
|
|
}
|