@tickernelz/paperclip-pro-server 2026.1016.2 → 2026.1017.1

package/dist/routes/agents.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AA2FvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAiEhF,OAAO,EACL,wBAAwB,EAWxB,KAAK,sBAAsB,EAE3B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAK5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACV,cAAc,EAUf,MAAM,kCAAkC,CAAC;AAuQ1C,wBAAgB,WAAW,CACzB,EAAE,EAAE,EAAE,EACN,OAAO,GAAE;IACP,cAAc,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,2BAA2B,GAAG,2BAA2B,CAAC,CAAC;IACrG,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,6EAA6E;IAC7E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC;;;;;OAKG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,IAAI,CAAC;IACvE;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,EAAE,6BAA6B,CAAC;QACvC,MAAM,EAAE,sBAAsB,CAAC;QAC/B,yEAAyE;QACzE,KAAK,CAAC,EAAE,sBAAsB,CAAC;QAC/B;;;WAGG;QACH,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;KAC7C,CAAC;CACE,8CAm/NP"}
+{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/routes/agents.ts"],"names":[],"mappings":"AAwCA,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AA6FvE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,sCAAsC,CAAC;AAiEhF,OAAO,EACL,wBAAwB,EAWxB,KAAK,sBAAsB,EAE3B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAK5B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,KAAK,EACV,cAAc,EAUf,MAAM,kCAAkC,CAAC;AAuQ1C,wBAAgB,WAAW,CACzB,EAAE,EAAE,EAAE,EACN,OAAO,GAAE;IACP,cAAc,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,2BAA2B,GAAG,2BAA2B,CAAC,CAAC;IACrG,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C,6EAA6E;IAC7E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,MAAM,EAAE,CAAC;IACtC;;;;;OAKG;IACH,6BAA6B,CAAC,EAAE,OAAO,CAAC;IACxC;;;OAGG;IACH,wBAAwB,CAAC,EAAE,CAAC,OAAO,EAAE,wBAAwB,KAAK,IAAI,CAAC;IACvE;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE;QAChB,OAAO,EAAE,6BAA6B,CAAC;QACvC,MAAM,EAAE,sBAAsB,CAAC;QAC/B,yEAAyE;QACzE,KAAK,CAAC,EAAE,sBAAsB,CAAC;QAC/B;;;WAGG;QACH,kBAAkB,CAAC,EAAE,sBAAsB,CAAC;KAC7C,CAAC;CACE,8CA2jOP"}

package/dist/routes/agents.js

@@ -35,7 +35,7 @@ import path from "node:path";
 import { activityLog, agents as agentsTable, chatConversations, companies, heartbeatRuns, issues as issuesTable, projects as projectsTable } from "@tickernelz/paperclip-pro-db";
 import { and, desc, eq, inArray, not, sql } from "drizzle-orm";
 import { sha256Digest } from "../services/feedback-redaction.js";
-import { agentAdapterConfigBatchPreviewSchema, agentAdapterConfigBatchUpdateSchema, agentSkillSyncSchema, agentMineInboxQuerySchema, ADAPTER_AGNOSTIC_KEYS, AGENT_DEFAULT_MAX_CONCURRENT_RUNS, createAgentKeySchema, createAgentHireSchema, createAgentSchema, deriveAgentUrlKey, isUuidLike, normalizeIssueIdentifier, resetAgentSessionSchema, testAdapterEnvironmentSchema, upsertAgentInstructionsFileSchema, restoreAgentInstructionSchema, resolveAgentInstructionCandidateSchema, updateAgentInstructionsBundleSchema, updateAgentPermissionsSchema, updateAgentInstructionsPathSchema, wakeAgentSchema, updateAgentSchema, supportedEnvironmentDriversForAdapter, LOW_TRUST_REVIEW_PRESET, startAdapterAuthSessionRequestSchema, startClaudeSetupTokenSessionRequestSchema, submitBrowserCodeRequestSchema, toAccountHandle, } from "@tickernelz/paperclip-pro-shared";
+import { agentAdapterConfigBatchPreviewSchema, agentAdapterConfigBatchUpdateSchema, agentSkillSyncSchema, agentMineInboxQuerySchema, ADAPTER_AGNOSTIC_KEYS, AGENT_DEFAULT_MAX_CONCURRENT_RUNS, AGENT_MAX_MAX_CONCURRENT_RUNS, AGENT_MIN_MAX_CONCURRENT_RUNS, createAgentKeySchema, createAgentHireSchema, createAgentSchema, deriveAgentUrlKey, isUuidLike, normalizeIssueIdentifier, resetAgentSessionSchema, testAdapterEnvironmentSchema, upsertAgentInstructionsFileSchema, restoreAgentInstructionSchema, resolveAgentInstructionCandidateSchema, updateAgentInstructionsBundleSchema, updateAgentPermissionsSchema, updateAgentInstructionsPathSchema, wakeAgentSchema, updateAgentSchema, supportedEnvironmentDriversForAdapter, LOW_TRUST_REVIEW_PRESET, startAdapterAuthSessionRequestSchema, startClaudeSetupTokenSessionRequestSchema, submitBrowserCodeRequestSchema, toAccountHandle, } from "@tickernelz/paperclip-pro-shared";
 import { isForbiddenConfigEnvKey, normalizePaperclipRunnerAdapterConfig, PAPERCLIP_OPERATIONAL_SKILL_KEY, parseObject, resolvePaperclipInstanceRootForAdapter, readPaperclipSkillSyncPreference, writePaperclipSkillSyncPreference, } from "@tickernelz/paperclip-pro-adapter-utils/server-utils";
 import { trackAgentCreated } from "@tickernelz/paperclip-pro-shared/telemetry";
 import { validate } from "../middleware/validate.js";
@@ -52,7 +52,7 @@ import { normalizeAgentFallbackModelsConfig } from "../services/model-fallback.j
 import { ONBOARDING_FIRST_TASK_SKILL_KEY, PAPERCLIP_CORE_SKILL_KEYS } from "../services/company-skills.js";
 import { createRunSecretRedactionRegistry } from "../services/run-secret-redaction.js";
 import { assertNoAgentAuthorityEscalation } from "../services/agent-authority-escalation.js";
-import { assertAuthenticated, assertBoard, assertBoardOrAgentAuthority, assertCompanyAccess, assertInstanceAdmin, buildActorSecretContext, getAccessibleResource, getActorInfo, hasCompanyAccess } from "./authz.js";
+import { assertAuthenticated, assertBoard, assertBoardOrAgentAuthority, assertCompanyAccess, assertInstanceAdmin, buildActorSecretContext, getAccessibleResource, getActorInfo, hasCompanyAccess, isCompanyOwnerAgentActor } from "./authz.js";
 import { toCompactIssue } from "./issues.js";
 import { runAdapterLoginStartSpine } from "./adapter-login-route-spine.js";
 import { isLoginCommandSupportedAdapterType } from "../services/login-command.js";
@@ -1490,6 +1490,51 @@ export function agentRoutes(db, options = {}) {
         if (previousRaw !== nextRaw)
             assertInstanceAdmin(req);
     }
+    function effectiveMaxConcurrentRuns(runtimeConfig) {
+        const configured = parseNumberLike(asRecord(asRecord(runtimeConfig)?.heartbeat)?.maxConcurrentRuns);
+        if (configured == null)
+            return AGENT_DEFAULT_MAX_CONCURRENT_RUNS;
+        return Math.max(AGENT_MIN_MAX_CONCURRENT_RUNS, Math.min(AGENT_MAX_MAX_CONCURRENT_RUNS, Math.floor(configured)));
+    }
+    function withStoredMaxConcurrentRuns(nextRuntimeConfig, previousRuntimeConfig) {
+        const nextHeartbeat = asRecord(nextRuntimeConfig.heartbeat);
+        if (nextHeartbeat && hasOwn(nextHeartbeat, "maxConcurrentRuns"))
+            return nextRuntimeConfig;
+        const storedHeartbeat = asRecord(asRecord(previousRuntimeConfig)?.heartbeat);
+        if (!storedHeartbeat || !hasOwn(storedHeartbeat, "maxConcurrentRuns"))
+            return nextRuntimeConfig;
+        return {
+            ...nextRuntimeConfig,
+            heartbeat: { ...(nextHeartbeat ?? {}), maxConcurrentRuns: storedHeartbeat.maxConcurrentRuns },
+        };
+    }
+    async function assertAgentKeepsMaxConcurrentRuns(req, target, nextRuntimeConfig, previousRuntimeConfig, surface) {
+        if (req.actor.type !== "agent" || isCompanyOwnerAgentActor(req))
+            return;
+        const currentValue = effectiveMaxConcurrentRuns(previousRuntimeConfig);
+        const requestedValue = effectiveMaxConcurrentRuns(nextRuntimeConfig);
+        if (currentValue === requestedValue)
+            return;
+        const actor = getActorInfo(req);
+        await logActivity(db, {
+            companyId: target.companyId,
+            actorType: actor.actorType,
+            actorId: actor.actorId,
+            agentId: actor.agentId,
+            runId: actor.runId,
+            agentApiKeyId: actor.agentApiKeyId,
+            action: "agent.max_concurrent_runs_change_rejected",
+            entityType: "agent",
+            entityId: target.id,
+            details: {
+                surface,
+                field: "runtimeConfig.heartbeat.maxConcurrentRuns",
+                currentValue,
+                requestedValue,
+            },
+        });
+        throw forbidden("Agent-authenticated callers cannot change runtimeConfig.heartbeat.maxConcurrentRuns; ask a board user to change it.", { code: "agent_max_concurrent_runs_change_forbidden" });
+    }
     async function assertAgentDefaultEnvironmentSelection(companyId, environmentId, options) {
         if (environmentId === undefined || environmentId === null)
             return;
@@ -1972,7 +2017,7 @@ export function agentRoutes(db, options = {}) {
         throw forbidden(decision.explanation, authorizationDeniedDetails(decision));
     }
     function assertNoAgentInstructionsConfigMutation(req, adapterConfig, path = "adapterConfig") {
-        if (req.actor.type !== "agent" || !adapterConfig)
+        if (req.actor.type !== "agent" || !adapterConfig || isCompanyOwnerAgentActor(req))
             return;
         const changedSensitiveKeys = KNOWN_INSTRUCTIONS_BUNDLE_KEYS
             .filter((key) => adapterConfig[key] !== undefined)
@@ -1990,13 +2035,13 @@ export function agentRoutes(db, options = {}) {
         return KNOWN_INSTRUCTIONS_BUNDLE_KEYS.some((key) => adapterConfig[key] !== undefined);
     }
     function assertNoAgentAdapterConfigMutation(req, adapterConfig, path = "adapterConfig") {
-        if (req.actor.type === "agent" && ["dotAttachmentAccess", "dotWorkspaceAccess", "dotBindingId"].some(key => hasOwn(adapterConfig, key)))
+        if (req.actor.type === "agent" && !isCompanyOwnerAgentActor(req) && ["dotAttachmentAccess", "dotWorkspaceAccess", "dotBindingId"].some(key => hasOwn(adapterConfig, key)))
             throw forbidden("Only an operator can configure Dot attachment access, workspace access, or pairing.");
         assertNoAgentInstructionsConfigMutation(req, adapterConfig, path);
         assertNoAgentHostWorkspaceCommandMutation(req, collectAgentAdapterWorkspaceCommandPaths(adapterConfig, path));
     }
     function assertNoAgentProcessAdapterMutation(req, adapterType, mutatesConfiguration) {
-        if (req.actor.type !== "agent" || adapterType !== "process" || !mutatesConfiguration)
+        if (req.actor.type !== "agent" || adapterType !== "process" || !mutatesConfiguration || isCompanyOwnerAgentActor(req))
             return;
         throw forbidden("Agent keys cannot configure host-executed process adapters.");
     }
@@ -2035,7 +2080,7 @@ export function agentRoutes(db, options = {}) {
             (allowPlainCredentials && POOL_AUTH_OVERRIDE_ENV_KEYS.includes(key) && asEnvBindingString(value) !== null));
     }
     function assertNoAgentLocalAdapterHostCommandMutation(req, adapterType, adapterConfig, allowPlainCredentials = false) {
-        if (req.actor.type !== "agent" || !adapterType.endsWith("_local"))
+        if (req.actor.type !== "agent" || !adapterType.endsWith("_local") || isCompanyOwnerAgentActor(req))
             return;
         const changedKeys = LOCAL_ADAPTER_HOST_COMMAND_KEYS.filter((key) => adapterConfig[key] !== undefined &&
             (key !== "env" || !containsOnlyLocalAdapterCredentialRefs(adapterType, adapterConfig.env, allowPlainCredentials)));
@@ -3293,6 +3338,7 @@ export function agentRoutes(db, options = {}) {
             throw unprocessable("Invalid revision snapshot");
         }
         assertProviderTraceSettingTransition(req, rollbackConfig.runtimeConfig, existing.runtimeConfig);
+        await assertAgentKeepsMaxConcurrentRuns(req, existing, rollbackConfig.runtimeConfig, existing.runtimeConfig, "agent.config_rollback");
         const rollbackAdapterType = assertKnownAdapterType(typeof rollbackConfig.adapterType === "string"
             ? rollbackConfig.adapterType
             : null);
@@ -3764,7 +3810,7 @@ export function agentRoutes(db, options = {}) {
                 res.status(403).json({ error: "Forbidden" });
                 return;
             }
-            if (actorAgent.role !== "ceo") {
+            if (!isCompanyOwnerAgentActor(req)) {
                 res.status(403).json({ error: "Only CEO can manage permissions" });
                 return;
             }
@@ -3806,7 +3852,7 @@ export function agentRoutes(db, options = {}) {
         res.json(await buildAgentDetail(agent));
     });
     router.patch("/agents/:id/instructions-path", validate(updateAgentInstructionsPathSchema), async (req, res) => {
-        if (req.actor.type !== "board") {
+        if (req.actor.type !== "board" && !isCompanyOwnerAgentActor(req)) {
             throw forbidden("Only board-authenticated callers can manage instructions path or bundle configuration");
         }
         const id = req.params.id;
@@ -4373,6 +4419,10 @@ export function agentRoutes(db, options = {}) {
             }
             assertProviderTraceSettingTransition(req, runtimeConfig, existing.runtimeConfig);
             requestedRuntimeConfig = req.actor.source === "mcp_oauth" ? { ...existing.runtimeConfig, ...runtimeConfig } : runtimeConfig;
+            if (req.actor.type === "agent" && !isCompanyOwnerAgentActor(req)) {
+                requestedRuntimeConfig = withStoredMaxConcurrentRuns(requestedRuntimeConfig, existing.runtimeConfig);
+            }
+            await assertAgentKeepsMaxConcurrentRuns(req, existing, requestedRuntimeConfig, existing.runtimeConfig, "agent.patch");
         }
         const touchesAdapterConfiguration = hasOwn(patchData, "adapterType") ||
             hasOwn(patchData, "adapterConfig");
@@ -4813,7 +4863,7 @@ export function agentRoutes(db, options = {}) {
         const agent = await getAccessibleResource(req, res, svc.getById(id), "Agent not found");
         if (!agent)
             return;
-        if (req.actor.type === "agent") {
+        if (req.actor.type === "agent" && !isCompanyOwnerAgentActor(req)) {
             if (req.actor.agentId !== id) {
                 res.status(403).json({ error: "Agent can only invoke itself" });
                 return;
@@ -5060,7 +5110,7 @@ export function agentRoutes(db, options = {}) {
         const agent = await getAccessibleResource(req, res, svc.getById(id), "Agent not found");
         if (!agent)
             return;
-        if (req.actor.type === "agent") {
+        if (req.actor.type === "agent" && !isCompanyOwnerAgentActor(req)) {
             if (req.actor.agentId !== id) {
                 res.status(403).json({ error: "Agent can only invoke itself" });
                 return;