@tickernelz/paperclip-pro-server 2026.925.0 → 2026.925.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (152) hide show
  1. package/dist/adapters/registry.d.ts.map +1 -1
  2. package/dist/adapters/registry.js +6 -3
  3. package/dist/adapters/registry.js.map +1 -1
  4. package/dist/app.d.ts.map +1 -1
  5. package/dist/app.js +4 -0
  6. package/dist/app.js.map +1 -1
  7. package/dist/build-info.json +1 -1
  8. package/dist/middleware/agent-authority-audit.d.ts +4 -0
  9. package/dist/middleware/agent-authority-audit.d.ts.map +1 -0
  10. package/dist/middleware/agent-authority-audit.js +51 -0
  11. package/dist/middleware/agent-authority-audit.js.map +1 -0
  12. package/dist/middleware/auth.d.ts.map +1 -1
  13. package/dist/middleware/auth.js +4 -0
  14. package/dist/middleware/auth.js.map +1 -1
  15. package/dist/onboarding-assets/ceo/AGENTS.md +2 -2
  16. package/dist/onboarding-assets/ceo/HEARTBEAT.md +7 -7
  17. package/dist/onboarding-assets/default/AGENTS.md +3 -3
  18. package/dist/redaction.js +1 -1
  19. package/dist/redaction.js.map +1 -1
  20. package/dist/routes/access.d.ts.map +1 -1
  21. package/dist/routes/access.js +43 -13
  22. package/dist/routes/access.js.map +1 -1
  23. package/dist/routes/adapters.js +5 -5
  24. package/dist/routes/adapters.js.map +1 -1
  25. package/dist/routes/agents.d.ts.map +1 -1
  26. package/dist/routes/agents.js +105 -46
  27. package/dist/routes/agents.js.map +1 -1
  28. package/dist/routes/ai-connections.d.ts.map +1 -1
  29. package/dist/routes/ai-connections.js +3 -5
  30. package/dist/routes/ai-connections.js.map +1 -1
  31. package/dist/routes/approvals.d.ts.map +1 -1
  32. package/dist/routes/approvals.js +42 -17
  33. package/dist/routes/approvals.js.map +1 -1
  34. package/dist/routes/authz.d.ts +5 -1
  35. package/dist/routes/authz.d.ts.map +1 -1
  36. package/dist/routes/authz.js +63 -0
  37. package/dist/routes/authz.js.map +1 -1
  38. package/dist/routes/companies.d.ts.map +1 -1
  39. package/dist/routes/companies.js +11 -14
  40. package/dist/routes/companies.js.map +1 -1
  41. package/dist/routes/costs.d.ts.map +1 -1
  42. package/dist/routes/costs.js +13 -9
  43. package/dist/routes/costs.js.map +1 -1
  44. package/dist/routes/decisions.js +2 -3
  45. package/dist/routes/decisions.js.map +1 -1
  46. package/dist/routes/instance-settings.js +2 -2
  47. package/dist/routes/instance-settings.js.map +1 -1
  48. package/dist/routes/issue-tree-control.js +7 -7
  49. package/dist/routes/issue-tree-control.js.map +1 -1
  50. package/dist/routes/issues.d.ts.map +1 -1
  51. package/dist/routes/issues.js +12 -12
  52. package/dist/routes/issues.js.map +1 -1
  53. package/dist/routes/llms.d.ts.map +1 -1
  54. package/dist/routes/llms.js +5 -4
  55. package/dist/routes/llms.js.map +1 -1
  56. package/dist/routes/managed-agent-profiles.d.ts.map +1 -1
  57. package/dist/routes/managed-agent-profiles.js +3 -5
  58. package/dist/routes/managed-agent-profiles.js.map +1 -1
  59. package/dist/routes/openapi.d.ts.map +1 -1
  60. package/dist/routes/openapi.js +25 -0
  61. package/dist/routes/openapi.js.map +1 -1
  62. package/dist/routes/paperclip-mcp.d.ts +4 -0
  63. package/dist/routes/paperclip-mcp.d.ts.map +1 -0
  64. package/dist/routes/paperclip-mcp.js +85 -0
  65. package/dist/routes/paperclip-mcp.js.map +1 -0
  66. package/dist/routes/projects.js +2 -2
  67. package/dist/routes/projects.js.map +1 -1
  68. package/dist/routes/remote-agent-profiles.d.ts.map +1 -1
  69. package/dist/routes/remote-agent-profiles.js +3 -5
  70. package/dist/routes/remote-agent-profiles.js.map +1 -1
  71. package/dist/routes/routines.d.ts.map +1 -1
  72. package/dist/routes/routines.js +5 -5
  73. package/dist/routes/routines.js.map +1 -1
  74. package/dist/services/agent-authority-escalation.d.ts +17 -0
  75. package/dist/services/agent-authority-escalation.d.ts.map +1 -0
  76. package/dist/services/agent-authority-escalation.js +57 -0
  77. package/dist/services/agent-authority-escalation.js.map +1 -0
  78. package/dist/services/agent-conversations.d.ts +1 -1
  79. package/dist/services/agent-conversations.d.ts.map +1 -1
  80. package/dist/services/agent-conversations.js +3 -3
  81. package/dist/services/agents.d.ts +10 -10
  82. package/dist/services/authorization.d.ts +10 -2
  83. package/dist/services/authorization.d.ts.map +1 -1
  84. package/dist/services/authorization.js +44 -1
  85. package/dist/services/authorization.js.map +1 -1
  86. package/dist/services/heartbeat.d.ts.map +1 -1
  87. package/dist/services/heartbeat.js +107 -7
  88. package/dist/services/heartbeat.js.map +1 -1
  89. package/dist/services/native-runtime/runner-api-reference.js +1 -1
  90. package/dist/services/native-runtime/runner-api-reference.js.map +1 -1
  91. package/dist/services/pipeline-case-outputs.js +2 -2
  92. package/dist/services/pipeline-case-outputs.js.map +1 -1
  93. package/dist/services/pipeline-conversation-context.js +2 -2
  94. package/dist/services/pipeline-conversation-context.js.map +1 -1
  95. package/dist/services/pipelines.js +2 -2
  96. package/dist/services/pipelines.js.map +1 -1
  97. package/dist/services/secret-proposal-notifications.js +1 -1
  98. package/dist/services/secret-proposal-notifications.js.map +1 -1
  99. package/dist/services/status-card-update-engine.d.ts +4 -4
  100. package/dist/services/status-card-update-engine.d.ts.map +1 -1
  101. package/dist/services/status-cards.d.ts.map +1 -1
  102. package/dist/services/status-cards.js +5 -3
  103. package/dist/services/status-cards.js.map +1 -1
  104. package/dist/services/tool-action-delivery.js +1 -1
  105. package/dist/services/tool-action-delivery.js.map +1 -1
  106. package/dist/vendor/paperclip-runner/generated/capability-contract.d.ts +2 -2
  107. package/dist/vendor/paperclip-runner/generated/capability-contract.js +2 -2
  108. package/node_modules/@types/node/README.md +1 -1
  109. package/node_modules/@types/node/crypto.d.ts +2 -2
  110. package/node_modules/@types/node/dgram.d.ts +1 -1
  111. package/node_modules/@types/node/package.json +2 -2
  112. package/node_modules/bare-fs/binding.c +53 -24
  113. package/node_modules/bare-fs/index.d.ts +12 -10
  114. package/node_modules/bare-fs/index.js +13 -4
  115. package/node_modules/bare-fs/package.json +2 -1
  116. package/node_modules/bare-fs/prebuilds/android-arm/bare-fs.bare +0 -0
  117. package/node_modules/bare-fs/prebuilds/android-arm64/bare-fs.bare +0 -0
  118. package/node_modules/bare-fs/prebuilds/android-ia32/bare-fs.bare +0 -0
  119. package/node_modules/bare-fs/prebuilds/android-x64/bare-fs.bare +0 -0
  120. package/node_modules/bare-fs/prebuilds/darwin-arm64/bare-fs.bare +0 -0
  121. package/node_modules/bare-fs/prebuilds/darwin-x64/bare-fs.bare +0 -0
  122. package/node_modules/bare-fs/prebuilds/ios-arm64/bare-fs.bare +0 -0
  123. package/node_modules/bare-fs/prebuilds/ios-arm64-simulator/bare-fs.bare +0 -0
  124. package/node_modules/bare-fs/prebuilds/ios-x64-simulator/bare-fs.bare +0 -0
  125. package/node_modules/bare-fs/prebuilds/linux-arm64/bare-fs.bare +0 -0
  126. package/node_modules/bare-fs/prebuilds/linux-x64/bare-fs.bare +0 -0
  127. package/node_modules/bare-fs/prebuilds/win32-arm64/bare-fs.bare +0 -0
  128. package/node_modules/bare-fs/prebuilds/win32-x64/bare-fs.bare +0 -0
  129. package/package.json +20 -19
  130. package/skills/paperclip/SKILL.md +123 -134
  131. package/skills/paperclip/references/api-reference.md +339 -376
  132. package/skills/paperclip/references/artifacts.md +54 -57
  133. package/skills/paperclip/references/cases.md +57 -68
  134. package/skills/paperclip/references/company-skills.md +66 -146
  135. package/skills/paperclip/references/issue-workspaces.md +28 -43
  136. package/skills/paperclip/references/routines.md +52 -44
  137. package/skills/paperclip/references/workflows.md +32 -46
  138. package/skills/paperclip-board/SKILL.md +141 -334
  139. package/skills/paperclip-create-agent/SKILL.md +45 -62
  140. package/skills/paperclip-create-agent/references/api-reference.md +30 -31
  141. package/ui-dist/assets/{Agents.production-BsKiBknO.js → Agents.production-C9UfcX_l.js} +2 -2
  142. package/ui-dist/assets/{CompanyActivity.production-Bp4gxpq3.js → CompanyActivity.production-BrGxzr9C.js} +1 -1
  143. package/ui-dist/assets/{CompanyExport-BvUhFYBr.js → CompanyExport-D-L3aIBA.js} +1 -1
  144. package/ui-dist/assets/{CompanySkills.production-htb9HH0N.js → CompanySkills.production-i-yIgrn5.js} +1 -1
  145. package/ui-dist/assets/{Costs.production-CzulNW6Y.js → Costs.production-Bds9QYE3.js} +1 -1
  146. package/ui-dist/assets/{OrgChart.production-DbBigpMZ.js → OrgChart.production-Cgr0byQj.js} +1 -1
  147. package/ui-dist/assets/{RoutineDetail.production-DJn3YZiR.js → RoutineDetail.production-BbeeGNoZ.js} +1 -1
  148. package/ui-dist/assets/{Routines.production-BBDkh1yN.js → Routines.production-Cx0jBxDn.js} +1 -1
  149. package/ui-dist/assets/{definition-qmfin__X.js → definition-C9sWnmbO.js} +1 -1
  150. package/ui-dist/assets/{index-ZrmXLuMX.js → index-CuZyHEwK.js} +58 -58
  151. package/ui-dist/index.html +1 -1
  152. package/ui-dist/sw.js +1 -1
@@ -2,14 +2,16 @@
2
2
 
3
3
  Reference material for niche workflows that are pointed to from `SKILL.md`. Load only when the task matches.
4
4
 
5
+ Some playbooks below use `extended` toolset tools: they are available when the operator enables `PAPERCLIP_MCP_TOOLSETS=core,extended`; otherwise use `paperclipApiRequest`. Each step names the toolset when it matters.
6
+
5
7
  ---
6
8
 
7
9
  ## Project Setup (CEO/Manager)
8
10
 
9
11
  When asked to set up a new project with workspace config (local folder and/or GitHub repo):
10
12
 
11
- 1. `POST /api/companies/{companyId}/projects` with project fields.
12
- 2. Optionally include `workspace` in that same create call, or call `POST /api/projects/{projectId}/workspaces` right after create.
13
+ 1. `paperclipCreateProject` (core) with the project fields. `companyId` is optional and defaults to your company.
14
+ 2. Optionally include `workspace` in that same create call, or call `paperclipCreateProjectWorkspace` (extended) right after create with `{ "id": "<project-id>", ... }`.
13
15
 
14
16
  Workspace rules:
15
17
 
@@ -23,12 +25,7 @@ Workspace rules:
23
25
 
24
26
  Use this when asked to invite a new OpenClaw employee.
25
27
 
26
- 1. Generate a fresh OpenClaw invite prompt:
27
-
28
- ```
29
- POST /api/companies/{companyId}/openclaw/invite-prompt
30
- { "agentMessage": "optional onboarding note for OpenClaw" }
31
- ```
28
+ 1. Generate a fresh OpenClaw invite prompt. There is no dedicated tool, so use `paperclipApiRequest` with `method: "POST"`, `path: "/companies/<companyId>/openclaw/invite-prompt"`, and `jsonBody: "{\"agentMessage\":\"optional onboarding note for OpenClaw\"}"`.
32
29
 
33
30
  Access control:
34
31
 
@@ -37,7 +34,7 @@ Access control:
37
34
 
38
35
  2. Build the copy-ready OpenClaw prompt for the board:
39
36
 
40
- - Use `onboardingTextUrl` from the response.
37
+ - Use `onboardingTextUrl` from the result.
41
38
  - Ask the board to paste that prompt into OpenClaw.
42
39
  - If the issue includes an OpenClaw URL (for example `ws://127.0.0.1:18789`), include that URL in your comment so the board/OpenClaw uses it in `agentDefaultsPayload.url`.
43
40
 
@@ -49,11 +46,11 @@ Access control:
49
46
 
50
47
  ## Setting Agent Instructions Path
51
48
 
52
- Use the dedicated route instead of generic `PATCH /api/agents/:id` when you need to set an agent's instructions markdown path (for example `AGENTS.md`).
49
+ Use `paperclipUpdateAgentInstructionsPath` (extended) instead of the generic agent patch when you need to set an agent's instructions markdown path (for example `AGENTS.md`):
53
50
 
54
- ```bash
55
- PATCH /api/agents/{agentId}/instructions-path
51
+ ```json
56
52
  {
53
+ "id": "<agent-id>",
57
54
  "path": "agents/cmo/AGENTS.md"
58
55
  }
59
56
  ```
@@ -63,12 +60,12 @@ Rules:
63
60
  - Allowed for: the target agent itself, or an ancestor manager in that agent's reporting chain.
64
61
  - For `codex_local` and `claude_local`, default config key is `instructionsFilePath`.
65
62
  - Relative paths are resolved against the target agent's `adapterConfig.cwd`; absolute paths are accepted as-is.
66
- - To clear the path, send `{ "path": null }`.
63
+ - To clear the path, send `"path": null`.
67
64
  - For adapters with a different key, provide it explicitly:
68
65
 
69
- ```bash
70
- PATCH /api/agents/{agentId}/instructions-path
66
+ ```json
71
67
  {
68
+ "id": "<agent-id>",
72
69
  "path": "/absolute/path/to/AGENTS.md",
73
70
  "adapterConfigKey": "yourAdapterSpecificPathField"
74
71
  }
@@ -78,28 +75,25 @@ PATCH /api/agents/{agentId}/instructions-path
78
75
 
79
76
  ## Company Import / Export
80
77
 
81
- Use the company-scoped routes when a CEO agent needs to inspect or move package content.
78
+ Whole-company package moves have no dedicated tool by design. Use `paperclipApiRequest` with the company-scoped paths when a CEO agent needs to inspect or move package content.
82
79
 
83
- - CEO-safe imports:
84
- - `POST /api/companies/{companyId}/imports/preview`
85
- - `POST /api/companies/{companyId}/imports/apply`
80
+ - CEO-safe imports — `method: "POST"` with `path: "/companies/<companyId>/imports/preview"`, then `path: "/companies/<companyId>/imports/apply"`
86
81
  - Allowed callers: board users and the CEO agent of that same company.
87
82
  - Safe import rules:
88
83
  - existing-company imports are non-destructive
89
84
  - `replace` is rejected
90
85
  - collisions resolve with `rename` or `skip`
91
86
  - issues are always created as new issues
92
- - CEO agents may use the safe routes with `target.mode = "new_company"` to create a new company directly. Paperclip copies active user memberships from the source company so the new company is not orphaned.
87
+ - CEO agents may use the safe paths with `target.mode = "new_company"` to create a new company directly. Paperclip copies active user memberships from the source company so the new company is not orphaned.
93
88
 
94
89
  For export, preview first and keep tasks explicit:
95
90
 
96
- - `POST /api/companies/{companyId}/exports/preview`
97
- - `POST /api/companies/{companyId}/exports`
91
+ - `method: "POST"` with `path: "/companies/<companyId>/exports/preview"`, then `path: "/companies/<companyId>/exports"`
98
92
  - Export preview defaults to `issues: false`
99
93
  - Add `issues` or `projectIssues` only when you intentionally need task files
100
94
  - Use `selectedFiles` to narrow the final package to specific agents, skills, projects, or tasks after you inspect the preview inventory
101
95
 
102
- See `api-reference.md` for full schema examples.
96
+ Send the request body as `jsonBody`, a JSON string.
103
97
 
104
98
  ---
105
99
 
@@ -107,35 +101,27 @@ See `api-reference.md` for full schema examples.
107
101
 
108
102
  Use this when validating Paperclip itself (assignment flow, checkouts, run visibility, and status transitions).
109
103
 
110
- 1. Create a throwaway issue assigned to a known local agent (`claudecoder` or `codexcoder`):
111
-
112
- ```bash
113
- npx @tickernelz/paperclip-pro issue create \
114
- --company-id "$PAPERCLIP_COMPANY_ID" \
115
- --title "Self-test: assignment/watch flow" \
116
- --description "Temporary validation issue" \
117
- --status todo \
118
- --assignee-agent-id "$PAPERCLIP_AGENT_ID"
119
- ```
120
-
121
- 2. Trigger and watch a heartbeat for that assignee:
104
+ 1. Create a throwaway issue assigned to a known local agent (`claudecoder` or `codexcoder`) with `paperclipCreateIssue` (core):
122
105
 
123
- ```bash
124
- npx @tickernelz/paperclip-pro heartbeat run --agent-id "$PAPERCLIP_AGENT_ID"
106
+ ```json
107
+ {
108
+ "title": "Self-test: assignment/watch flow",
109
+ "description": "Temporary validation issue",
110
+ "status": "todo",
111
+ "assigneeAgentId": "<agent-id>"
112
+ }
125
113
  ```
126
114
 
127
- 3. Verify the issue transitions (`todo -> in_progress -> done` or `blocked`) and that comments are posted:
115
+ 2. Trigger a heartbeat for that assignee with `paperclipInvokeAgentHeartbeat` (extended): `{ "id": "<agent-id>" }`.
128
116
 
129
- ```bash
130
- npx @tickernelz/paperclip-pro issue get <issue-id-or-identifier>
131
- ```
117
+ 3. Verify the issue transitions (`todo -> in_progress -> done` or `blocked`) and that comments are posted, with `paperclipGetIssue`: `{ "issueId": "<issue-id-or-identifier>" }`.
132
118
 
133
- 4. Reassignment test (optional): move the same issue between `claudecoder` and `codexcoder` and confirm wake/run behavior:
119
+ 4. Reassignment test (optional): move the same issue between `claudecoder` and `codexcoder` with `paperclipUpdateIssue` and confirm wake/run behavior:
134
120
 
135
- ```bash
136
- npx @tickernelz/paperclip-pro issue update <issue-id> --assignee-agent-id <other-agent-id> --status todo
121
+ ```json
122
+ { "issueId": "<issue-id>", "assigneeAgentId": "<other-agent-id>", "status": "todo" }
137
123
  ```
138
124
 
139
- 5. Cleanup: mark temporary issues done/cancelled with a clear note.
125
+ 5. Cleanup: mark temporary issues done/cancelled with `paperclipUpdateIssue` and a clear note.
140
126
 
141
- If you use direct `curl` during these tests, include `X-Paperclip-Run-Id` on all mutating issue requests whenever running inside a heartbeat.
127
+ The tools carry the current run context for you, so mutating calls stay attributed to the heartbeat run without any extra argument.