@tickernelz/paperclip-pro 2026.926.1 → 2026.926.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,515 +1,171 @@
1
- <p align="center">
2
- <img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/banner.jpg" alt="Paperclip Pro" width="720" />
3
- </p>
4
-
5
- <p align="center">
6
- <a href="#quickstart"><strong>Quickstart</strong></a> &middot;
7
- <a href="docs/fork/OPERATIONS.md"><strong>Operations</strong></a> &middot;
8
- <a href="https://github.com/tickernelz/paperclip-pro"><strong>This fork</strong></a> &middot;
9
- <a href="https://github.com/paperclipai/paperclip"><strong>Upstream</strong></a> &middot;
10
- <a href="https://docs.paperclip.ing"><strong>Upstream docs</strong></a> &middot;
11
- <a href="https://paperclip.ing"><strong>Upstream website</strong></a>
12
- </p>
13
-
14
- <p align="center">
15
- <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue" alt="MIT License" /></a>
16
- <img src="https://img.shields.io/badge/fork-hard%20fork-orange" alt="Hard fork" />
17
- <img src="https://img.shields.io/badge/upstream-paperclipai%2Fpaperclip%407b7c4d417-lightgrey" alt="Upstream base" />
18
- </p>
19
-
20
- <br/>
21
-
22
- <div align="center">
23
- <video src="https://github.com/user-attachments/assets/773bdfb2-6d1e-4e30-8c5f-3487d5b70c8f" width="600" controls></video>
24
- </div>
25
-
26
- <br/>
27
-
28
1
  # Paperclip Pro
29
2
 
30
- **Paperclip Pro is a hard fork of [`paperclipai/paperclip`](https://github.com/paperclipai/paperclip), branched at upstream commit `7b7c4d417`. It is not an upstream release and is not endorsed by Paperclip Labs, Inc.**
31
-
32
- It is maintained independently at [`tickernelz/paperclip-pro`](https://github.com/tickernelz/paperclip-pro). All 32 workspace packages are renamed under the `@tickernelz/paperclip-pro` scope, the CLI binary is `paperclip-pro`, and instance state lives under `~/.paperclip-pro` instead of `~/.paperclip` — so this fork installs and runs beside an upstream instance instead of replacing it.
3
+ Paperclip Pro is a self-hosted control plane that runs a team of AI coding agents as an organisation: an org chart, tasks and approvals, scheduled heartbeats, budgets, and an audit trail, with a Node.js server, an embedded PostgreSQL, and a React board.
33
4
 
34
- The fork tracks no upstream release cadence and publishes nothing to the npm registry. Install it from this git repository; see [Quickstart](#quickstart). Report fork bugs in this repository, never in the upstream tracker.
5
+ It is a **hard fork** of [`paperclipai/paperclip`](https://github.com/paperclipai/paperclip), branched at upstream commit `7b7c4d417` and since diverged. It is not an upstream release and is not endorsed by Paperclip Labs, Inc. All workspace packages are renamed under the `@tickernelz/paperclip-pro` scope, the CLI binary is `paperclip-pro`, and instance state lives under `~/.paperclip-pro` instead of `~/.paperclip`, so this fork installs and runs beside an upstream instance instead of replacing it.
35
6
 
36
- ## What this fork changes
7
+ Report bugs in [this repository](https://github.com/tickernelz/paperclip-pro/issues), never in the upstream tracker.
37
8
 
38
- Everything below is on `main` and absent from upstream `7b7c4d417`.
9
+ ## What this fork adds
39
10
 
40
- | Change | Where |
11
+ | Addition | Where |
41
12
  | --- | --- |
42
- | **First-party `omp_local` adapter.** Runs the local Oh My Pi (OMP) coding-agent CLI as a Paperclip agent runtime: server execution, CLI event formatting, model discovery through `omp models --json`, and a UI transcript parser. | [`packages/adapters/omp-local`](packages/adapters/omp-local); registered at `server/src/adapters/registry.ts:133` and `server/src/adapters/builtin-adapter-types.ts:16` |
43
- | **`uiParserPath` for statically registered adapters.** `GET /api/adapters/:type/ui-parser.js` used to answer 404 for every built-in adapter because the loader only consulted the external plugin store. | `packages/adapter-utils/src/types.ts:462`, `server/src/adapters/plugin-loader.ts:74`, `server/src/routes/adapters.ts:768` |
44
- | **Sandboxed transcript parser worker survives global lockdown.** Plain `self.fetch = undefined` assignments failed on read-only worker globals and took the worker down; denied globals are now installed through `Object.defineProperty` inside `try`/`catch`. | `ui/src/adapters/sandboxed-parser-worker.ts:46`–`ui/src/adapters/sandboxed-parser-worker.ts:55` |
45
- | **A clean shutdown no longer parks issues.** A graceful stop has a known provider outcome, so only genuine process loss still earns a reconciliation hold. | `server/src/services/legacy-execution-recovery.ts:14`, `server/src/services/legacy-execution-recovery.ts:29` |
46
- | **Runs this server interrupted during shutdown are rescheduled** instead of refused as process loss; native runtimes stay suspended. | `server/src/services/heartbeat.ts:14325`, `server/src/services/heartbeat.ts:14327` |
47
- | **Interrupt acknowledgement is read from the full result JSON.** The safe 64 KiB projection strips `executionCancellation`, so a successful adapter interrupt on an oversized run was reported to the UI as a termination conflict. | `server/src/services/heartbeat.ts:28820` |
48
- | **`service restart --drain` plus a live-run guard.** Restart and stop refuse while agent runs are executing unless you drain or force. | `cli/src/commands/service.ts:210`, `cli/src/commands/service.ts:282`–`cli/src/commands/service.ts:284`, `cli/src/services/instance-drain.ts:128` |
49
- | **Isolated home.** `PAPERCLIP_HOME` defaults to `~/.paperclip-pro`; config, embedded Postgres, logs, storage, and backups all resolve under `~/.paperclip-pro/instances/<id>`. | `packages/shared/src/home-paths.ts:16`–`packages/shared/src/home-paths.ts:19`, `packages/shared/src/config-schema.ts:27` |
50
- | **Per-instance `EnvironmentFile` in the systemd unit.** `ensureCurrent()` rewrites the unit on every install, start, and restart, so operator environment used to be lost; the unit now sources an optional `<instanceRoot>/service.env` the CLI never overwrites. | `cli/src/services/service-manager.ts:126`, `cli/src/services/service-manager.ts:149` |
13
+ | **Built-in `omp_local` adapter.** Runs the local Oh My Pi (OMP) coding-agent CLI as a Paperclip agent runtime: server execution, CLI event formatting, model discovery through `omp models --json`, a UI transcript parser, and a startup-complete signal the run-concurrency gate reads. | [`packages/adapters/omp-local`](packages/adapters/omp-local), registered in `server/src/adapters/registry.ts` |
14
+ | **Server-hosted Paperclip MCP.** `POST /api/mcp/paperclip` exposes the Paperclip API as MCP tools generated from the OpenAPI document. 675 operations generate tools: the `core` toolset is the default and lists 61 tools (~36 KB, ~9k tokens of context), `core,extended` lists 442 (~210 KB), and an agent with company authority sees 719 (~344 KB). Toolsets are selected per run with `?toolsets=`. Adapters that can mount an MCP client get the endpoint; the others get a REST fallback prompt instead of tool names that do not exist. | `server/src/routes/paperclip-mcp.ts`, `packages/mcp-server/src/generated/api-tools.json` |
15
+ | **Role-based agent authority.** An agent actor carries work authority (`work:read`, `work:issues`, `work:routines`); an agent whose role is `ceo` additionally carries company authority over agents, projects, settings, members and approvals. Every generated MCP tool is tagged `agent` or `board` and gated on the same model. | `packages/shared/src/agent-authority.ts`, `server/src/services/authorization.ts` |
16
+ | **Per-task model and thinking overrides.** A task can run on a different model or thinking level than its assignee's stored configuration, validated against the adapter's own published config schema, with optional inheritance to new or existing subtasks. No new column and no migration: it reuses `issues.assignee_adapter_overrides`. | `server/src/services/issue-run-model-override.ts`, `server/src/services/issue-model-override-inheritance.ts` |
17
+ | **Batch model/thinking changes.** Select agents in the Agents list and change the model-selection fields their adapters share. The batch is atomic: one invalid value rejects the call with 422 and writes nothing. Up to 100 agents per call. | `POST /api/agents/batch/adapter-config`, `.../preview` |
18
+ | **Local CLI run concurrency caps.** Local adapters are memory-hungry while booting; the queued-run claim point caps total local runs and simultaneous startups, and shows held-back runs as "Waiting to start". | `server/src/services/heartbeat.ts` |
19
+ | **Mobile composer dock and bottom-sheet pickers.** The task and agent composers dock above the on-screen keyboard and reserve their own height, the bottom nav auto-hides while typing, and the model/thinking, agent and New Task pickers open as bottom sheets instead of being covered by the keyboard. | `ui/src/components/task-chat/composer-dock.ts`, `ui/src/components/ui/mobile-picker-sheet.tsx`, `ui/src/hooks/useMobileViewportInsets.ts` |
20
+ | **`service restart --drain` and a live-run guard.** Restart and stop refuse while agent runs are executing unless you drain or force. A per-instance `service.env` the CLI never overwrites carries operator environment across unit rewrites. | `cli/src/commands/service.ts`, `cli/src/services/service-manager.ts` |
21
+ | **Isolated home.** `PAPERCLIP_HOME` defaults to `~/.paperclip-pro`; config, embedded PostgreSQL, logs, storage and backups all resolve under `~/.paperclip-pro/instances/<id>`. | `packages/shared/src/home-paths.ts` |
22
+ | **One lean CI and a tag-triggered release.** A single `ci.yml` (policy, typecheck, build, runner, sharded tests, E2E, mobile shell) plus a documentation-only fast lane that runs the static gates and the docs-reading suites, and a `release.yml` that publishes the whole package set to npm when a `v*` tag is pushed. | `.github/workflows/` |
51
23
 
52
24
  Operators: read [`docs/fork/OPERATIONS.md`](docs/fork/OPERATIONS.md).
53
25
 
54
- ---
55
-
56
- Open-source orchestration for teams of AI agents.
57
-
58
- **If OpenClaw is an _employee_, Paperclip is the _company_.**
59
-
60
- Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business. Bring your own agents, assign goals, and track work and costs from one dashboard.
61
-
62
- It looks like a task manager. Under the hood: org charts, budgets, governance, goal alignment, and agent coordination.
63
-
64
- **Manage business goals, not pull requests.**
65
-
66
- | | Step | Example |
67
- | ------ | --------------- | ------------------------------------------------------------------ |
68
- | **01** | Define the goal | _"Build the #1 AI note-taking app to $1M MRR."_ |
69
- | **02** | Hire the team | CEO, CTO, engineers, designers, marketers — any bot, any provider. |
70
- | **03** | Approve and run | Review strategy. Set budgets. Hit go. Monitor from the dashboard. |
71
-
72
- <br/>
73
-
74
- <div align="center">
75
- <table>
76
- <tr>
77
- <td align="center"><strong>Works<br/>with</strong></td>
78
- <td align="center"><img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/logos/openclaw.svg" width="32" alt="OpenClaw" /><br/><sub>OpenClaw</sub></td>
79
- <td align="center"><img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/logos/claude.svg" width="32" alt="Claude" /><br/><sub>Claude Code</sub></td>
80
- <td align="center"><img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/logos/codex.svg" width="32" alt="Codex" /><br/><sub>Codex</sub></td>
81
- <td align="center"><img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/logos/cursor.svg" width="32" alt="Cursor" /><br/><sub>Cursor</sub></td>
82
- <td align="center"><img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/logos/bash.svg" width="32" alt="Bash" /><br/><sub>Bash</sub></td>
83
- <td align="center"><img src="https://raw.githubusercontent.com/paperclipai/paperclip/185366d797dcf9fceeba036889b27bfddf783d56/doc/assets/logos/http.svg" width="32" alt="HTTP" /><br/><sub>HTTP</sub></td>
84
- </tr>
85
- </table>
86
-
87
- <em>If it can receive a heartbeat, it's hired.</em>
88
-
89
- </div>
90
-
91
- <br/>
92
-
93
- ## Paperclip is right for you if
94
-
95
- - ✅ You want to build **autonomous AI organizations**
96
- - ✅ You **coordinate many different agents** (OpenClaw, Codex, Claude, Cursor) toward a common goal
97
- - ✅ You have **20 simultaneous Claude Code terminals** open and lose track of what everyone is doing
98
- - ✅ You want agents running **autonomously 24/7**, but still want to audit work and chime in when needed
99
- - ✅ You want to **monitor costs** and enforce budgets
100
- - ✅ You want a process for managing agents that **feels like using a task manager**
101
- - ✅ You want to manage your autonomous businesses **from your phone**
102
-
103
- <br/>
104
-
105
- ## The four pillars
106
-
107
- Four things have to work for an organization of AI agents to actually produce: the tasks, the org, the training, and the infrastructure. Paperclip is built around exactly those four pillars.
108
-
109
- <picture>
110
- <source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/paperclipai/paperclip/1ec33ffd8b597f7e36aac3e2fbb4665b8c42dc3c/doc/assets/four-pillars-dark.png">
111
- <source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/paperclipai/paperclip/1ec33ffd8b597f7e36aac3e2fbb4665b8c42dc3c/doc/assets/four-pillars-light.png">
112
- <img src="https://raw.githubusercontent.com/paperclipai/paperclip/1ec33ffd8b597f7e36aac3e2fbb4665b8c42dc3c/doc/assets/four-pillars-light.png" alt="The four pillars of Paperclip">
113
- </picture>
114
-
115
- | Pillar | Built for | What it covers |
116
- | --- | --- | --- |
117
- | **Agentic Task Manager** — Declare intent. Agents work. You verify the output. | Everyone, daily | Tasks, approvals & review gates · proactive agent coworkers · auditable routines & workflows · verify from diffs, screenshots & tests |
118
- | **Org Chart for Agents** — Roles, permissions & boundaries for humans and agents. | Managers | Mixed human + agent org chart · responsibilities, delegation, specialization · governance: who can do what · scoped secrets & company boundaries |
119
- | **Agent Employee Training** — Design, train & evaluate your AI employees. | Enablers | Skill Studio & shared org-wide skills · evals & saved test runs · active learning loops & quality metrics · performance reviews for agents |
120
- | **Agentic OS** — The infrastructure that makes the work run. | IT & platform | Cross-provider runtime: any model, any agent · sandboxing, integrations & MCP servers · SSO, GRC, RBAC & cost controls · data privacy, internal trace collection, compounding data value |
121
-
122
- <br/>
123
-
124
- ## Features
125
-
126
- <table>
127
- <tr>
128
- <td align="center" width="33%">
129
- <h3>🔌 Bring Your Own Agent</h3>
130
- Any agent, any runtime, one org chart. If it can receive a heartbeat, it's hired.
131
- </td>
132
- <td align="center" width="33%">
133
- <h3>🎯 Goal Alignment</h3>
134
- Every task traces back to the organization mission. Agents know <em>what</em> to do and <em>why</em>.
135
- </td>
136
- <td align="center" width="33%">
137
- <h3>💓 Heartbeats</h3>
138
- Agents wake on a schedule, check work, and act. Delegation flows up and down the org chart.
139
- </td>
140
- </tr>
141
- <tr>
142
- <td align="center">
143
- <h3>💰 Cost Control</h3>
144
- Monthly budgets per agent. When they hit the limit, they stop. No runaway costs.
145
- </td>
146
- <td align="center">
147
- <h3>🏢 Multi-Organization</h3>
148
- One deployment, many organizations. Complete data isolation. One control plane for your portfolio.
149
- </td>
150
- <td align="center">
151
- <h3>🎫 Ticket System</h3>
152
- Every conversation traced. Every decision explained. Full tool-call tracing and immutable audit log.
153
- </td>
154
- </tr>
155
- <tr>
156
- <td align="center">
157
- <h3>🛡️ Governance</h3>
158
- Approve hires, override strategy, pause or terminate any agent — at any time.
159
- </td>
160
- <td align="center">
161
- <h3>📊 Org Chart</h3>
162
- Hierarchies, roles, reporting lines. Your agents have a boss, a title, and a job description.
163
- </td>
164
- <td align="center">
165
- <h3>📱 Mobile Ready</h3>
166
- Monitor and manage your autonomous businesses from anywhere.
167
- </td>
168
- </tr>
169
- </table>
170
-
171
- <br/>
172
-
173
- ## Problems Paperclip solves
174
-
175
- | Without Paperclip | With Paperclip |
176
- | ------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------- |
177
- | ❌ You have 20 Claude Code tabs open and can't track which one does what. On reboot you lose everything. | ✅ Tasks are ticket-based, conversations are threaded, sessions persist across reboots. |
178
- | ❌ You manually gather context from several places to remind your bot what you're actually doing. | ✅ Context flows from the task up through the project and company goals — your agent always knows what to do and why. |
179
- | ❌ Folders of agent configs are disorganized and you're re-inventing task management, communication, and coordination between agents. | ✅ Paperclip gives you org charts, ticketing, delegation, and governance out of the box — so you run a company, not a pile of scripts. |
180
- | ❌ Runaway loops waste hundreds of dollars of tokens and max your quota before you even know what happened. | ✅ Cost tracking surfaces token budgets and throttles agents when they're out. Management prioritizes with budgets. |
181
- | ❌ You have recurring jobs (customer support, social, reports) and have to remember to manually kick them off. | ✅ Heartbeats handle regular work on a schedule. Management supervises. |
182
- | ❌ You have an idea, you have to find your repo, fire up Claude Code, keep a tab open, and babysit it. | ✅ Add a task in Paperclip. Your coding agent works on it until it's done. Management reviews their work. |
183
-
184
- <br/>
185
-
186
- ## Why Paperclip is special
187
-
188
- Paperclip handles the hard orchestration details correctly.
189
-
190
- | | |
191
- | --------------------------------- | ------------------------------------------------------------------------------------------------------------- |
192
- | **Atomic execution.** | Task checkout and budget enforcement are atomic, so no double-work and no runaway spend. |
193
- | **Persistent agent state.** | Agents resume the same task context across heartbeats instead of restarting from scratch. |
194
- | **Runtime skill injection.** | Agents can learn Paperclip workflows and project context at runtime, without retraining. |
195
- | **Governance with rollback.** | Approval gates are enforced, config changes are revisioned, and bad changes can be rolled back safely. |
196
- | **Goal-aware execution.** | Tasks carry full goal ancestry so agents consistently see the "why," not just a title. |
197
- | **Portable company templates.** | Export/import orgs, agents, and skills with secret scrubbing and collision handling. |
198
- | **True multi-organization isolation.** | Every entity is company-scoped, so one deployment can run many companies with separate data and audit trails. |
199
-
200
- <br/>
201
-
202
- ## What's Under the Hood
203
-
204
- Paperclip is a full control plane, not a wrapper. Before you build any of this yourself, know that it already exists:
205
-
206
- ```
207
- ┌──────────────────────────────────────────────────────────────┐
208
- │ PAPERCLIP SERVER │
209
- │ │
210
- │ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌───────────┐ │
211
- │ │Identity & │ │ Work & │ │ Heartbeat │ │Governance │ │
212
- │ │ Access │ │ Tasks │ │ Execution │ │& Approvals│ │
213
- │ └───────────┘ └───────────┘ └───────────┘ └───────────┘ │
214
- │ │
215
- │ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌───────────┐ │
216
- │ │ Org Chart │ │Workspaces │ │ Plugins │ │ Budget │ │
217
- │ │ & Agents │ │ & Runtime │ │ │ │ & Costs │ │
218
- │ └───────────┘ └───────────┘ └───────────┘ └───────────┘ │
219
- │ │
220
- │ ┌───────────┐ ┌───────────┐ ┌───────────┐ ┌───────────┐ │
221
- │ │ Routines │ │ Secrets & │ │ Activity │ │ Company │ │
222
- │ │& Schedules│ │ Storage │ │ & Events │ │Portability│ │
223
- │ └───────────┘ └───────────┘ └───────────┘ └───────────┘ │
224
- └──────────────────────────────────────────────────────────────┘
225
- ▲ ▲ ▲ ▲
226
- ┌─────┴─────┐ ┌─────┴─────┐ ┌─────┴─────┐ ┌─────┴─────┐
227
- │ Claude │ │ Codex │ │ CLI │ │ HTTP/web │
228
- │ Code │ │ │ │ agents │ │ bots │
229
- └───────────┘ └───────────┘ └───────────┘ └───────────┘
230
- ```
231
-
232
- ### The Systems
233
-
234
- <table>
235
- <tr>
236
- <td width="50%">
26
+ ## Install
237
27
 
238
- **Identity & Access** — Two deployment modes (trusted local or authenticated), board users, agent API keys, short-lived run JWTs, company memberships, invite flows, and OpenClaw onboarding. Every mutating request is traced to an actor.
28
+ Requirements: Node.js 24.11 or newer, `npm`, macOS/Linux/WSL2. Nothing else — the published packages ship prebuilt.
239
29
 
240
- </td>
241
- <td width="50%">
242
-
243
- **Org Chart & Agents** — Agents have roles, titles, reporting lines, permissions, and budgets. Adapter examples match the diagram: Claude Code, Codex, CLI agents such as Cursor/Gemini/bash, HTTP/webhook bots such as OpenClaw, and external adapter plugins. If it can receive a heartbeat, it's hired.
30
+ ```sh
31
+ npx @tickernelz/paperclip-pro@latest install --yes
32
+ paperclip-pro onboard --yes
33
+ ```
244
34
 
245
- </td>
246
- </tr>
247
- <tr>
248
- <td>
35
+ `install` resolves one exact version — the `latest` dist-tag of `@tickernelz/paperclip-pro`, or `--version` — then verifies that all 31 packages of the release exist at that exact version before it downloads anything. A half-published release is refused with the missing package names; versions are never mixed across packages. It then installs the set into `~/.paperclip-pro/cli/installs/npm/<version>`, smoke-tests the payload, and only then atomically flips `~/.paperclip-pro/cli/current` and writes the `~/.local/bin/paperclip-pro` shim. Measured on a WSL2 box: 44 s, against 11 m 38 s for the same commit through the git path.
249
36
 
250
- **Work & Task System** — Issues carry company/project/goal/parent links, atomic checkout with execution locks, first-class blocker dependencies, comments, documents, attachments, work products, labels, and inbox state. No double-work, no lost context.
37
+ `latest` currently points at **2026.926.2**. Prefer it.
251
38
 
252
- </td>
253
- <td>
39
+ `2026.926.0` is an incomplete release: its run left `@tickernelz/paperclip-pro-server` in npm's staging queue, so `latest` was never moved and no GitHub release was created. npm has since published that package, so all 31 packages now exist at that version and the completeness check no longer refuses it — but the release was never validated end to end. Use `2026.926.2`.
254
40
 
255
- **Heartbeat Execution** — DB-backed wakeup queue with coalescing, budget checks, workspace resolution, secret injection, skill loading, and adapter invocation. Runs produce structured logs, cost events, session state, and audit trails. Recovery handles orphaned runs automatically.
41
+ Releases up to and including `2026.926.1` cannot bootstrap under npm 12, which changed the shape of `npm view --json` and denies dependency install scripts by default. Under npm 11 — the version Node 24.18.0 bundles — the same command works. `2026.926.2` and later handle both.
256
42
 
257
- </td>
258
- </tr>
259
- <tr>
260
- <td>
43
+ Pin a published version:
261
44
 
262
- **Workspaces & Runtime** — Project workspaces, isolated execution workspaces (git worktrees, operator branches), and runtime services (dev servers, preview URLs). Agents work in the right directory with the right context every time.
45
+ ```sh
46
+ paperclip-pro install --version 2026.926.2 --yes
47
+ ```
263
48
 
264
- </td>
265
- <td>
49
+ `--canary` follows the `canary` dist-tag, which the release workflow does not publish today; it uses `next` and `latest`.
266
50
 
267
- **Governance & Approvals** — Board approval workflows, execution policies with review/approval stages, decision tracking, budget hard-stops, agent pause/resume/terminate, and full audit logging. Nothing ships without your sign-off.
51
+ `onboard --yes` writes `~/.paperclip-pro/instances/default/config.json` for trusted local loopback and starts the server on `http://127.0.0.1:3100`. An embedded PostgreSQL is created automatically. For a reachable instance, pick a bind preset:
268
52
 
269
- </td>
270
- </tr>
271
- <tr>
272
- <td>
53
+ ```sh
54
+ paperclip-pro onboard --yes --bind lan
55
+ paperclip-pro onboard --yes --bind tailnet
56
+ ```
273
57
 
274
- **Budget & Cost Control** — Token and cost tracking by company, agent, project, goal, issue, provider, and model. Scoped budget policies with warning thresholds and hard stops. Overspend pauses agents and cancels queued work automatically.
58
+ ### What an install replaces
275
59
 
276
- </td>
277
- <td>
60
+ An install or update only ever writes inside `~/.paperclip-pro/cli/` and the shim:
278
61
 
279
- **Routines & Schedules** — Recurring tasks with cron, webhook, and API triggers. Concurrency and catch-up policies. Each routine execution creates a tracked issue and wakes the assigned agent — no manual kick-offs needed.
62
+ | Path | What happens |
63
+ | --- | --- |
64
+ | `~/.paperclip-pro/cli/installs/<npm\|git>/<id>/` | New payload directory; the two previous payloads are kept for rollback, older ones pruned |
65
+ | `~/.paperclip-pro/cli/current` | Symlink flipped atomically to the new payload |
66
+ | `~/.paperclip-pro/cli/install.json` | Install manifest, rewritten (previous records retained) |
67
+ | `~/.local/bin/paperclip-pro` | Managed shim, rewritten with the validated Node executable |
68
+ | `~/.bashrc` or `~/.zshrc` | A marked PATH block, only when `~/.local/bin` is not already on `PATH` |
280
69
 
281
- </td>
282
- </tr>
283
- <tr>
284
- <td>
70
+ Nothing under `~/.paperclip-pro/instances/` is touched: the instance database, `config.json`, `service.env`, secrets, logs, storage, backups and workspaces survive a payload switch in either direction.
285
71
 
286
- **Plugins** — Instance-wide plugin system with out-of-process workers, capability-gated host services, job scheduling, tool exposure, and UI contributions. Extend Paperclip without forking it.
72
+ ### Installing an unreleased commit
287
73
 
288
- </td>
289
- <td>
74
+ The git path builds a GitHub commit from source. It needs pnpm 9.15.4, `git`, `curl`, `tar` and `corepack`, and takes minutes rather than seconds. Use it for development only:
290
75
 
291
- **Secrets & Storage** — Instance and company secrets, encrypted local storage, provider-backed object storage, attachments, and work products. Sensitive values stay out of prompts unless a scoped run explicitly needs them.
76
+ ```sh
77
+ paperclip-pro install --ref main --yes
78
+ paperclip-pro install --repo tickernelz/paperclip-pro --ref <commit-sha> --yes
79
+ ```
292
80
 
293
- </td>
294
- </tr>
295
- <tr>
296
- <td>
81
+ `--repo` defaults to `tickernelz/paperclip-pro`. `--ref` cannot be combined with `--version` or `--canary`.
297
82
 
298
- **Activity & Events** — Mutating actions, heartbeat state changes, cost events, approvals, comments, and work products are recorded as durable activity so operators can audit what happened and why.
83
+ ### Upgrade and rollback
299
84
 
300
- </td>
301
- <td>
85
+ ```sh
86
+ paperclip-pro update --check
87
+ paperclip-pro update --latest
88
+ paperclip-pro update --rollback
89
+ ```
302
90
 
303
- **Company Portability** — Export and import entire organizations — agents, skills, projects, routines, and issues — with secret scrubbing and collision handling. One deployment, many companies, complete data isolation.
91
+ `update` backs up the database first, installs the new payload, restarts the active service and validates it; a failed validation rolls the payload back automatically. `--rollback` returns to the retained previous payload instantly — it does not reverse database migrations.
304
92
 
305
- </td>
306
- </tr>
307
- </table>
93
+ ## Configuration
308
94
 
309
- <br/>
95
+ Instance configuration lives in `~/.paperclip-pro/instances/default/config.json` and is edited with `paperclip-pro configure`, not by hand while the service runs. `paperclip-pro doctor` prints the resolved paths, and `paperclip-pro env` prints the effective environment.
310
96
 
311
- ## What Paperclip is not
97
+ Operator environment — `PATH` entries for adapter binaries, provider API keys, proxy settings — belongs in `~/.paperclip-pro/instances/default/service.env`, one `KEY=value` per line. The systemd unit sources it with `EnvironmentFile=-`, and the CLI never rewrites it, while the unit file itself is re-rendered on every CLI-driven start.
312
98
 
313
- | | |
314
- | ---------------------------- | -------------------------------------------------------------------------------------------------------------------- |
315
- | **Not a chatbot.** | Agents have jobs, not chat windows. |
316
- | **Not an agent framework.** | We don't tell you how to build agents. We tell you how to run a company made of them. |
317
- | **Not a workflow builder.** | No drag-and-drop pipelines. Paperclip models companies — with org charts, goals, budgets, and governance. |
318
- | **Not a prompt manager.** | Agents bring their own prompts, models, and runtimes. Paperclip manages the organization they work in. |
319
- | **Not a single-agent tool.** | This is for teams. If you have one agent, you probably don't need Paperclip. If you have twenty — you definitely do. |
320
- | **Not a code review tool.** | Paperclip orchestrates work, not pull requests. Bring your own review process. |
99
+ | Variable | Default | Bounds | Meaning |
100
+ | --- | --- | --- | --- |
101
+ | `PAPERCLIP_MAX_CONCURRENT_LOCAL_RUNS` | 10 | 1–64 | Total local CLI runs this controller may have running at once. Never bypassed. |
102
+ | `PAPERCLIP_MAX_CONCURRENT_LOCAL_STARTS` | 4 | 1–64 | Local CLI runs allowed to be in their startup phase at once. |
103
+ | `PAPERCLIP_LOCAL_START_WAIT_BYPASS_SEC` | 120 | 1–3600 | A queued local run that has waited this long starts anyway, ignoring the startup cap but still inside the total cap. The same window bounds the startup phase, so a hung boot cannot block the gate forever. |
104
+ | `PAPERCLIP_PDF_CHROMIUM_PATH` | unset | — | Chromium-family executable used for PDF export. `PUPPETEER_EXECUTABLE_PATH` and `CHROME_PATH` are also consulted. |
105
+ | `PORT` | 3100 | — | HTTP listen port; overrides `server.port`. |
106
+ | `PAPERCLIP_HOME` | `~/.paperclip-pro` | — | Root of all instance state. |
107
+ | `PAPERCLIP_INSTANCE_ID` | `default` | — | Selects the instance under `PAPERCLIP_HOME/instances/`. |
108
+ | `PAPERCLIP_TELEMETRY_DISABLED` / `DO_NOT_TRACK` | unset | — | Disables anonymous usage telemetry, which is on by default and off automatically when `CI=true`. |
321
109
 
322
- <br/>
110
+ ## Running as a service
323
111
 
324
- ## Quickstart
112
+ ```sh
113
+ paperclip-pro service install
114
+ paperclip-pro service status
115
+ paperclip-pro service logs -f
116
+ paperclip-pro service restart --drain
117
+ ```
325
118
 
326
- Open source. Self-hosted. No Paperclip account required.
119
+ The unit is `paperclip-pro.service` for the `default` instance and `paperclip-pro-<id>.service` otherwise; on macOS the launchd label is `ing.paperclip.paperclip-pro`. `--drain` waits for executing agent runs; without it, `stop` and `restart` refuse while runs are in flight unless forced.
327
120
 
328
- This fork is not published to npm: `npm view @tickernelz/paperclip-pro` returns 404, and `https://paperclip.ing/install.sh` installs **upstream**, not this fork. Install from git.
121
+ Day-two operation — state layout, safe restarts, backups, admin bootstrap, public hostnames, release mechanics, sandboxed test runs — is in [`docs/fork/OPERATIONS.md`](docs/fork/OPERATIONS.md).
329
122
 
330
- **Requirements:** Node.js 24.11+ (`package.json` `engines`), pnpm 9.15.4 (`packageManager`), `git`, `curl`, `tar`, and `corepack`.
123
+ ## Development
331
124
 
332
- ### 1. Bootstrap the CLI from a source checkout
125
+ Node 24.18.0 and pnpm 9.15.4 (`packageManager` in `package.json`). Work in a git worktree per change; never point a development instance at `~/.paperclip-pro`.
333
126
 
334
- ```bash
127
+ ```sh
335
128
  git clone https://github.com/tickernelz/paperclip-pro.git
336
129
  cd paperclip-pro
337
130
  pnpm install --frozen-lockfile
338
- pnpm paperclip-pro --help
339
- ```
340
-
341
- ### 2. Install a managed payload from this repository
342
-
343
- `install` builds the given git ref into `~/.paperclip-pro/cli` and writes the `paperclip-pro` shim to `~/.local/bin`. `--ref` is mandatory for a git install and `--repo` defaults to the upstream repository (`cli/src/commands/install.ts:27`), so both flags are required here:
344
-
345
- ```bash
346
- node cli/node_modules/tsx/dist/cli.mjs cli/src/index.ts install --repo tickernelz/paperclip-pro --ref main --yes
347
- ```
348
-
349
- Pin an exact commit instead of a branch when you want a reproducible install; `--ref` accepts a branch, tag, or SHA (`cli/src/commands/install.ts:139`-`cli/src/commands/install.ts:147`). `--ref` cannot be combined with `--canary` or `--version`, both of which resolve against npm and therefore do not work for this fork.
350
-
351
- ### 3. Onboard
352
-
353
- ```bash
354
- paperclip-pro onboard --yes
355
- ```
356
-
357
- `onboard` defaults to trusted local loopback. For authenticated/private mode choose a bind preset explicitly:
358
-
359
- ```bash
360
- paperclip-pro onboard --yes --bind lan
361
- paperclip-pro onboard --yes --bind tailnet
362
- ```
363
-
364
- Rerunning `onboard` keeps an existing config; use `paperclip-pro configure` to edit settings. To install the background service, use `paperclip-pro onboard --install-service` or `paperclip-pro service install`.
365
-
366
- ### Or run straight from the checkout
367
-
368
- ```bash
369
131
  pnpm dev
370
132
  ```
371
133
 
372
- This starts the API server at `http://localhost:3100`. An embedded PostgreSQL database is created automatically — no setup required.
373
-
374
- Day-two operation of an installed instance (state layout, safe restarts, backups, new admins, sandboxed test runs) is documented in [`docs/fork/OPERATIONS.md`](docs/fork/OPERATIONS.md).
375
-
376
- <br/>
377
-
378
- ## FAQ
379
-
380
- **What does a typical setup look like?**
381
- Locally, a single Node.js process manages an embedded Postgres and local file storage. For production, point it at your own Postgres and deploy however you like. Configure projects, agents, and goals — the agents take care of the rest.
382
-
383
- If you're a solo entrepreneur you can use Tailscale to access Paperclip on the go. Then later you can deploy to e.g. Vercel when you need it.
384
-
385
- **Can I run multiple companies?**
386
- Yes. A single deployment can run an unlimited number of companies with complete data isolation.
387
-
388
- **How is Paperclip different from agents like OpenClaw or Claude Code?**
389
- Paperclip _uses_ those agents. It orchestrates them into a company — with org charts, budgets, goals, governance, and accountability.
390
-
391
- **Why should I use Paperclip instead of just pointing my OpenClaw to Asana or Trello?**
392
- Agent orchestration has subtleties in how you coordinate who has work checked out, how to maintain sessions, monitoring costs, establishing governance - Paperclip does this for you.
393
-
394
- (Bring-your-own-ticket-system is on the Roadmap)
134
+ | Command | What it does |
135
+ | --- | --- |
136
+ | `pnpm dev` | API and UI in watch mode on `:3100` |
137
+ | `pnpm dev:mobile` | Serves the prebuilt UI on `:3101` and proxies `/api` to `:3100` |
138
+ | `pnpm build` | Builds every package |
139
+ | `pnpm typecheck` | Type-checks every package |
140
+ | `pnpm test` | Vitest, the default gate (no Playwright) |
141
+ | `pnpm test:e2e` | Playwright browser suite |
142
+ | `pnpm db:generate` / `pnpm db:migrate` | Drizzle migrations |
143
+
144
+ Tests and manual trials must never touch a live instance. Use an isolated data directory:
145
+
146
+ ```sh
147
+ node cli/node_modules/tsx/dist/cli.mjs cli/src/index.ts test-drive --data-dir /tmp/pcpro-trial --no-browser
148
+ ```
395
149
 
396
- **Do agents run continuously?**
397
- By default, agents run on scheduled heartbeats and event-based triggers (task assignment, @-mentions). You can also hook in continuous agents like OpenClaw. You bring your agent and Paperclip coordinates.
150
+ Section 8 of [`docs/fork/OPERATIONS.md`](docs/fork/OPERATIONS.md) documents the sandbox rules for suite runs. The full development guide is [`doc/DEVELOPING.md`](doc/DEVELOPING.md); installation details are in [`doc/INSTALLING.md`](doc/INSTALLING.md) and the CLI reference in [`doc/CLI.md`](doc/CLI.md).
398
151
 
399
- <br/>
152
+ ## Release
400
153
 
401
- ## Development
154
+ Pushing a `v<YYYY.MDD.P>` tag triggers `.github/workflows/release.yml`, which builds once, packs each package once, publishes the set under the `next` dist-tag in dependency order, waits for npm to expose all of it, moves `latest`, and opens a GitHub release.
402
155
 
403
- ```bash
404
- pnpm dev # Full dev (API + UI, watch mode)
405
- pnpm dev:once # Full dev without file watching
406
- pnpm dev:server # Server only
407
- pnpm dev:mobile # Serve prebuilt UI on :3101 for phones/tablets (proxies /api → :3100)
408
- pnpm dev:both # Run `pnpm dev` and `pnpm dev:mobile` together
409
- pnpm build # Build all
410
- pnpm typecheck # Type checking
411
- pnpm test # Cheap default test run (Vitest only)
412
- pnpm test:watch # Vitest watch mode
413
- pnpm test:e2e # Playwright browser suite
414
- pnpm db:generate # Generate DB migration
415
- pnpm db:migrate # Apply migrations
156
+ ```sh
157
+ ./scripts/tag-release.sh --dry-run
158
+ ./scripts/tag-release.sh
416
159
  ```
417
160
 
418
- `pnpm test` does not run Playwright. Browser suites stay separate and are typically run only when working on those flows or in CI.
419
-
420
- See [doc/DEVELOPING.md](doc/DEVELOPING.md) for the full development guide.
421
-
422
- <br/>
423
-
424
- ## Roadmap
425
-
426
- - ✅ Plugin system (e.g. add a knowledge base, custom tracing, queues, etc)
427
- - ✅ Get OpenClaw / claw-style agent employees
428
- - ✅ companies.sh - import and export entire organizations
429
- - ✅ Easy AGENTS.md configurations
430
- - ✅ Skills Manager, Skill Studio & Skills Store
431
- - ✅ Scheduled Routines
432
- - ✅ Better Budgeting
433
- - ✅ Agent Reviews and Approvals
434
- - ✅ Multiple Human Users
435
- - ✅ Cloud / Sandbox agents (e2b, Cloudflare, Daytona, Modal, Novita, self-hosted Kubernetes)
436
- - ✅ Artifacts & Work Products
437
- - ✅ Deep Planning (planning mode, revisioned plans, plan approvals)
438
- - ✅ Enforced Outcomes (watchdogs, recovery actions, review gates)
439
- - ✅ MCP Tool Gateway & Apps (governed tool access)
440
- - ✅ Secrets Manager with per-agent access
441
- - ✅ Activity log & action attribution
442
- - ✅ Self-healing runs & automatic recovery
443
- - ✅ Agent evals & feedback
444
- - ⚪ Memory / Knowledge
445
- - ⚪ MAXIMIZER MODE
446
- - ⚪ Work Queues
447
- - ⚪ Self-Organization
448
- - ⚪ Automatic Organizational Learning
449
- - ⚪ CEO Chat
450
- - 🟡 Cloud deployments (multi-tenant isolation & company Import/Export shipped)
451
- - ⚪ Desktop App
452
- - ⚪ Bring-your-own-ticket-system (Asana / Linear / Jira as on-ramps)
453
- - ⚪ Connected Apps (one-click integrations, e.g. Vercel)
454
-
455
- This is the short roadmap preview. See the full roadmap in [ROADMAP.md](ROADMAP.md).
456
-
457
- <br/>
458
-
459
- ## Community & Plugins
460
-
461
- Find Plugins and more at [awesome-paperclip](https://github.com/gsxdsm/awesome-paperclip)
161
+ `scripts/tag-release.sh` resolves the next free version, refuses a version whose tag already exists, and refuses to tag a commit whose `ci.yml` run is not green. The release job re-checks both: the tagged commit must be reachable from `origin/main` and must have a successful CI run. Reruns are idempotent, so a partial publish can be resumed. Section 9 of [`docs/fork/OPERATIONS.md`](docs/fork/OPERATIONS.md) has the dispatch inputs and the npm token setup.
462
162
 
463
163
  ## Observability
464
164
 
465
- Paperclip ships with opt-in OpenTelemetry auto-instrumentation for the server (traces only). It activates when `OTEL_EXPORTER_OTLP_ENDPOINT` is set and supports `grpc`, `http/protobuf`, and `http/json` via the standard `OTEL_EXPORTER_OTLP_PROTOCOL` env var. `@opentelemetry/api` is a normal server dependency; the SDK, auto-instrumentation, and exporter packages are optional peer dependencies — install them only if you want tracing. See [doc/observability.md](doc/observability.md) for install commands and the full env-var reference.
165
+ OpenTelemetry tracing activates when `OTEL_EXPORTER_OTLP_ENDPOINT` is set; the SDK, auto-instrumentation and exporter packages are optional peer dependencies. Sentry activates with `SENTRY_DSN_BACKEND` and `SENTRY_DSN_FRONTEND`. See [`doc/observability.md`](doc/observability.md).
466
166
 
467
- Paperclip also ships with opt-in Sentry error monitoring for the server and the browser. Set `SENTRY_DSN_FRONTEND` to activate it for the browser and `SENTRY_DSN_BACKEND` to activate it for the server — each variable is optional, and the legacy `SENTRY_DSN` variable still works as a fallback for either component. The supported server SDK version is `@sentry/node@10.71.0`; it is an optional peer dependency for the server, so install it only if you want error monitoring. The browser SDK, `@sentry/browser`, is pinned to the same exact version. See [doc/observability.md](doc/observability.md#sentry-error-monitoring) for the install command, the privacy settings, and the full default capture set.
468
-
469
- ## Telemetry
470
-
471
- Paperclip collects anonymous usage telemetry to help us understand how the product is used and improve it. No personal information, issue content, prompts, file paths, or secrets are ever collected. Private repository references are hashed with a per-install salt before being sent.
472
-
473
- Contributors changing emitted telemetry events should follow the [Telemetry Data Contract](packages/shared/src/telemetry/README.md).
474
- For proposed first-party events that are not in the generated contract yet, follow [Telemetry Workflow](doc/TELEMETRY_WORKFLOW.md).
475
-
476
- Telemetry is **enabled by default** and can be disabled with any of the following:
477
-
478
- | Method | How |
479
- | -------------------- | ------------------------------------------------------- |
480
- | Environment variable | `PAPERCLIP_TELEMETRY_DISABLED=1` |
481
- | Standard convention | `DO_NOT_TRACK=1` |
482
- | CI environments | Automatically disabled when `CI=true` |
483
- | Config file | Set `telemetry.enabled: false` in your Paperclip config |
484
-
485
- ## Contributing
486
-
487
- We welcome contributions. See the [contributing guide](CONTRIBUTING.md) for details.
488
-
489
- <br/>
490
-
491
- ## Community
492
-
493
- This fork:
494
-
495
- - [GitHub Issues](https://github.com/tickernelz/paperclip-pro/issues) — bugs and feature requests **for this fork**
496
-
497
- Upstream project (do not file fork bugs there):
498
-
499
- - [Discord](https://discord.gg/m4HZY7xNG3) — upstream community
500
- - [Twitter / X](https://x.com/papercliping) — upstream updates
501
- - [GitHub](https://github.com/paperclipai/paperclip) — upstream issues and discussions
502
-
503
- <br/>
504
-
505
- ## License
167
+ ## Licence and attribution
506
168
 
507
169
  MIT. Upstream work is copyright Paperclip Labs, Inc ([paperclip.ing](https://paperclip.ing)); fork modifications are copyright the paperclip-pro maintainers. Both notices are in [`LICENSE`](LICENSE).
508
170
 
509
- <br/>
510
-
511
- ---
512
-
513
- <p align="center">
514
- <sub>Open source under MIT. Built for people who want to get work done, not babysit agents.</sub>
515
- </p>
171
+ Upstream project, for reference only — do not file fork bugs there: [`paperclipai/paperclip`](https://github.com/paperclipai/paperclip), [docs.paperclip.ing](https://docs.paperclip.ing).