paperclip-github-plugin 0.4.1 → 0.4.2

package/README.md

@@ -29,7 +29,7 @@ With this plugin, you can:
 The plugin adds a full in-host workflow instead of a one-off import script:
 
 - a hosted settings page for GitHub auth, repository mappings, company defaults, and sync controls
-- setup controls for Paperclip board access and company-scoped agent token propagation on authenticated and `local_trusted` deployments
+- authenticated-only setup controls for Paperclip board access and company-scoped agent token propagation
 - a dashboard widget that shows readiness, sync status, and last-run results
 - saved sync diagnostics that let operators inspect the latest per-issue failures, raw errors, and suggested next steps
 - a project sidebar item that opens a live project-scoped Pull Requests page for the mapped repository and can show the open PR count through a lightweight badge read
@@ -39,7 +39,7 @@ The plugin adds a full in-host workflow instead of a one-off import script:
 
 ## How it works
 
-1. Save a GitHub token in the plugin settings for the current company.
+1. Save a GitHub token in the plugin settings.
 2. Connect one or more GitHub repositories to Paperclip projects.
 3. Run a sync manually or let the scheduled job keep things up to date.
 
@@ -53,11 +53,11 @@ Long-running syncs continue in the background, so quick actions do not have to w
 
 ### Company-aware configuration
 
-GitHub tokens, repository mappings, advanced import defaults, and Paperclip board access are all managed per company, while sync cadence remains shared at the plugin instance level. When you open settings inside a specific company, you only edit that company's setup and defaults.
+GitHub tokens, repository mappings, advanced import defaults, Paperclip board access, and sync cadence are managed per company. When you open settings inside a specific company, you only edit that company's setup.
 
 ### Project binding that respects existing work
 
-If a company already has a Paperclip project bound to a GitHub repository workspace, the settings UI can reuse that project instead of creating a duplicate. New mappings can also create and bind a Paperclip project automatically, and those newly created projects opt into isolated issue checkouts.
+If a company already has a Paperclip project bound to a GitHub repository workspace, the settings UI can reuse that project instead of creating a duplicate. New mappings can also create and bind a Paperclip project automatically, and those newly created projects opt into isolated issue checkouts with new issues defaulting to isolated checkout.
 
 ### Status sync with delivery context
 
@@ -107,15 +107,14 @@ npx paperclipai plugin install --local "$PWD"
 
 1. Open the plugin settings for **GitHub Sync** from inside the Paperclip company you want to configure.
 2. Paste a GitHub token, validate it, and save it.
-3. If the deployment is authenticated or `local_trusted`, the settings page shows Paperclip board access and GitHub token propagation controls so you can configure and test them locally.
-4. If the deployment is authenticated, connect Paperclip board access from the same settings page and complete the approval flow before running sync.
-5. If the deployment is authenticated or `local_trusted`, choose which agents in the current company should receive the saved GitHub token as `GITHUB_TOKEN`.
-6. Add one or more repository mappings for the current company.
-7. For each mapping, either choose an existing GitHub-linked Paperclip project or enter the project name that should receive synced issues.
-8. Optionally configure company-wide defaults for imported issues, including the default assignee, the default Paperclip status, and ignored GitHub usernames. Bot aliases such as `renovate[bot]` are matched when you save `renovate`.
-9. Choose the automatic sync interval in minutes.
-10. Save the settings and run the first manual sync.
-11. Repeat inside other companies if they need their own mappings, defaults, board access, or agent token propagation.
+3. If the deployment is authenticated, connect Paperclip board access from the same settings page and complete the approval flow.
+4. If the deployment is authenticated, choose which agents in the current company should receive the saved GitHub token as `GITHUB_TOKEN`.
+5. Add one or more repository mappings for the current company.
+6. For each mapping, either choose an existing GitHub-linked Paperclip project or enter the project name that should receive synced issues.
+7. Optionally configure company-wide defaults for imported issues, including the default assignee, the default Paperclip status, and ignored GitHub usernames. Bot aliases such as `renovate[bot]` are matched when you save `renovate`.
+8. Choose the automatic sync interval in minutes.
+9. Save the settings and run the first manual sync.
+10. Repeat inside other companies if they need their own mappings, defaults, board access, or agent token propagation.
 
 Repository input accepts either `owner/repo` or `https://github.com/owner/repo`.
 When a token is saved, the settings page audits the mapped repositories for the permissions needed by pull request actions and warns when permissions are missing or GitHub cannot verify them yet.
@@ -156,9 +155,8 @@ The plugin is designed to avoid persisting raw credentials in plugin state.
 
 - GitHub tokens saved through the UI are stored as per-company Paperclip secret references.
 - Paperclip board access tokens are also stored as per-company secret references.
-- The settings UI also keeps lightweight non-secret identity labels for those saved connections, so later visits can still show who that company’s GitHub token and board access are connected as.
-- On authenticated and `local_trusted` deployments, any selected propagation agents receive `GITHUB_TOKEN` as an agent env secret-ref binding that points at the same saved GitHub token secret instead of a copied raw token.
-- If an older save left the company token secret only in plugin state, the settings UI repairs the config mirror and retries selected-agent propagation from that same company secret.
+- The settings UI also keeps lightweight non-secret identity labels for those saved connections, so later visits can still show who each company GitHub token and board access are connected as.
+- On authenticated deployments, any selected propagation agents receive `GITHUB_TOKEN` as an agent env secret-ref binding that points at the same saved GitHub token secret instead of a copied raw token.
 - The worker resolves those secret references at runtime instead of storing raw tokens in plugin state.
 - On authenticated Paperclip deployments, sync is blocked until the relevant company has connected Paperclip board access.
 

package/dist/manifest.js

@@ -503,7 +503,7 @@ var require2 = createRequire(import.meta.url);
 var packageJson = require2("../package.json");
 var DASHBOARD_WIDGET_CAPABILITY = "ui.dashboardWidget.register";
 var SCHEDULE_TICK_CRON = "* * * * *";
-var MANIFEST_VERSION = "0.4.1"?.trim() || typeof packageJson.version === "string" && packageJson.version.trim() || process.env.npm_package_version?.trim() || "0.0.0-dev";
+var MANIFEST_VERSION = "0.4.2"?.trim() || typeof packageJson.version === "string" && packageJson.version.trim() || process.env.npm_package_version?.trim() || "0.0.0-dev";
 var manifest = {
   id: "paperclip-github-plugin",
   apiVersion: 1,
@@ -594,10 +594,10 @@ var manifest = {
         exportName: "GitHubSyncDashboardWidget"
       },
       {
-        type: "detailTab",
+        type: "taskDetailView",
         id: "paperclip-github-plugin-issue-detail-tab",
         displayName: "GitHub",
-        exportName: "GitHubSyncIssueDetailTab",
+        exportName: "GitHubSyncIssueTaskDetailView",
         entityTypes: ["issue"]
       },
       {
@@ -618,7 +618,7 @@ var manifest = {
         id: "paperclip-github-plugin-toolbar-button",
         displayName: "GitHub Sync",
         exportName: "GitHubSyncEntityToolbarButton",
-        entityTypes: ["project", "issue"]
+        entityTypes: ["project"]
       },
       {
         type: "settingsPage",

package/dist/ui/index.js

@@ -22400,11 +22400,6 @@ function requiresPaperclipBoardAccess(value) {
   const health = normalizePaperclipHealthResponse(value);
   return health?.deploymentMode?.toLowerCase() === "authenticated";
 }
-function shouldShowPaperclipBoardAccessSettings(value) {
-  const health = normalizePaperclipHealthResponse(value);
-  const deploymentMode = health?.deploymentMode?.toLowerCase();
-  return deploymentMode === "authenticated" || deploymentMode === "local_trusted";
-}
 
 // src/ui/assignees.ts
 function normalizeCompanyAssigneeOptionsResponse(response) {
@@ -23045,7 +23040,6 @@ function getSyncSetupMessage(issue, hasCompanyContext) {
 }
 function usePaperclipBoardAccessRequirement() {
   const [status, setStatus] = useState2("loading");
-  const [visible, setVisible] = useState2(false);
   useEffect2(() => {
     let cancelled = false;
     void (async () => {
@@ -23055,10 +23049,8 @@ function usePaperclipBoardAccessRequirement() {
       }
       if (!health) {
         setStatus("unknown");
-        setVisible(false);
         return;
       }
-      setVisible(shouldShowPaperclipBoardAccessSettings(health));
       setStatus(requiresPaperclipBoardAccess(health) ? "required" : "not_required");
     })();
     return () => {
@@ -23067,8 +23059,7 @@ function usePaperclipBoardAccessRequirement() {
   }, []);
   return {
     status,
-    required: status === "required",
-    visible
+    required: status === "required"
   };
 }
 function getGitHubRateLimitResourceLabel(resource) {
@@ -27771,7 +27762,8 @@ async function resolveOrCreateProject(companyId, projectName) {
       name: projectName.trim(),
       status: "planned",
       executionWorkspacePolicy: {
-        enabled: true
+        enabled: true,
+        defaultMode: "isolated_workspace"
       }
     })
   });
@@ -31087,7 +31079,6 @@ function GitHubSyncSettingsPage() {
   const themeMode = useResolvedThemeMode();
   const boardAccessRequirement = usePaperclipBoardAccessRequirement();
   const armSyncCompletionToast = useSyncCompletionToast(form.syncState, toast);
-  const githubTokenConfigSyncAttemptRef = useRef(null);
   const boardAccessConfigSyncAttemptRef = useRef(null);
   const assigneeFallbackAttemptRef = useRef(null);
   const currentSettings = settings.data ?? cachedSettings;
@@ -31201,75 +31192,6 @@ function GitHubSyncSettingsPage() {
       cancelled = true;
     };
   }, [currentSettings?.availableAssignees?.length, currentSettings?.updatedAt, hostContext.companyId]);
-  useEffect2(() => {
-    const companyId = hostContext.companyId;
-    const secretRef = settings.data?.githubTokenNeedsConfigSync ? settings.data.githubTokenConfigSyncRef : void 0;
-    if (!companyId || !secretRef) {
-      return;
-    }
-    const attemptKey = `${companyId}:${secretRef}`;
-    if (githubTokenConfigSyncAttemptRef.current === attemptKey) {
-      return;
-    }
-    githubTokenConfigSyncAttemptRef.current = attemptKey;
-    let cancelled = false;
-    void (async () => {
-      try {
-        const pluginId = await resolveCurrentPluginId(pluginIdFromLocation);
-        if (!pluginId) {
-          throw new Error("Plugin id is required to finish syncing the GitHub token secret into plugin config.");
-        }
-        await patchPluginConfig(pluginId, {
-          githubTokenRefs: {
-            [companyId]: secretRef
-          }
-        });
-        if (cancelled) {
-          return;
-        }
-        const selectedAgentIds = normalizeAgentIds(settings.data?.advancedSettings?.githubTokenPropagationAgentIds);
-        if (selectedAgentIds.length > 0) {
-          try {
-            await propagateGitHubTokenToSelectedAgents({
-              selectedAgentIds,
-              previousAgentIds: selectedAgentIds,
-              githubTokenSecretRef: secretRef
-            });
-          } catch {
-          }
-        }
-        notifyGitHubSyncSettingsChanged();
-        try {
-          await settings.refresh();
-        } catch {
-          return;
-        }
-      } catch (error) {
-        if (cancelled) {
-          return;
-        }
-        toast({
-          title: "GitHub token needs reconnection",
-          body: getActionErrorMessage(
-            error,
-            "GitHub Sync could not finish migrating the saved GitHub token secret into plugin config."
-          ),
-          tone: "error"
-        });
-      }
-    })();
-    return () => {
-      cancelled = true;
-    };
-  }, [
-    hostContext.companyId,
-    pluginIdFromLocation,
-    settings.data?.advancedSettings?.githubTokenPropagationAgentIds,
-    settings.data?.githubTokenConfigSyncRef,
-    settings.data?.githubTokenNeedsConfigSync,
-    settings.refresh,
-    toast
-  ]);
   useEffect2(() => {
     const companyId = hostContext.companyId;
     const secretRef = settings.data?.paperclipBoardAccessNeedsConfigSync ? settings.data.paperclipBoardAccessConfigSyncRef : void 0;
@@ -31397,13 +31319,12 @@ function GitHubSyncSettingsPage() {
   const hasSavedToken = Boolean(form.githubTokenConfigured || showSavedTokenHint);
   const boardAccessConfigured = Boolean(form.paperclipBoardAccessConfigured);
   const boardAccessRequired = boardAccessRequirement.required;
-  const boardAccessVisible = boardAccessRequirement.visible;
   const boardAccessReady = !boardAccessRequired || hasCompanyContext && boardAccessConfigured;
   const tokenStatus = tokenStatusOverride ?? (hasSavedToken ? "valid" : "required");
   const tokenTone = tokenStatus === "valid" ? "success" : tokenStatus === "invalid" ? "danger" : "warning";
   const tokenBannerLabel = tokenStatus === "valid" ? "Token valid" : tokenStatus === "invalid" ? "Token invalid" : "Token required";
   const tokenBadgeLabel = tokenStatus === "valid" ? "Valid" : tokenStatus === "invalid" ? "Invalid" : "Required";
-  const tokenStatusDescription = tokenStatus === "invalid" ? "GitHub rejected the last token." : tokenStatus === "required" ? "Add a token." : "Shared token.";
+  const tokenStatusDescription = tokenStatus === "invalid" ? "GitHub rejected the last token." : tokenStatus === "required" ? hasCompanyContext ? "Add a token for this company." : "Select a company." : hasCompanyContext ? "Token configured for the selected company context." : "Saved in one or more companies.";
   const tokenDescription = tokenStatusDescription;
   const tokenPermissionAuditData = tokenPermissionAudit.data;
   const tokenPermissionAuditMeta = getGitHubTokenPermissionAuditMeta(tokenPermissionAuditData);
@@ -31492,7 +31413,7 @@ function GitHubSyncSettingsPage() {
   const manualSyncScopePillLabel = hasCompanyContext ? "This company" : "All companies";
   const manualSyncButtonLabel = hasCompanyContext ? "Run sync for this company" : "Run sync across all companies";
   const advancedSettingsSummary = formatAdvancedSettingsSummary(form.advancedSettings, availableAssignees, {
-    includePropagation: boardAccessVisible
+    includePropagation: boardAccessRequired
   });
   const assigneeSelectOptions = [
     { value: "", label: "Unassigned" },
@@ -31527,7 +31448,7 @@ function GitHubSyncSettingsPage() {
         ] }),
         /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-head-actions", children: [
           /* @__PURE__ */ jsx2("span", { className: `ghsync__scope-pill ${hasCompanyContext ? "ghsync__scope-pill--company" : "ghsync__scope-pill--mixed"}`, children: hasCompanyContext ? currentCompanyName : "No company" }),
-          /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Shared" }),
+          hasCompanyContext ? /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--company", children: "Company" }) : null,
           /* @__PURE__ */ jsxs2("span", { className: "ghsync__badge ghsync__badge--neutral", children: [
             /* @__PURE__ */ jsx2(LoadingSpinner, { size: "sm", label: "Loading settings" }),
             "Loading"
@@ -31638,7 +31559,7 @@ function GitHubSyncSettingsPage() {
     });
   }
   async function propagateGitHubTokenToSelectedAgents(options) {
-    if (!boardAccessVisible) {
+    if (!boardAccessRequired) {
       return;
     }
     const selectedAgentIds = normalizeAgentIds(options.selectedAgentIds);
@@ -31647,17 +31568,18 @@ function GitHubSyncSettingsPage() {
       return;
     }
     let githubTokenSecretRef = typeof options.githubTokenSecretRef === "string" && options.githubTokenSecretRef.trim() ? options.githubTokenSecretRef.trim() : void 0;
+    const companyId = hostContext.companyId;
     if (!githubTokenSecretRef) {
-      const companyId = hostContext.companyId;
       if (!companyId) {
-        throw new Error("Company context is required to propagate the GitHub token to selected agents.");
+        throw new Error("Company context is required to propagate the GitHub token.");
       }
       const pluginId = await resolveCurrentPluginId(pluginIdFromLocation);
       if (!pluginId) {
         throw new Error("Plugin id is required to propagate the GitHub token to selected agents.");
       }
       const currentConfigResponse = await fetchJson(`/api/plugins/${pluginId}/config`);
-      githubTokenSecretRef = normalizePluginConfig(currentConfigResponse?.configJson).githubTokenRefs?.[companyId];
+      const normalizedConfig = normalizePluginConfig(currentConfigResponse?.configJson);
+      githubTokenSecretRef = normalizedConfig.githubTokenRefs?.[companyId];
     }
     if (!githubTokenSecretRef) {
       throw new Error("GitHub token propagation requires a GitHub token saved through this settings page.");
@@ -31713,7 +31635,9 @@ function GitHubSyncSettingsPage() {
       });
       await saveRegistration({
         companyId,
-        githubTokenRef: secret.id,
+        githubTokenRefs: {
+          [companyId]: secret.id
+        },
         githubTokenLogin: validation.login
       });
       const selectedAgentIds = normalizeAgentIds(currentSettings?.advancedSettings?.githubTokenPropagationAgentIds);
@@ -32035,7 +31959,7 @@ function GitHubSyncSettingsPage() {
       ] }),
       /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-head-actions", children: [
         /* @__PURE__ */ jsx2("span", { className: `ghsync__scope-pill ${hasCompanyContext ? "ghsync__scope-pill--company" : "ghsync__scope-pill--mixed"}`, children: hasCompanyContext ? currentCompanyName : "No company" }),
-        /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Shared" }),
+        /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--company", children: "Company" }),
         /* @__PURE__ */ jsxs2("span", { className: `ghsync__badge ${getToneClass(tokenTone)}`, children: [
           /* @__PURE__ */ jsx2("span", { className: "ghsync__badge-dot", "aria-hidden": "true" }),
           tokenBannerLabel
@@ -32057,7 +31981,7 @@ function GitHubSyncSettingsPage() {
             /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-copy", children: [
               /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-title-row", children: [
                 /* @__PURE__ */ jsx2("h4", { children: "GitHub access" }),
-                /* @__PURE__ */ jsx2("div", { className: "ghsync__section-tags", children: /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Shared" }) })
+                /* @__PURE__ */ jsx2("div", { className: "ghsync__section-tags", children: /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--company", children: "Company" }) })
               ] }),
               /* @__PURE__ */ jsx2("p", { children: tokenDescription })
             ] }),
@@ -32065,8 +31989,8 @@ function GitHubSyncSettingsPage() {
           ] }),
           !hasCompanyContext ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__locked", children: [
             /* @__PURE__ */ jsxs2("div", { children: [
-              /* @__PURE__ */ jsx2("strong", { children: hasSavedToken ? "Shared token ready" : "Company required" }),
-              /* @__PURE__ */ jsx2("span", { children: hasSavedToken ? "Open a company to replace it." : "Open a company to save it." })
+              /* @__PURE__ */ jsx2("strong", { children: "Company required" }),
+              /* @__PURE__ */ jsx2("span", { children: "Open a company to view or save its token." })
             ] }),
             /* @__PURE__ */ jsx2("span", { className: "ghsync__badge ghsync__badge--neutral", children: "Read only" })
           ] }) : showTokenForm ? /* @__PURE__ */ jsxs2("form", { className: "ghsync__stack", onSubmit: handleSaveToken, children: [
@@ -32123,8 +32047,8 @@ function GitHubSyncSettingsPage() {
             ] }) })
           ] }) : /* @__PURE__ */ jsxs2("div", { className: "ghsync__connected", children: [
             /* @__PURE__ */ jsxs2("div", { children: [
-              /* @__PURE__ */ jsx2("strong", { children: validatedLogin ? `Authenticated as ${validatedLogin}` : "Shared token ready" }),
-              /* @__PURE__ */ jsx2("span", { children: "Shared across all companies." })
+              /* @__PURE__ */ jsx2("strong", { children: validatedLogin ? `Authenticated as ${validatedLogin}` : "Company token ready" }),
+              /* @__PURE__ */ jsx2("span", { children: `Used for sync in ${currentCompanyName}.` })
             ] }),
             /* @__PURE__ */ jsx2(
               "button",
@@ -32163,7 +32087,7 @@ function GitHubSyncSettingsPage() {
             /* @__PURE__ */ jsx2("div", { className: "ghsync__permission-audit-list", children: /* @__PURE__ */ jsx2("div", { className: "ghsync__permission-audit-item", children: /* @__PURE__ */ jsx2("span", { children: tokenPermissionAuditData?.warnings[0] ?? "Add a mapped repository in this company so GitHub Sync can verify the token permissions it needs." }) }) })
           ] }) : null
         ] }),
-        boardAccessVisible ? /* @__PURE__ */ jsxs2("section", { className: "ghsync__section", children: [
+        boardAccessRequired ? /* @__PURE__ */ jsxs2("section", { className: "ghsync__section", children: [
           /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-head", children: [
             /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-copy", children: [
               /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-title-row", children: [
@@ -32177,7 +32101,7 @@ function GitHubSyncSettingsPage() {
           hostContext.companyId ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__connected", children: [
             /* @__PURE__ */ jsxs2("div", { children: [
               /* @__PURE__ */ jsx2("strong", { children: boardAccessConfigured ? boardAccessIdentity ? `Connected as ${boardAccessIdentity}` : "Connected" : boardAccessRequired ? "Required" : boardAccessRequirement.status === "loading" ? "Checking requirement" : "Optional" }),
-              /* @__PURE__ */ jsx2("span", { children: boardAccessConfigured ? "Used for Paperclip API calls." : boardAccessRequired ? "Required in authenticated deployments." : boardAccessRequirement.status === "loading" ? "Checking whether it is required." : "Available here for local testing and only required when Paperclip API calls need sign-in." })
+              /* @__PURE__ */ jsx2("span", { children: boardAccessConfigured ? "Used for Paperclip API calls." : boardAccessRequired ? "Required in authenticated deployments." : boardAccessRequirement.status === "loading" ? "Checking whether it is required." : "Only needed when Paperclip API calls require sign-in." })
             ] }),
             /* @__PURE__ */ jsx2(
               "button",
@@ -32433,7 +32357,7 @@ function GitHubSyncSettingsPage() {
               ),
               /* @__PURE__ */ jsx2("p", { className: "ghsync__hint", children: "Comma or newline separated." })
             ] }),
-            boardAccessVisible ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__field", children: [
+            boardAccessRequired ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__field", children: [
               /* @__PURE__ */ jsx2("label", { htmlFor: "advanced-token-propagation", children: "Propagate GitHub token to agents" }),
               /* @__PURE__ */ jsx2(
                 SettingsAgentMultiPicker,
@@ -32464,7 +32388,7 @@ function GitHubSyncSettingsPage() {
                 /* @__PURE__ */ jsx2("h4", { children: "Sync" }),
                 /* @__PURE__ */ jsxs2("div", { className: "ghsync__section-tags", children: [
                   /* @__PURE__ */ jsx2("span", { className: manualSyncScopePillClass, children: manualSyncScopePillLabel }),
-                  /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Shared cadence" })
+                  /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Company cadence" })
                 ] })
               ] }),
               syncSectionDescription ? /* @__PURE__ */ jsx2("p", { children: syncSectionDescription }) : null
@@ -32501,12 +32425,16 @@ function GitHubSyncSettingsPage() {
                 /* @__PURE__ */ jsx2("p", { className: `ghsync__hint${scheduleFrequencyError ? " ghsync__hint--error" : ""}`, children: scheduleFrequencyError ?? "Minutes." })
               ] }),
               /* @__PURE__ */ jsxs2("div", { className: "ghsync__schedule-meta", children: [
-                /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Shared" }),
+                /* @__PURE__ */ jsx2("span", { className: "ghsync__scope-pill ghsync__scope-pill--global", children: "Company" }),
                 /* @__PURE__ */ jsxs2("strong", { children: [
                   "Auto-sync ",
                   scheduleDescription
                 ] }),
-                /* @__PURE__ */ jsx2("span", { children: "All companies." })
+                /* @__PURE__ */ jsxs2("span", { children: [
+                  "Used for sync in ",
+                  currentCompanyName,
+                  "."
+                ] })
               ] })
             ] }),
             !syncUnlocked ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__locked", children: [
@@ -32607,7 +32535,7 @@ function GitHubSyncSettingsPage() {
             ] }),
             /* @__PURE__ */ jsx2("span", { children: !repositoriesUnlocked ? "Requires a token." : savedMappingCount > 0 ? hasCompanyContext ? `${savedMappingCount} saved.` : `${savedMappingCount} saved.` : hasCompanyContext ? "Add a repository." : "Select a company." })
           ] }),
-          boardAccessVisible ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__check", children: [
+          boardAccessRequired ? /* @__PURE__ */ jsxs2("div", { className: "ghsync__check", children: [
             /* @__PURE__ */ jsxs2("div", { className: "ghsync__check-top", children: [
               /* @__PURE__ */ jsx2("strong", { children: "Paperclip board access" }),
               /* @__PURE__ */ jsx2("span", { className: `ghsync__badge ${getToneClass(boardAccessStatusTone)}`, children: boardAccessStatusLabel })
@@ -33551,7 +33479,7 @@ function GitHubSyncIssueDetailTabContent(props) {
     ] }) : null
   ] });
 }
-function GitHubSyncIssueDetailTab() {
+function GitHubSyncIssueTaskDetailView() {
   const context = useHostContext();
   const themeMode = useResolvedThemeMode();
   const theme = themeMode === "light" ? LIGHT_PALETTE : DARK_PALETTE;
@@ -33574,6 +33502,7 @@ function GitHubSyncIssueDetailTab() {
     detailKey
   );
 }
+var GitHubSyncIssueDetailTab = GitHubSyncIssueTaskDetailView;
 function GitHubSyncCommentAnnotation() {
   const context = useHostContext();
   const themeMode = useResolvedThemeMode();
@@ -33619,6 +33548,7 @@ export {
   GitHubSyncEntityToolbarButton,
   GitHubSyncGlobalToolbarButton,
   GitHubSyncIssueDetailTab,
+  GitHubSyncIssueTaskDetailView,
   GitHubSyncProjectPullRequestsPage,
   GitHubSyncProjectPullRequestsSidebarItem,
   GitHubSyncSettingsPage,