Libra CodeHub

CedarCopilot/cedar-mail

Branch: staging

fix

merged#2659CedarCopilot

CedarCopilot wants to merge 1 commit into main from staging

Not deployedTimeline and evidence
  1. Opened
    Sep 2, 2026, 8:13 AM
  2. Merged
    Sep 2, 2026, 8:25 AM
  3. Sep 2, 2026, 8:26 AM
  4. Live on staging, live on prod, observed
    Pending
  5. Not deployed

    Not deployed

    Pending

Libra has no production signal for this change yet because it has not deployed. Libra checks hourly for 3 days after each deploy.

Greptile Summary

This change binds post-event drafting tools to the resolved drafter and organization, so mailbox access follows that drafter’s connection grants. It also removes Bcc recipients from live-thread responses and uses the shared Radix Dialog package for Cmd+K search.

The scoped-mail access failure was disproved: focused server tests confirmed that a scoped agent without a live-mail grant is denied access, while the post-event executor now passes both agent and organization identity to the execution context. The Bcc disclosure failure was disproved by the live-thread response test. The Cmd+K Dialog context failure was also disproved by rendering the actual command bar, opening it with Ctrl+K, and observing the dialog and search input without the Radix context error.

Confidence Score: 5/5

Safe to merge based on the exercised permission, recipient-privacy, and Cmd+K dialog-rendering paths.

No publishable defects remain. Focused server tests covered identity propagation, scoped live-mail denial, and Bcc omission; a focused UI render test covered the Cmd+K dialog opening path.

Files Needing Attention: No files need follow-up from this review.

T-Rex T-Rex Logs

What T-Rex did

  • Ran the targeted server validation suite for post-event drafter identity, scoped live-mail grants, and live-thread recipient shaping, which completed with 44 passing tests and confirmed that scoped search-live-emails is denied when an agent identity is present without a mail grant, while the executor context includes agentId and orgId and Bcc is absent from live-thread results.
  • Mounted the ConversationSearchCommandBar in a focused Jest/jsdom test, triggered Ctrl+K, and verified that the dialog and the conversation-search input render without the cross-package Radix context error; the focused render test and the supporting dialog-filter tests both passed.
  • Validated the post-event executor flow and tool grants, confirming that run-post-event-executor resolves agentId and orgId for the execution context, that tool grants enforce the denied scoped live-mail access and no-agent inheritance, and that readLiveThreadTool excludes Bcc from the output.

View all artifacts

T-Rex Ran code and verified through T-Rex

Reviews (1): Last reviewed commit: "Merge pull request #2657 from CedarCopil..." | Re-trigger Greptile

Show production surfaces and changed-file mapping

Production surfaces

Libra has not measured any production surfaces for this change yet.

Changed files → surfaces

  • apps/mail/modules/conversations/components/ConversationSearchCommandBar.tsxno production surface mapped
  • apps/mail/tests/modules/conversations/conversationSearchFilterRow.test.tsxno production surface mapped
  • apps/server/.claude/skills/playbook-instruction-eval/live-thread-search-eval.tsno production surface mapped
  • apps/server/src/mastra/tools/__tests__/drafting-executor-live-mail-grant.test.tsno production surface mapped
  • apps/server/src/mastra/tools/__tests__/tool-grant.test.tsno production surface mapped
  • apps/server/src/mastra/tools/event-execution/orchestrator-dispatch-tools.tsno production surface mapped
  • apps/server/src/mastra/tools/mail/__tests__/liveMailTools.test.tsno production surface mapped
  • apps/server/src/mastra/tools/mail/__tests__/mailTool.live-actions.test.tsno production surface mapped
  • apps/server/src/mastra/tools/mail/readLiveThreadTool.tsno production surface mapped