CedarCopilot/cedar-mail

Branch: staging

[2026-09-12] merging staging to main

merged#2767CedarCopilot

CedarCopilot wants to merge 1 commit into main from staging

Not deployedTimeline and evidence

Opened
Sep 12, 2026, 11:38 AM
Merged
Sep 12, 2026, 11:53 AM
No findings
Sep 12, 2026, 11:55 AM
Live on staging, live on prod, observed
Pending
Not deployed
Not deployed
Pending

Libra has no production signal for this change yet because it has not deployed. Libra checks hourly for 3 days after each deploy.

Greptile Summary

This change adds document sharing, agent invitations, and view-as sharing controls. It is not safe to merge until document moves preserve authorization records and agent-share revocation prevents later trigger setup. The view-as share control is also a non-blocking UI issue that should be corrected to maintain a read-only experience.

Confidence Score: 0/5

Not safe to merge: confirmed document-authorization and revoked-agent-automation failures can violate an owner's intended access boundary.

Focused execution reproduced three blocking failures, including two with concrete authorization consequences. The rendered view-as issue is non-blocking and does not change the merge-safety conclusion.

Files Needing Attention: apps/server/src/services/documents/index.ts needs transactional document, descendant, and grant migration; apps/server/src/services/agents/share.ts needs revocation-safe acceptance setup; apps/mail/modules/agents/components/AgentHeader.tsx needs read-only sharing UI.

Security Review

Document moves can leave a path-addressed grant behind, allowing its grantee to access a different document later created at the vacated path. Separately, an agent invitation acceptance can install automation after the owner has revoked the share.

T-Rex Logs

What T-Rex did

T-Rex executed a post-capture test run and captured the after-state details for documents, grants, and resolver roles.
T-Rex tested the Focused rendered Share view during View-as and captured the successful Jest output.
T-Rex produced proofs for multiple P1 findings and attached supporting artifacts for reviewer inspection.
T-Rex conducted general contract validation describing the before/after behavior of a release and unshare flow.
T-Rex summarized the end-to-end contract validation run, including after-capture state verification and revoke semantics.

_{Ran code and verified through T-Rex}

Comments Outside Diff (5)

apps/server/src/services/documents/index.ts, line 1100-1108 (link)

Move grants with documents

The agent-facing move operation changes a document's path and can change its owner, but it leaves path-addressed grant records at the old path. After a move from organisation/old to organisation/new, a different document later created at organisation/old inherits the stale grant and gives the original grantee access. Update grant paths and owner keys together with document moves in one transaction.

How this was verified: Moving a document and creating another at its old path gave the or

Show production surfaces and changed-file mapping

Production surfaces

Libra has not measured any production surfaces for this change yet.

Changed files → surfaces

.github/workflows/ci.ymlno production surface mapped
CLAUDE.mdno production surface mapped
apps/mail/app/(routes)/agents/playbook/page.tsxno production surface mapped
apps/mail/app/(routes)/playground/components/PlaybookEditor.tsxno production surface mapped
apps/mail/components/html-share-dialog.tsxno production surface mapped
apps/mail/components/icons/icons.tsxno production surface mapped
apps/mail/components/ui/context-menu.tsxno production surface mapped
apps/mail/components/ui/dropdown-menu.tsxno production surface mapped
apps/mail/components/ui/field.tsxno production surface mapped
apps/mail/components/ui/person-avatar.tsxno production surface mapped
apps/mail/docs/crystallized.mdno production surface mapped
apps/mail/docs/wiki/files-ui.mdno production surface mapped
apps/mail/docs/wiki/sharing-ui.mdno production surface mapped
apps/mail/jest.config.cjsno production surface mapped
apps/mail/jest.setup.jsno production surface mapped
apps/mail/modules/administeredUser/components/AdministeredUserBar.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentActionMenu.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentFileBrowserSelection.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentHeaderViewAs.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentMemoryTab.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentOutputTab.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentRunsTab.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentSourcesSection.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/AgentsGrid.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/accept.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/agent-groups.test.tsno production surface mapped
apps/mail/modules/agents/__tests__/agent-share.test.tsxno production surface mapped
apps/mail/modules/agents/__tests__/agent-tabs.test.tsno production surface mapped
apps/mail/modules/agents/__tests__/unshare-confirm.test.tsxno production surface mapped
apps/mail/modules/agents/components/AddTriggerForm.tsxno production surface mapped
apps/mail/modules/agents/components/AgentActionMenu.tsxno production surface mapped
apps/mail/modules/agents/components/AgentConnectionsPanel.tsxno production surface mapped
apps/mail/modules/agents/components/AgentConversationFilesFolder.tsxno production surface mapped
apps/mail/modules/agents/components/AgentHeader.tsxno production surface mapped
apps/mail/modules/agents/components/AgentInstructionsSection.tsxno production surface mapped
apps/mail/modules/agents/components/AgentInviteCard.tsxno production surface mapped
apps/mail/modules/agents/components/AgentInviteScreen.tsxno production surface mapped
apps/mail/modules/agents/components/AgentMemoryTab.tsxno production surface mapped
apps/mail/modules/agents/components/AgentOutputTab.tsxno production surface mapped
apps/mail/modules/agents/components/AgentRunsTab.tsxno production surface mapped
apps/mail/modules/agents/components/AgentSharePanel.tsxno production surface mapped
apps/mail/modules/agents/components/AgentSourcesPanel.tsxno production surface mapped
apps/mail/modules/agents/components/AgentSourcesSection.tsxno production surface mapped
apps/mail/modules/agents/components/AgentView.tsxno production surface mapped
apps/mail/modules/agents/components/AgentsGrid.tsxno production surface mapped
apps/mail/modules/agents/types.tsno production surface mapped
apps/mail/modules/agents/utils/agent-paths.tsno production surface mapped
apps/mail/modules/agents/utils/trigger-events.tsno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatComponents/AgentContextChip.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatComponents/ChatContextRow.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatComponents/ChatHistoryPopover.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatComponents/EmbeddedCedarChat.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatComponents/EmptyStateSuggestions.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatInput/ChatInput.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/ui/dropdown-menu.tsxno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/MessageTypes.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/databaseAdapter.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/messageStorage.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/messagesSlice.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/renderers/ProposedCalendarEventRenderer.tsxno production surface mapped
apps/mail/modules/company/__tests__/shared-root.test.tsxno production surface mapped
apps/mail/modules/company/components/CompanyExplorer.tsxno production surface mapped
apps/mail/modules/conversations/components/ConversationParticipantsPanel.tsxno production surface mapped
apps/mail/modules/conversations/components/files/ConversationFileTree.tsxno production surface mapped
apps/mail/modules/conversations/conversation-routes.tsno production surface mapped
apps/mail/modules/conversationsPage/hooks/use-conversations-sidebar-conversations.tsno production surface mapped
apps/mail/modules/documents/file-link/FileLinkChip.tsxno production surface mapped
apps/mail/modules/documents/file-link/FileLinkNode.tsxno production surface mapped
apps/mail/modules/documents/file-link/FileLinkSuggestion.tsno production surface mapped
apps/mail/modules/documents/html-document-view.tsxno production surface mapped
apps/mail/modules/documents/playbook/TriggerNode.tsxno production surface mapped
apps/mail/modules/documents/playbook/TriggerRefNode.tsxno production surface mapped
apps/mail/modules/documents/playbook/playbookExtensions.tsno production surface mapped
apps/mail/modules/documents/playbook/references.tsno production surface mapped
apps/mail/modules/documents/yjs/ensureNodeIdsPlugin.tsno production surface mapped
apps/mail/modules/files/components/FileBrowser.tsxno production surface mapped
apps/mail/modules/files/components/list/FileList.tsxno production surface mapped
apps/mail/modules/files/components/list/FileListColumns.tsxno production surface mapped
apps/mail/modules/files/components/list/FileListRow.tsxno production surface mapped
apps/mail/modules/files/components/list/FileRowMenu.tsxno production surface mapped
apps/mail/modules/files/components/list/FileTypeIcon.tsxno production surface mapped
apps/mail/modules/files/components/list/SharedCell.tsxno production surface mapped
apps/mail/modules/files/components/list/index.tsno production surface mapped
apps/mail/modules/files/components/list/types.tsno production surface mapped
apps/mail/modules/files/utils/file-presentation.tsno production surface mapped
apps/mail/modules/home/components/FileArtifactPanel.tsxno production surface mapped
apps/mail/modules/home/components/start-agent-chat.tsno production surface mapped
apps/mail/modules/sharing/__tests__/actions.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/agent-audience.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/approve-request.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/links.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/move.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/no-toast.test.tsno production surface mapped
apps/mail/modules/sharing/__tests__/request-access.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/share-panel.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/view-as.test.tsxno production surface mapped
apps/mail/modules/sharing/__tests__/visibility.test.tsxno production surface mapped
apps/mail/modules/sharing/components/AccessRequests.tsxno production surface mapped
apps/mail/modules/sharing/components/AudienceAvatar.tsxno production surface mapped
apps/mail/modules/sharing/components/GeneralAccess.tsxno production surface mapped
apps/mail/modules/sharing/components/InviteField.tsxno production surface mapped
apps/mail/modules/sharing/components/LinkSection.tsxno production surface mapped
apps/mail/modules/sharing/components/MoveAudienceGate.tsxno production surface mapped
apps/mail/modules/sharing/components/PersonRow.tsxno production surface mapped
apps/mail/modules/sharing/components/PillMenu.tsxno production surface mapped
apps/mail/modules/sharing/components/RequestAccessScreen.tsxno production surface mapped
apps/mail/modules/sharing/components/RoleMenu.tsxno production surface mapped
apps/mail/modules/sharing/components/SharePanel.tsxno production surface mapped
apps/mail/modules/sharing/components/ShareTrigger.tsxno production surface mapped
apps/mail/modules/sharing/components/SharedWithMeRoot.tsxno production surface mapped
apps/mail/modules/sharing/hooks/use-share-state.tsno production surface mapped
apps/mail/modules/sharing/types.tsno production surface mapped
apps/mail/modules/sharing/view-as.tsxno production surface mapped
apps/mail/tests/components/menu-selection-indicator.test.tsxno production surface mapped
apps/mail/tests/modules/agentCanvas/helpers/agendaTaskHarness.tsxno production surface mapped
apps/mail/tests/modules/chat-store/chatHistoryPagination.test.tsno production surface mapped
apps/mail/tests/modules/conversations/conversation-members.test.tsxno production surface mapped
apps/mail/tests/modules/conversations/filesTabDrive.test.tsxno production surface mapped
apps/mail/tests/modules/conversations/filesTabHarness.tsxno production surface mapped
apps/mail/tests/modules/conversations/filesTabOptimistic.test.tsxno production surface mapped
apps/mail/tests/modules/conversations/filesTabTree.test.tsxno production surface mapped
apps/mail/tests/modules/conversationsPage/utils/filterConversationsByQuery.test.tsno production surface mapped
apps/mail/tests/modules/conversationsPage/utils/groupSidebarConversations.test.tsno production surface mapped
apps/mail/tests/modules/documents/board/BoardDocumentView.render.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/TypedCells.test.tsxno production surface mapped
apps/mail/tests/modules/drafting/draftIdResolved.test.tsno production surface mapped
apps/mail/tests/modules/files/brain-explorer.test.tsxno production surface mapped
apps/mail/tests/modules/files/list/FileListRow.test.tsxno production surface mapped
apps/mail/tests/modules/files/yjs/CedarYjsProvider.test.tsno production surface mapped
apps/mail/tests/modules/inbox/feedScopeGate.test.tsxno production surface mapped
apps/mail/tests/modules/linkedin/LinkedInCounterpartCard.test.tsxno production surface mapped
apps/mail/tests/modules/playbook/playbook-document-owner.test.tsxno production surface mapped
apps/mail/tests/modules/playbook/trigger-dispatch.test.tsxno production surface mapped
apps/mail/tests/modules/playbook/trigger-ref-panel.test.tsxno production surface mapped
apps/mail/tests/modules/userTasks/completeTaskUndoWindow.test.tsxno production surface mapped
apps/mail/tests/modules/userTasks/pendingTaskResolutions.test.tsno production surface mapped
apps/mail/tests/modules/userTasks/taskUpdatedProcessor.test.tsno production surface mapped
apps/mail/tests/modules/userTasks/userTasksSlice.test.tsno production surface mapped
apps/server/.claude/skills/calendar/SKILL.mdno production surface mapped
apps/server/docs/design/per-trigger-instructions.mdno production surface mapped
apps/server/docs/sharing.mdno production surface mapped
apps/server/docs/wiki/agent-sharing.mdno production surface mapped
apps/server/docs/wiki/document-access.mdno production surface mapped
apps/server/docs/wiki/per-trigger-instructions.mdno production surface mapped
apps/server/package.jsonno production surface mapped
apps/server/src/access-admin/cli.tsno production surface mapped
apps/server/src/agent-admin/cli.tsno production surface mapped
apps/server/src/agent-share-admin/cli.tsno production surface mapped
apps/server/src/cli/index.tsno production surface mapped
apps/server/src/cli/lib.tsno production surface mapped
apps/server/src/cron/__tests__/process-agenda-emails.test.tsno production surface mapped
apps/server/src/db/access-schema.tsno production surface mapped
apps/server/src/db/agent-share-schema.tsno production surface mapped
apps/server/src/db/documents-schema.tsno production surface mapped
apps/server/src/db/mcp-schema.tsno production surface mapped
apps/server/src/db/migrations/agent_shares.sqlno production surface mapped
apps/server/src/db/migrations/document_access_requests.sqlno production surface mapped
apps/server/src/db/migrations/document_grants.sqlno production surface mapped
apps/server/src/db/migrations/document_grants_path_addressed.sqlno production surface mapped
apps/server/src/db/migrations/document_share_links.sqlno production surface mapped
apps/server/src/db/migrations/document_share_view_identity.sqlno production surface mapped
apps/server/src/db/migrations/documents_barrier_index.sqlno production surface mapped
apps/server/src/db/migrations/mcp_acting_session_scope_by_connection.sqlno production surface mapped
apps/server/src/db/migrations/scripts/__tests__/reconcile-categorized-settings.test.tsno production surface mapped
apps/server/src/db/migrations/scripts/backfill-document-grants.tsno production surface mapped
apps/server/src/db/migrations/scripts/raise-root-grants-to-manager.tsno production surface mapped
apps/server/src/db/migrations/scripts/repair-org-path-owners.tsno production surface mapped
apps/server/src/db/migrations/scripts/revoke-redundant-conversation-grants.tsno production surface mapped
apps/server/src/db/schema.tsno production surface mapped
apps/server/src/db/share-links-schema.tsno production surface mapped
apps/server/src/files-admin/cli.tsno production surface mapped
apps/server/src/lib/__tests__/auth-jwt-header.test.tsno production surface mapped
apps/server/src/lib/driver/utils.tsno production surface mapped
apps/server/src/lib/testing/mastra-tool.tsno production surface mapped
apps/server/src/mastra/agents/on-event-orchestrator-agent.tsno production surface mapped
apps/server/src/mastra/context/values.tsno production surface mapped
apps/server/src/mastra/mcp/external/__tests__/acting-session.test.tsno production surface mapped
apps/server/src/mastra/mcp/external/acting-session.tsno production surface mapped
apps/server/src/mastra/mcp/external/cedar-staff-debug-tool.tsno production surface mapped
apps/server/src/mastra/mcp/external/resolve-session.tsno production surface mapped
apps/server/src/mastra/routeHandlers/event-execution/__tests__/handleExecuteFromClientSend-crm-updater-agentid.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/__tests__/get-sent-emails-authorization.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/__tests__/read-connection-settings-authorization.test.tsno production surface mapped
apps/server/src/mastra/tools/__tests__/tool-grant.test.tsno production surface mapped
apps/server/src/mastra/tools/agenda/__tests__/reviewConversationFanOut.test.tsno production surface mapped
apps/server/src/mastra/tools/brain/__tests__/wiki-write-access.test.tsno production surface mapped
apps/server/src/mastra/tools/brain/promoteWikiCandidateTool.tsno production surface mapped
apps/server/src/mastra/tools/brain/refreshWikiStatsTool.tsno production surface mapped
apps/server/src/mastra/tools/brain/wiki-write-access.tsno production surface mapped
apps/server/src/mastra/tools/brain/writeWikiPageTool.tsno production surface mapped
apps/server/src/mastra/tools/calendar/__tests__/calendarTool.test.tsno production surface mapped
apps/server/src/mastra/tools/calendar/__tests__/modifyCalendarEventTool.test.tsno production surface mapped
apps/server/src/mastra/tools/calendar/calendarTool.tsno production surface mapped
apps/server/src/mastra/tools/calendar/modifyCalendarEventTool.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/config-read-output-schema.test.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/configTool.test.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/listOrgMembers.test.tsno production surface mapped
apps/server/src/mastra/tools/debug/__tests__/debugTool.test.tsno production surface mapped
apps/server/src/mastra/tools/debug/debugTool.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/boardTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/document-redirect-authorization.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/documentTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/readDocumentTool.by-id.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/shareDocumentTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/documentTool.tsno production surface mapped
apps/server/src/mastra/tools/document/grepDocumentsTool.tsno production surface mapped
apps/server/src/mastra/tools/document/listDocumentsTool.tsno production surface mapped
apps/server/src/mastra/tools/document/readDocumentTool.tsno production surface mapped
apps/server/src/mastra/tools/document/shareDocumentTool.tsno production surface mapped
apps/server/src/mastra/tools/draft-comms/__tests__/saveDraftTool.test.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/__tests__/runSubagentTool-drafter.test.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/__tests__/runSubagentTool-strategist.test.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/__tests__/runSubagentTool-trigger-instructions.test.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/runSubagentTool.tsno production surface mapped
apps/server/src/mastra/tools/meetings/__tests__/meetingsTool.schema-parity.test.tsno production surface mapped
apps/server/src/mastra/tools/notify/__tests__/notifyUserTool.test.tsno production surface mapped
apps/server/src/mastra/tools/notify/notifyUserTool.tsno production surface mapped
apps/server/src/mastra/utils/__tests__/aop-ping-dryrun.test.tsno production surface mapped
apps/server/src/mastra/utils/__tests__/aop-selection.live.test.tsno production surface mapped
apps/server/src/mastra/utils/__tests__/approval.test.tsno production surface mapped
apps/server/src/mastra/utils/__tests__/model-image-parts.test.tsno production surface mapped
apps/server/src/mastra/utils/approval-policy.tsno production surface mapped
apps/server/src/mastra/utils/approval.tsno production surface mapped
apps/server/src/mastra/workflows/chat/__tests__/apply-overrides.test.tsno production surface mapped
apps/server/src/mastra/workflows/chat/harness/__tests__/user-mcp-servers.test.tsno production surface mapped
apps/server/src/mastra/workflows/event-execution/on-event-agent-execution-workflow.tsno production surface mapped
apps/server/src/routes/__tests__/external-mcp.e2e.test.tsno production surface mapped
apps/server/src/routes/__tests__/share-redemption-route.test.tsno production surface mapped
apps/server/src/routes/__tests__/shared-board-route.test.tsno production surface mapped
apps/server/src/routes/__tests__/shared-route.test.tsno production surface mapped
apps/server/src/routes/external-mcp.tsno production surface mapped
apps/server/src/routes/share.tsno production surface mapped
apps/server/src/scripts/__tests__/backfill-slack-messages.rerun.test.tsno production surface mapped
apps/server/src/scripts/access-arm-perf.tsno production surface mapped
apps/server/src/scripts/access-parity-check.tsno production surface mapped
apps/server/src/scripts/explain-access-filter.tsno production surface mapped
apps/server/src/services/access/__tests__/agent-reach.test.tsno production surface mapped
apps/server/src/services/access/__tests__/agent-scoped.test.tsno production surface mapped
apps/server/src/services/access/__tests__/barrier.test.tsno production surface mapped
apps/server/src/services/access/__tests__/filter.test.tsno production surface mapped
apps/server/src/services/access/__tests__/grants.test.tsno production surface mapped
apps/server/src/services/access/__tests__/harness.tsno production surface mapped
apps/server/src/services/access/__tests__/invariants.test.tsno production surface mapped
apps/server/src/services/access/__tests__/move-carries-grants.test.tsno production surface mapped
apps/server/src/services/access/__tests__/mutations-enforce.test.tsno production surface mapped
apps/server/src/services/access/__tests__/no-leak.test.tsno production surface mapped
apps/server/src/services/access/__tests__/no-model-grants.test.tsno production surface mapped
apps/server/src/services/access/__tests__/one-predicate.test.tsno production surface mapped
apps/server/src/services/access/__tests__/paths.test.tsno production surface mapped
apps/server/src/services/access/__tests__/refusals.test.tsno production surface mapped
apps/server/src/services/access/__tests__/requests.test.tsno production surface mapped
apps/server/src/services/access/__tests__/resolve.test.tsno production surface mapped
apps/server/src/services/access/__tests__/share-link-standing.test.tsno production surface mapped
apps/server/src/services/access/__tests__/shared-root.test.tsno production surface mapped
apps/server/src/services/access/__tests__/summary.test.tsno production surface mapped
apps/server/src/services/access/__tests__/visibility.test.tsno production surface mapped
apps/server/src/services/access/audience.tsno production surface mapped
apps/server/src/services/access/filter.tsno production surface mapped
apps/server/src/services/access/grants.tsno production surface mapped
apps/server/src/services/access/invariants.tsno production surface mapped
apps/server/src/services/access/paths.tsno production surface mapped
apps/server/src/services/access/principals.tsno production surface mapped
apps/server/src/services/access/requests.tsno production surface mapped
apps/server/src/services/access/resolve.tsno production surface mapped
apps/server/src/services/access/shared-root.tsno production surface mapped
apps/server/src/services/access/summary.tsno production surface mapped
apps/server/src/services/access/types.tsno production surface mapped
apps/server/src/services/access/viewer.tsno production surface mapped
apps/server/src/services/access/visibility.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/agent-folders.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/agent-namespace-org.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/agent-namespaces.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/documents-harness.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/file-grants-enforcement.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/outputs-scoped.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/outputs.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/source-patch.test.tsno production surface mapped
apps/server/src/services/agent-workspace/agent-invocations.tsno production surface mapped
apps/server/src/services/agent-workspace/agent-namespaces.tsno production surface mapped
apps/server/src/services/agent-workspace/default-file.tsno production surface mapped
apps/server/src/services/agent-workspace/outputs.tsno production surface mapped
apps/server/src/services/agent-workspace/source-patch.tsno production surface mapped
apps/server/src/services/agent-workspace/source-write.tsno production surface mapped
apps/server/src/services/agent-workspace/types.tsno production surface mapped
apps/server/src/services/agents/__tests__/harness.tsno production surface mapped
apps/server/src/services/agents/__tests__/per-user-runs.test.tsno production surface mapped
apps/server/src/services/agents/__tests__/setup-actor.test.tsno production surface mapped
apps/server/src/services/agents/__tests__/setup.test.tsno production surface mapped
apps/server/src/services/agents/__tests__/share-invite.test.tsno production surface mapped
apps/server/src/services/agents/setup.tsno production surface mapped
apps/server/src/services/agents/share-types.tsno production surface mapped
apps/server/src/services/agents/share.tsno production surface mapped
apps/server/src/services/aop/__tests__/agent-doc-convention.test.tsno production surface mapped
apps/server/src/services/aop/__tests__/ambiguity-ping.test.tsno production surface mapped
apps/server/src/services/aop/__tests__/automation-agent.test.tsno production surface mapped
apps/server/src/services/aop/__tests__/subagent-frontmatter.test.tsno production surface mapped
apps/server/src/services/aop/agent-doc-convention.tsno production surface mapped
apps/server/src/services/auth/__tests__/role-reads-confined-to-authority.test.tsno production surface mapped
apps/server/src/services/auth/authorize.tsno production surface mapped
apps/server/src/services/calendar/__tests__/create-calendar-event-from-proposal.test.tsno production surface mapped
apps/server/src/services/calendar/create-calendar-event-from-proposal.tsno production surface mapped
apps/server/src/services/chat/chat-stream-listen.test.tsno production surface mapped
apps/server/src/services/coaching/__tests__/agent-template.test.tsno production surface mapped
apps/server/src/services/coaching/agent-template.tsno production surface mapped
apps/server/src/services/crm/__test__/channel-message-events.test.tsno production surface mapped
apps/server/src/services/crm/__test__/reexecute-slack-source.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/deal-timeline.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/meeting-calendar-backstop.test.tsno production surface mapped
apps/server/src/services/crm/conversation-members.tsno production surface mapped
apps/server/src/services/document-history/__tests__/restore.test.tsno production surface mapped
apps/server/src/services/document-history/__tests__/snapshot.test.tsno production surface mapped
apps/server/src/services/document-saving/__tests__/board-stats.test.tsno production surface mapped
apps/server/src/services/document-saving/__tests__/playbook-trigger-ref-roundtrip.test.tsno production surface mapped
apps/server/src/services/document-saving/__tests__/table-stats.test.tsno production surface mapped
apps/server/src/services/document-saving/hooks/__tests__/agenda-integrity.test.tsno production surface mapped
apps/server/src/services/document-saving/parse-playbook-xml.tsno production surface mapped
apps/server/src/services/document-saving/serialize-playbook-xml.tsno production surface mapped
apps/server/src/services/documents/__tests__/conversation-repoint-chat.test.tsno production surface mapped
apps/server/src/services/documents/__tests__/conversation-repoint.test.tsno production surface mapped
apps/server/src/services/documents/__tests__/share-links.test.tsno production surface mapped
apps/server/src/services/documents/__tests__/share-views.test.tsno production surface mapped
apps/server/src/services/documents/convention-paths.tsno production surface mapped
apps/server/src/services/documents/get-doc.tsno production surface mapped
apps/server/src/services/documents/index.tsno production surface mapped
apps/server/src/services/documents/share-links.tsno production surface mapped
apps/server/src/services/documents/share-tracker.tsno production surface mapped
apps/server/src/services/documents/share-views.tsno production surface mapped
apps/server/src/services/documents/triggers/__tests__/table-triggers.test.tsno production surface mapped
apps/server/src/services/documents/triggers/trigger-types.tsno production surface mapped
apps/server/src/services/drafting/__tests__/create-draft-cross-mailbox-recovery.test.tsno production surface mapped
apps/server/src/services/drafting/__tests__/create-draft-rewrite-in-place.test.tsno production surface mapped
apps/server/src/services/drafting/__tests__/create-draft-thread-recovery.test.tsno production surface mapped
apps/server/src/services/drafting/__tests__/create-draft-unowned-thread.test.tsno production surface mapped
apps/server/src/services/drafting/__tests__/sweep-sibling-drafts.test.tsno production surface mapped
apps/server/src/services/drafting/__tests__/thread-id-rejection.test.tsno production surface mapped
apps/server/src/services/file-system/__tests__/listChildren-pending-visibility.test.tsno production surface mapped
apps/server/src/services/file-system/__tests__/renameNode-keeps-parent.test.tsno production surface mapped
apps/server/src/services/file-system/index.tsno production surface mapped
apps/server/src/services/integrations/__tests__/mcp-connection-external-id.test.tsno production surface mapped
apps/server/src/services/integrations/credentials/__tests__/refresh.test.tsno production surface mapped
apps/server/src/services/integrations/credentials/__tests__/response-body-disclosure.test.tsno production surface mapped
apps/server/src/services/integrations/mcp/__tests__/manage-mcp-connections.test.tsno production surface mapped
apps/server/src/services/integrations/meetings/__tests__/caretta-webhook.test.tsno production surface mapped
apps/server/src/services/integrations/slack/__tests__/slack-attachment-urls.test.tsno production surface mapped
apps/server/src/services/mail/inboxes/__tests__/inbox-definitions.test.tsno production surface mapped
apps/server/src/services/mail/send/__tests__/sync-direction.test.tsno production surface mapped
apps/server/src/services/mail/send/inbound-message.tsno production surface mapped
apps/server/src/services/meetings/__tests__/triage-notes.test.tsno production surface mapped
apps/server/src/services/notifications/deliver-to-user.tsno production surface mapped
apps/server/src/services/playbook/__tests__/before-meeting-legacy-meeting-prep-recovery.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/compile-playbook.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/delete-document-guarded.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/direct-fire-participant-guard.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/drafter-review-dispatch.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/guarded-write.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/org-cron-representative.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/per-ref-trigger-instructions.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/playbook-renderers.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/test-run-subagent.test.tsno production surface mapped
apps/server/src/services/playbook/agent-defaults/coach-weekly.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/stage4-plan.test.tsno production surface mapped
apps/server/src/services/playbook/compile-playbook.tsno production surface mapped
apps/server/src/services/playbook/compiled-playbook-types.tsno production surface mapped
apps/server/src/services/playbook/manifest-utils.tsno production surface mapped
apps/server/src/services/playbook/playbook-execution-triggers.tsno production surface mapped
apps/server/src/services/playbook/playbook-renderers.tsno production surface mapped
apps/server/src/services/playbook/reference-resolver.tsno production surface mapped
apps/server/src/services/playbook/resolve-playbook-context.tsno production surface mapped
apps/server/src/services/playbook/write-document-guarded.tsno production surface mapped
apps/server/src/services/task-groups/__tests__/manage-task-groups.test.tsno production surface mapped
apps/server/src/subagent-admin/cli.tsno production surface mapped
apps/server/src/trpc/__tests__/view-as.test.tsno production surface mapped
apps/server/src/trpc/index.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-boards.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-notifications-update-settings.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/agent-router-auth.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/agent-router-org-admin.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/agent-scoped-reads.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/chat-agent-binding.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/files-router-permission-request.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/update-html-content.test.tsno production surface mapped
apps/server/src/trpc/routes/admin-subagent.tsno production surface mapped
apps/server/src/trpc/routes/agent-sharing.tsno production surface mapped
apps/server/src/trpc/routes/agent.tsno production surface mapped
apps/server/src/trpc/routes/aop-agents.tsno production surface mapped
apps/server/src/trpc/routes/documents.tsno production surface mapped
apps/server/src/trpc/routes/files.tsno production surface mapped
apps/server/src/trpc/routes/kb.tsno production surface mapped
apps/server/src/trpc/routes/wiki.tsno production surface mapped
apps/server/src/trpc/trpc.tsno production surface mapped
apps/server/src/trpc/view-as-input.tsno production surface mapped
docs/design/mcp-impersonation.mdno production surface mapped