CedarCopilot wants to merge 1 commit into main from staging
Potential production issues
Agent tool calls may lose their request context after this change
A wrapped agent tool no longer receives the request context supplied by its caller. The same check passes on the current base and fails on this PR revision.
When an agent invokes a tool through the master tool surface.
Suggested fix: Preserve the caller's request context when wrapping the master tool execution, then rerun the same check on both revisions.
Technical evidence
The same behavior check passed on the current base and failed on this change.
Observed difference: withApprovalContext's wrapped execute still receives the real requestContext
Related changed code: apps/server/src/mastra/tools/master-surface.ts.
Libra has no production signal for this change yet because it has not deployed. Libra checks hourly for 3 days after each deploy.
Confidence Score: 0/5
Unsafe to merge: the document-access bypass, conversation graph authorization mismatch, and telemetry data exposure must be fixed. The explicit repository requirement for tool-payload validation must also be satisfied before merging.
### Issue 1
apps/server/src/services/documents/graph/graph-ops.ts:984-1001
A graph editor can supply the UUID of any live document in the organization because this lookup checks only organization membership. The accepted document is then hydrated into an accessible graph with its title and CRM-derived fields, so a user who knows a teammate's private document UUID can disclose its metadata without viewer access. Apply the normal viewer-access predicate before accepting `documentId` and when resolving graph nodes.
**How this was verified:** A focused service test attached a same-organization restricted document without a viewer check and returned its title and CRM-derived field.
### Issue 2
apps/server/src/mastra/tools/document/graphTool.ts:445-459
Conversation-scoped creation checks write permission against the requested display name, but creates the graph at `conversation/{id}/org-chart`. An agent with permission for the actual conversation graph is denied when using a descriptive name, while permission for that descriptive name allows creation of a graph the agent cannot subsequently read. Check the effective `org-chart` resource whenever a conversation ID is present.
### Issue 3
apps/server/src/lib/logging/client-telemetry.ts:166-169
Unknown string metadata is copied to telemetry unless it looks like an email address. An authenticated client can therefore store sensitive URL query tokens, bearer tokens, API keys, phone numbers, and raw error text in telemetry. The ingestion endpoint accepts these values, so diagnostics can retain credentials and private content; allowlist safe metadata or redact sensitive value shapes before forwarding them.
**How this was verified:** A focused ingestion check retained representative URL-token, bearer-token, API-key, phone-number, and raw-error metadata values in the accepted telemetry row.
### Issue 4
apps/mail/modules/cedar-os/src/components/renderers/toolCallDetails.ts:43-55
These helpers use `as Args` assertions t
Show production surfaces and changed-file mappingHide production surfaces and changed-file mapping
Production surfaces
Libra has not measured any production surfaces for this change yet.
Changed files → surfaces
.claude/settings.jsonno production surface mapped
.cursor/skills/customer-deploy-digest/SKILL.mdno production surface mapped
.env.exampleno production surface mapped
.gitignoreno production surface mapped
.oxlintignoreno production surface mapped
apps/mail/app/(full-width)/home/demos.tsxno production surface mapped
apps/mail/app/(routes)/agents/playbook/page.tsxno production surface mapped
apps/mail/app/(routes)/brain/playbooks/page.tsxno production surface mapped
apps/mail/components/ui/field.tsxno production surface mapped
apps/mail/components/ui/property-rows.tsxno production surface mapped
apps/mail/docs/graph-documents.mdno production surface mapped
apps/mail/docs/graph-node-display.mdno production surface mapped
apps/mail/docs/linkedin-counterpart-profile.mdno production surface mapped
apps/mail/docs/table-documents.mdno production surface mapped
apps/mail/docs/table-section-rows.mdno production surface mapped
apps/mail/docs/wiki/client-telemetry.mdno production surface mapped
apps/mail/docs/wiki/table-grid.mdno production surface mapped
apps/mail/lib/client-telemetry-trpc.tsno production surface mapped
apps/mail/lib/client-telemetry.tsno production surface mapped
apps/mail/lib/linkify.tsxno production surface mapped
apps/mail/lib/trpc-batch-url.tsno production surface mapped
apps/mail/modules/administeredUser/contract.tsno production surface mapped
apps/mail/modules/agentCanvas/components/AgendaCalendarSidebar.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/AgendaDocument.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/AgendaEventBlock.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/AgendaListView.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/AgendaMeetings.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/CalendarCanvas.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/DateHeadingNode.tsxno production surface mapped
apps/mail/modules/agentCanvas/components/NowMarker.tsxno production surface mapped
apps/mail/modules/agentCanvas/extensions/AgendaTaskNode.tsxno production surface mapped
apps/mail/modules/agents/components/AgentOutputTab.tsxno production surface mapped
apps/mail/modules/aop/hooks/use-aops.tsno production surface mapped
apps/mail/modules/auth/hooks/use-viewer-user-id.tsno production surface mapped
apps/mail/modules/brain/components/PlaybookFileTree.tsxno production surface mapped
apps/mail/modules/calendar/components/LinkifiedEventText.tsxno production surface mapped
apps/mail/modules/cedar-os/__tests__/chatComponents/FailedMessageRenderer.test.tsxno production surface mapped
apps/mail/modules/cedar-os/__tests__/store/agentConnection/agentConnectionSlice.failedMessage.test.tsxno production surface mapped
apps/mail/modules/cedar-os/__tests__/store/agentConnection/responseProcessors/threadSwitchResponseProcessor.test.tsxno production surface mapped
apps/mail/modules/cedar-os/src/cedar-os-components/chatComponents/EmbeddedCedarChat.tsxno production surface mapped
apps/mail/modules/cedar-os/src/components/renderers/messageRenderers.tsxno production surface mapped
apps/mail/modules/cedar-os/src/components/renderers/toolCallDetails.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/agentConnection/agentConnectionSlice.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/agentConnection/responseProcessors/docUpdateResponseProcessor.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/agentConnection/responseProcessors/initializeResponseProcessorRegistry.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/agentConnection/responseProcessors/threadSwitchResponseProcessor.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/MessageTypes.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/messagesSlice.tsno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/renderers/FailedMessageRenderer.tsxno production surface mapped
apps/mail/modules/cedar-os/src/store/messages/renderers/initializeMessageRendererRegistry.tsxno production surface mapped
apps/mail/modules/company/components/CompanyExplorer.tsxno production surface mapped
apps/mail/modules/conversations/components/files/FilesTab.tsxno production surface mapped
apps/mail/modules/conversations/components/files/resolveOpenDoc.tsno production surface mapped
apps/mail/modules/conversations/components/timeline/SlackBodyLinks.test.tsxno production surface mapped
apps/mail/modules/conversations/components/timeline/SlackBodyRenderer.tsxno production surface mapped
apps/mail/modules/conversations/components/timeline/SlackStructuredBody.tsxno production surface mapped
apps/mail/modules/documents/board/CardFieldValue.tsxno production surface mapped
apps/mail/modules/documents/full-bleed-doc-types.tsno production surface mapped
apps/mail/modules/documents/graph/GraphDocumentView.tsxno production surface mapped
apps/mail/modules/documents/graph/index.tsno production surface mapped
apps/mail/modules/documents/properties/DocumentProperties.tsxno production surface mapped
apps/mail/modules/documents/properties/index.tsno production surface mapped
apps/mail/modules/documents/properties/property-groups.tsno production surface mapped
apps/mail/modules/documents/properties/property-icons.tsno production surface mapped
apps/mail/modules/documents/table/CellRefChip.tsxno production surface mapped
apps/mail/modules/documents/table/OutputCellEditor.tsxno production surface mapped
apps/mail/modules/documents/table/OutputTargetPill.tsxno production surface mapped
apps/mail/modules/documents/table/TableColumnMenu.tsxno production surface mapped
apps/mail/modules/documents/table/TableDocumentView.tsxno production surface mapped
apps/mail/modules/documents/table/TableGrid.tsxno production surface mapped
apps/mail/modules/documents/table/TableRow.tsxno production surface mapped
apps/mail/modules/documents/table/cell-links.tsno production surface mapped
apps/mail/modules/documents/table/cell-output.tsno production surface mapped
apps/mail/modules/documents/table/cell-selection.tsno production surface mapped
apps/mail/modules/documents/table/cell-values.tsno production surface mapped
apps/mail/modules/documents/table/constants.tsno production surface mapped
apps/mail/modules/documents/table/open-output-in-channel.tsno production surface mapped
apps/mail/modules/documents/table/parse-table-schema.tsno production surface mapped
apps/mail/modules/documents/table/schema-edits.tsno production surface mapped
apps/mail/modules/documents/table/use-bound-cell-write.tsno production surface mapped
apps/mail/modules/documents/table/use-grid-commands.tsno production surface mapped
apps/mail/modules/documents/table/useYTable.tsno production surface mapped
apps/mail/modules/drafting/BUGREPORT-optimistic-timeline-desync.mdno production surface mapped
apps/mail/modules/drafting/components/email-composer.tsxno production surface mapped
apps/mail/modules/drafting/hooks/use-undo-send.tsno production surface mapped
apps/mail/modules/files/components/FileBrowser.tsxno production surface mapped
apps/mail/modules/files/components/FileExplorerTabs.tsxno production surface mapped
apps/mail/modules/files/components/FileViewList.tsxno production surface mapped
apps/mail/modules/files/fileViews.tsno production surface mapped
apps/mail/modules/graph/GraphEdgeLine.tsxno production surface mapped
apps/mail/modules/graph/GraphInspector.tsxno production surface mapped
apps/mail/modules/graph/GraphLegend.tsxno production surface mapped
apps/mail/modules/graph/GraphNodeCard.tsxno production surface mapped
apps/mail/modules/graph/GraphNodeProfile.tsxno production surface mapped
apps/mail/modules/graph/GraphSchemaEditor.tsxno production surface mapped
apps/mail/modules/graph/GraphSidebar.tsxno production surface mapped
apps/mail/modules/graph/autoLayout.tsno production surface mapped
apps/mail/modules/graph/floating-edge.tsno production surface mapped
apps/mail/modules/graph/flow-to-graph.tsno production surface mapped
apps/mail/modules/graph/graph-flow-types.tsno production surface mapped
apps/mail/modules/graph/graph-to-flow.tsno production surface mapped
apps/mail/modules/graph/hierarchyLayout.tsno production surface mapped
apps/mail/modules/graph/index.tsno production surface mapped
apps/mail/modules/graph/layout-metrics.tsno production surface mapped
apps/mail/modules/graph/node-colors.tsno production surface mapped
apps/mail/modules/graph/profile-bindings.tsno production surface mapped
apps/mail/modules/graph/tierLayout.tsno production surface mapped
apps/mail/modules/graph/tree-edge.tsno production surface mapped
apps/mail/modules/graph/use-inspector-width.tsno production surface mapped
apps/mail/modules/home/components/FileArtifactPanel.tsxno production surface mapped
apps/mail/modules/inbox/components/ChannelThreadView.tsxno production surface mapped
apps/mail/modules/inbox/store/pending-channel-draft.tsno production surface mapped
apps/mail/modules/linkedin/hooks/use-counterpart-profile.tsno production surface mapped
apps/mail/modules/outbound/components/flow-canvas/graph/autoLayout.tsno production surface mapped
apps/mail/modules/outbound/components/flow-canvas/graph/stagesToFlow.tsno production surface mapped
apps/mail/modules/store/index.tsno production surface mapped
apps/mail/modules/store/threadTelemetry.tsno production surface mapped
apps/mail/modules/threads/conversation-inbox/ConversationTaskRow.tsxno production surface mapped
apps/mail/modules/threads/mail.tsxno production surface mapped
apps/mail/modules/userTasks/components/AdministeredTaskKanban.tsxno production surface mapped
apps/mail/modules/userTasks/components/AdministeredTaskList.tsxno production surface mapped
apps/mail/modules/userTasks/components/TaskKanbanBoard.tsxno production surface mapped
apps/mail/modules/userTasks/components/TaskListView.tsxno production surface mapped
apps/mail/modules/userTasks/components/TaskTicketProperties.tsxno production surface mapped
apps/mail/modules/userTasks/hooks/use-administered-tasks.tsno production surface mapped
apps/mail/modules/userTasks/hooks/use-optimistic-task-actions.tsno production surface mapped
apps/mail/modules/userTasks/hooks/use-task-admin-view-flag.tsno production surface mapped
apps/mail/modules/userTasks/utils/group-tasks-by-task-group.tsno production surface mapped
apps/mail/modules/userTasks/utils/task-due-bucket.tsno production surface mapped
apps/mail/modules/userTasks/utils/task-ownership.tsno production surface mapped
apps/mail/modules/ux/layout/enterChatThread.tsno production surface mapped
apps/mail/providers/query-provider.tsxno production surface mapped
apps/mail/tests/lib/client-telemetry-priority.test.tsno production surface mapped
apps/mail/tests/lib/client-telemetry-trpc.test.tsno production surface mapped
apps/mail/tests/lib/client-telemetry.test.tsno production surface mapped
apps/mail/tests/lib/linkify.test.tsxno production surface mapped
apps/mail/tests/lib/trpcBatchUrl.test.tsno production surface mapped
apps/mail/tests/modules/agentCanvas/agenda-editor.test.tsno production surface mapped
apps/mail/tests/modules/agentCanvas/helpers/agendaTaskHarness.tsxno production surface mapped
apps/mail/tests/modules/cedar-os/toolCallDetails.test.tsno production surface mapped
apps/mail/tests/modules/conversations/threadContextTasksCollapse.test.tsxno production surface mapped
apps/mail/tests/modules/documents/DocumentProperties.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/LinkedColumns.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/OptionPicker.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/OutputTargetPill.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/TableFanOutAutoOpen.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/TableGrid.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/TableSort.test.tsxno production surface mapped
apps/mail/tests/modules/documents/table/cell-output.test.tsno production surface mapped
apps/mail/tests/modules/drafting/undoSendErrorPaths.test.tsno production surface mapped
apps/mail/tests/modules/drafting/undoSendRestore.test.tsno production surface mapped
apps/mail/tests/modules/drafting/undoSendUnloadGuard.test.tsno production surface mapped
apps/mail/tests/modules/files/FileViewList.test.tsxno production surface mapped
apps/mail/tests/modules/files/fileBrowserAdminView.test.tsxno production surface mapped
apps/mail/tests/modules/graph/GraphInspector.test.tsxno production surface mapped
apps/mail/tests/modules/graph/GraphNodeCard.test.tsxno production surface mapped
apps/mail/tests/modules/graph/GraphSchemaEditor.test.tsxno production surface mapped
apps/mail/tests/modules/graph/GraphSidebar.test.tsxno production surface mapped
apps/mail/tests/modules/graph/autoLayout.test.tsno production surface mapped
apps/mail/tests/modules/graph/floating-edge.test.tsno production surface mapped
apps/mail/tests/modules/graph/graph-to-flow.test.tsno production surface mapped
apps/mail/tests/modules/graph/hierarchyLayout.test.tsno production surface mapped
apps/mail/tests/modules/graph/tierLayout.test.tsno production surface mapped
apps/mail/tests/modules/graph/tree-edge.test.tsno production surface mapped
apps/mail/tests/modules/linkedin/LinkedInCounterpartCard.test.tsxno production surface mapped
apps/mail/tests/modules/threads/thread-telemetry.test.tsno production surface mapped
apps/mail/tests/modules/userTasks/completeTaskUndoWindow.test.tsxno production surface mapped
apps/mail/tests/modules/ux/layout/rememberedDisplayArtifact.test.tsno production surface mapped
apps/server/.claude/skills/tables/SKILL.mdno production surface mapped
apps/server/docs/bug-reports/plaintext-email-rendered-as-html.mdno production surface mapped
apps/server/docs/bugs/move-event-ownership-mismatch.mdno production surface mapped
apps/server/docs/design/zach-sept10-bugs.mdno production surface mapped
apps/server/docs/outbound/crm-messaging-linkedin-whatsapp.mdno production surface mapped
apps/server/docs/outbound/linkedin-headless-surface-and-ae-finder.mdno production surface mapped
apps/server/docs/outbound/linkedin-mcp-tool.mdno production surface mapped
apps/server/docs/outbound/messaging-crm-observability.mdno production surface mapped
apps/server/docs/relationship-graph-and-warm-intros.mdno production surface mapped
apps/server/docs/wiki/README.mdno production surface mapped
apps/server/docs/wiki/email-send-and-ingestion.mdno production surface mapped
apps/server/docs/wiki/graph-documents.mdno production surface mapped
apps/server/docs/wiki/linkedin-counterpart-profile.mdno production surface mapped
apps/server/docs/wiki/linkedin-rate-window-bucketing.mdno production surface mapped
apps/server/docs/wiki/linkedin-warmup-actions.mdno production surface mapped
apps/server/docs/wiki/slack-images-and-agent-vision.mdno production surface mapped
apps/server/docs/wiki/table-section-rows.mdno production surface mapped
apps/server/docs/wiki/task-completion.mdno production surface mapped
apps/server/docs/wiki/timestamps-and-timezones.mdno production surface mapped
apps/server/package.jsonno production surface mapped
apps/server/src/cli/__tests__/no-heavy-imports.test.tsno production surface mapped
apps/server/src/cli/index.tsno production surface mapped
apps/server/src/cli/playbook-migrate.tsno production surface mapped
apps/server/src/ctx.tsno production surface mapped
apps/server/src/db/chat-schema.tsno production surface mapped
apps/server/src/db/migrations/chat_search_trgm.sqlno production surface mapped
apps/server/src/db/migrations/linkedin_person_profiles.sqlno production surface mapped
apps/server/src/db/outbound-schema.tsno production surface mapped
apps/server/src/db/schema.tsno production surface mapped
apps/server/src/docs/bug-outbound-mime-deliverability-2026-09-13.mdno production surface mapped
apps/server/src/docs/bug-transient-send-ingestion-2026-09-11.mdno production surface mapped
apps/server/src/docs/duplicate-outbound-events-2026-09-12-deleted-rows.jsonno production surface mapped
apps/server/src/docs/duplicate-outbound-events-2026-09-12-repointed-draft-actions.jsonno production surface mapped
apps/server/src/docs/duplicate-outbound-events-2026-09-12.mdno production surface mapped
apps/server/src/env.tsno production surface mapped
apps/server/src/graph-admin/cli.tsno production surface mapped
apps/server/src/graph-admin/org-chart-smoke.tsno production surface mapped
apps/server/src/http/app.tsno production surface mapped
apps/server/src/lib/__tests__/outbound-mime-audit.test.tsno production surface mapped
apps/server/src/lib/__tests__/sanitize-tip-tap-html.test.tsno production surface mapped
apps/server/src/lib/driver/__tests__/google-send-derivation-side-effects.test.tsno production surface mapped
apps/server/src/lib/driver/__tests__/google-send-derives-threading.test.tsno production surface mapped
apps/server/src/lib/driver/__tests__/outgoing-mime.test.tsno production surface mapped
apps/server/src/lib/driver/__tests__/plaintext-body-rendering.test.tsno production surface mapped
apps/server/src/lib/driver/google.tsno production surface mapped
apps/server/src/lib/driver/outgoing-mime.tsno production surface mapped
apps/server/src/lib/driver/utils.tsno production surface mapped
apps/server/src/lib/logging/__tests__/axiom-dataset-resolution.test.tsno production surface mapped
apps/server/src/lib/logging/__tests__/client-correlation.test.tsno production surface mapped
apps/server/src/lib/logging/__tests__/client-telemetry-redaction.test.tsno production surface mapped
apps/server/src/lib/logging/__tests__/client-telemetry.test.tsno production surface mapped
apps/server/src/lib/logging/axiom-logger.tsno production surface mapped
apps/server/src/lib/logging/client-correlation.tsno production surface mapped
apps/server/src/lib/logging/client-telemetry.tsno production surface mapped
apps/server/src/lib/logging/libra-context.tsno production surface mapped
apps/server/src/lib/logging/log-context.tsno production surface mapped
apps/server/src/lib/logging/tracing.tsno production surface mapped
apps/server/src/lib/outbound-mime-audit.tsno production surface mapped
apps/server/src/lib/sanitize-tip-tap-html.tsno production surface mapped
apps/server/src/mastra/agents/chat-agent.tsno production surface mapped
apps/server/src/mastra/index.tsno production surface mapped
apps/server/src/mastra/mcp/external/__tests__/scope-map.test.tsno production surface mapped
apps/server/src/mastra/mcp/external/scope-map.tsno production surface mapped
apps/server/src/mastra/routeHandlers/slack/__tests__/slack-voice-note.test.tsno production surface mapped
apps/server/src/mastra/routeHandlers/slack/slack-bot-chat.tsno production surface mapped
apps/server/src/mastra/skills/docs/document-management.tsno production surface mapped
apps/server/src/mastra/tools/__tests__/approval-flag-guard.test.tsno production surface mapped
apps/server/src/mastra/tools/__tests__/master-surface.test.tsno production surface mapped
apps/server/src/mastra/tools/chat/loadChatHistoryTool.tsno production surface mapped
apps/server/src/mastra/tools/chat/searchChatHistoryTool.tsno production surface mapped
apps/server/src/mastra/tools/chat/switchChatThreadTool.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/documentTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/graphTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/tableTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/documentTool.schemas.tsno production surface mapped
apps/server/src/mastra/tools/document/documentTool.tsno production surface mapped
apps/server/src/mastra/tools/document/graphTool.tsno production surface mapped
apps/server/src/mastra/tools/document/table-row-agent.tsno production surface mapped
apps/server/src/mastra/tools/document/tableTool.tsno production surface mapped
apps/server/src/mastra/tools/linkedin/__tests__/linkedinTool.test.tsno production surface mapped
apps/server/src/mastra/tools/linkedin/linkedinTool.schemas.tsno production surface mapped
apps/server/src/mastra/tools/linkedin/linkedinTool.tsno production surface mapped
apps/server/src/mastra/tools/master-surface.tsno production surface mapped
apps/server/src/mastra/types/chat-context.tsno production surface mapped
apps/server/src/mastra/workflows/chat/chat-workflow.tsno production surface mapped
apps/server/src/mastra/workflows/event-execution/pre-execution-setup.tsno production surface mapped
apps/server/src/outbound/cli.tsno production surface mapped
apps/server/src/routes/__tests__/client-telemetry.test.tsno production surface mapped
apps/server/src/routes/client-telemetry.tsno production surface mapped
apps/server/src/runtime/__tests__/runtime-timezone.test.tsno production surface mapped
apps/server/src/runtime/api-entry.tsno production surface mapped
apps/server/src/runtime/chat-entry.tsno production surface mapped
apps/server/src/runtime/runtime-timezone.tsno production surface mapped
apps/server/src/runtime/worker-entry.tsno production surface mapped
apps/server/src/scripts/audit-outbound-mime.tsno production surface mapped
apps/server/src/scripts/headless-send-verify.tsno production surface mapped
apps/server/src/scripts/provider-credentials.tsno production surface mapped
apps/server/src/scripts/report-duplicate-outbound-events.tsno production surface mapped
apps/server/src/scripts/slack-images.tsno production surface mapped
apps/server/src/scripts/table-cli.tsno production surface mapped
apps/server/src/scripts/task-complete-probe.tsno production surface mapped
apps/server/src/scripts/verify-duplicate-phantoms.tsno production surface mapped
apps/server/src/services/agenda/agenda-surface.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/agent-folders.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/grants.test.tsno production surface mapped
apps/server/src/services/agent-workspace/__tests__/graph-grants.test.tsno production surface mapped
apps/server/src/services/agent-workspace/agent-scope.tsno production surface mapped
apps/server/src/services/agent-workspace/grants.tsno production surface mapped
apps/server/src/services/aop/aop-agents.tsno production surface mapped
apps/server/src/services/chat/search-chat-threads.integration.test.tsno production surface mapped
apps/server/src/services/chat/search-chat-threads.tsno production surface mapped
apps/server/src/services/crm/__tests__/calendar-events-sync.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/move-event-membership.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/rfc-dedupe-cross-mailbox.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/transient-send-ingest.test.tsno production surface mapped
apps/server/src/services/crm/calendar-events.tsno production surface mapped
apps/server/src/services/crm/conversation-slack-images.tsno production surface mapped
apps/server/src/services/crm/conversation-write-access.tsno production surface mapped
apps/server/src/services/crm/conversations.tsno production surface mapped
apps/server/src/services/crm/email-events.tsno production surface mapped
apps/server/src/services/crm/move-event.tsno production surface mapped
apps/server/src/services/document-saving/__tests__/writeTableAsYjs.test.tsno production surface mapped
apps/server/src/services/document-saving/applyUpdate.tsno production surface mapped
apps/server/src/services/document-saving/hooks/graph-stats.tsno production surface mapped
apps/server/src/services/document-saving/hydrate.tsno production surface mapped
apps/server/src/services/document-saving/markdown.tsno production surface mapped
apps/server/src/services/document-saving/registry.tsno production surface mapped
apps/server/src/services/document-saving/save-scope.tsno production surface mapped
apps/server/src/services/document-saving/serialize.tsno production surface mapped
apps/server/src/services/document-saving/writeFileAsYjs.tsno production surface mapped
apps/server/src/services/document-saving/writeGraphAsYjs.tsno production surface mapped
apps/server/src/services/document-saving/writeTableAsYjs.tsno production surface mapped
apps/server/src/services/documents/convention-paths.tsno production surface mapped
apps/server/src/services/documents/document-types.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-bounds.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-compaction.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-enrich.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-hydrate.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-markdown.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-ops.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-query.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-templates.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-triggers.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-write-guard.test.tsno production surface mapped
apps/server/src/services/documents/graph/__tests__/graph-ydoc.test.tsno production surface mapped
apps/server/src/services/documents/graph/graph-compaction.tsno production surface mapped
apps/server/src/services/documents/graph/graph-enrich.tsno production surface mapped
apps/server/src/services/documents/graph/graph-hydrate.tsno production surface mapped
apps/server/src/services/documents/graph/graph-markdown.tsno production surface mapped
apps/server/src/services/documents/graph/graph-ops.tsno production surface mapped
apps/server/src/services/documents/graph/graph-query.tsno production surface mapped
apps/server/src/services/documents/graph/graph-service.tsno production surface mapped
apps/server/src/services/documents/graph/graph-templates.tsno production surface mapped
apps/server/src/services/documents/graph/graph-triggers.tsno production surface mapped
apps/server/src/services/documents/graph/graph-types.tsno production surface mapped
apps/server/src/services/documents/graph/graph-write-guard.tsno production surface mapped
apps/server/src/services/documents/graph/graph-ydoc.tsno production surface mapped
apps/server/src/services/documents/index.tsno production surface mapped
apps/server/src/services/documents/table/__tests__/table-sections.test.tsno production surface mapped
apps/server/src/services/documents/table/__tests__/table-sort.test.tsno production surface mapped
apps/server/src/services/documents/table/backend.tsno production surface mapped
apps/server/src/services/documents/table/table-excel.tsno production surface mapped
apps/server/src/services/documents/table/table-export.tsno production surface mapped
apps/server/src/services/documents/table/table-fill.tsno production surface mapped
apps/server/src/services/documents/table/table-lines.tsno production surface mapped
apps/server/src/services/documents/table/table-markdown.tsno production surface mapped
apps/server/src/services/documents/table/table-read.tsno production surface mapped
apps/server/src/services/documents/table/table-refresh.tsno production surface mapped
apps/server/src/services/documents/table/table-resolve.tsno production surface mapped
apps/server/src/services/documents/table/table-scope.tsno production surface mapped
apps/server/src/services/documents/table/table-sort.tsno production surface mapped
apps/server/src/services/documents/table/table-stream-apply.tsno production surface mapped
apps/server/src/services/documents/table/table-types.tsno production surface mapped
apps/server/src/services/documents/table/table-ydoc.tsno production surface mapped
apps/server/src/services/documents/triggers/outbound-dispatch.tsno production surface mapped
apps/server/src/services/documents/triggers/table-triggers.tsno production surface mapped
apps/server/src/services/documents/triggers/trigger-types.tsno production surface mapped
apps/server/src/services/integrations/__tests__/provider-credentials-shape.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/company-link.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/connect-batch.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/linkedin.signals.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/person-profile.read.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/person-profile.refresh.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/person-profile.rules.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/relations-walk.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/send-chat-authz.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/__test__/send-governor.test.tsno production surface mapped
apps/server/src/services/integrations/linkedin/batch.tsno production surface mapped
apps/server/src/services/integrations/linkedin/governor.tsno production surface mapped
apps/server/src/services/integrations/linkedin/index.tsno production surface mapped
apps/server/src/services/integrations/linkedin/messaging.tsno production surface mapped
apps/server/src/services/integrations/linkedin/person-profile-cache.tsno production surface mapped
apps/server/src/services/integrations/linkedin/person-profile-refresh.tsno production surface mapped
apps/server/src/services/integrations/linkedin/person-profile.tsno production surface mapped
apps/server/src/services/integrations/linkedin/unipile-client.tsno production surface mapped
apps/server/src/services/integrations/provider-credentials.tsno production surface mapped
apps/server/src/services/integrations/slack/__tests__/slack-files-inbound.test.tsno production surface mapped
apps/server/src/services/integrations/slack/slack-files.tsno production surface mapped
apps/server/src/services/integrations/whatsapp/index.tsno production surface mapped
apps/server/src/services/mail/lib/inline-image-url.tsno production surface mapped
apps/server/src/services/outbound/sequencer/adapters/cedar-native-linkedin.tsno production surface mapped
apps/server/src/services/playbook/__tests__/caller-restorable-condition.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/frontmatter-grants.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/org-chart-seed.test.tsno production surface mapped
apps/server/src/services/playbook/agent-defaults/index.tsno production surface mapped
apps/server/src/services/playbook/agent-defaults/org-chart.tsno production surface mapped
apps/server/src/services/playbook/author-subagent.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/org-chart-migration.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/org-chart-migration.tsno production surface mapped
apps/server/src/services/playbook/reference-resolver.tsno production surface mapped
apps/server/src/services/playbook/seed-playbook.tsno production surface mapped
apps/server/src/services/playbook/set-subagent-grants.tsno production surface mapped
apps/server/src/services/playbook/subagent-frontmatter.tsno production surface mapped
apps/server/src/services/playbook/write-document-guarded.tsno production surface mapped
apps/server/src/services/posthog/posthog.tsno production surface mapped
apps/server/src/services/task-scheduling/__tests__/complete-task-draft-cleanup.test.tsno production surface mapped
apps/server/src/services/task-scheduling/execution.tsno production surface mapped
apps/server/src/services/user-tasks/__tests__/jev-calendar-task-gate.test.tsno production surface mapped
apps/server/src/services/user-tasks/jev-calendar-task-gate.tsno production surface mapped
apps/server/src/subagent-admin/cli.tsno production surface mapped
apps/server/src/trpc/index.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/graph-router-inputs.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/user-tasks-conversation-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/admin-graphs.tsno production surface mapped
apps/server/src/trpc/routes/admin-playbook-migration.tsno production surface mapped
apps/server/src/trpc/routes/admin-subagent.tsno production surface mapped
apps/server/src/trpc/routes/admin-tables.tsno production surface mapped
apps/server/src/trpc/routes/admin.tsno production surface mapped
apps/server/src/trpc/routes/chat.tsno production surface mapped
apps/server/src/trpc/routes/crm.tsno production surface mapped
apps/server/src/trpc/routes/documents.tsno production surface mapped
apps/server/src/trpc/routes/graphs.tsno production surface mapped
apps/server/src/trpc/routes/linkedin.tsno production surface mapped
apps/server/src/trpc/routes/task-groups.tsno production surface mapped
apps/server/src/trpc/routes/user-tasks.tsno production surface mapped
docs/changelogs/2026-W38.mdno production surface mapped
docs/changelogs/2026-W39.mdno production surface mapped
docs/design/jev-calendar-task-obsolescence-gate.mdno production surface mapped
package.jsonno production surface mapped
scripts/send-customer-deploy-digest.tsno production surface mapped
Enforce document access 
Validate tool payloads