CedarCopilot/cedar-mail

Branch: staging

[2026-09-02] merging staging to main

merged#2668CedarCopilot

CedarCopilot wants to merge 1 commit into main from staging

Not deployedTimeline and evidence

Opened
Sep 2, 2026, 5:17 PM
No findings
Sep 2, 2026, 5:23 PM
Merged
Sep 2, 2026, 5:30 PM
Live on staging, live on prod, observed
Pending
Not deployed
Not deployed
Pending

Libra has no production signal for this change yet because it has not deployed. Libra checks hourly for 3 days after each deploy.

Greptile Summary

This change centralizes authorization, adds administered-user and document-owner support, expands agent and playbook tooling, and updates deployment planning to consider each surface’s last successful deployment. The cancelled-deployment and no-prior-success paths behaved as intended. However, a GitHub Actions history lookup failure can still make the planner omit frontend work from a cancelled deployment, leaving it undeployed until a later frontend change triggers another release.

Confidence Score: 4/5

Not safe to merge until deployment planning handles unavailable GitHub Actions history without skipping previously cancelled surface changes.

The affected release path was reproduced using a synthetic Git history and mocked GitHub Actions responses. The checks confirmed the intended successful-baseline and no-prior-success behavior while demonstrating the remaining lookup-outage failure.

Files Needing Attention: aws/scripts/plan-surface-scope.sh and aws/scripts/last-deployed-sha.sh

T-Rex Logs

What T-Rex did

T-Rex produced a proof for a posted P1 finding and attached the failure-path harness source.
T-Rex captured deploy scope behavior before the PR change in the corresponding log.
T-Rex captured deploy scope behavior after the PR change in the corresponding log.
T-Rex captured deploy scope regression suite after the PR change in the corresponding log.
T-Rex validated contract behavior with before/after captures, showing deployment is forced when a job has no prior success and that a cancelled frontend change is handled as undeployed; the harness source and its executed output were uploaded.

_{Ran code and verified through T-Rex}

Comments Outside Diff (1)

General comment

Baseline lookup failure can silently strand changes from a cancelled deployment
- Bug
  - At aws/scripts/plan-surface-scope.sh:95-97, an empty result from last-deployed-sha.sh uses the pushed baseline. last-deployed-sha.sh:63-66 intentionally returns empty on a GitHub API/list-runs failure. If a frontend deployment was cancelled at commit C, then a later unrelated push is planned with before=C, a lookup outage causes the planner to diff C..HEAD and report deploy_frontend=false; the frontend change at C remains undeployed until another frontend change occurs.
- Cause
  - The script treats an unavailable baseline query as safe to fall back to the push baseline, but that baseline only proves what was pushed, not what was successfully deployed. The code cannot distinguish a transient lookup outage after an incomplete deployment from the safe case.
- Fix
  - Fail closed for deploy correctness: have lookup failure return a distinct sentinel and make the planner deploy the relevant surface unconditionally (or fail the plan so it is retried) rather than using github.event.before. Preserve the e

Show production surfaces and changed-file mapping

Production surfaces

Libra has not measured any production surfaces for this change yet.

Changed files → surfaces

.claude/skills/account-setup-from-transcript/SKILL.mdno production surface mapped
.cursor/skills/account-setup-from-transcript/SKILL.mdno production surface mapped
.dependency-cruiser.cjsno production surface mapped
.github/workflows/ci.ymlno production surface mapped
.github/workflows/prod-deploy.ymlno production surface mapped
.github/workflows/staging-deploy.ymlno production surface mapped
AGENTS.mdno production surface mapped
AWS_DOCUMENTATION.mdno production surface mapped
apps/mail/app/(routes)/agents/playbook/page.tsxno production surface mapped
apps/mail/app/(routes)/brain/playbooks/chat-agent/page.tsxno production surface mapped
apps/mail/app/(routes)/brain/playbooks/page.tsxno production surface mapped
apps/mail/app/(routes)/brain/playbooks/routing/page.tsxno production surface mapped
apps/mail/app/(routes)/playground/components/PlaybookEditor.tsxno production surface mapped
apps/mail/app/(routes)/playground/components/UserSettingsEditor.tsxno production surface mapped
apps/mail/app/(routes)/playground/notification-test.tsxno production surface mapped
apps/mail/app/(routes)/settings/appearance/page.tsxno production surface mapped
apps/mail/app/(routes)/settings/danger-zone/page.tsxno production surface mapped
apps/mail/app/(routes)/settings/general/page.tsxno production surface mapped
apps/mail/app/(routes)/settings/notifications/page.tsxno production surface mapped
apps/mail/app/(routes)/settings/security/page.tsxno production surface mapped
apps/mail/app/(routes)/settings/signature/page.tsxno production surface mapped
apps/mail/messages/en.jsonno production surface mapped
apps/mail/modules/administeredUser/components/AdminNotice.tsxno production surface mapped
apps/mail/modules/administeredUser/components/AdministeredUserBanner.tsxno production surface mapped
apps/mail/modules/administeredUser/components/AdministeredUserBar.tsxno production surface mapped
apps/mail/modules/administeredUser/components/AdministeredUserPicker.tsxno production surface mapped
apps/mail/modules/administeredUser/components/DocumentOwnerBanner.tsxno production surface mapped
apps/mail/modules/administeredUser/components/ScopeNotHonouredNotice.tsxno production surface mapped
apps/mail/modules/administeredUser/context.tsxno production surface mapped
apps/mail/modules/administeredUser/contract.tsno production surface mapped
apps/mail/modules/administeredUser/hooks/use-org-admin-access.tsno production surface mapped
apps/mail/modules/administeredUser/index.tsno production surface mapped
apps/mail/modules/administeredUser/permission-error.tsno production surface mapped
apps/mail/modules/aop/components/ActionQueueView.tsxno production surface mapped
apps/mail/modules/aop/components/AgentDocHeader.tsxno production surface mapped
apps/mail/modules/aop/components/AgentFieldsCallout.tsxno production surface mapped
apps/mail/modules/aop/components/CrmAgentConfigPanel.tsxno production surface mapped
apps/mail/modules/aop/components/PlaybookSettingsPanel.tsxno production surface mapped
apps/mail/modules/aop/components/StrategicOverviewConfigPanel.tsxno production surface mapped
apps/mail/modules/aop/hooks/use-aops.tsno production surface mapped
apps/mail/modules/brain/components/AopManageDialogs.tsxno production surface mapped
apps/mail/modules/brain/components/PlaybookAopSection.tsxno production surface mapped
apps/mail/modules/brain/components/PlaybookFileTree.tsxno production surface mapped
apps/mail/modules/cedar-os/__tests__/__mocks__/auth-client.tsno production surface mapped
apps/mail/modules/company/components/CompanyExplorer.tsxno production surface mapped
apps/mail/modules/conversations/components/ConversationSearchCommandBar.tsxno production surface mapped
apps/mail/modules/documents/playbook/CompositePlaybookDocument.tsxno production surface mapped
apps/mail/modules/documents/playbook/PlaybookDocument.tsxno production surface mapped
apps/mail/modules/documents/playbook/PlaybookDocumentCreateDialog.tsxno production surface mapped
apps/mail/modules/documents/playbook/PlaybookStageNode.tsxno production surface mapped
apps/mail/modules/documents/playbook/PlaybookTriggerNode.tsxno production surface mapped
apps/mail/modules/documents/playbook/SubagentCreateDialog.tsxno production surface mapped
apps/mail/modules/documents/playbook/TriggerNode.tsxno production surface mapped
apps/mail/modules/documents/playbook/WebhookTriggerPanel.tsxno production surface mapped
apps/mail/modules/documents/playbook/playbookExtensions.tsno production surface mapped
apps/mail/modules/documents/playbook/structure/index.tsxno production surface mapped
apps/mail/modules/documents/playbook/useDocumentCreation.tsxno production surface mapped
apps/mail/modules/documents/playbook/usePlaybookAop.tsno production surface mapped
apps/mail/modules/documents/playbook/useSubagentCreation.tsxno production surface mapped
apps/mail/modules/home/components/DisplayArtifactPanel.tsxno production surface mapped
apps/mail/modules/userSettings/hooks/use-settings.tsno production surface mapped
apps/mail/providers/client-providers.tsxno production surface mapped
apps/mail/tests/modules/administeredUser/contract-coverage.test.tsno production surface mapped
apps/mail/tests/modules/administeredUser/permission-error.test.tsno production surface mapped
apps/mail/tests/modules/administeredUser/scope-not-honoured-notice.test.tsxno production surface mapped
apps/mail/tests/modules/conversations/conversationSearchFilterRow.test.tsxno production surface mapped
apps/mail/tests/modules/playbook/playbook-document-owner.test.tsxno production surface mapped
apps/server/.claude/skills/cedar-configuration/SKILL.mdno production surface mapped
apps/server/.claude/skills/cedar-configuration/cedar-system-knowledge.mdno production surface mapped
apps/server/.claude/skills/cedar-configuration/playbook-design.mdno production surface mapped
apps/server/.claude/skills/playbook-authoring/SKILL.mdno production surface mapped
apps/server/.claude/skills/playbook-instruction-eval/live-thread-search-eval.tsno production surface mapped
apps/server/.claude/skills/sherlock/SHERLOCK_SYSTEM_KNOWLEDGE.mdno production surface mapped
apps/server/.claude/skills/tasks/SKILL.mdno production surface mapped
apps/server/scripts/backfill-drafter.tsno production surface mapped
apps/server/scripts/drafting-health.tsno production surface mapped
apps/server/scripts/lib/backfill-cli-utils.tsno production surface mapped
apps/server/scripts/stage4-plan.tsno production surface mapped
apps/server/scripts/verify-drafter-migration.tsno production surface mapped
apps/server/src/db/migrations/scripts/account-setup/__tests__/phase9-notifications.test.tsno production surface mapped
apps/server/src/db/migrations/scripts/account-setup/phase9-notifications.tsno production surface mapped
apps/server/src/lib/__tests__/cedar-routes.test.tsno production surface mapped
apps/server/src/lib/cedar-routes.tsno production surface mapped
apps/server/src/lib/schemas.tsno production surface mapped
apps/server/src/mastra/agents/on-event-execution-agent.tsno production surface mapped
apps/server/src/mastra/agents/on-event-orchestrator-agent.tsno production surface mapped
apps/server/src/mastra/mcp/external/__tests__/flat-args.test.tsno production surface mapped
apps/server/src/mastra/mcp/external/__tests__/mutating-actions-are-administrable.test.tsno production surface mapped
apps/server/src/mastra/mcp/external/__tests__/no-bare-user-id-inputs.test.tsno production surface mapped
apps/server/src/mastra/mcp/external/__tests__/scope-map.test.tsno production surface mapped
apps/server/src/mastra/mcp/external/flat-args.tsno production surface mapped
apps/server/src/mastra/mcp/external/scope-map.tsno production surface mapped
apps/server/src/mastra/mcp/external/server.tsno production surface mapped
apps/server/src/mastra/skills/__tests__/automation-skill-tools.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/__tests__/allowlist-splice.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/__tests__/cedar-configuration-docs.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/__tests__/contextual-instructions.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/contextual-instructions.tsno production surface mapped
apps/server/src/mastra/skills/account-config/index.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/__tests__/apply-systems-change.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/__tests__/applyConfigChangeTool.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/__tests__/get-sent-emails-authorization.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/__tests__/read-connection-settings-authorization.test.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/apply-systems-change.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/applyConfigChangeTool.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/getSentEmailsTool.tsno production surface mapped
apps/server/src/mastra/skills/account-config/tools/readConnectionSettingsTool.tsno production surface mapped
apps/server/src/mastra/skills/index.tsno production surface mapped
apps/server/src/mastra/tools/__tests__/drafting-executor-live-mail-grant.test.tsno production surface mapped
apps/server/src/mastra/tools/__tests__/tool-grant.test.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/configTool.test.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/configureStrategistTool.test.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/listOrgMembers.test.tsno production surface mapped
apps/server/src/mastra/tools/config/__tests__/workspaceWriteTool.test.tsno production surface mapped
apps/server/src/mastra/tools/config/config-read-tool.tsno production surface mapped
apps/server/src/mastra/tools/config/config-tool-shared.tsno production surface mapped
apps/server/src/mastra/tools/config/config-write-tool.tsno production surface mapped
apps/server/src/mastra/tools/config/configTool.tsno production surface mapped
apps/server/src/mastra/tools/config/configureStrategistTool.tsno production surface mapped
apps/server/src/mastra/tools/config/connection-write-tool.tsno production surface mapped
apps/server/src/mastra/tools/config/systems-write-tool.tsno production surface mapped
apps/server/src/mastra/tools/config/workspace-write-tool.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/document-redirect-authorization.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/documentTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/readDocumentTool.by-id.test.tsno production surface mapped
apps/server/src/mastra/tools/document/__tests__/writeDocumentTool.test.tsno production surface mapped
apps/server/src/mastra/tools/document/displayDocumentTool.tsno production surface mapped
apps/server/src/mastra/tools/document/documentTool.tsno production surface mapped
apps/server/src/mastra/tools/document/listDocumentsTool.tsno production surface mapped
apps/server/src/mastra/tools/document/readDocumentTool.tsno production surface mapped
apps/server/src/mastra/tools/document/writeDocumentTool.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/__tests__/draft-tools-sibling-guard.test.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/__tests__/drafter-executor-prompt.test.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/onEventExecutionDraftEmailTool.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/onEventExecutionDraftSlackTool.tsno production surface mapped
apps/server/src/mastra/tools/event-execution/orchestrator-dispatch-tools.tsno production surface mapped
apps/server/src/mastra/tools/family-tool-names.tsno production surface mapped
apps/server/src/mastra/tools/mail/__tests__/liveMailTools.test.tsno production surface mapped
apps/server/src/mastra/tools/mail/__tests__/mailTool.live-actions.test.tsno production surface mapped
apps/server/src/mastra/tools/mail/__tests__/mailTool.test.tsno production surface mapped
apps/server/src/mastra/tools/mail/mailTool.tsno production surface mapped
apps/server/src/mastra/tools/mail/readLiveThreadTool.tsno production surface mapped
apps/server/src/mastra/tools/subagent-tool-allowlists.tsno production surface mapped
apps/server/src/mastra/tools/task/__tests__/taskTool.test.tsno production surface mapped
apps/server/src/mastra/tools/task/listTasksTool.tsno production surface mapped
apps/server/src/mastra/tools/task/taskTool.tsno production surface mapped
apps/server/src/mastra/tools/ui-config/__tests__/uiConfigTool.test.tsno production surface mapped
apps/server/src/mastra/tools/ui-config/uiConfigTool.tsno production surface mapped
apps/server/src/mastra/utils/__tests__/target-user-scope.test.tsno production surface mapped
apps/server/src/mastra/utils/approval-policy.tsno production surface mapped
apps/server/src/mastra/utils/target-user-scope.tsno production surface mapped
apps/server/src/services/agent-action-queue/__tests__/execution-read-scope.test.tsno production surface mapped
apps/server/src/services/agent-action-queue/queries.tsno production surface mapped
apps/server/src/services/aop/__tests__/automations-service.test.tsno production surface mapped
apps/server/src/services/aop/__tests__/custom-field-management-ownership.test.tsno production surface mapped
apps/server/src/services/aop/__tests__/custom-field-management.test.tsno production surface mapped
apps/server/src/services/aop/automations.tsno production surface mapped
apps/server/src/services/aop/custom-field-management.tsno production surface mapped
apps/server/src/services/auth/__tests__/authorize.test.tsno production surface mapped
apps/server/src/services/auth/__tests__/org-access.test.tsno production surface mapped
apps/server/src/services/auth/__tests__/role-reads-confined-to-authority.test.tsno production surface mapped
apps/server/src/services/auth/__tests__/target-user-id-reaches-the-authority.test.tsno production surface mapped
apps/server/src/services/auth/authorize.tsno production surface mapped
apps/server/src/services/auth/org-access.tsno production surface mapped
apps/server/src/services/crm/__tests__/company-merge-authorization.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/conversation-members.test.tsno production surface mapped
apps/server/src/services/crm/__tests__/strategic-catalog-authorization.test.tsno production surface mapped
apps/server/src/services/crm/company-merge.tsno production surface mapped
apps/server/src/services/crm/conversation-members.tsno production surface mapped
apps/server/src/services/crm/overview-instance.tsno production surface mapped
apps/server/src/services/documents/__tests__/playbook-doctype.test.tsno production surface mapped
apps/server/src/services/documents/convention-paths.tsno production surface mapped
apps/server/src/services/documents/triggers/board-webhooks.tsno production surface mapped
apps/server/src/services/integrations/crm/__tests__/salesforce-owner-emails.test.tsno production surface mapped
apps/server/src/services/integrations/crm/salesforce.tsno production surface mapped
apps/server/src/services/notifications/__tests__/post-meeting-draft-recipient-warning.test.tsno production surface mapped
apps/server/src/services/notifications/__tests__/user-whatsapp-notifier.test.tsno production surface mapped
apps/server/src/services/notifications/notification-dispatcher.tsno production surface mapped
apps/server/src/services/notifications/types.tsno production surface mapped
apps/server/src/services/notifications/user-imessage-notifier.tsno production surface mapped
apps/server/src/services/notifications/user-notification-registry.tsno production surface mapped
apps/server/src/services/notifications/user-slack-notifier.tsno production surface mapped
apps/server/src/services/notifications/user-whatsapp-notifier.tsno production surface mapped
apps/server/src/services/organizations/__tests__/org-admin.test.tsno production surface mapped
apps/server/src/services/organizations/members.tsno production surface mapped
apps/server/src/services/organizations/org-admin.tsno production surface mapped
apps/server/src/services/playbook/__tests__/drafter-seed.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/guarded-write.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/playbook-webhook-registration.test.tsno production surface mapped
apps/server/src/services/playbook/__tests__/trigger-summary.test.tsno production surface mapped
apps/server/src/services/playbook/agent-defaults/__tests__/agent-defaults.test.tsno production surface mapped
apps/server/src/services/playbook/agent-defaults/drafter.tsno production surface mapped
apps/server/src/services/playbook/agent-defaults/index.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/drafter-migration.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/drafter-notify-patch.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/drafting-policy.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/gate-prose-proposal.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/label-rules-cleanup.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/__tests__/stage4-plan.test.tsno production surface mapped
apps/server/src/services/playbook/backfill/cross-cutting-sections.tsno production surface mapped
apps/server/src/services/playbook/backfill/cross-cutting.tsno production surface mapped
apps/server/src/services/playbook/backfill/drafter-migration.tsno production surface mapped
apps/server/src/services/playbook/backfill/drafter-notify-patch.tsno production surface mapped
apps/server/src/services/playbook/backfill/drafter-notify-prior.tsno production surface mapped
apps/server/src/services/playbook/backfill/drafting-policy.tsno production surface mapped
apps/server/src/services/playbook/backfill/gate-prose-proposal.tsno production surface mapped
apps/server/src/services/playbook/backfill/label-rules-cleanup.tsno production surface mapped
apps/server/src/services/playbook/backfill/prose-compare.tsno production surface mapped
apps/server/src/services/playbook/backfill/stage4-plan.tsno production surface mapped
apps/server/src/services/playbook/guarded-write.tsno production surface mapped
apps/server/src/services/playbook/playbook-path-access.tsno production surface mapped
apps/server/src/services/playbook/playbook-webhook-registration.tsno production surface mapped
apps/server/src/services/playbook/seed-playbook.tsno production surface mapped
apps/server/src/services/playbook/trigger-summary.tsno production surface mapped
apps/server/src/services/playbook/write-document-guarded.tsno production surface mapped
apps/server/src/services/users/__tests__/categorized-key-access.test.tsno production surface mapped
apps/server/src/services/users/__tests__/staff-only-agent-execution.test.tsno production surface mapped
apps/server/src/services/users/__tests__/user-settings-merge.test.tsno production surface mapped
apps/server/src/services/users/__tests__/user-settings.test.tsno production surface mapped
apps/server/src/services/users/staff-only-settings.tsno production surface mapped
apps/server/src/services/users/user-settings.tsno production surface mapped
apps/server/src/trpc/assert-actor.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-agent-toggles-staff-gate.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-crm-sync-staff-gate.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-data-subrouter-target-gate.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-integrity-account-health-staff-gate.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-router-target-gate.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/admin-subrouter-target-gate.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/agent-action-queue-execution-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/analytics-guard.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/aop-agents-list-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/aop-agents-router.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/aop-create-playbook-document-owner.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/aop-list-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/aop-sent-email-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/aop-staff-delegation.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/credential-vault-org-admin.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/crm-owner-reassignment-authority.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/files-restore-node.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/files-router-auth.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/files-router-permission-request.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/integrations-mcp-delete.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/integrations-mcp-org-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/settings-router.test.tsno production surface mapped
apps/server/src/trpc/routes/__tests__/user-tasks-conversation-scope.test.tsno production surface mapped
apps/server/src/trpc/routes/admin-account-health.tsno production surface mapped
apps/server/src/trpc/routes/admin-boards.tsno production surface mapped
apps/server/src/trpc/routes/admin-crm-sync.tsno production surface mapped
apps/server/src/trpc/routes/admin-email-analysis.tsno production surface mapped
apps/server/src/trpc/routes/admin-integrity.tsno production surface mapped
apps/server/src/trpc/routes/admin-notifications.tsno production surface mapped
apps/server/src/trpc/routes/admin.tsno production surface mapped
apps/server/src/trpc/routes/agent-action-queue.tsno production surface mapped
apps/server/src/trpc/routes/analytics-access.tsno production surface mapped
apps/server/src/trpc/routes/analytics.tsno production surface mapped
apps/server/src/trpc/routes/aop-agents.tsno production surface mapped
apps/server/src/trpc/routes/aop.tsno production surface mapped
apps/server/src/trpc/routes/cedar-admin.tsno production surface mapped
apps/server/src/trpc/routes/crm.tsno production surface mapped
apps/server/src/trpc/routes/documents.tsno production surface mapped
apps/server/src/trpc/routes/files.tsno production surface mapped
apps/server/src/trpc/routes/integrations.tsno production surface mapped
apps/server/src/trpc/routes/org-admin.tsno production surface mapped
apps/server/src/trpc/routes/organisation.tsno production surface mapped
apps/server/src/trpc/routes/settings.tsno production surface mapped
apps/server/src/trpc/routes/statistics.tsno production surface mapped
aws/docs/staging-deploy.mdno production surface mapped
aws/scripts/__tests__/plan-surface-scope.test.shno production surface mapped
aws/scripts/last-deployed-sha.shno production surface mapped
aws/scripts/plan-surface-scope.shno production surface mapped
docs/changelogs/2026-W36.mdno production surface mapped
docs/design/admin-config-permissions-revamp.mdno production surface mapped
docs/design/drafter-system-agent.mdno production surface mapped
docs/testing/phase4-manual-test-guide.mdno production surface mapped