[codex] Add teams catalog extraction (#7550)

Fixes #7551

## Thinking Path

> - Paperclip is the control plane for AI-agent companies, and reusable
company/team setup is part of making those companies faster to launch.
> - The teams catalog work introduces app-shipped team templates that
can be browsed, previewed, and installed into a company.
> - Catalog installation crosses several contracts: bundled package
contents, shared API types, server import/install behavior, CLI
workflows, and the board UI.
> - Agents also need a safe path through catalog installs: scoped
company selection, explicit source policy, approval fallback for agent
creation, and preserved catalog provenance.
> - This pull request extracts the completed teams catalog branch into
one reviewable PR on top of `public-gh/master`.
> - The benefit is a reusable teams catalog foundation with server, CLI,
package, docs, and hidden UI surfaces kept in sync.

## What Changed

- Added the `@paperclipai/teams-catalog` package with bundled/optional
team definitions, generated manifest, validators, catalog builder tests,
and migration notes.
- Added shared teams catalog types/validators plus server routes and
services for listing, previewing, and installing catalog teams.
- Integrated catalog install with company portability, skill/source
policy checks, provenance metadata, origin hashes, target-manager
reparenting, and installed/out-of-date detection.
- Added CLI `teams` commands and agent-safe company selection behavior,
including `company current` and approval fallback for forbidden
agent-run installs.
- Added hidden Team Catalog UI/API/query surfaces, Storybook fixtures,
and targeted UI tests while keeping the UI route out of primary
navigation.
- Added docs for CLI/company/teams catalog behavior and removed
generated screenshot artifacts from the PR diff.

## Verification

- `pnpm exec vitest run cli/src/__tests__/company.test.ts
cli/src/__tests__/teams.test.ts
packages/teams-catalog/src/catalog-builder.test.ts
packages/teams-catalog/src/shipped-catalog.test.ts
server/src/__tests__/agent-permissions-service.test.ts
server/src/__tests__/company-portability.test.ts
server/src/__tests__/company-skills-service.test.ts
server/src/__tests__/teams-catalog-routes.test.ts
server/src/__tests__/teams-catalog-service.test.ts
server/src/__tests__/teams-catalog-install-no-overrides.test.ts
ui/src/lib/company-routes.test.ts ui/src/pages/TeamCard.test.tsx
ui/src/pages/TeamCatalog.test.tsx
ui/src/pages/useInstallTeamCatalogEntry.test.tsx`
- `pnpm --filter @paperclipai/shared typecheck && pnpm --filter
@paperclipai/teams-catalog typecheck && pnpm --filter paperclipai
typecheck && pnpm --filter @paperclipai/server typecheck && pnpm
--filter @paperclipai/ui typecheck`
- Confirmed branch is rebased onto `public-gh/master` (`78dc3625a`) and
`public-gh/master` is an ancestor of `HEAD`.
- Confirmed PR diff excludes `pnpm-lock.yaml`, `.github/workflows/*`,
generated screenshot images, and screenshot helper scripts.

## Risks

- Medium review surface: this crosses package generation, shared
contracts, server install behavior, CLI, docs, and hidden UI code.
- Catalog install behavior creates agents/projects/tasks/skills and must
keep company scoping, permissions, source policy, and provenance checks
strict.
- `pnpm-lock.yaml` is intentionally excluded per repo policy;
CI/default-branch automation owns lockfile refresh.
- The Team Catalog UI is included but hidden from primary navigation, so
future enablement should re-check visual QA before exposure.

> For core feature work, check [`ROADMAP.md`](ROADMAP.md) first and
discuss it in `#dev` before opening the PR. Feature PRs that overlap
with planned core work may need to be redirected — check the roadmap
first. See `CONTRIBUTING.md`.
>
> ROADMAP checked: this aligns with reusable companies/templates and
plugin-adjacent onboarding work. This PR packages work already developed
on the Paperclip task branch for review.

## Model Used

- OpenAI Codex, GPT-5 series coding agent in this Paperclip session;
exact runtime context window was not exposed. Used shell, git, `gh`, and
local test/typecheck tooling.

## Checklist

- [x] I have included a thinking path that traces from project context
to this change
- [x] I have specified the model used (with version and capability
details)
- [x] I have checked ROADMAP.md and confirmed this PR does not duplicate
planned core work
- [x] I have run tests locally and they pass
- [x] I have added or updated tests where applicable
- [x] If this change affects the UI, I have included before/after
screenshots, or documented why screenshots are intentionally omitted
- [x] I have updated relevant documentation to reflect my changes
- [x] I have considered and documented any risks above
- [x] I will address all Greptile and reviewer comments before
requesting merge

---------

Co-authored-by: Paperclip <noreply@paperclip.ing>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Dotta
2026-06-05 07:55:49 -10:00
committed by GitHub
parent 3657854e5e
commit fff3832a01
80 changed files with 12449 additions and 470 deletions
@@ -256,6 +256,7 @@ export const portabilityAdapterOverrideSchema = z.object({
export const companyPortabilityImportSchema = companyPortabilityPreviewSchema.extend({
adapterOverrides: z.record(z.string().min(1), portabilityAdapterOverrideSchema).optional(),
secretValues: z.record(z.string().min(1), z.string()).optional(),
});
export type CompanyPortabilityImport = z.infer<typeof companyPortabilityImportSchema>;
+21
View File
@@ -97,6 +97,27 @@ export {
type CompanySkillInstallUpdate,
type CompanySkillReset,
} from "./company-skill.js";
export {
catalogTeamKindSchema,
catalogTeamTrustLevelSchema,
catalogTeamCompatibilitySchema,
catalogTeamFileKindSchema,
catalogTeamSkillRequirementTypeSchema,
catalogTeamSkillRequirementSchema,
catalogTeamEnvInputSummarySchema,
catalogTeamSourceRefSchema,
catalogTeamFileSchema,
catalogTeamSchema,
catalogTeamListQuerySchema,
catalogTeamFileDetailSchema,
catalogTeamSourcePolicySchema,
catalogTeamPreviewSchema,
catalogTeamInstallSchema,
catalogTeamSkillPreparationSchema,
type CatalogTeamListQuery,
type CatalogTeamPreview,
type CatalogTeamInstall,
} from "./teams-catalog.js";
export {
agentSkillStateSchema,
agentSkillSyncModeSchema,
@@ -0,0 +1,171 @@
import { z } from "zod";
import {
portabilityAdapterOverrideSchema,
portabilityAgentSelectionSchema,
portabilityCollisionStrategySchema,
portabilityIncludeSchema,
} from "./company-portability.js";
export const catalogTeamKindSchema = z.enum(["bundled", "optional"]);
export const catalogTeamTrustLevelSchema = z.enum([
"markdown_only",
"assets",
"scripts_executables",
"external_sources",
]);
export const catalogTeamCompatibilitySchema = z.enum(["compatible", "unknown", "invalid"]);
export const catalogTeamFileKindSchema = z.enum([
"team",
"agent",
"project",
"task",
"skill",
"extension",
"readme",
"reference",
"script",
"asset",
"markdown",
"other",
]);
export const catalogTeamSkillRequirementTypeSchema = z.enum([
"catalog",
"local",
"skills_sh",
"github",
"url",
"local_path",
"agent_package",
]);
export const catalogTeamSkillRequirementSchema = z.object({
type: catalogTeamSkillRequirementTypeSchema,
ref: z.string().min(1),
agentSlugs: z.array(z.string().min(1)),
resolved: z.boolean(),
catalogSkillId: z.string().min(1).optional(),
catalogSkillKey: z.string().min(1).optional(),
localPath: z.string().min(1).optional(),
sourceLocator: z.string().min(1).optional(),
sourceRef: z.string().min(1).optional(),
});
export const catalogTeamEnvInputSummarySchema = z.object({
key: z.string().min(1),
agentSlug: z.string().min(1).nullable(),
projectSlug: z.string().min(1).nullable(),
kind: z.enum(["secret", "plain"]),
requirement: z.enum(["required", "optional"]),
});
export const catalogTeamSourceRefSchema = z.object({
type: z.enum(["skills_sh", "github", "url", "local_path", "agent_package", "include"]),
ref: z.string().min(1),
pinned: z.boolean(),
});
export const catalogTeamFileSchema = z.object({
path: z.string().min(1),
kind: catalogTeamFileKindSchema,
sizeBytes: z.number().int().nonnegative(),
sha256: z.string().min(1),
});
export const catalogTeamSchema = z.object({
id: z.string().min(1),
key: z.string().min(1),
kind: catalogTeamKindSchema,
category: z.string().min(1),
slug: z.string().min(1),
name: z.string().min(1),
description: z.string(),
path: z.string().min(1),
entrypoint: z.literal("TEAM.md"),
schema: z.literal("agentcompanies/v1"),
defaultInstall: z.boolean(),
recommendedForCompanyTypes: z.array(z.string()),
tags: z.array(z.string()),
counts: z.object({
agents: z.number().int().nonnegative(),
projects: z.number().int().nonnegative(),
tasks: z.number().int().nonnegative(),
routines: z.number().int().nonnegative(),
localSkills: z.number().int().nonnegative(),
catalogSkills: z.number().int().nonnegative(),
externalSkillSources: z.number().int().nonnegative(),
}),
rootAgentSlugs: z.array(z.string()),
agentSlugs: z.array(z.string()),
projectSlugs: z.array(z.string()),
requiredSkills: z.array(catalogTeamSkillRequirementSchema),
envInputs: z.array(catalogTeamEnvInputSummarySchema),
sourceRefs: z.array(catalogTeamSourceRefSchema),
files: z.array(catalogTeamFileSchema),
trustLevel: catalogTeamTrustLevelSchema,
compatibility: catalogTeamCompatibilitySchema,
contentHash: z.string().min(1),
packageName: z.string().min(1).optional(),
packageVersion: z.string().min(1).optional(),
});
export const catalogTeamListQuerySchema = z.object({
kind: catalogTeamKindSchema.optional(),
category: z.string().min(1).optional(),
q: z.string().min(1).optional(),
});
export const catalogTeamFileDetailSchema = z.object({
catalogTeamId: z.string().min(1),
path: z.string().min(1),
kind: catalogTeamFileKindSchema,
content: z.string(),
language: z.string().nullable(),
markdown: z.boolean(),
});
export const catalogTeamSourcePolicySchema = z.object({
allowExternalSources: z.boolean().optional(),
allowUnpinnedOptionalSources: z.boolean().optional(),
allowLocalPathSources: z.boolean().optional(),
}).strict();
export const catalogTeamPreviewSchema = z.object({
targetManagerAgentId: z.string().min(1).nullable().optional(),
targetManagerSlug: z.string().min(1).nullable().optional(),
include: portabilityIncludeSchema.omit({ company: true }).strict().optional(),
agents: portabilityAgentSelectionSchema.optional(),
collisionStrategy: portabilityCollisionStrategySchema.optional(),
nameOverrides: z.record(z.string().min(1), z.string().min(1)).optional(),
selectedFiles: z.array(z.string().min(1)).optional(),
sourcePolicy: catalogTeamSourcePolicySchema.optional(),
}).strict();
export const catalogTeamInstallSchema = catalogTeamPreviewSchema.extend({
adapterOverrides: z.record(z.string().min(1), portabilityAdapterOverrideSchema).optional(),
secretValues: z.record(z.string().min(1), z.string()).optional(),
}).strict();
export const catalogTeamSkillPreparationSchema = z.object({
type: catalogTeamSkillRequirementTypeSchema,
ref: z.string().min(1),
agentSlugs: z.array(z.string().min(1)),
action: z.enum([
"already_in_package",
"catalog_install_required",
"external_import_required",
"blocked",
]),
catalogSkillId: z.string().min(1).nullable(),
catalogSkillKey: z.string().min(1).nullable(),
sourceLocator: z.string().min(1).nullable(),
sourceRef: z.string().min(1).nullable(),
reason: z.string().min(1).nullable(),
});
export type CatalogTeamListQuery = z.infer<typeof catalogTeamListQuerySchema>;
export type CatalogTeamPreview = z.infer<typeof catalogTeamPreviewSchema>;
export type CatalogTeamInstall = z.infer<typeof catalogTeamInstallSchema>;