d8b63a18e7
## Thinking Path > - Paperclip is moving from a solo local operator model toward teams supervising AI-agent companies. > - Human access management and human-visible profile surfaces are part of that multiple-user path. > - The branch included related access cleanup, archived-member removal, permission protection, and a user profile page. > - These changes share company membership, user attribution, and access-service behavior. > - This pull request groups those human access/profile changes into one standalone branch. > - The benefit is safer member removal behavior and a first profile surface for user work, activity, and cost attribution. ## What Changed - Added archived company member removal support across shared contracts, server routes/services, and UI. - Protected company member removal with stricter permission checks and tests. - Added company user profile API, shared types, route wiring, client API, route, and UI page. - Simplified the user profile page visual design to a neutral typography-led layout. ## Verification - `pnpm install --frozen-lockfile` - `pnpm exec vitest run server/src/__tests__/access-service.test.ts server/src/__tests__/user-profile-routes.test.ts ui/src/pages/CompanyAccess.test.tsx --hookTimeout=30000` - `pnpm exec vitest run server/src/__tests__/user-profile-routes.test.ts --testTimeout=30000 --hookTimeout=30000` after an initial local embedded-Postgres hook timeout in the combined run. - Split integration check: merged after runtime/governance and dev-infra/backups with no merge conflicts. - Confirmed this branch does not include `pnpm-lock.yaml`. ## Risks - Medium risk: changes member removal permissions and adds a new user profile route with cross-table stats. - The profile page is a new UI surface and may need visual follow-up in browser QA. - No database migrations are included. > For core feature work, check [`ROADMAP.md`](ROADMAP.md) first and discuss it in `#dev` before opening the PR. Feature PRs that overlap with planned core work may need to be redirected — check the roadmap first. See `CONTRIBUTING.md`. ## Model Used - OpenAI Codex, GPT-5.4 tool-enabled coding model, agentic code-editing/runtime with local shell and GitHub CLI access; exact context window and reasoning mode are not exposed by the Paperclip harness. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] If this change affects the UI, I have included before/after screenshots - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] I will address all Greptile and reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing>
91 lines
2.6 KiB
TypeScript
91 lines
2.6 KiB
TypeScript
const BOARD_ROUTE_ROOTS = new Set([
|
|
"dashboard",
|
|
"companies",
|
|
"company",
|
|
"skills",
|
|
"org",
|
|
"agents",
|
|
"projects",
|
|
"execution-workspaces",
|
|
"issues",
|
|
"routines",
|
|
"goals",
|
|
"approvals",
|
|
"costs",
|
|
"usage",
|
|
"activity",
|
|
"inbox",
|
|
"u",
|
|
"design-guide",
|
|
]);
|
|
|
|
const GLOBAL_ROUTE_ROOTS = new Set(["auth", "invite", "board-claim", "cli-auth", "docs", "instance"]);
|
|
|
|
export function normalizeCompanyPrefix(prefix: string): string {
|
|
return prefix.trim().toUpperCase();
|
|
}
|
|
|
|
function splitPath(path: string): { pathname: string; search: string; hash: string } {
|
|
const match = path.match(/^([^?#]*)(\?[^#]*)?(#.*)?$/);
|
|
return {
|
|
pathname: match?.[1] ?? path,
|
|
search: match?.[2] ?? "",
|
|
hash: match?.[3] ?? "",
|
|
};
|
|
}
|
|
|
|
function getRootSegment(pathname: string): string | null {
|
|
const segment = pathname.split("/").filter(Boolean)[0];
|
|
return segment ?? null;
|
|
}
|
|
|
|
export function isGlobalPath(pathname: string): boolean {
|
|
if (pathname === "/") return true;
|
|
const root = getRootSegment(pathname);
|
|
if (!root) return true;
|
|
return GLOBAL_ROUTE_ROOTS.has(root.toLowerCase());
|
|
}
|
|
|
|
export function isBoardPathWithoutPrefix(pathname: string): boolean {
|
|
const root = getRootSegment(pathname);
|
|
if (!root) return false;
|
|
return BOARD_ROUTE_ROOTS.has(root.toLowerCase());
|
|
}
|
|
|
|
export function extractCompanyPrefixFromPath(pathname: string): string | null {
|
|
const segments = pathname.split("/").filter(Boolean);
|
|
if (segments.length === 0) return null;
|
|
const first = segments[0]!.toLowerCase();
|
|
if (GLOBAL_ROUTE_ROOTS.has(first) || BOARD_ROUTE_ROOTS.has(first)) {
|
|
return null;
|
|
}
|
|
return normalizeCompanyPrefix(segments[0]!);
|
|
}
|
|
|
|
export function applyCompanyPrefix(path: string, companyPrefix: string | null | undefined): string {
|
|
const { pathname, search, hash } = splitPath(path);
|
|
if (!pathname.startsWith("/")) return path;
|
|
if (isGlobalPath(pathname)) return path;
|
|
if (!companyPrefix) return path;
|
|
|
|
const prefix = normalizeCompanyPrefix(companyPrefix);
|
|
const activePrefix = extractCompanyPrefixFromPath(pathname);
|
|
if (activePrefix) return path;
|
|
|
|
return `/${prefix}${pathname}${search}${hash}`;
|
|
}
|
|
|
|
export function toCompanyRelativePath(path: string): string {
|
|
const { pathname, search, hash } = splitPath(path);
|
|
const segments = pathname.split("/").filter(Boolean);
|
|
|
|
if (segments.length >= 2) {
|
|
const second = segments[1]!.toLowerCase();
|
|
if (!GLOBAL_ROUTE_ROOTS.has(segments[0]!.toLowerCase()) && BOARD_ROUTE_ROOTS.has(second)) {
|
|
return `/${segments.slice(1).join("/")}${search}${hash}`;
|
|
}
|
|
}
|
|
|
|
return `${pathname}${search}${hash}`;
|
|
}
|