paperclip-docs/PENDING.md

PENDING — nightly sync manifest

Regenerated by /sync-docs on 2026-06-17 (nightly mode).

• Window: v2026.609.0 (a0f7d3d) → parent master HEAD (1b89a8e) — 60 commits, 428 files (cumulative from last release).
• Mode: nightly. New this run: nothing doc-relevant. The only commit added since the previous run (412a04c → 1b89a8e) is 1b89a8e "remove VOLUME ["/paperclip"] for Railway compatibility" — a Dockerfile-only change no watcher tracks. Our deploy guide tells users to mount their persistent volume at /paperclip via fly.toml, which is unaffected (the VOLUME keyword only created an anonymous-volume default). No edit required.
• Drift: 5 records, all false positives (TRUST_PROXY, OTEL_EXPORTER_OTLP_ENDPOINT/_PROTOCOL, OTEL_SERVICE_NAME/_VERSION in docs/reference/deploy/environment-variables.md). These are real server env vars (introduced in 937fe62d/362c30cc, documented in the prior run) that the drift checker can't see because it doesn't scan server/src feature files where they're read via process.env — the known server-env blind spot. Confirmed present in parent via code search. No action.
• Reconciliation flags: none (everything documented in prior runs still exists upstream).
• Quarantine cutoff: 24h. Latest parent commit landed 2026-06-15, already past the cutoff — nothing currently quarantined.

---

✅ Already applied (committed to nightly in prior runs — cumulative)

Surface	Parent	Target docs
TRUST_PROXY env var (reverse-proxy / forwarded-IP trust: bool, hop count, named subnets, CIDR list)	#5872 (937fe62d)	docs/reference/deploy/environment-variables.md
OpenTelemetry opt-in tracing (OTEL_EXPORTER_OTLP_ENDPOINT/_PROTOCOL, OTEL_SERVICE_NAME/_VERSION)	#3735 (362c30cc)	docs/reference/deploy/environment-variables.md
Read-only agent config/skill/config-revision endpoints no longer require agents:create for board members	#3725 (3701be76)	docs/reference/api/agents.md
OpenClaw Gateway: newly UI-settable config fields (role, scopes, paperclipApiUrl, workspaceRuntime)	#2322 (3b7c42be)	docs/reference/adapters/openclaw-gateway.md
Plugin SDK: optional companyId tenant scoping on metrics.write + log (cascade-delete)	plugin tenant-isolation (05bcd3ce)	docs/reference/plugins/sdk.md
Kubernetes sandbox provider — self-hostable K8s pods/jobs, per-company tenant namespaces, network policy, microVM isolation	#5790/#7938/#7934	docs/reference/adapters/sandbox-providers.md (new Kubernetes section)
codex-local: PAPERCLIP_CODEX_PROVIDERS gateway routing + GPT-5.5 model option + omit-default-model	#7919, #5575, #7971	docs/reference/adapters/codex-local.md
pi-local: PAPERCLIP_PI_PROVIDERS gateway routing	#7920	docs/reference/adapters/pi-local.md
opencode-local: PAPERCLIP_OPENCODE_PROVIDERS + PAPERCLIP_OPENCODE_SMALL_MODEL	#7837	docs/reference/adapters/opencode-local.md
gemini-local: headless auth pre-selection + token-overflow fresh-session retry	#7918, #4932	docs/reference/adapters/gemini-local.md
Consolidated adapter provider-override env vars (PAPERCLIP_*_PROVIDERS)	(above)	docs/reference/deploy/environment-variables.md

All applied edits were verified against parent code (Phase 5.5). Unverified records were limited to example placeholder values in JSON snippets and env vars read via process.env (not present in .env.example) that were independently confirmed in parent source.

---

⏸ Deferred — experimental / half-built (NOT documented to live-bound pages yet)

These are on parent master but are feature-flagged, A/B-gated, or only partly built. Held off the reference/guide pages until they stabilise so released docs don't promise transient surfaces.

• Conference Room Chat / Board Concierge (#8000, board-chat.ts, ConferenceRoomChatGate, BoardChat.tsx) — gated behind the experimental enableConferenceRoomChat instance setting and restricted to local_trusted. New POST /api/board/chat/stream (SSE) relays to the local claude CLI. Ships with the new server-bundled skills/paperclip-board/SKILL.md. Revisit when the flag graduates; then document the experimental settings toggle, the skill, and the endpoint.
• Skills Store (migrations 0099_skills_store_foundation, 0100_skill_install_count_backfill; company-skills.ts route expansion: categories, versions, comments, fork, list query params; storybook skills-store-detail/skills-store-discovery) — foundation + API surface landed, but the discovery/detail UI is storybook-only, not shipped as pages. Document the company-skills API + store UI once the pages ship.
• Dark mode / theme toggle (#5873, #5874, ThemeToggle, ThemeContext, system prefers-color-scheme default, unauth theme toggle) — user-visible but UI is in flux; affects screenshots (see SCREENSHOTS_PENDING.md).
• Onboarding NUX redesign (OnboardingChat, OnboardingWizardClassic, OnboardingWizardVariant, FrontDoor) — A/B variant work; hold guide/screenshot updates until the variant settles.
• Home activity feed (ActivityFeed, FeedCard) — new home surface, still evolving.
• Issues list query filters (?assigneeAgentId, status-filter parsing, issues-list-query-parsing) — minor API refinement; fold into docs/reference/api/issues.md on the next pass once the param set settles.

---

🔒 Context-only / internal (no user-facing doc surface)

• Plugin tenant isolation schema (0101_plugin_company_id_tenant_isolation, company_id FK on plugin tables) — surfaced via the SDK companyId scoping note above; no other doc change.
• Server reliability: zombie/orphan execution-lock cleanup & sweeps, heartbeat lock release on reassignment, recovery stranded-issue guard, redact-sensitive logging middleware, trust-proxy startup wiring, instrumentation bootstrap.
• Issue auto-approval / self-comment-reopen gating refinements in issues.ts (internal heartbeat logic).
• Agent-runtime Docker images + tools/agent-shim (build/CI infrastructure).

---

📸 Screenshot staleness

See SCREENSHOTS_PENDING.md. 62/276 entries are stale — heaviest churn on agent-config, company-skills, and issue-detail surfaces. Several stale surfaces are experimental (theme, onboarding NUX, Conference Room) — hold those recaptures until flags settle.