chore(deps-dev): bump @paperclipai/shared and @paperclipai/plugin-sdk

[dependabot]

Bumps @paperclipai/shared and @paperclipai/plugin-sdk. These dependencies needed to be updated together.
Updates @paperclipai/shared from 2026.403.0 to 2026.707.0

Release notes

Sourced from @​paperclipai/shared's releases.

v2026.707.0

Paperclip v2026.707.0

Released: 2026-07-07

This release lands 89 commits from 8 contributors.

Highlights

• User-specific runtime secrets - Secrets can now be scoped to the individual human operator, not just the company. Define user-specific secret definitions, store per-user values, bind them to environments, and — thanks to new responsible-user run attribution — have Paperclip deterministically check that the human behind a run has actually supplied the value a run needs before it dispatches. This is a real prerequisite for safe multi-user and cloud execution. (#8825, @​cryppadotta)
• Work Timeline - A new company-scoped Work Timeline page renders a compact, Gantt-style SVG view of when your agents worked, how handoffs happened, and where work overlapped — so you can scan multi-agent execution across the whole company at a glance instead of opening runs one by one. The timeline is backed by a dedicated company endpoint with hardened security filters. (#8938, #8880, #8875, #8923, @​cryppadotta)
• Custom sandbox images with a built-in SSH terminal - Build reusable custom sandbox images and set them up without ever leaving the browser: an embedded SSH terminal lets you install packages and prep the image directly from the environment configuration flow, and custom images are now scoped to their instance environments. No more copying an SSH command into an external terminal. (#8911, #8794, #8850, @​devinfoley)
• Redesigned environment variables editor - The legacy env-var editor is replaced with a single reusable editor used everywhere environment variables are configured (agents, projects, routines, company environments). It handles text values, secret references, draft rows, and sensitive-value warnings consistently, with clearer affordances for converting a plain value into a secret reference. (#8930, @​cryppadotta)
• One-click recovery for diverged work - The recovery card now diagnoses when a task's branch has diverged from its base and offers a one-click isolated re-issue, so you can recover stuck or conflicted work without hand-untangling git state. (#9136, @​nickyleach)
• Starred resources in the sidebar - Pin the projects, agents, and tasks you touch most to a dedicated starred section in the sidebar for one-click access. (#9085, @​cryppadotta)

Improvements

• Optional Ramp skill - A new optional catalog skill wires agents into Ramp's finance setup playbooks — account onboarding, cards, and spend controls — while keeping every action subordinate to Paperclip's approval gates and fail-closed host allowlist. Companies can opt in, and reviewers can see the source model and safety rules in one shipped catalog entry. (#9157, @​cryppadotta)
• Faster issue detail loading - Issue detail and activity-ledger responses are trimmed to the fields those views actually need, dropping large embedded project, workspace, and runtime-metadata payloads. Active issues with workspaces now load noticeably faster without changing the underlying persistence model. (#9125, @​cryppadotta)
• Project typeahead in the ⌘K command palette - Matching projects now rank above tasks in the command palette, so typing a project name jumps straight to it instead of burying it under tasks, and the project name is always visible in the row. (#8773, @​scotttong)
• Gemini 3.1 Pro models - The gemini-local adapter adds Gemini 3.1 Pro models. (#1602, @​woosal1337)
• Live heartbeat progress in run logs - The live agent run viewer now renders heartbeat progress events as system log lines, so useful progress text shows up during long operations instead of staying invisible until another event arrives. (#8965, @​devinfoley)
• Better live feedback during sandboxed runs - Sandboxed runs surface clearer live agent feedback while they execute. (#8915, @​devinfoley)
• Live descendant status in inbox rows - Inbox rows now show the live status of descendant work, so a parent task reflects what its children are actually doing. (#8876, @​cryppadotta)
• Operator issue workflow polish - The operator-facing issue workflow UI got a cleanup pass for clearer status and next-step affordances. (#9091, @​cryppadotta)
• Cleaner issue properties pane - The issue properties pane got a cleanup pass, and the issue media attachment gallery is now unified across surfaces. (#8941, #8785, @​cryppadotta)
• Pipeline automation title templates - Pipeline automations support title templates, so generated issues get consistent, templated titles. (#8787, @​cryppadotta)
• Deduplicated pipeline automation health warnings - Pipeline automation health warnings are deduplicated, so the same issue isn't reported multiple times. (#9090, @​cryppadotta)
• Deduplicated watchdog review wakes - Open watchdog review wakes are deduplicated so a single review doesn't trigger repeated wakes. (#9148, @​cryppadotta)
• Bundled UI webfonts - The app now bundles its UI webfonts instead of fetching them at runtime, so the interface renders with consistent typography even offline or in locked-down networks. (#9020, @​cryppadotta)
• Read-only diagnostics endpoints - New read-only diagnostics endpoints expose issue-subtree, issue-blocker, and workspace branch-ancestry state, making it easier to inspect why work is stuck without mutating anything. (#9135, #9114, #9117, @​nickyleach)
• Branch incoherence containment - Managed workspaces now contain branch-incoherence situations instead of letting them cascade, so a single bad branch state doesn't strand downstream runs. (#9131, @​nickyleach)
• Faster upgrades - The slow issue-comment attribution backfill was relocated to a fast, idempotent migration, so upgrading is quicker and safer to re-run. (#9108, @​nickyleach)
• Checkbox selections carried into continuation wakes - Checkbox selections are now included in continuation wakes, so an agent resuming a task keeps the choices you made. (#8893, @​cryppadotta)
• Plan review context preserved across wakes - Plan review context is preserved when an agent is woken, so long-running planning work doesn't lose its thread. (#8649, @​cryppadotta)
• Dependency wake reconciliation backstop - A reconciliation backstop makes dependency-driven wakes more reliable, so blocked tasks don't get stranded when a blocker resolves. (#8943, @​nickyleach)
• Ask-user questions expire when superseded - Pending ask-user questions are expired once a later comment supersedes them, so stale prompts don't linger. (#8799, @​cryppadotta)
• Normalized adapter display labels - Adapter display labels are normalized for a consistent look across the UI. (#8913, @​devinfoley)
• Telemetry data contract - This release adds a documented telemetry data contract, generated client telemetry types, and an interaction-resolved telemetry signal — groundwork for more reliable, well-typed anonymized usage insights. (#8886, #8818, #8824, @​nickyleach)
• Accessibility improvements - The issues view toggle and goal-tree expand buttons get proper ARIA attributes and tooltips, and date preset and day-of-week toggle buttons now expose aria-pressed. (#1937, #1939, #1913, @​bluzername)

Fixes

• Work Timeline actor avatars - Actor avatars now render correctly on the Work Timeline instead of showing missing or wrong images. (#9152, @​cryppadotta)
• iOS inbox archive gestures - The inbox swipe-to-archive control no longer shares one pending-state gate across rows, so archiving one item on mobile no longer makes the other inbox archive gestures feel stuck. (#9154, @​cryppadotta)
• Deduplicated adapter-agnostic config keys - Adapter-agnostic config keys are no longer duplicated, so agent configuration stays clean when switching adapters. (#9058, @​nickyleach)
• Skill selection preserved when switching adapter type - Changing an agent's adapter type no longer drops the skill selection you'd already made. (#8975, @​fengwuqingchen)
• Responsible-user migration hardening - A batch of fixes to the responsible-user migration path: the inbox-resurface backfill is corrected in place, migration timestamps are repaired, and heartbeat-run identifier references are migrated correctly — so inboxes don't resurface stale work after upgrade. (#9111, #9146, #9107, @​cryppadotta, @​nickyleach)
• DB backup health alerts - Database backup health alerts fire correctly again instead of misreporting healthy backups. (#9147, @​cryppadotta)

... (truncated)

Commits

• 9d5b0e3 Add read-only issue subtree diagnostics endpoint (#9135)
• 31a0080 Fix wake diagnostics low-trust identifier redaction (#9133)
• 295294d Add read-only issue blocker diagnostics endpoint (#9114)
• 5163208 Add workspace branch ancestry diagnostics (#9117)
• 903886b [codex] Add starred resource sidebar controls (#9085)
• e936ea3 [codex] Deduplicate pipeline automation health warnings (#9090)
• 8a058f9 fix: deduplicate adapter-agnostic config keys (#9058)
• ad96122 feat(secrets): add user-specific runtime secrets (#8825)
• bcac517 Add browser SSH terminal for custom image setup (#8911)
• c48feee Improve live agent feedback during sandboxed runs (#8915)
• Additional commits viewable in compare view

Updates @paperclipai/plugin-sdk from 2026.403.0 to 2026.707.0

Release notes

Sourced from @​paperclipai/plugin-sdk's releases.

v2026.707.0

Paperclip v2026.707.0

Released: 2026-07-07

This release lands 89 commits from 8 contributors.

Highlights

• User-specific runtime secrets - Secrets can now be scoped to the individual human operator, not just the company. Define user-specific secret definitions, store per-user values, bind them to environments, and — thanks to new responsible-user run attribution — have Paperclip deterministically check that the human behind a run has actually supplied the value a run needs before it dispatches. This is a real prerequisite for safe multi-user and cloud execution. (#8825, @​cryppadotta)
• Work Timeline - A new company-scoped Work Timeline page renders a compact, Gantt-style SVG view of when your agents worked, how handoffs happened, and where work overlapped — so you can scan multi-agent execution across the whole company at a glance instead of opening runs one by one. The timeline is backed by a dedicated company endpoint with hardened security filters. (#8938, #8880, #8875, #8923, @​cryppadotta)
• Custom sandbox images with a built-in SSH terminal - Build reusable custom sandbox images and set them up without ever leaving the browser: an embedded SSH terminal lets you install packages and prep the image directly from the environment configuration flow, and custom images are now scoped to their instance environments. No more copying an SSH command into an external terminal. (#8911, #8794, #8850, @​devinfoley)
• Redesigned environment variables editor - The legacy env-var editor is replaced with a single reusable editor used everywhere environment variables are configured (agents, projects, routines, company environments). It handles text values, secret references, draft rows, and sensitive-value warnings consistently, with clearer affordances for converting a plain value into a secret reference. (#8930, @​cryppadotta)
• One-click recovery for diverged work - The recovery card now diagnoses when a task's branch has diverged from its base and offers a one-click isolated re-issue, so you can recover stuck or conflicted work without hand-untangling git state. (#9136, @​nickyleach)
• Starred resources in the sidebar - Pin the projects, agents, and tasks you touch most to a dedicated starred section in the sidebar for one-click access. (#9085, @​cryppadotta)

Improvements

• Optional Ramp skill - A new optional catalog skill wires agents into Ramp's finance setup playbooks — account onboarding, cards, and spend controls — while keeping every action subordinate to Paperclip's approval gates and fail-closed host allowlist. Companies can opt in, and reviewers can see the source model and safety rules in one shipped catalog entry. (#9157, @​cryppadotta)
• Faster issue detail loading - Issue detail and activity-ledger responses are trimmed to the fields those views actually need, dropping large embedded project, workspace, and runtime-metadata payloads. Active issues with workspaces now load noticeably faster without changing the underlying persistence model. (#9125, @​cryppadotta)
• Project typeahead in the ⌘K command palette - Matching projects now rank above tasks in the command palette, so typing a project name jumps straight to it instead of burying it under tasks, and the project name is always visible in the row. (#8773, @​scotttong)
• Gemini 3.1 Pro models - The gemini-local adapter adds Gemini 3.1 Pro models. (#1602, @​woosal1337)
• Live heartbeat progress in run logs - The live agent run viewer now renders heartbeat progress events as system log lines, so useful progress text shows up during long operations instead of staying invisible until another event arrives. (#8965, @​devinfoley)
• Better live feedback during sandboxed runs - Sandboxed runs surface clearer live agent feedback while they execute. (#8915, @​devinfoley)
• Live descendant status in inbox rows - Inbox rows now show the live status of descendant work, so a parent task reflects what its children are actually doing. (#8876, @​cryppadotta)
• Operator issue workflow polish - The operator-facing issue workflow UI got a cleanup pass for clearer status and next-step affordances. (#9091, @​cryppadotta)
• Cleaner issue properties pane - The issue properties pane got a cleanup pass, and the issue media attachment gallery is now unified across surfaces. (#8941, #8785, @​cryppadotta)
• Pipeline automation title templates - Pipeline automations support title templates, so generated issues get consistent, templated titles. (#8787, @​cryppadotta)
• Deduplicated pipeline automation health warnings - Pipeline automation health warnings are deduplicated, so the same issue isn't reported multiple times. (#9090, @​cryppadotta)
• Deduplicated watchdog review wakes - Open watchdog review wakes are deduplicated so a single review doesn't trigger repeated wakes. (#9148, @​cryppadotta)
• Bundled UI webfonts - The app now bundles its UI webfonts instead of fetching them at runtime, so the interface renders with consistent typography even offline or in locked-down networks. (#9020, @​cryppadotta)
• Read-only diagnostics endpoints - New read-only diagnostics endpoints expose issue-subtree, issue-blocker, and workspace branch-ancestry state, making it easier to inspect why work is stuck without mutating anything. (#9135, #9114, #9117, @​nickyleach)
• Branch incoherence containment - Managed workspaces now contain branch-incoherence situations instead of letting them cascade, so a single bad branch state doesn't strand downstream runs. (#9131, @​nickyleach)
• Faster upgrades - The slow issue-comment attribution backfill was relocated to a fast, idempotent migration, so upgrading is quicker and safer to re-run. (#9108, @​nickyleach)
• Checkbox selections carried into continuation wakes - Checkbox selections are now included in continuation wakes, so an agent resuming a task keeps the choices you made. (#8893, @​cryppadotta)
• Plan review context preserved across wakes - Plan review context is preserved when an agent is woken, so long-running planning work doesn't lose its thread. (#8649, @​cryppadotta)
• Dependency wake reconciliation backstop - A reconciliation backstop makes dependency-driven wakes more reliable, so blocked tasks don't get stranded when a blocker resolves. (#8943, @​nickyleach)
• Ask-user questions expire when superseded - Pending ask-user questions are expired once a later comment supersedes them, so stale prompts don't linger. (#8799, @​cryppadotta)
• Normalized adapter display labels - Adapter display labels are normalized for a consistent look across the UI. (#8913, @​devinfoley)
• Telemetry data contract - This release adds a documented telemetry data contract, generated client telemetry types, and an interaction-resolved telemetry signal — groundwork for more reliable, well-typed anonymized usage insights. (#8886, #8818, #8824, @​nickyleach)
• Accessibility improvements - The issues view toggle and goal-tree expand buttons get proper ARIA attributes and tooltips, and date preset and day-of-week toggle buttons now expose aria-pressed. (#1937, #1939, #1913, @​bluzername)

Fixes

• Work Timeline actor avatars - Actor avatars now render correctly on the Work Timeline instead of showing missing or wrong images. (#9152, @​cryppadotta)
• iOS inbox archive gestures - The inbox swipe-to-archive control no longer shares one pending-state gate across rows, so archiving one item on mobile no longer makes the other inbox archive gestures feel stuck. (#9154, @​cryppadotta)
• Deduplicated adapter-agnostic config keys - Adapter-agnostic config keys are no longer duplicated, so agent configuration stays clean when switching adapters. (#9058, @​nickyleach)
• Skill selection preserved when switching adapter type - Changing an agent's adapter type no longer drops the skill selection you'd already made. (#8975, @​fengwuqingchen)
• Responsible-user migration hardening - A batch of fixes to the responsible-user migration path: the inbox-resurface backfill is corrected in place, migration timestamps are repaired, and heartbeat-run identifier references are migrated correctly — so inboxes don't resurface stale work after upgrade. (#9111, #9146, #9107, @​cryppadotta, @​nickyleach)
• DB backup health alerts - Database backup health alerts fire correctly again instead of misreporting healthy backups. (#9147, @​cryppadotta)

... (truncated)

Commits

• ad96122 feat(secrets): add user-specific runtime secrets (#8825)
• 2f94a66 Show live descendant status in inbox rows (#8876)
• 8d9f9fd Add reusable sandbox custom images (#8794)
• ed65d08 [codex] Gate skill mutations with skills:create permission (#8616)
• 71acf83 build(deps): align react-dom with react@19.2.7 (replaces dependabot #8471) (#...
• 2dbaf4a External object references across issue surfaces (#8512)
• 547463d refactor(environments): make execution environments instance-scoped (#8375)
• 6f142a6 build(deps-dev): bump @​types/node from 22.19.11 to 22.19.21 (#7748)
• 05bcd3c feat(security): plugin tables get company_id FK for tenant isolation (#5865)
• 1413729 Build the Skills Store (#7990)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.