feat(GLA-1114): issue-level approve gate — block approve when no visual asset attached - #5538

Closed

jqueguiner wants to merge 30 commits into

paperclipai:masterfrom

jqueguiner:gla-1114-issue-approve-gate

Commits on May 8, 2026

Fix routine_execution sibling uniqueness wedge (GLA-291)

jqueguiner
and
claude
committed
55a4099
Allow role=security cross-assignee comments on critical/high issues (GLA-441)

jqueguiner
and
Paperclip-Paperclip
committed
e585e9c
Restrict role=security comment bypass to allowlist (GLA-444)

jqueguiner
and
Paperclip-Paperclip
committed
f2620cf
Suppress long_active_duration reviews for delegated work (GLA-599)

jqueguiner
and
claude
committed
c0937bb
GLA-607: wire listUnresolvedBlockerIssueIds and trim duplicate suppressor tests
jqueguiner
committed
a720b44
fix(board-report): source notifier.env before const declarations

jqueguiner
and
claude
committed
cfbde05
feat(plugin): scaffold paperclip-github-sync (GLA-761)

jqueguiner
and
Paperclip-Paperclip
committed
1c68979
feat(plugin-github-sync): add GitHub client unit tests + fix goal.updated test

jqueguiner
and
Paperclip-Paperclip
committed
aabac36
feat(plugin-github-sync): GLA-810 goal-subtree filter unit tests + README depth docs

jqueguiner
and
Paperclip-Paperclip
committed
e9c2ef4
feat(plugin-github-sync): GLA-813 sync engine + idempotency + payload sanitisation

jqueguiner
and
Paperclip-Paperclip
committed
24ab75b
asset-library: scaffold Next.js app on :7700 with pm2 + launchd autostart

jqueguiner
and
Paperclip-Paperclip
committed
084bda9
feat(GLA-814): admin API endpoints + UI section for GitHub sync integration

jqueguiner
and
Paperclip-Paperclip
committed
64e1e7d
asset-library: auto-build wrapper start.sh, soft-fail on rebuild errors

jqueguiner
and
Paperclip-Paperclip
committed
3580c7f
GLA-987: forbidden-source upload scan in asset library

jqueguiner
and
Paperclip-Paperclip
committed
8cc1bda
GLA-988: route [review-and-ship]/[marketing-asset] emails to asset library

jqueguiner
and
Paperclip-Paperclip
committed
d9311d5
fix(github-sync): write pluginLogs on sync-to-github so lastSyncAt populates

jqueguiner
and
Paperclip-Paperclip
committed
770c40f

Navigation Menu

Uh oh!

feat(GLA-1114): issue-level approve gate — block approve when no visual asset attached - #5538

feat(GLA-1114): issue-level approve gate — block approve when no visual asset attached#5538
jqueguiner wants to merge 30 commits into
paperclipai:masterfrom
jqueguiner:gla-1114-issue-approve-gate

Commits on May 8, 2026

Fix routine_execution sibling uniqueness wedge (GLA-291)

Allow role=security cross-assignee comments on critical/high issues (GLA-441)

Restrict role=security comment bypass to allowlist (GLA-444)

Suppress long_active_duration reviews for delegated work (GLA-599)

GLA-607: wire listUnresolvedBlockerIssueIds and trim duplicate suppressor tests

fix(board-report): source notifier.env before const declarations

feat(plugin): scaffold paperclip-github-sync (GLA-761)

feat(plugin-github-sync): add GitHub client unit tests + fix goal.updated test

feat(plugin-github-sync): GLA-810 goal-subtree filter unit tests + README depth docs

feat(plugin-github-sync): GLA-813 sync engine + idempotency + payload sanitisation

asset-library: scaffold Next.js app on :7700 with pm2 + launchd autostart

feat(GLA-814): admin API endpoints + UI section for GitHub sync integration

asset-library: auto-build wrapper start.sh, soft-fail on rebuild errors

GLA-987: forbidden-source upload scan in asset library

GLA-988: route [review-and-ship]/[marketing-asset] emails to asset library

fix(github-sync): write pluginLogs on sync-to-github so lastSyncAt populates

Commits on May 9, 2026

feat(routines): allow current owner to reassign routine to any agent

docs(routines): note owner-initiated reassignment in auth rule comment

GLA-985: approve/reject buttons + provenance hard blocks in asset library

GLA-1026: asset-library smoke script proves build+start chain

GLA-1048: routine-owner cancel carve-out for stale routine_execution issues

GLA-1064: tasks:cancel_routine_execution permission lets reaper cancel leaked routine_execution issues

docs(plugin-github-sync): add user-facing README, CHANGELOG, and recovery runbook

GLA-1066/GLA-873: company-level shared_instructions schema, API, heartbeat injection

GLA-1076: validate token against repo before persisting GitHub integration config

test(GLA-1074): regression test — PAT must not appear in 502 body, lastError, or plugin_logs

security: reject dryRun:false with empty syncedGoalIds (GLA-1077 MED-3)

feat(GLA-1098): asset-library auto-rebuild watcher + chunk-error UI + CI smoke

feat(GLA-1102): asset-library red banner + auto-resolve for workspace paths

feat(GLA-1114): issue-level approve gate — block approve when no visual attached