paperclipai/paperclip · error

Only board users can view feedback trace bundles

Error message

Only board users can view feedback trace bundles

What it means

403 guard on GET /feedback-traces/:traceId (trace bundles). Fires when the actor is not a board user; only board users may download/view feedback trace bundles.

Source

Thrown at server/src/routes/issues.ts:12771

        });
        const approval = readObject(approvalResult);
        const executionStatus = readToolActionExecutionStatus(approval.status);
        if (executionStatus) {
          const currentResult = readObject(interaction.result);
          continuationInteraction = {
            ...interaction,
            result: {
              ...currentResult,
              toolAction: {
                version: 1,
                status: executionStatus,
                errorMessage: readNonEmptyString(approval.error),
                resultSummary: readNonEmptyString(approval.resultSummary),
                updatedAt: new Date().toISOString(),
              },
            } as typeof interaction.result,
          };
        }
      }
      if (
        interaction.kind === "request_confirmation"
        && interaction.status === "accepted"
        && typeof secretProposal?.proposalId === "string"
      ) {
        const resolvedByUserId = actor.actorType === "user" ? actor.actorId : "board";
        try {
          if (opts.approveSecretProposal) {
            await opts.approveSecretProposal({
              companyId: issue.companyId,
              issueId: issue.id,
              interactionId: interaction.id,
              proposalId: secretProposal.proposalId,
              actor: { agentId: actor.agentId, userId: actor.actorType === "user" ? actor.actorId : null },
            });
          } else {
            const proposal = await secretProposals.getById(issue.companyId, secretProposal.proposalId);

View on GitHub (pinned to 01ad858492)

Solutions

  1. This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).
  2. If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying.
Defensive patterns

Strategy: validation

When it happens

Trigger: Thrown at server/src/routes/issues.ts:11759 when the library encounters an invalid state.

Common situations: See trigger scenarios.


AI-assisted analysis of paperclipai/paperclip@01ad858492 (2026-08-18). Data as JSON: /api/errors/97830ed1df772172. Report an issue: GitHub.