paperclipai/paperclip · error

Only the interaction creator, current issue assignee, or a b

Error message

Only the interaction creator, current issue assignee, or a board user may withdraw it

What it means

403 guard on withdrawing an issue-thread interaction: the agent actor is neither the interaction's creator, nor the current issue assignee, nor acting under a board user, so withdrawal is denied.

Source

Thrown at server/src/routes/issues.ts:4747

          }
        }
        await assertTaskBridgeCreateAllowed(req, issue.companyId, {
          projectId: task.projectId ?? issue.projectId,
          parentIssueId: parent.id,
          assigneeAgentId: task.assigneeAgentId ?? null,
          assigneeUserId: task.assigneeUserId ?? null,
        });
        if (task.assigneeAgentId || task.assigneeUserId) {
          await assertCanAssignTasks(req, issue.companyId, {
            projectId: task.projectId ?? issue.projectId,
            parentIssueId: parent.id,
            assigneeAgentId: task.assigneeAgentId ?? null,
            assigneeUserId: task.assigneeUserId ?? null,
          });
        }
      } catch (error) {
        if (!(error instanceof HttpError) || error.status !== 403) throw error;
        return denyIssueThreadInteractionResolution(res, {
          status: 403,
          code: "interaction_governed_action_denied",
          message: "Suggested-task creation requires independent authorization for every selected task",
        });
      }
    }
    return true;
  }

  async function resolvePendingReviewInteractionRestriction(
    issue: {
      id: string;
      companyId: string;
      status: string;
      reviewPolicy?: IssueReviewPolicy | null;
      createdByAgentId?: string | null;
      createdByUserId?: string | null;
    },

View on GitHub (pinned to 01ad858492)

Solutions

1. This is an authorization rule, not a bug: perform the action with an actor that satisfies the stated constraint (board user, the owning agent, or an in-scope resource).
2. If access should be allowed, verify the actor's credentials/company scope and the resource's ownership before retrying.

When it happens

Trigger: Thrown at server/src/routes/issues.ts:4583 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of paperclipai/paperclip@01ad858492 (2026-08-18). Data as JSON: /api/errors/c61264072e8c7bc5. Report an issue: GitHub.