Jannik/PaperClipAI
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-10-29 12:59:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: hand off delegated chat verification key changes

Browse Source 
Block agent-chosen verification credentials before provider work or vault writes. Return the saved human handoff, prevent channel secret-reference rebinding through generic tool updates, and protect native setup receipts. Keep authorized bot-token repair available.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
DottaandPaperclip committed 2026-10-26 18:11:22 -05:00
1 parent e5b8070d2f
commit 05d1decd2b
8 files changed
+58 -6
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

server/src/services/native-runtime/runner-api-sensitive-response.ts
+1
View File
@@ -1,4 +1,5 @@
export function runnerApiSensitiveResponse(method: string, path: string): boolean {
if (method === "POST" && /^\/api\/chat-endpoints\/\{[^}]+\}\/setup$/.test(path)) return true;
if (/(\/apps\/connect$|\/email\/connections$|setup-secret|\/github\/(setup|identity\/start)|\/slack\/resume|start-authorization|finalize-oauth-access|\/oauth\/|\/registration|\/managed\/authorize|\/install$|\/login|\/setup-token-login-sessions|\/local\/attempts)/.test(path)) return true;
if (/\/secrets\/\{[^}]+\}\/value$/.test(path)) return true;
return /^\/api\/tool-gateway\/sessions(?:\/|$)/.test(path)
server/src/services/native-runtime/runner-api.test.ts
+1
View File
@@ -60,6 +60,7 @@ describe("bounded response capture receipts", () => {
describe("connection setup response protection", () => {
it.each([
["POST", "/api/chat-endpoints/{endpointId}/setup"],
["POST", "/api/chat-endpoints/{endpointId}/setup-secret"],
["POST", "/api/chat-endpoints/{endpointId}/github/setup"],
["POST", "/api/chat-endpoints/{endpointId}/slack/resume"],