Jannik/PaperClipAI
1
0 Fork 0
mirror of https://github.com/paperclipai/paperclip.git synced 2026-11-10 12:37:55 +01:00
Code Issues Packages Projects Releases Wiki Activity

Use the human-input action confirmation parameter in denial guidance

Browse Source 
Co-Authored-By: Paperclip <noreply@paperclip.ing>
This commit is contained in:
DottaandPaperclip committed 2026-11-06 00:46:58 -06:00
1 parent 66da300f3b
commit 1787523f97
2 files changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

server/src/__tests__/secrets-routes.test.ts
+2 -1
View File
@@ -180,7 +180,8 @@ describe("secret routes", () => {
expect(res.body.error).toContain("without claiming that credential setup is complete");
expect(res.body.error).toContain("first create a non-governing secure-save acknowledgment");
expect(res.body.error).toContain("request_human_input");
expect(res.body.error).toContain("request_confirmation");
expect(res.body.error).toContain('interactionKind="confirmation"');
expect(res.body.error).not.toContain("using request_confirmation");
expect(res.body.error).toContain("never ask for the secret value in that card");
expect(res.body.error).toContain("Wait only on the actual saved request");
expect(JSON.stringify(res.body)).not.toContain(value);
server/src/routes/secrets.ts
+1 -1
View File
@@ -888,7 +888,7 @@ export function secretRoutes(db: Db, deps: SecretRoutesDeps = {}) {
const companyId = req.params.companyId as string;
if (req.actor.type === "agent") {
assertCompanyAccess(req, companyId);
throw forbidden("Company secret creation requires a human board operator. Ask the human to enter the value in Settings → Secrets for this company. Do not send secret values in chat or tool calls. You can finish the current conversation response with these secure-entry instructions without claiming that credential setup is complete. If you need a resumable wait, first create a non-governing secure-save acknowledgment with request_human_input using request_confirmation; ask only whether secure entry is complete, never ask for the secret value in that card. Wait only on the actual saved request.");
throw forbidden("Company secret creation requires a human board operator. Ask the human to enter the value in Settings → Secrets for this company. Do not send secret values in chat or tool calls. You can finish the current conversation response with these secure-entry instructions without claiming that credential setup is complete. If you need a resumable wait, first create a non-governing secure-save acknowledgment with request_human_input with interactionKind=\"confirmation\"; ask only whether secure entry is complete, never ask for the secret value in that card. Wait only on the actual saved request.");
}
assertCompanySecretWrite(req, companyId);
next();