From 2a3c036cf562d717c39a282c544af16e6a97dd69 Mon Sep 17 00:00:00 2001 From: Dotta Date: Thu, 27 Aug 2026 12:26:28 -0500 Subject: [PATCH] fix(runner): forward Codex automation credentials --- .../src/live/runnerd-codex-transport.test.ts | 2 ++ .../paperclip-runner/src/live/runnerd-codex-transport.ts | 6 ++++-- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/packages/paperclip-runner/src/live/runnerd-codex-transport.test.ts b/packages/paperclip-runner/src/live/runnerd-codex-transport.test.ts index 9a5a93d3542..87d5c4d59b4 100644 --- a/packages/paperclip-runner/src/live/runnerd-codex-transport.test.ts +++ b/packages/paperclip-runner/src/live/runnerd-codex-transport.test.ts @@ -96,6 +96,7 @@ it("passes the configured Codex API key only through the provider process enviro environment: { PATH: "/bin", OPENAI_API_KEY: "configured-provider-key", + CODEX_API_KEY: "configured-automation-key", PAPERCLIP_API_KEY: "must-not-reach-provider", }, }, @@ -116,6 +117,7 @@ it("passes the configured Codex API key only through the provider process enviro HOME: "/isolated/codex-home", CODEX_HOME: "/isolated/codex-home", OPENAI_API_KEY: "configured-provider-key", + CODEX_API_KEY: "configured-automation-key", }); expect(environment.PAPERCLIP_API_KEY).toBeUndefined(); }); diff --git a/packages/paperclip-runner/src/live/runnerd-codex-transport.ts b/packages/paperclip-runner/src/live/runnerd-codex-transport.ts index c7f244270a7..a71ccbb5c91 100644 --- a/packages/paperclip-runner/src/live/runnerd-codex-transport.ts +++ b/packages/paperclip-runner/src/live/runnerd-codex-transport.ts @@ -851,8 +851,10 @@ export function createCapabilityRunnerdProviderEnvironment(input: { HOME: input.codexHome, CODEX_HOME: input.codexHome, }); - const apiKey = input.options.environment?.OPENAI_API_KEY; - if (apiKey?.trim()) environment.OPENAI_API_KEY = apiKey; + for (const key of ["OPENAI_API_KEY", "CODEX_API_KEY"] as const) { + const apiKey = input.options.environment?.[key]; + if (apiKey?.trim()) environment[key] = apiKey; + } return environment; }