mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-11-01 15:35:12 +01:00
DottaandPaperclip
5e4cc01073
Keep native sandbox workspace files independent of the webserver disk. Use encrypted saved versions and Postgres ownership so a replacement server can recover files and continue work. Enable the path by default for new eligible workspaces when durable storage is configured. Preserve explicit opt-outs and existing host workspaces. Include safe snapshot repair, Files access, import, migration and retention. Bound saved-Files resources, preserve imported Git recovery, reject unfinished Git operations, publish immutable concurrent captures, and verify permanent object-version deletion. Validated 471 targeted local controls, build/typechecks, all 40 CI partitions, fresh Greptile 5/5 and security review. The PR records original failed attempts and scoped retries. Co-Authored-By: Paperclip <noreply@paperclip.ing>
29 lines
1.6 KiB
TypeScript
29 lines
1.6 KiB
TypeScript
import { closeRegisteredClients, createDb } from "@paperclipai/db";
|
|
import { getStorageService } from "../src/storage/index.js";
|
|
import { migrateRemoteWorkspace } from "../src/services/remote-workspace-migration.js";
|
|
import { assertRemoteWorkspacePersistence } from "../src/services/remote-workspaces.js";
|
|
|
|
const args = process.argv.slice(2);
|
|
const allowed = new Set(["--company-id", "--workspace-id", "--dry-run", "--apply"]);
|
|
function identifier(name: string) {
|
|
const value = args[args.indexOf(name) + 1];
|
|
if (!args.includes(name) || !/^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/i.test(value ?? "")) throw new Error(`${name} requires a UUID`);
|
|
return value!;
|
|
}
|
|
try {
|
|
for (let index = 0; index < args.length; index++) {
|
|
const arg = args[index]!; if (!allowed.has(arg)) throw new Error(`Unknown argument: ${arg}`);
|
|
if (arg === "--company-id" || arg === "--workspace-id") index++;
|
|
}
|
|
if (args.includes("--dry-run") && args.includes("--apply")) throw new Error("Select either --dry-run or --apply");
|
|
const companyId = identifier("--company-id"), workspaceId = identifier("--workspace-id");
|
|
const storage = getStorageService();
|
|
const { databaseUrl } = assertRemoteWorkspacePersistence(storage);
|
|
const db = createDb(databaseUrl);
|
|
try { process.stdout.write(`${JSON.stringify(await migrateRemoteWorkspace({ db, storage, companyId, workspaceId, apply: args.includes("--apply") }), null, 2)}\n`); }
|
|
finally { await closeRegisteredClients(databaseUrl, { scope: "database" }); }
|
|
} catch (error) {
|
|
process.stderr.write(`${error instanceof Error ? error.message : "Remote workspace migration failed"}\n`);
|
|
process.exitCode = 1;
|
|
}
|