mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-21 08:22:20 +02:00
## Thinking Path > - Paperclip is the open source control plane for agent companies. > - People choose a harness when creating an agent. > - The server should resolve that harness to a qualified runner. > - Codex is the first harness in the staged default rollout. > - Saved agents must retain their execution choices. > - New Codex agents therefore use Paperclip Runner on qualified macOS/Linux targets, with an explicit Legacy override. ## Linked Issues or Issue Description Refs #16028, #15555, #15673, #15422, #15631, #15926, #15932, #16149. The runtime/install prerequisite and release repair are merged. This slice owns Codex creation, setup, configuration and preservation. Other harness defaults remain unchanged. It adds no database migration; incoming master migrations, required maps and regression coverage are retained. ## What Changed - Resolve `runner: auto | paperclip | legacy` at the common creation boundary across onboarding, API/CLI, hires, built-ins, plugins and imports. Freeze pending hires and export resolved execution choices. - Preserve existing runners on upgrades, unrelated edits and import updates, including compatible accounts, workspace settings, Codex effort and intentional clears. - Use the underlying harness picker and branding; put the runner override in Advanced. Use the shared dropdown and update production-component stories and creation contracts. - Support qualified Apple Silicon, Intel Mac, Linux x64 and Linux ARM64. Linux requires GNU libc 2.39+. Disabled, external, unsupported and unqualified combinations retain their applicable Legacy execution. - Test the selected runtime/account/model/environment. Ordinary Connect probes eligible immutable managed targets and refreshes scoped discovery. Creation/discovery do not provision. Auth, dependency, incompatible-setting and cleanup failures remain actionable without changing runners. - Keep setup probes read-only, preserve local/SSH isolation and resolve packaged assets before staging credentials. Bound cleanup reads by the remaining absolute deadline; physically close every owned ingress socket before endpoint release. Unconfirmed cleanup retains recovery state. - Preserve validated completed-onboarding callbacks through startup recovery. First file-producing work belongs to the child task and uses the existing dependency/block handoff and task-scoped registration. - Reuse existing E2E fixtures, artifact checks, reporting and controls. Keep Docker/Cargo/native compilation remote. Paperclip tarballs contain no Codex payloads; official optional npm platform dependencies remain. ## Verification Current tested head: `1c03a8815672d82c264a9b08d4ea1984e8fae107`. **Merge-ready: required CI, fresh review, package qualification, Mac core acceptance and Test task/follow-up acceptance pass.** The existing attachment and native-continuity oracles independently verify both Test downloads, run attribution and unchanged native/provider/workspace identities. The maintainer authorized a code-owner-review exception for this PR only. The first Test setup failure and normal Board completion-review friction are retained below. Actual post-merge packages and private Cloud distribution remain separate qualification gates. - [Current CI](https://github.com/paperclipai/paperclip/actions/runs/38564241625): all 48 ordinary jobs and required verify/E2E pass. Attempt 1 retained six simultaneous host-shutdown cancellations. One failed-only retry passes those six lanes and two aggregates, preserving 40 successes. Actual integration checkout `53104c1` combines this head with master `c80`; it is not relabeled as the branch tree. Fresh exact-head Greptile 5/5, 30 resolved threads, no actionable findings. - [Exact-source package qualification](https://github.com/paperclipai/paperclip/actions/runs/38565287239): nine applicable jobs pass, nine conditional jobs skip. Four remote native producers; Linux x64 clean install; Intel Mac, Apple Silicon and Linux ARM64 native startup/physical cleanup controls. All 18 tarballs/four daemon source/hash/manifest bindings and 343 migrations through 0344 verify. No Codex payload is packed. These hosted tarballs are not a published npm canary. - Normal Apple Silicon installation and credential-free native startup/cleanup pass using the packaged daemon, with no source build or provider turn. Fresh installed DB initialization passes. Upgrade 651a→1c03 preserves all three complete execution configs, accounts, ten recorded run profiles, paused budgets, active incidents, cost summaries and two historical unpriced events. Historical recovery state is retained. - Cleanup regressions: four delayed-read baseline failures become 15 passing deadline/authority controls. No-acknowledgement and prior-error socket ownership regressions become 12 passing controls. Direct runtime/server types, maps: 35 areas / 176 IDs, diff checks and independent reviews pass. Permission/auth/reconnect policy and the 10-second setup budget remain intact. - Existing source coverage includes creation/selection/imports, pending approvals, recovery, account/lifecycle handling, mounted forms, dropdowns and E2E support. Full typechecks/tests/build/token and applicable Storybook checks pass in the recorded current CI; no duplicate suite or weakened grader. - Literal 9546 live Mac proof: ordinary Auto Codex onboarding, useful document, real completed-child callback/reply, seven successful native runs, manual follow-up and independently downloaded1,101-byte child file. Existing Legacy title edit/reload preserves execution; two real Legacy runs produce independently checked15/34-byte files. These remain historical source records. - Current literal 1c03 Mac core acceptance passes independent checks: ordinary Auto native Codex onboarding without runner override; only timeout 180 seconds/concurrency 1 saved; six successful native runs and six serialized turns (maximum overlap 1); both same-task continuity checks and five mechanical callback checks; actual rendered parent reply and exact child downloads. The useful handoff advances from revision 1 to 2. Both files are 48 bytes, SHA-256 `8b742bd4e8123a7c078f0a8d9f3449fbfa8a320d7d90be641a2818db3c53d92c` and `f42db9774fa06e804ab7d596fc8b922a2b638921c418b87d0111151d290a6afe`; exactly one byte changes and old history remains. The agent is paused with zero active runs/errors. Both artifact work products have `isPrimary=false`, and descriptive titles fail a stricter title-helper assumption; these retained results are scoped editorial follow-up, not new merge gates. Six source-bound screenshots are uploaded and verified in the private primary QA report. - [Literal 9546 managed proof](https://d1p6rlowie26tp.cloudfront.net/runner-e2e/campaigns/gha-38485488621-1/index.html): original 19 assertions and completed judge pass, four native turns, child-bound240-byte file and session/workspace continuity. Checkout reports a verified generated target-lock mutation; full final porcelain was not retained. Signed execution-image identity remains separate from Core source. - Actual 651a Test deployment succeeds on one owned/pinned target. One ordinary Auto API-key Connect then fails native cleanup before hire. Controller turn/drain/suspend completion and service-recorded environment cleanup are observed; they do not certify physical deletion or native authority retirement. Failure/recovery/unknown holds are retained. No Legacy switch or unchanged paid retry. The two source repairs above require actual treatment. - [Current immutable Core preview](https://github.com/paperclipai/paperclip/actions/runs/38570365725) and matching DB/shared artifacts pass. One owned, pinned Test target serves exact `1c03`; identical migration history correctly skips the migrator. Ordinary Auto Codex Connect succeeds and hires native; saved native selection and QA bounds survive reload. The initial child preparation attempt fails before provider work, with actual stdout identifying `renewal_deadline`; its trigger remains unknown and the failure is retained. Normal Board **Try again** and **Resume** recover the child to Done, producing a browser-verified 44-byte file, SHA-256 `0a8458b1efcc2d7a0d815689458c4caab039a46c7c7a3e5805de6bc8b1a96ecc`. The actual parent callback reports the completed child document/file. The existing validator requires a parent-owned attachment, so recovery enters normal Review; after byte checking, normal **Approve completion** reaches parent Done. No forced status or duplicate parent file is used. The validator is unchanged from integrated and current master. Autonomous initial callback-to-Done is not proven. The same-child follow-up completes document revision 2 and publishes a second independently downloaded 44-byte file, SHA-256 `22022257300fae762784632d08d3bbe0bab61e2ce81f91864a14dcd7aa464591`; only the revision digit changes. The unchanged existing native-continuity and attachment oracles pass. All ten recorded runs are terminal: nine native successes and the retained pre-provider setup failure. The QA agent is paused with zero active runs. The pre-existing parent evidence scope mismatch is a separate follow-up, with ordinary completion review exercised rather than a forced status or relaxed validation. This unsigned Core preview remains distinct from post-merge private Cloud composition. ## Risks - Saved agents are not migrated. Explicit runner changes use normal configuration/session rules; historical runs retain their recorded execution. - Native readiness depends on verified assets and server-owned target qualification. A Legacy probe, HTTP200 or successful account save cannot prove native readiness. - Recovery exceptions remain restricted to validated completed-onboarding reports; process-loss, ownership and terminal-state safeguards remain active. Unexecuted live journeys stay open. - Linux ARM paid tasks, Windows, Alpine and 32-bit ARM remain deferred. Cold Cargo cache misses are recorded; no warm-cache speedup is claimed. - Historical invoices/physical cleanup remain unconfirmed and held. After merge, exact published npm canary, signed standard image/migrator, private composition and serving/live acceptance still require qualification. Production deployment/default promotion is not authorized. ## Model Used OpenAI Codex, GPT-6 family, with reasoning, tools, code execution and parallel agents. Exact serving snapshot and context-window size are not exposed. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used with available version and capability details - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have linked public issues or PRs above - [x] I have not referenced internal/instance-local Paperclip issues or links - [x] My branch name describes the change and contains no internal ticket id - [x] I have run the stated focused tests locally and they pass - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation - [x] I have considered and documented risks - [x] All Paperclip CI gates are green on the current candidate - [x] Greptile is 5/5 with no open findings on the current candidate - [x] I will address all reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing>
889 lines
30 KiB
TypeScript
889 lines
30 KiB
TypeScript
import { Command } from "commander";
|
|
import {
|
|
agentSkillSyncSchema,
|
|
createAgentSchema,
|
|
resetAgentSessionSchema,
|
|
updateAgentInstructionsBundleSchema,
|
|
updateAgentInstructionsPathSchema,
|
|
updateAgentPermissionsSchema,
|
|
updateAgentSchema,
|
|
upsertAgentInstructionsFileSchema,
|
|
wakeAgentSchema,
|
|
type Agent,
|
|
type AgentWakeupResponse,
|
|
type Issue,
|
|
} from "@paperclipai/shared";
|
|
import {
|
|
removeMaintainerOnlySkillSymlinks,
|
|
resolvePaperclipSkillsDir,
|
|
} from "@paperclipai/adapter-utils/server-utils";
|
|
import fs from "node:fs/promises";
|
|
import os from "node:os";
|
|
import path from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
import {
|
|
addCommonClientOptions,
|
|
apiPath,
|
|
formatInlineRecord,
|
|
handleCommandError,
|
|
printOutput,
|
|
resolveCommandContext,
|
|
type BaseClientOptions,
|
|
} from "./common.js";
|
|
|
|
interface AgentListOptions extends BaseClientOptions {
|
|
companyId?: string;
|
|
}
|
|
|
|
interface AgentLocalCliOptions extends BaseClientOptions {
|
|
companyId?: string;
|
|
keyName?: string;
|
|
installSkills?: boolean;
|
|
}
|
|
|
|
interface AgentInboxMineOptions extends BaseClientOptions {
|
|
userId: string;
|
|
status?: string;
|
|
}
|
|
|
|
interface AgentWakeOptions extends BaseClientOptions {
|
|
companyId?: string;
|
|
source?: string;
|
|
trigger?: string;
|
|
reason?: string;
|
|
payload?: string;
|
|
idempotencyKey?: string;
|
|
forceFreshSession?: boolean;
|
|
}
|
|
|
|
interface AgentJsonPayloadOptions extends BaseClientOptions {
|
|
runner?: "auto" | "paperclip" | "legacy";
|
|
companyId?: string;
|
|
payloadJson: string;
|
|
}
|
|
|
|
interface AgentDeleteOptions extends BaseClientOptions {
|
|
yes?: boolean;
|
|
}
|
|
|
|
interface AgentResetSessionOptions extends BaseClientOptions {
|
|
taskKey?: string;
|
|
}
|
|
|
|
interface AgentSkillsSyncOptions extends BaseClientOptions {
|
|
desiredSkills: string;
|
|
mode: string;
|
|
}
|
|
|
|
interface AgentInstructionsFileOptions extends BaseClientOptions {
|
|
path: string;
|
|
}
|
|
|
|
interface AgentInstructionsFilePutOptions extends BaseClientOptions {
|
|
path: string;
|
|
content?: string;
|
|
contentFile?: string;
|
|
clearLegacyPromptTemplate?: boolean;
|
|
}
|
|
|
|
interface CreatedAgentKey {
|
|
id: string;
|
|
name: string;
|
|
token: string;
|
|
createdAt: string;
|
|
}
|
|
|
|
interface SkillsInstallSummary {
|
|
tool: "codex" | "claude" | "kimi";
|
|
target: string;
|
|
linked: string[];
|
|
removed: string[];
|
|
skipped: string[];
|
|
failed: Array<{ name: string; error: string }>;
|
|
}
|
|
|
|
const __moduleDir = path.dirname(fileURLToPath(import.meta.url));
|
|
|
|
function codexSkillsHome(): string {
|
|
const fromEnv = process.env.CODEX_HOME?.trim();
|
|
const base = fromEnv && fromEnv.length > 0 ? fromEnv : path.join(os.homedir(), ".codex");
|
|
return path.join(base, "skills");
|
|
}
|
|
|
|
function claudeSkillsHome(): string {
|
|
const fromEnv = process.env.CLAUDE_HOME?.trim();
|
|
const base = fromEnv && fromEnv.length > 0 ? fromEnv : path.join(os.homedir(), ".claude");
|
|
return path.join(base, "skills");
|
|
}
|
|
|
|
function kimiSkillsHome(): string {
|
|
const fromEnv = process.env.KIMI_CODE_HOME?.trim();
|
|
const base = fromEnv && fromEnv.length > 0 ? fromEnv : path.join(os.homedir(), ".kimi-code");
|
|
return path.join(base, "skills");
|
|
}
|
|
|
|
async function installSkillsForTarget(
|
|
sourceSkillsDir: string,
|
|
targetSkillsDir: string,
|
|
tool: "codex" | "claude" | "kimi",
|
|
): Promise<SkillsInstallSummary> {
|
|
const summary: SkillsInstallSummary = {
|
|
tool,
|
|
target: targetSkillsDir,
|
|
linked: [],
|
|
removed: [],
|
|
skipped: [],
|
|
failed: [],
|
|
};
|
|
|
|
await fs.mkdir(targetSkillsDir, { recursive: true });
|
|
const entries = await fs.readdir(sourceSkillsDir, { withFileTypes: true });
|
|
summary.removed = await removeMaintainerOnlySkillSymlinks(
|
|
targetSkillsDir,
|
|
entries.filter((entry) => entry.isDirectory()).map((entry) => entry.name),
|
|
);
|
|
for (const entry of entries) {
|
|
if (!entry.isDirectory()) continue;
|
|
const source = path.join(sourceSkillsDir, entry.name);
|
|
const target = path.join(targetSkillsDir, entry.name);
|
|
const existing = await fs.lstat(target).catch(() => null);
|
|
if (existing) {
|
|
if (existing.isSymbolicLink()) {
|
|
let linkedPath: string | null = null;
|
|
try {
|
|
linkedPath = await fs.readlink(target);
|
|
} catch (err) {
|
|
await fs.unlink(target);
|
|
try {
|
|
await fs.symlink(source, target);
|
|
summary.linked.push(entry.name);
|
|
continue;
|
|
} catch (linkErr) {
|
|
summary.failed.push({
|
|
name: entry.name,
|
|
error:
|
|
err instanceof Error && linkErr instanceof Error
|
|
? `${err.message}; then ${linkErr.message}`
|
|
: err instanceof Error
|
|
? err.message
|
|
: `Failed to recover broken symlink: ${String(err)}`,
|
|
});
|
|
continue;
|
|
}
|
|
}
|
|
|
|
const resolvedLinkedPath = path.isAbsolute(linkedPath)
|
|
? linkedPath
|
|
: path.resolve(path.dirname(target), linkedPath);
|
|
const linkedTargetExists = await fs
|
|
.stat(resolvedLinkedPath)
|
|
.then(() => true)
|
|
.catch(() => false);
|
|
|
|
if (!linkedTargetExists) {
|
|
await fs.unlink(target);
|
|
} else {
|
|
summary.skipped.push(entry.name);
|
|
continue;
|
|
}
|
|
} else {
|
|
summary.skipped.push(entry.name);
|
|
continue;
|
|
}
|
|
}
|
|
|
|
try {
|
|
await fs.symlink(source, target);
|
|
summary.linked.push(entry.name);
|
|
} catch (err) {
|
|
summary.failed.push({
|
|
name: entry.name,
|
|
error: err instanceof Error ? err.message : String(err),
|
|
});
|
|
}
|
|
}
|
|
|
|
return summary;
|
|
}
|
|
|
|
function buildAgentEnvExports(input: {
|
|
apiBase: string;
|
|
companyId: string;
|
|
agentId: string;
|
|
apiKey: string;
|
|
}): string {
|
|
const escaped = (value: string) => value.replace(/'/g, "'\"'\"'");
|
|
return [
|
|
`export PAPERCLIP_API_URL='${escaped(input.apiBase)}'`,
|
|
`export PAPERCLIP_COMPANY_ID='${escaped(input.companyId)}'`,
|
|
`export PAPERCLIP_AGENT_ID='${escaped(input.agentId)}'`,
|
|
`export PAPERCLIP_API_KEY='${escaped(input.apiKey)}'`,
|
|
].join("\n");
|
|
}
|
|
|
|
export function registerAgentCommands(program: Command): void {
|
|
const agent = program.command("agent").description("Agent operations");
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("me")
|
|
.description("Show the current agent identity")
|
|
.action(async (opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const me = await ctx.api.get<Agent>("/api/agents/me");
|
|
printOutput(me, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("inbox")
|
|
.description("List current agent assigned inbox items")
|
|
.action(async (opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const rows = (await ctx.api.get<Issue[]>("/api/agents/me/inbox-lite")) ?? [];
|
|
if (ctx.json) {
|
|
printOutput(rows, { json: true });
|
|
return;
|
|
}
|
|
for (const row of rows) {
|
|
console.log(formatInlineRecord({
|
|
identifier: row.identifier,
|
|
id: row.id,
|
|
status: row.status,
|
|
priority: row.priority,
|
|
title: row.title,
|
|
projectId: row.projectId,
|
|
}));
|
|
}
|
|
if (rows.length === 0) printOutput([], { json: false });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("inbox-mine")
|
|
.description("List current agent inbox items touched or archived by a board user")
|
|
.requiredOption("--user-id <id>", "Board user ID")
|
|
.option("--status <csv>", "Comma-separated issue statuses")
|
|
.action(async (opts: AgentInboxMineOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const params = new URLSearchParams({ userId: opts.userId });
|
|
if (opts.status) params.set("status", opts.status);
|
|
const rows = (await ctx.api.get<Issue[]>(`/api/agents/me/inbox/mine?${params.toString()}`)) ?? [];
|
|
printOutput(rows, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("list")
|
|
.description("List agents for a company")
|
|
.requiredOption("-C, --company-id <id>", "Company ID")
|
|
.action(async (opts: AgentListOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts, { requireCompany: true });
|
|
const rows = (await ctx.api.get<Agent[]>(apiPath`/api/companies/${ctx.companyId}/agents`)) ?? [];
|
|
|
|
if (ctx.json) {
|
|
printOutput(rows, { json: true });
|
|
return;
|
|
}
|
|
|
|
if (rows.length === 0) {
|
|
printOutput([], { json: false });
|
|
return;
|
|
}
|
|
|
|
for (const row of rows) {
|
|
console.log(
|
|
formatInlineRecord({
|
|
id: row.id,
|
|
name: row.name,
|
|
role: row.role,
|
|
status: row.status,
|
|
reportsTo: row.reportsTo,
|
|
budgetMonthlyCents: row.budgetMonthlyCents,
|
|
spentMonthlyCents: row.spentMonthlyCents,
|
|
}),
|
|
);
|
|
}
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
{ includeCompany: false },
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("get")
|
|
.description("Get one agent")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const row = await ctx.api.get<Agent>(apiPath`/api/agents/${agentId}`);
|
|
printOutput(row, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("create")
|
|
.description("Create an agent from a JSON payload")
|
|
.option("-C, --company-id <id>", "Company ID")
|
|
.requiredOption("--payload-json <json>", "CreateAgent JSON payload")
|
|
.option("--runner <runner>", "Runner: auto (default), paperclip, or legacy")
|
|
.action(async (opts: AgentJsonPayloadOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts, { requireCompany: true });
|
|
const payload = createAgentSchema.parse({ ...parseJsonObject(opts.payloadJson), ...(opts.runner ? { runner: opts.runner } : {}) });
|
|
const created = await ctx.api.post<Agent>(apiPath`/api/companies/${ctx.companyId}/agents`, payload);
|
|
printOutput(created, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
{ includeCompany: false },
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("hire")
|
|
.description("Create an agent hire request")
|
|
.option("-C, --company-id <id>", "Company ID")
|
|
.requiredOption("--payload-json <json>", "CreateAgentHire JSON payload")
|
|
.option("--runner <runner>", "Runner: auto (default), paperclip, or legacy")
|
|
.action(async (opts: AgentJsonPayloadOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts, { requireCompany: true });
|
|
const result = await ctx.api.post(apiPath`/api/companies/${ctx.companyId}/agent-hires`, { ...parseJsonObject(opts.payloadJson), ...(opts.runner ? { runner: opts.runner } : {}) });
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
{ includeCompany: false },
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("update")
|
|
.description("Update an agent from a JSON payload")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--payload-json <json>", "UpdateAgent JSON payload")
|
|
.action(async (agentId: string, opts: AgentJsonPayloadOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const payload = updateAgentSchema.parse(parseJson(opts.payloadJson));
|
|
const updated = await ctx.api.patch<Agent>(apiPath`/api/agents/${agentId}`, payload);
|
|
printOutput(updated, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("delete")
|
|
.description("Delete an agent")
|
|
.argument("<agentId>", "Agent ID")
|
|
.option("--yes", "Confirm deletion")
|
|
.action(async (agentId: string, opts: AgentDeleteOptions) => {
|
|
try {
|
|
if (!opts.yes) throw new Error("Refusing to delete without --yes");
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.delete(apiPath`/api/agents/${agentId}`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
for (const [name, path, description] of [
|
|
["pause", "pause", "Pause an agent"],
|
|
["resume", "resume", "Resume an agent"],
|
|
["approve", "approve", "Approve a pending agent"],
|
|
["terminate", "terminate", "Terminate an agent"],
|
|
["heartbeat:invoke", "heartbeat/invoke", "Invoke an agent heartbeat"],
|
|
["claude-login", "claude-login", "Trigger Claude login for an agent"],
|
|
] as const) {
|
|
addCommonClientOptions(
|
|
agent
|
|
.command(name)
|
|
.description(description)
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.post(`${apiPath`/api/agents/${agentId}`}/${path}`, {});
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
}
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("permissions:update")
|
|
.description("Update agent permissions")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--payload-json <json>", "UpdateAgentPermissions JSON payload")
|
|
.action(async (agentId: string, opts: AgentJsonPayloadOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const payload = updateAgentPermissionsSchema.parse(parseJson(opts.payloadJson));
|
|
const updated = await ctx.api.patch(apiPath`/api/agents/${agentId}/permissions`, payload);
|
|
printOutput(updated, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("configuration")
|
|
.description("Get redacted agent configuration")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/configuration`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("config-revisions")
|
|
.description("List agent config revisions")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/config-revisions`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("config-revision:get")
|
|
.description("Get one agent config revision")
|
|
.argument("<agentId>", "Agent ID")
|
|
.argument("<revisionId>", "Revision ID")
|
|
.action(async (agentId: string, revisionId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/config-revisions/${revisionId}`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("config-revision:rollback")
|
|
.description("Roll an agent back to a config revision")
|
|
.argument("<agentId>", "Agent ID")
|
|
.argument("<revisionId>", "Revision ID")
|
|
.action(async (agentId: string, revisionId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.post(apiPath`/api/agents/${agentId}/config-revisions/${revisionId}/rollback`, {});
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("runtime-state")
|
|
.description("Get agent runtime state")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/runtime-state`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("runtime-state:reset-session")
|
|
.description("Reset an agent runtime session")
|
|
.argument("<agentId>", "Agent ID")
|
|
.option("--task-key <key>", "Specific task session key")
|
|
.action(async (agentId: string, opts: AgentResetSessionOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const payload = resetAgentSessionSchema.parse({ taskKey: opts.taskKey });
|
|
const result = await ctx.api.post(apiPath`/api/agents/${agentId}/runtime-state/reset-session`, payload);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("task-sessions")
|
|
.description("List agent task sessions")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/task-sessions`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("skills")
|
|
.description("List agent skills")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/skills`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("skills:sync")
|
|
.description("Sync desired skills onto an agent")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--desired-skills <csv>", "Desired skill names")
|
|
.requiredOption(
|
|
"--mode <mode>",
|
|
"Merge mode: add keeps other skills; remove deletes only named skills; replace destructively overwrites the complete set",
|
|
)
|
|
.action(async (agentId: string, opts: AgentSkillsSyncOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const payload = agentSkillSyncSchema.parse({
|
|
desiredSkills: parseCsv(opts.desiredSkills),
|
|
mode: opts.mode,
|
|
});
|
|
const result = await ctx.api.post(apiPath`/api/agents/${agentId}/skills/sync`, payload);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("instructions-path:update")
|
|
.description("Update an agent instructions path. Process adapters require adapterConfigKey and relative paths require adapterConfig.cwd.")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--payload-json <json>", "UpdateAgentInstructionsPath JSON payload, for example {\"path\":\"/tmp/AGENTS.md\",\"adapterConfigKey\":\"instructionsFilePath\"}")
|
|
.action(async (agentId: string, opts: AgentJsonPayloadOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const payload = updateAgentInstructionsPathSchema.parse(parseJson(opts.payloadJson));
|
|
const result = await ctx.api.patch(apiPath`/api/agents/${agentId}/instructions-path`, payload);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("instructions-bundle")
|
|
.description("Get an agent instructions bundle")
|
|
.argument("<agentId>", "Agent ID")
|
|
.action(async (agentId: string, opts: BaseClientOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const result = await ctx.api.get(apiPath`/api/agents/${agentId}/instructions-bundle`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("instructions-bundle:update")
|
|
.description("Update an agent instructions bundle")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--payload-json <json>", "UpdateAgentInstructionsBundle JSON payload")
|
|
.action(async (agentId: string, opts: AgentJsonPayloadOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const payload = updateAgentInstructionsBundleSchema.parse(parseJson(opts.payloadJson));
|
|
const result = await ctx.api.patch(apiPath`/api/agents/${agentId}/instructions-bundle`, payload);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("instructions-file:get")
|
|
.description("Get an agent instructions file")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--path <path>", "Bundle-relative file path")
|
|
.action(async (agentId: string, opts: AgentInstructionsFileOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const query = new URLSearchParams({ path: opts.path });
|
|
const result = await ctx.api.get(`${apiPath`/api/agents/${agentId}/instructions-bundle/file`}?${query.toString()}`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("instructions-file:put")
|
|
.description("Create or update an agent instructions file")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--path <path>", "Bundle-relative file path")
|
|
.option("--content <text>", "File content")
|
|
.option("--content-file <path>", "Read file content from disk")
|
|
.option("--clear-legacy-prompt-template", "Clear legacy prompt template")
|
|
.action(async (agentId: string, opts: AgentInstructionsFilePutOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const content = opts.contentFile ? await fs.readFile(opts.contentFile, "utf8") : opts.content;
|
|
const payload = upsertAgentInstructionsFileSchema.parse({
|
|
path: opts.path,
|
|
content,
|
|
clearLegacyPromptTemplate: Boolean(opts.clearLegacyPromptTemplate),
|
|
});
|
|
const result = await ctx.api.put(apiPath`/api/agents/${agentId}/instructions-bundle/file`, payload);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("instructions-file:delete")
|
|
.description("Delete an agent instructions file")
|
|
.argument("<agentId>", "Agent ID")
|
|
.requiredOption("--path <path>", "Bundle-relative file path")
|
|
.action(async (agentId: string, opts: AgentInstructionsFileOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const query = new URLSearchParams({ path: opts.path });
|
|
const result = await ctx.api.delete(`${apiPath`/api/agents/${agentId}/instructions-bundle/file`}?${query.toString()}`);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("wake")
|
|
.description("Request a heartbeat wakeup for an agent")
|
|
.argument("<agentRef>", "Agent ID or shortname/url-key")
|
|
.option("-C, --company-id <id>", "Company ID for shortname/url-key lookup")
|
|
.option("--source <source>", "Invocation source (timer, assignment, on_demand, automation)", "on_demand")
|
|
.option("--trigger <trigger>", "Trigger detail (manual, ping, callback, system)", "manual")
|
|
.option("--reason <text>", "Wakeup reason")
|
|
.option("--payload <json>", "JSON object payload")
|
|
.option("--idempotency-key <key>", "Wakeup idempotency key")
|
|
.option("--force-fresh-session", "Request a fresh adapter session")
|
|
.action(async (agentRef: string, opts: AgentWakeOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts);
|
|
const query = opts.companyId ? `?${new URLSearchParams({ companyId: opts.companyId }).toString()}` : "";
|
|
const agentRow = await ctx.api.get<Agent>(`${apiPath`/api/agents/${agentRef}`}${query}`);
|
|
if (!agentRow) {
|
|
throw new Error(`Agent not found: ${agentRef}`);
|
|
}
|
|
const payload = wakeAgentSchema.parse({
|
|
source: opts.source,
|
|
triggerDetail: opts.trigger,
|
|
reason: opts.reason,
|
|
payload: parseJsonObject(opts.payload),
|
|
idempotencyKey: opts.idempotencyKey,
|
|
forceFreshSession: Boolean(opts.forceFreshSession),
|
|
});
|
|
const result = await ctx.api.post<AgentWakeupResponse>(apiPath`/api/agents/${agentRow.id}/wakeup`, payload);
|
|
printOutput(result, { json: ctx.json });
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
{ includeCompany: false },
|
|
);
|
|
|
|
addCommonClientOptions(
|
|
agent
|
|
.command("local-cli")
|
|
.description(
|
|
"Create an agent API key, install local Paperclip skills for Codex/Claude, and print shell exports",
|
|
)
|
|
.argument("<agentRef>", "Agent ID or shortname/url-key")
|
|
.requiredOption("-C, --company-id <id>", "Company ID")
|
|
.option("--key-name <name>", "API key label", "local-cli")
|
|
.option(
|
|
"--no-install-skills",
|
|
"Skip installing Paperclip skills into ~/.codex/skills, ~/.claude/skills, and ~/.kimi-code/skills",
|
|
)
|
|
.action(async (agentRef: string, opts: AgentLocalCliOptions) => {
|
|
try {
|
|
const ctx = resolveCommandContext(opts, { requireCompany: true });
|
|
const query = new URLSearchParams({ companyId: ctx.companyId ?? "" });
|
|
const agentRow = await ctx.api.get<Agent>(
|
|
`${apiPath`/api/agents/${agentRef}`}?${query.toString()}`,
|
|
);
|
|
if (!agentRow) {
|
|
throw new Error(`Agent not found: ${agentRef}`);
|
|
}
|
|
|
|
const now = new Date().toISOString().replaceAll(":", "-");
|
|
const keyName = opts.keyName?.trim() ? opts.keyName.trim() : `local-cli-${now}`;
|
|
const key = await ctx.api.post<CreatedAgentKey>(apiPath`/api/agents/${agentRow.id}/keys`, { name: keyName });
|
|
if (!key) {
|
|
throw new Error("Failed to create API key");
|
|
}
|
|
|
|
const installSummaries: SkillsInstallSummary[] = [];
|
|
if (opts.installSkills !== false) {
|
|
const skillsDir = await resolvePaperclipSkillsDir(__moduleDir, [path.resolve(process.cwd(), "skills")]);
|
|
if (!skillsDir) {
|
|
throw new Error(
|
|
"Could not locate local Paperclip skills directory. Expected ./skills in the repo checkout.",
|
|
);
|
|
}
|
|
|
|
installSummaries.push(
|
|
await installSkillsForTarget(skillsDir, codexSkillsHome(), "codex"),
|
|
await installSkillsForTarget(skillsDir, claudeSkillsHome(), "claude"),
|
|
await installSkillsForTarget(skillsDir, kimiSkillsHome(), "kimi"),
|
|
);
|
|
}
|
|
|
|
const exportsText = buildAgentEnvExports({
|
|
apiBase: ctx.api.apiBase,
|
|
companyId: agentRow.companyId,
|
|
agentId: agentRow.id,
|
|
apiKey: key.token,
|
|
});
|
|
|
|
if (ctx.json) {
|
|
printOutput(
|
|
{
|
|
agent: {
|
|
id: agentRow.id,
|
|
name: agentRow.name,
|
|
urlKey: agentRow.urlKey,
|
|
companyId: agentRow.companyId,
|
|
},
|
|
key: {
|
|
id: key.id,
|
|
name: key.name,
|
|
createdAt: key.createdAt,
|
|
token: key.token,
|
|
},
|
|
skills: installSummaries,
|
|
exports: exportsText,
|
|
},
|
|
{ json: true },
|
|
);
|
|
return;
|
|
}
|
|
|
|
console.log(`Agent: ${agentRow.name} (${agentRow.id})`);
|
|
console.log(`API key created: ${key.name} (${key.id})`);
|
|
if (installSummaries.length > 0) {
|
|
for (const summary of installSummaries) {
|
|
console.log(
|
|
`${summary.tool}: linked=${summary.linked.length} removed=${summary.removed.length} skipped=${summary.skipped.length} failed=${summary.failed.length} target=${summary.target}`,
|
|
);
|
|
for (const failed of summary.failed) {
|
|
console.log(` failed ${failed.name}: ${failed.error}`);
|
|
}
|
|
}
|
|
}
|
|
console.log("");
|
|
console.log("# Run this in your shell before launching codex/claude:");
|
|
console.log(exportsText);
|
|
} catch (err) {
|
|
handleCommandError(err);
|
|
}
|
|
}),
|
|
{ includeCompany: false },
|
|
);
|
|
}
|
|
|
|
function parseJsonObject(value: string | undefined): Record<string, unknown> | undefined {
|
|
if (value === undefined) return undefined;
|
|
const parsed = JSON.parse(value) as unknown;
|
|
if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
|
|
throw new Error("--payload must be a JSON object");
|
|
}
|
|
return parsed as Record<string, unknown>;
|
|
}
|
|
|
|
function parseJson(value: string): unknown {
|
|
return JSON.parse(value) as unknown;
|
|
}
|
|
|
|
function parseCsv(value: string | undefined): string[] {
|
|
if (!value) return [];
|
|
return value.split(",").map((part) => part.trim()).filter(Boolean);
|
|
}
|