mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-26 10:26:26 +01:00
Harold KimandPaperclip
98df214917
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
68 lines
2.0 KiB
JavaScript
68 lines
2.0 KiB
JavaScript
/**
|
|
* esbuild configuration for building the paperclipai CLI for npm.
|
|
*
|
|
* Bundles all workspace packages (@paperclipai/*) into a single file.
|
|
* External npm packages remain as regular dependencies.
|
|
*/
|
|
|
|
import { readFileSync } from "node:fs";
|
|
import { resolve, dirname } from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
const __dirname = dirname(fileURLToPath(import.meta.url));
|
|
const repoRoot = resolve(__dirname, "..");
|
|
|
|
// Workspace packages whose code should be bundled into the CLI.
|
|
// Note: "server" is excluded — it's published separately and resolved at runtime.
|
|
const workspacePaths = [
|
|
"cli",
|
|
"packages/db",
|
|
"packages/shared",
|
|
"packages/adapter-utils",
|
|
"packages/adapters/claude-local",
|
|
"packages/adapters/codex-local",
|
|
"packages/adapters/hermes-gateway",
|
|
"packages/adapters/hermes",
|
|
"packages/adapters/openclaw-gateway",
|
|
];
|
|
|
|
// Workspace packages that should NOT be bundled — they'll be published
|
|
// to npm and resolved at runtime (e.g. @paperclipai/server uses dynamic import).
|
|
const externalWorkspacePackages = new Set([
|
|
"@paperclipai/server",
|
|
]);
|
|
|
|
// Collect all external (non-workspace) npm package names
|
|
const externals = new Set();
|
|
for (const p of workspacePaths) {
|
|
const pkg = JSON.parse(readFileSync(resolve(repoRoot, p, "package.json"), "utf8"));
|
|
for (const name of Object.keys(pkg.dependencies || {})) {
|
|
if (externalWorkspacePackages.has(name)) {
|
|
externals.add(name);
|
|
} else if (!name.startsWith("@paperclipai/")) {
|
|
externals.add(name);
|
|
}
|
|
}
|
|
for (const name of Object.keys(pkg.optionalDependencies || {})) {
|
|
externals.add(name);
|
|
}
|
|
}
|
|
// Also add all published workspace packages as external
|
|
for (const name of externalWorkspacePackages) {
|
|
externals.add(name);
|
|
}
|
|
|
|
/** @type {import('esbuild').BuildOptions} */
|
|
export default {
|
|
entryPoints: ["src/index.ts"],
|
|
bundle: true,
|
|
platform: "node",
|
|
target: "node20",
|
|
format: "esm",
|
|
outfile: "dist/index.js",
|
|
banner: { js: "#!/usr/bin/env node" },
|
|
external: [...externals].sort(),
|
|
treeShaking: true,
|
|
sourcemap: true,
|
|
};
|