mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-25 09:41:04 +01:00
Harold KimandPaperclip
98df214917
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
31 lines
858 B
Bash
31 lines
858 B
Bash
# AWS ECS Fargate deployment environment
|
|
# Copy to .env.aws and fill in values before deploying
|
|
#
|
|
# Secrets (DATABASE_URL, BETTER_AUTH_SECRET, ANTHROPIC_API_KEY, OPENAI_API_KEY,
|
|
# GITHUB_TOKEN) are injected via AWS Secrets Manager — do NOT set them here.
|
|
|
|
# Deployment mode
|
|
PAPERCLIP_DEPLOYMENT_MODE=authenticated
|
|
PAPERCLIP_DEPLOYMENT_EXPOSURE=public
|
|
PAPERCLIP_PUBLIC_URL=https://paperclip.example.com
|
|
|
|
# Server
|
|
HOST=0.0.0.0
|
|
PORT=3100
|
|
NODE_ENV=production
|
|
SERVE_UI=true
|
|
|
|
# Paperclip paths
|
|
PAPERCLIP_HOME=/paperclip
|
|
PAPERCLIP_INSTANCE_ID=default
|
|
PAPERCLIP_CONFIG=/paperclip/instances/default/config.json
|
|
|
|
# Auto-apply migrations on startup
|
|
PAPERCLIP_MIGRATION_AUTO_APPLY=true
|
|
|
|
# Enable heartbeat scheduler for remote agents
|
|
HEARTBEAT_SCHEDULER_ENABLED=true
|
|
|
|
# Post-deploy hardening (uncomment after first user signs up)
|
|
# PAPERCLIP_AUTH_DISABLE_SIGN_UP=true
|