mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-27 19:35:13 +01:00
Harold KimandPaperclip
98df214917
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
24 lines
596 B
INI
24 lines
596 B
INI
[Unit]
|
|
Description=Paperclip AI Agent Orchestrator
|
|
Requires=paperclip-db.service
|
|
After=paperclip-db.service
|
|
|
|
[Container]
|
|
Image=paperclip-local
|
|
ContainerName=paperclip
|
|
Pod=paperclip.pod
|
|
Volume=%h/.local/share/paperclip:/paperclip:Z
|
|
Environment=HOST=0.0.0.0
|
|
Environment=PAPERCLIP_HOME=/paperclip
|
|
Environment=PAPERCLIP_DEPLOYMENT_MODE=authenticated
|
|
Environment=PAPERCLIP_DEPLOYMENT_EXPOSURE=private
|
|
Environment=PAPERCLIP_PUBLIC_URL=http://localhost:3100
|
|
EnvironmentFile=%h/.config/containers/systemd/paperclip.env
|
|
|
|
[Service]
|
|
Restart=on-failure
|
|
TimeoutStartSec=120
|
|
|
|
[Install]
|
|
WantedBy=default.target
|