mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-11-01 06:42:06 +01:00
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
15 lines
536 B
JavaScript
15 lines
536 B
JavaScript
#!/usr/bin/env node
|
|
import { existsSync, renameSync, rmSync } from "node:fs";
|
|
import { dirname, join, resolve } from "node:path";
|
|
import { fileURLToPath } from "node:url";
|
|
|
|
const scriptDir = dirname(fileURLToPath(import.meta.url));
|
|
const packageDir = resolve(scriptDir, "..");
|
|
const packageJsonPath = join(packageDir, "package.json");
|
|
const devPackageJsonPath = join(packageDir, "package.dev.json");
|
|
|
|
if (existsSync(devPackageJsonPath)) {
|
|
rmSync(packageJsonPath, { force: true });
|
|
renameSync(devPackageJsonPath, packageJsonPath);
|
|
}
|