mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-26 02:00:52 +01:00
Harold KimandPaperclip
98df214917
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
14 lines
549 B
Bash
Executable File
14 lines
549 B
Bash
Executable File
#!/bin/bash -ex
|
|
export PC_TEST_ROOT="$(mktemp -d /tmp/paperclip-clean.XXXXXX)"
|
|
export PC_HOME="$PC_TEST_ROOT/home"
|
|
export PC_CACHE="$PC_TEST_ROOT/npm-cache"
|
|
export PC_DATA="$PC_TEST_ROOT/paperclip-data"
|
|
mkdir -p "$PC_HOME" "$PC_CACHE" "$PC_DATA"
|
|
echo "PC_TEST_ROOT: $PC_TEST_ROOT"
|
|
echo "PC_HOME: $PC_HOME"
|
|
cd $PC_TEST_ROOT
|
|
git clone https://github.com/paperclipai/paperclip.git repo
|
|
cd repo
|
|
pnpm install
|
|
env HOME="$PC_HOME" npm_config_cache="$PC_CACHE" npm_config_userconfig="$PC_HOME/.npmrc" \
|
|
pnpm paperclipai onboard --yes --data-dir "$PC_DATA" |