mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-25 17:45:53 +01:00
When reusing a Codex sandbox, the workspace-restore step now performs an auth-merge check before adopting the sandbox's auth.json. The merge fails closed when: - host or sandbox Codex auth is unusable (missing token or account) - the subscription payload shapes differ between host and sandbox - subscription account identities do not match Additional hardening: node absence on PATH during the embedded decision script now exits non-zero instead of silently falling through. Co-change comments link parseAuth (the embedded script) to hasUsableAuthPayload (codex-home.ts) so a future auth-format change cannot silently diverge between the two implementations. Co-Authored-By: Paperclip <noreply@paperclip.ing>
30 lines
650 B
Go
30 lines
650 B
Go
package main
|
|
|
|
import (
|
|
"encoding/json"
|
|
"errors"
|
|
"os"
|
|
)
|
|
|
|
type RuntimeCommandSpec struct {
|
|
Command string `json:"command"`
|
|
Args []string `json:"args"`
|
|
DetectCommand string `json:"detectCommand,omitempty"`
|
|
InstallCommand string `json:"installCommand,omitempty"`
|
|
}
|
|
|
|
func loadRuntimeCommandSpec(path string) (*RuntimeCommandSpec, error) {
|
|
b, err := os.ReadFile(path)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
var spec RuntimeCommandSpec
|
|
if err := json.Unmarshal(b, &spec); err != nil {
|
|
return nil, err
|
|
}
|
|
if spec.Command == "" {
|
|
return nil, errors.New("runtime-command.json has empty 'command'")
|
|
}
|
|
return &spec, nil
|
|
}
|