Files
PaperClipAI/tools/agent-shim/runtime_command.go
T
Harold KimandPaperclip 98df214917 fix: fail closed on unusable Codex auth during sandbox auth merge
When reusing a Codex sandbox, the workspace-restore step now performs
an auth-merge check before adopting the sandbox's auth.json. The merge
fails closed when:

- host or sandbox Codex auth is unusable (missing token or account)
- the subscription payload shapes differ between host and sandbox
- subscription account identities do not match

Additional hardening: node absence on PATH during the embedded decision
script now exits non-zero instead of silently falling through. Co-change
comments link parseAuth (the embedded script) to hasUsableAuthPayload
(codex-home.ts) so a future auth-format change cannot silently diverge
between the two implementations.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-07-09 10:08:57 +00:00

30 lines
650 B
Go

package main
import (
"encoding/json"
"errors"
"os"
)
type RuntimeCommandSpec struct {
Command string `json:"command"`
Args []string `json:"args"`
DetectCommand string `json:"detectCommand,omitempty"`
InstallCommand string `json:"installCommand,omitempty"`
}
func loadRuntimeCommandSpec(path string) (*RuntimeCommandSpec, error) {
b, err := os.ReadFile(path)
if err != nil {
return nil, err
}
var spec RuntimeCommandSpec
if err := json.Unmarshal(b, &spec); err != nil {
return nil, err
}
if spec.Command == "" {
return nil, errors.New("runtime-command.json has empty 'command'")
}
return &spec, nil
}