mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-25 17:45:53 +01:00
Stage the selected Codex login in the Runner session home and carry only its derived file path through the trusted Rust sidecar launch. Return the private credential after provider shutdown so the tenant can use its existing identity and freshness merge. Retain credentials when export or merge fails, and exclude staged files from recovery backups. Validated with credential/runtime, tenant executor, and Rust sidecar regression tests plus a two-turn authenticated Linux VM probe. Broader local typecheck and build are blocked by missing host Cargo; the Linux Runner compiled in Docker. Co-Authored-By: Paperclip <noreply@paperclip.ing>