mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-11-02 16:58:52 +01:00
## Thinking Path > - Paperclip manages agents and their work. > - Native Runner providers need verified executables before they can run. > - Google Antigravity ships a native ACP server and a helper executable. > - An archive hash alone does not verify the installed runtime or its child process cleanup. > - This pull request adds a pinned installer and a small, verified compatibility patch. > - Later pull requests add Runner execution, account setup, and the recorded user journey eval. ## Linked Issues or Issue Description Refs: #12503, #14938. Those pull requests use the legacy CLI adapter. This stack adds native Runner ACP support. **Agent or provider** Google Antigravity ACP 1.4.3. **Why this adapter is useful** Users need a reproducible runtime before they can select Antigravity for a Paperclip agent. **How the agent is invoked** The installer prepares the native ACP server and helper. This pull request does not enable task execution. Default execution remains closed pending qualification. ## What Changed - Pin the complete macOS ARM64 runtime closure. Keep other platforms as inventory only. - Verify archive entries, installed bytes, ownership, and cache layout. - Patch exact upstream code anchors for model admission, instruction loading, native process ownership, and per-call file tool completion. - Package a self-contained installer and expose `paperclipai runtime setup antigravity`. - Record candidate limitations and historical acceptance evidence. ## Verification - Runtime provisioning, packaging, metadata, and patch support tests: 62 passed. The separate exact pinned native patch run passed all 5 tests with no skips and no Google authentication. - CLI runtime setup tests: 5 passed. - Map contract check passed. Staged diff whitespace check passed. - The first test command ran before dependency installation and failed on missing esbuild. The same command passed after installation. - Current master has a stale lockfile. Dependencies were resolved locally with scripts disabled. The generated lockfile is excluded from this pull request. - Final head: required `ci / verify` and `ci / e2e` passed, and Greptile is 5/5 with both review threads resolved. The optional external Paperclip Review remains queued. Two original timing failures are retained; one failed-job rerun passed without source or deadline changes. ## Risks - The patch depends on exact upstream native code. A new upstream release must get a new verified closure. - Only macOS ARM64 has a complete verified runtime. Installation does not qualify authentication, task execution, or other platforms. - The installer downloads official Google assets when the verified cache is absent. ## Model Used OpenAI Codex (GPT-6). The host did not expose the exact model revision or context limit. The model used tools for code edits, test execution, and review. ## Checklist - [x] I have included a thinking path that traces from project context to this change - [x] I have specified the model used (with version and capability details) - [x] I have checked ROADMAP.md and confirmed this PR does not duplicate planned core work - [x] I have searched GitHub for duplicate or related PRs and linked them above - [x] I have either (a) linked existing issues with `Fixes: #` / `Closes #` / `Refs #` OR (b) described the issue in-PR following the relevant issue template - [x] I have not referenced internal/instance-local Paperclip issues or links (only public GitHub `#NNN` / `github.com/paperclipai/paperclip` URLs) - [x] My branch name describes the change (e.g. `docs/...`, `fix/...`) and contains no internal Paperclip ticket id or instance-derived details - [x] I have run tests locally and they pass - [x] I have added or updated tests where applicable - [x] I have updated relevant documentation to reflect my changes - [x] I have considered and documented any risks above - [x] All Paperclip CI gates are green - [x] Greptile is 5/5 with no open P2s, recommendations, or follow-ups - [x] I will address all Greptile and reviewer comments before requesting merge --------- Co-authored-by: Paperclip <noreply@paperclip.ing>
155 lines
6.2 KiB
JavaScript
155 lines
6.2 KiB
JavaScript
import { chmod, copyFile, cp, mkdir } from "node:fs/promises";
|
|
import { builtinModules } from "node:module";
|
|
import { dirname, resolve } from "node:path";
|
|
import { fileURLToPath, pathToFileURL } from "node:url";
|
|
|
|
import { build } from "esbuild";
|
|
|
|
const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
|
|
|
|
export const verifiedProviderEntrypoints = Object.freeze([
|
|
Object.freeze({
|
|
name: "provision-antigravity",
|
|
source: resolve(packageRoot, "scripts/provision-antigravity.mjs"),
|
|
output: resolve(packageRoot, "dist/cli/provision-antigravity.js"),
|
|
verifiedOutput: resolve(packageRoot, "dist/cli/provision-antigravity.cjs"),
|
|
}),
|
|
Object.freeze({
|
|
name: "provision-cursor",
|
|
source: resolve(packageRoot, "scripts/provision-cursor.mjs"),
|
|
output: resolve(packageRoot, "dist/cli/provision-cursor.js"),
|
|
verifiedOutput: resolve(packageRoot, "dist/cli/provision-cursor.cjs"),
|
|
}),
|
|
Object.freeze({
|
|
name: "acpx-runtime-sidecar",
|
|
source: resolve(packageRoot, "src/cli/acpx-runtime-sidecar.ts"),
|
|
output: resolve(packageRoot, "dist/cli/acpx-runtime-sidecar.js"),
|
|
verifiedOutput: resolve(packageRoot, "dist/cli/acpx-runtime-sidecar.cjs"),
|
|
}),
|
|
Object.freeze({
|
|
name: "opencode-app-server-proxy",
|
|
source: resolve(packageRoot, "src/cli/opencode-app-server-proxy.ts"),
|
|
output: resolve(packageRoot, "dist/cli/opencode-app-server-proxy.js"),
|
|
verifiedOutput: resolve(
|
|
packageRoot,
|
|
"dist/cli/opencode-app-server-proxy.cjs",
|
|
),
|
|
}),
|
|
]);
|
|
|
|
const nodeBuiltins = new Set([
|
|
...builtinModules,
|
|
...builtinModules.map((name) => `node:${name}`),
|
|
]);
|
|
|
|
function assertSelfContainedBundle(entrypoint, result) {
|
|
const outputs = Object.entries(result.metafile.outputs).filter(
|
|
([, output]) => output.entryPoint !== undefined,
|
|
);
|
|
if (outputs.length !== 1) {
|
|
throw new Error(
|
|
`${entrypoint.name} bundle emitted ${outputs.length} entrypoint outputs instead of one`,
|
|
);
|
|
}
|
|
const imports = outputs[0][1].imports;
|
|
for (const dependency of imports) {
|
|
if (!dependency.external || !nodeBuiltins.has(dependency.path)) {
|
|
throw new Error(
|
|
`${entrypoint.name} bundle retained a non-builtin import: ${dependency.path}`,
|
|
);
|
|
}
|
|
}
|
|
}
|
|
|
|
export async function bundleVerifiedProviderEntrypoints({ write = true } = {}) {
|
|
if (write) {
|
|
await mkdir(resolve(packageRoot, "dist/providers"), { recursive: true });
|
|
await cp(resolve(packageRoot, "src/providers"), resolve(packageRoot, "dist/providers"), { recursive: true });
|
|
await copyFile(resolve(packageRoot, "cursor-distributions.json"), resolve(packageRoot, "dist/cursor-distributions.json"));
|
|
await copyFile(resolve(packageRoot, "antigravity-distributions.json"), resolve(packageRoot, "dist/antigravity-distributions.json"));
|
|
await mkdir(resolve(packageRoot, "dist/cli"), { recursive: true });
|
|
await copyFile(resolve(packageRoot, "scripts/patch-antigravity-runtime.admission.py"), resolve(packageRoot, "dist/cli/patch-antigravity-runtime.admission.py"));
|
|
}
|
|
const results = [];
|
|
for (const entrypoint of verifiedProviderEntrypoints) {
|
|
const buildBundle = async (outfile, format) => {
|
|
const result = await build({
|
|
entryPoints: [entrypoint.source],
|
|
outfile,
|
|
bundle: true,
|
|
platform: "node",
|
|
format,
|
|
target: "node24",
|
|
packages: "bundle",
|
|
splitting: false,
|
|
sourcemap: false,
|
|
legalComments: "none",
|
|
metafile: true,
|
|
treeShaking: true,
|
|
write,
|
|
logLevel: "silent",
|
|
banner:
|
|
format === "cjs"
|
|
? {
|
|
js: 'const __paperclipVerifiedEntrypointUrl = require("node:url").pathToFileURL(__filename).href;',
|
|
}
|
|
: undefined,
|
|
define:
|
|
format === "cjs"
|
|
? {
|
|
"import.meta.dirname": "__dirname",
|
|
"import.meta.url": "__paperclipVerifiedEntrypointUrl",
|
|
}
|
|
: undefined,
|
|
});
|
|
assertSelfContainedBundle(entrypoint, result);
|
|
return result;
|
|
};
|
|
const result = await buildBundle(entrypoint.output, "esm");
|
|
const verifiedResult = await buildBundle(entrypoint.verifiedOutput, "cjs");
|
|
if (write && process.platform !== "win32") {
|
|
await Promise.all([
|
|
chmod(entrypoint.output, 0o755),
|
|
chmod(entrypoint.verifiedOutput, 0o755),
|
|
]);
|
|
}
|
|
results.push({ entrypoint, result, verifiedResult });
|
|
}
|
|
await bundlePiProvisioner({ write });
|
|
return results;
|
|
}
|
|
|
|
/** Explicit setup tooling; no provider payload is included in the npm tarball. */
|
|
export async function bundlePiProvisioner({ write = true, outputRoot = resolve(packageRoot, "dist/cli") } = {}) {
|
|
const entrypoint = { name: "provision-pi", source: resolve(packageRoot, "scripts/provision-pi.mjs") };
|
|
const result = await build({
|
|
entryPoints: [entrypoint.source], outfile: resolve(outputRoot, "provision-pi.cjs"),
|
|
bundle: true, platform: "node", format: "cjs", target: "node24", packages: "bundle",
|
|
splitting: false, sourcemap: false, legalComments: "none", metafile: true,
|
|
treeShaking: true, write, logLevel: "silent",
|
|
banner: { js: 'const __paperclipVerifiedEntrypointUrl = require("node:url").pathToFileURL(__filename).href;' },
|
|
define: { "import.meta.dirname": "__dirname", "import.meta.url": "__paperclipVerifiedEntrypointUrl" },
|
|
});
|
|
assertSelfContainedBundle(entrypoint, result);
|
|
if (write) {
|
|
const inputs = resolve(outputRoot, "pi-provision-inputs");
|
|
await mkdir(inputs, { recursive: true });
|
|
for (const [source, name] of [
|
|
["scripts/pi-distribution/package.json", "package.json"],
|
|
["scripts/pi-distribution/package-lock.json", "package-lock.json"],
|
|
["../../patches/pi-acp@0.0.33.patch", "pi-acp.patch"],
|
|
["../../patches/brace-expansion@5.0.9.patch", "brace-expansion.patch"],
|
|
["src/drivers/acpx/pi-acp-runtime.ts", "pi-acp-runtime.ts"],
|
|
["src/drivers/acpx/pi-runtime-extension.ts", "pi-runtime-extension.ts"],
|
|
]) await cp(resolve(packageRoot, source), resolve(inputs, name));
|
|
}
|
|
return result;
|
|
}
|
|
|
|
const invokedPath = process.argv[1]
|
|
? pathToFileURL(resolve(process.argv[1])).href
|
|
: null;
|
|
if (invokedPath === import.meta.url) {
|
|
await bundleVerifiedProviderEntrypoints();
|
|
}
|