Devin FoleyandPaperclip cc2e47f42b fix(codex-local): backfill auth for already-isolated codex_local homes ...

Phase 1 seeds Paperclip-managed CODEX_HOME at execute time, which fixes
new strandings. Agents already carrying a persisted (but unseeded)
per-agent CODEX_HOME from the #8272 isolation guard (e.g. CTO) only
recover the next time they run. Add a proactive startup backfill so a
stranded agent's auth.json is seeded without waiting to run.

- Add idempotent reconcileManagedCodexHome to the codex-local adapter,
  reusing the Phase 1 managed-home detection (isManagedCodexHomePath) and
  seeding (seedManagedCodexHome). Genuine external/user CODEX_HOME
  overrides are left untouched; a home with valid auth is a no-op.
- Add a server startup reconciliation that enumerates codex_local agents
  and seeds any persisted managed home. Only literal (plain) env values
  are used, so a secret-bound OPENAI_API_KEY is never written verbatim
  into auth.json (falls back to the subscription symlink).
- Wire the reconciliation into server boot alongside the other
  reconcile*OnStartup steps. Safe to re-run on every boot.

Adds unit tests for the reconcile primitive (seed/no-op/external/api-key)
and the server service (status accounting, secret-binding safety).

Co-Authored-By: Paperclip <noreply@paperclip.ing>

2026-06-20 14:42:57 -07:00

..

scripts

fix(server): use stable tsx/cli entry point in dev-watch

2026-03-28 06:42:03 +07:00

src

fix(codex-local): backfill auth for already-isolated codex_local homes

2026-06-20 14:42:57 -07:00

CHANGELOG.md

chore: release v0.3.1

2026-03-12 13:09:22 -05:00

package.json

fix(server): resolve published skills catalog package root and fallback (#8327)

2026-06-19 09:14:41 -07:00

tsconfig.json

Fix root TypeScript solution config

2026-03-09 14:09:30 -05:00

vitest.config.ts

refactor(deps-dev): bump vitest from 3.2.4 to 4.1.8 (#7581)

2026-06-05 21:11:32 -07:00