PaperClipAI

Jannik/PaperClipAI

0 Fork 0

mirror of https://github.com/paperclipai/paperclip.git synced 2026-11-14 00:26:28 +01:00

Files

T

History

DottaandClaude Opus 5.5 d221501fb5 fix(runner): keep Codex planning read-only inside Daytona without network namespaces

Codex planning runs use the paperclip-runner-workspace-read-only profile.
Its restricted reads made Codex load AGENTS.md through the filesystem
helper, which always runs bubblewrap with --unshare-net. Daytona has no
CAP_NET_ADMIN, so thread creation failed with "bwrap: loopback: Failed
RTM_NEWADDR". Inside an external sandbox the planning profile now reads the
whole filesystem, writes nowhere and enables network, so Codex reads files
directly and runs commands without a new network namespace while still
refusing writes. Adds a manual codex-planning-read-only e2e suite that
proves a planning write attempt is refused.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-11 07:41:36 -06:00

adapter-utils

perf(native): default remote sandbox runs to a warm, reusable sandbox for measured harnesses (#20048 )

2026-11-10 11:49:14 -06:00

adapters

fix: stop prompts from encouraging subtasks (#20362 )

2026-11-10 09:58:54 -06:00

Keep project environment mappings independent of shared defaults (#20651 )

2026-11-10 14:31:48 -08:00

google-sheets-mcp-server

build(deps): bump zod from 4.4.3 to 4.6.6 (#17364 )

2026-11-05 17:41:43 -08:00